last executing test programs: 6m28.786340102s ago: executing program 3 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cc, 0x204) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf301}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5c6fa8aec5e2d98b, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11368}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000e3ff0400000004000000000000000000000035b4e027805b444e3742e2be08f80111c94e27a7d65a5dad6d689aa4bce380a3bb414c330ed95cba68e10515072db585d4f556f7a9e0d54649b8eacc0eef805a191fca807e651478d8fb92c97eacdf67d9ff1879a3b198e7608aab3dcb0055"], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, @perf_bp={&(0x7f0000000080), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 6m27.572226789s ago: executing program 3 (id=12): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000240000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4988a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f6324bb7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387f74d1ffbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f009f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459110500a09b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477effff26af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8e45c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cadb7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5f0436ead88d7acf0166dbd9f30a9b259c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c0057addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cfe9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d11c9b4be91c60932bae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952bd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2ae59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49798ce2fc6f639735e0222cd08075418239042bfe47c363973d3245ce507e838dfd90ae442a96fa1343029be56de31c2eff226c05f0ae3dbe2281e7bc02db39342d5b54ad3616733a5aa7753613423a0c5e2844a6e08fa5b76e18f7e24e967f6f83c546718d0f20959376427cdd449a4be3d75fd3e51e1b7f8690855af8eddbd3fd556b4460d0091e3623933f1a11db14aea54af6c49725bfa51fed222dc379995f48b1aab94441767c8bccbfd966d814715203bd8f549cd57d6a87295bf16aa25fb4e7fcaa8cec5e5c03b0095861bf2fed70ffb46bbb78ba90ca272ead9b3d2959fd9dbaabd1d51a60b474cef4c700faf718b810e4d3527a4663ee9fbc0000000000000000000000000000000000000000000000000061abf7a66b7b3f57ff83482dbab3f591dded505630dd9dd4828dde3fd9218fb1d041a26c60a724fd8506ba03a370721c281ff6202410dd078fc15f5c4e02b46fba33e0a772130f9a158a2e403ea61919f461358bee016e4c7c114ba7f4486aa7984fffd4555d71e049b2e933ae820bb5990ac3e27e7ebb101ad67ea47ed363de7dab4fb43769f5eca65b5918a76af8860f4d0d79805d9c08d3e27a8f041615ef85b52e521a90e511fcb303dc0ab19abaf0e37e9725bb596de8d8afecf5e15215a83652f3834bf00bf7bbc82b3c45e78a46e70a54a1925b4bf8392070e9cde0634790e444e4e4ee762db725122865a194d7ba289d9aecbba85da0a5c0de6b71a3cc"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="09000000070000000080000001", @ANYRES16=0x0, @ANYRES64=r1, @ANYRES64=r2, @ANYRES64=r2, @ANYRES16=r3, @ANYBLOB="abee0ad91fe53c96e90290d6b18c9af914e9935bc7234f918cbe8f3daaf221fc5653a66db847677b7520952baf774322660ff5f7cee04668ce36111661cb61498f1bb7112380c1ae3b0d7f6be74f9d30068e522a106bf8502489413c12e10e7ad38e89b7fb79080935624ba35777f5eb319d3d8ba382e443bf2512b0fa6e344ed01d885dfa1f84cd59bb733e583c89a6fd2e6e465065cb9b0da5d21fbe416dd4fa1cc422788fb190445ddf347996b31087e579128623a94e481f31b475", @ANYBLOB="6ea12a17c05b64ed510827a5d0e94f19da4c4d5cb93cf038c1943ee693fe0016928305e958aab0fa65ba0f54cb60330dec49a9a732365183d8e1744b971eb46b995c2d3647d610633bd1c5284aabfb0d3d4db9e96b4ca3d80142e8acc1ca65e0d4d04f4fc0fd53dc56b510dc988a21216420256887cef6828bc56d0d29451ac4eed4b77683fc906a3d0d851767a7d8e33829e1ce3c9a469deef89d8fee6ffd871a9fcb695acddff17c4e5e4f583039581dd24bd7b7b1acd193f082a4a7b4c46c202262fc5d5ae6fba6e0d6e0fc2d8ca93ad8593cc0286fe87065765d2ec5c4a5c3c336b34563a8d1f4366210def00250d95d31fa8462326a", @ANYRESDEC=r2], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x4, r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000080)="36f71f958cd1928222039f67cd", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1b, &(0x7f00000000c0)=@raw=[@ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xb, 0x7, 0x3, 0x18, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000001c0)='syzkaller\x00', 0xd3, 0x4e, &(0x7f0000000200)=""/78, 0x40f00, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x4, 0xb}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x1], &(0x7f0000000300)=[{0x1, 0x4, 0xf, 0x9}, {0x2, 0x3, 0xb, 0x5}], 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8912, &(0x7f0000000080)) 6m25.819014529s ago: executing program 3 (id=14): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0x34, 0xf9, 0x0, 0x1}, {0x4c}, {}, {0x6}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000010850000001b000000b7000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000850000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x0, 0x0, 0x0, 0x5f2d, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000007c0)=[r5, r2], &(0x7f0000000800), 0x10, 0x5}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x4}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 6m24.874349465s ago: executing program 3 (id=16): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000140), 0x0}, 0x20) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$unix(0xa, 0x2, 0x11, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 6m21.431214957s ago: executing program 3 (id=23): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 6m21.154213919s ago: executing program 3 (id=24): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+'], 0x5) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d63707520fd5c990cae77c84b67f55ae7b450112319bfd989393f3bf53d639a77b84c28fce32f239fc6577dafdb2511010b31d8f4b6abc9aabfffa6a8eaa1ab"], 0x5) r6 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m5.870684942s ago: executing program 32 (id=24): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+'], 0x5) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d63707520fd5c990cae77c84b67f55ae7b450112319bfd989393f3bf53d639a77b84c28fce32f239fc6577dafdb2511010b31d8f4b6abc9aabfffa6a8eaa1ab"], 0x5) r6 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m37.557615947s ago: executing program 1 (id=127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 5m36.964129251s ago: executing program 1 (id=132): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) 5m35.47550257s ago: executing program 1 (id=138): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1fffffff}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m34.069901149s ago: executing program 1 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x7, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000000000000000000000000000018111e00", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 5m33.323743024s ago: executing program 1 (id=148): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m32.006827602s ago: executing program 1 (id=155): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0xa437}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x5, 0xe}, {0x1, 0x5, 0x4, 0x6}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x1, 0x8, 0xc}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, 0x0}, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000f4ff030000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 5m17.004783835s ago: executing program 33 (id=155): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0xa437}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x5, 0xe}, {0x1, 0x5, 0x4, 0x6}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x1, 0x8, 0xc}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, 0x0}, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000f4ff030000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 8.930520584s ago: executing program 0 (id=1447): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x200, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2d0bc51f"], 0x33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, &(0x7f0000000840)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1}, &(0x7f00000008c0), &(0x7f0000000900)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{}, 0x0, &(0x7f0000000ac0)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000d00), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) 8.108539029s ago: executing program 0 (id=1451): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001a80)}, 0x806, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000037000b63717a3c4a01d8b45b0808aa78", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000011c0)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/119, 0x77}, {&(0x7f0000001340)=""/73, 0x49}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001480)=""/71, 0x47}, {&(0x7f0000001500)=""/135, 0x87}], 0x9, &(0x7f0000001680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x2101) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001280)="b9354b27b553aeeee8ae0b0000a4df", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.621407552s ago: executing program 5 (id=1453): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000680)="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", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 6.061664982s ago: executing program 2 (id=1457): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="99", 0x1}], 0x1}, 0x40844) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424", 0x12}], 0x1}, 0x4000800) 5.365579056s ago: executing program 5 (id=1458): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r2, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.348230637s ago: executing program 0 (id=1459): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000680)="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", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB="000000f34279e645765f"], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 5.258034067s ago: executing program 4 (id=1460): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x200, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2d0bc51f"], 0x33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000840)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000ac0)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x20, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xe, 0x2, 0x5, 0x5000, 0x5865}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @generic={0xb, 0x4, 0x3, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcd}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0xc, 0x2, 0x5}, 0x10, 0xf19e, r1, 0x8, &(0x7f0000000b40)=[r2, r3, r4, r5, r6], &(0x7f0000000b80)=[{0x2, 0x1, 0x0, 0x4}, {0x4, 0x4, 0xf, 0x2}, {0x5, 0x1, 0xd, 0xc}, {0x4, 0x4, 0xe, 0x4}, {0x4, 0x2, 0x9, 0x7}, {0x5, 0x2, 0xc, 0xb}, {0x4, 0x4, 0x0, 0xc}, {0x2, 0x2, 0xc, 0x4}], 0x10, 0x7b3}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000d00), 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) 5.190331187s ago: executing program 2 (id=1461): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000680)="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", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB="000000f34279e64576"], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 4.998345459s ago: executing program 5 (id=1462): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="99", 0x1}], 0x1}, 0x40844) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c"], 0xfe33) r4 = socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424", 0x12}], 0x1}, 0x4000800) 4.406403493s ago: executing program 4 (id=1463): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="99", 0x1}], 0x1}, 0x40844) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) r4 = socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424", 0x12}], 0x1}, 0x4000800) 4.257504443s ago: executing program 5 (id=1464): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000680)="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", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB="000000f34279e645765f"], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 4.205973024s ago: executing program 2 (id=1465): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="99", 0x1}], 0x1}, 0x40844) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) r4 = socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424", 0x12}], 0x1}, 0x4000800) 4.204182344s ago: executing program 0 (id=1473): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x200, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2d0bc51f"], 0x33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000840)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000ac0)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x20, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xe, 0x2, 0x5, 0x5000, 0x5865}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @generic={0xb, 0x4, 0x3, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcd}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0xc, 0x2, 0x5}, 0x10, 0xf19e, r1, 0x8, &(0x7f0000000b40)=[r2, r3, r4, r5, r6], &(0x7f0000000b80)=[{0x2, 0x1, 0x0, 0x4}, {0x4, 0x4, 0xf, 0x2}, {0x5, 0x1, 0xd, 0xc}, {0x4, 0x4, 0xe, 0x4}, {0x4, 0x2, 0x9, 0x7}, {0x5, 0x2, 0xc, 0xb}, {0x4, 0x4, 0x0, 0xc}, {0x2, 0x2, 0xc, 0x4}], 0x10, 0x7b3}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000d00), 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) 3.669338247s ago: executing program 0 (id=1466): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x1c, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x89}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x7, 0x8, 0x4, 0xc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e0000e50640f0ef1259e0fd9da70ef5bfe65146", @ANYRES32, @ANYBLOB='\t\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000000000000a0000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rss_stat\x00'}, 0x18) syz_clone(0x41200, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 3.290758609s ago: executing program 4 (id=1467): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="99", 0x1}], 0x1}, 0x40844) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c"], 0xfe33) r4 = socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424", 0x12}], 0x1}, 0x4000800) 3.119767811s ago: executing program 2 (id=1468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x24, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f0000000240), &(0x7f0000000540)=""/32}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r6}, 0x18) mkdir(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r10, &(0x7f00000000c0), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x520b}, [@map_fd={0x18, 0xa, 0x1, 0x0, r4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xe0, &(0x7f0000000780)=""/224, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, r9, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0x9f9}, 0x10, 0xffffffffffffffff, r2, 0x1, &(0x7f0000000400)=[r0, r3, r4], &(0x7f00000004c0)=[{0x0, 0x5, 0x7, 0xa}], 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) 2.331927645s ago: executing program 5 (id=1469): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="99", 0x1}], 0x1}, 0x40844) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424", 0x12}], 0x1}, 0x4000800) 1.55776176s ago: executing program 4 (id=1470): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r2, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.339467162s ago: executing program 2 (id=1471): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000680)="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", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB="000000f34279e645765f"], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 962.097353ms ago: executing program 4 (id=1472): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000680)="a8bf38f367fa179bf4174d0e959303fb4a2c6959687a02da24cb39327e693b868160ee12cbd1e3f261fcb512cd2aa006927f461a6f0ac0a075d10d38b6beb79ef79f111c40337724ff4ce871356ac380261a7e428854e9455aa31a03451b525e0edbd3bf11ed9d4eb0c827b3e99ca78f5e5cd272aef75c7859b1a93377da3d98d53dcedf5112eeb1bdb71a53a44f4af0aa7fbbc2345b070f97f8a79465465dd9613e5ba40d57c37efab4d07240633e284273b6c214ce2f0726c2d45c1329fedd6c6cd1457ad4d3d4bf3a97ba378390161ca12832e879ecac056548026fd24e10dc78a7e6b7e32e1cf8a39e9a67ffe1931e5b13f56751ae31fe8f3b12a1225b524e006b496cd640b7337791884e3cb3e5ea4ed0d6233bb9d4b7092ccc6e973f89a5342487d351d4fb4f431a9baf1ef9339b4cbe718e004602b11a2aec997143b2b85f2602b3d82650", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB="000000f34279e645765f"], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 960.969154ms ago: executing program 5 (id=1481): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="99", 0x1}], 0x1}, 0x40844) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b"], 0xfe33) r4 = socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424", 0x12}], 0x1}, 0x4000800) 910.165034ms ago: executing program 0 (id=1474): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000680)="a8bf38f367fa179bf4174d0e959303fb4a2c6959687a02da24cb39327e693b868160ee12cbd1e3f261fcb512cd2aa006927f461a6f0ac0a075d10d38b6beb79ef79f111c40337724ff4ce871356ac380261a7e428854e9455aa31a03451b525e0edbd3bf11ed9d4eb0c827b3e99ca78f5e5cd272aef75c7859b1a93377da3d98d53dcedf5112eeb1bdb71a53a44f4af0aa7fbbc2345b070f97f8a79465465dd9613e5ba40d57c37efab4d07240633e284273b6c214ce2f0726c2d45c1329fedd6c6cd1457ad4d3d4bf3a97ba378390161ca12832e879ecac056548026fd24e10dc78a7e6b7e32e1cf8a39e9a67ffe1931e5b13f56751ae31fe8f3b12a1225b524e006b496cd640b7337791884e3cb3e5ea4ed0d6233bb9d4b7092ccc6e973f89a5342487d351d4fb4f431a9baf1ef9339b4cbe718e004602b11a2aec997143b2b85f2602b3d82650", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB="000000f34279e64576"], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 120.925189ms ago: executing program 2 (id=1475): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="99", 0x1}], 0x1}, 0x40844) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c"], 0xfe33) r4 = socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424", 0x12}], 0x1}, 0x4000800) 0s ago: executing program 4 (id=1476): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x200, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2d0bc51f"], 0x33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000840)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000ac0)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xe, 0x2, 0x5, 0x5000, 0x5865}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @generic={0xb, 0x4, 0x3, 0x1}, @alu={0x4, 0x0, 0x3, 0x7, 0x8, 0x18, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcd}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0xc, 0x2, 0x5}, 0x10, 0xf19e, r1, 0x8, &(0x7f0000000b40)=[r2, r3, r4, r5, r6], &(0x7f0000000b80)=[{0x2, 0x1, 0x0, 0x4}, {0x4, 0x4, 0xf, 0x2}, {0x5, 0x1, 0xd, 0xc}, {0x4, 0x4, 0xe, 0x4}, {0x4, 0x2, 0x9, 0x7}, {0x5, 0x2, 0xc, 0xb}, {0x4, 0x4, 0x0, 0xc}, {0x2, 0x2, 0xc, 0x4}], 0x10, 0x7b3}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000d00), 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 80.784912][ T5777] cgroup: Unknown subsys name 'net' [ 80.924200][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.602139][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.217753][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.233306][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.241589][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.249614][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.259075][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.266856][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.275854][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.283292][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.290709][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.299299][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.305504][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.309934][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.314119][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.321501][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.336463][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.344694][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.353377][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.354040][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.368942][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.376811][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.385062][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.392836][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.401111][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.417884][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.919542][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 85.004237][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 85.050656][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 85.210800][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.218869][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.227219][ T5788] bridge_slave_0: entered allmulticast mode [ 85.234819][ T5788] bridge_slave_0: entered promiscuous mode [ 85.247902][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.255791][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.263013][ T5787] bridge_slave_0: entered allmulticast mode [ 85.270182][ T5787] bridge_slave_0: entered promiscuous mode [ 85.282943][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.290248][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.297521][ T5787] bridge_slave_1: entered allmulticast mode [ 85.304599][ T5787] bridge_slave_1: entered promiscuous mode [ 85.312196][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.319614][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.327174][ T5788] bridge_slave_1: entered allmulticast mode [ 85.334468][ T5788] bridge_slave_1: entered promiscuous mode [ 85.350994][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 85.429387][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.455280][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.474258][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.486542][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.509289][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.516655][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.523844][ T5792] bridge_slave_0: entered allmulticast mode [ 85.531199][ T5792] bridge_slave_0: entered promiscuous mode [ 85.580676][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.588556][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.596317][ T5792] bridge_slave_1: entered allmulticast mode [ 85.603288][ T5792] bridge_slave_1: entered promiscuous mode [ 85.636817][ T5788] team0: Port device team_slave_0 added [ 85.677343][ T5787] team0: Port device team_slave_0 added [ 85.699948][ T5788] team0: Port device team_slave_1 added [ 85.722076][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.735737][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.747218][ T5787] team0: Port device team_slave_1 added [ 85.769463][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.777492][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.784822][ T5786] bridge_slave_0: entered allmulticast mode [ 85.792459][ T5786] bridge_slave_0: entered promiscuous mode [ 85.847168][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.854822][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.862022][ T5786] bridge_slave_1: entered allmulticast mode [ 85.870173][ T5786] bridge_slave_1: entered promiscuous mode [ 85.878266][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.885598][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.912391][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.926778][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.933774][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.959836][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.017701][ T5792] team0: Port device team_slave_0 added [ 86.039243][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.047557][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.074093][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.087533][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.094588][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.120641][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.146144][ T5792] team0: Port device team_slave_1 added [ 86.177485][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.190168][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.215936][ T5788] hsr_slave_0: entered promiscuous mode [ 86.222907][ T5788] hsr_slave_1: entered promiscuous mode [ 86.302246][ T5787] hsr_slave_0: entered promiscuous mode [ 86.309607][ T5787] hsr_slave_1: entered promiscuous mode [ 86.317039][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.325563][ T5787] Cannot create hsr debugfs directory [ 86.344148][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.351281][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.377843][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.389112][ T5797] Bluetooth: hci0: command tx timeout [ 86.418310][ T5786] team0: Port device team_slave_0 added [ 86.429042][ T5786] team0: Port device team_slave_1 added [ 86.435837][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.442819][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.465165][ T5797] Bluetooth: hci1: command tx timeout [ 86.470121][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.474916][ T52] Bluetooth: hci2: command tx timeout [ 86.485743][ T5800] Bluetooth: hci3: command tx timeout [ 86.580969][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.588394][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.614926][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.629021][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.636444][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.662654][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.710481][ T5792] hsr_slave_0: entered promiscuous mode [ 86.717373][ T5792] hsr_slave_1: entered promiscuous mode [ 86.723639][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.731652][ T5792] Cannot create hsr debugfs directory [ 86.798872][ T5786] hsr_slave_0: entered promiscuous mode [ 86.806209][ T5786] hsr_slave_1: entered promiscuous mode [ 86.812504][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.820325][ T5786] Cannot create hsr debugfs directory [ 87.218203][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.265831][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.277282][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.311770][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.361367][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.385511][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.413249][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.433308][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.545473][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.565542][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.579396][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.592007][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.754015][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.773881][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.825030][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.841916][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.899604][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.945895][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.999275][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.006841][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.028744][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.050194][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.091331][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.098528][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.127326][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.146964][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.168793][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.176029][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.187849][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.195180][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.232584][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.239859][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.252720][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.259932][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.279249][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.375148][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.407156][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.414444][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.460084][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.467364][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.486569][ T5800] Bluetooth: hci0: command tx timeout [ 88.525358][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.537310][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.549218][ T5797] Bluetooth: hci1: command tx timeout [ 88.556031][ T5800] Bluetooth: hci3: command tx timeout [ 88.561478][ T5800] Bluetooth: hci2: command tx timeout [ 89.007458][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.043807][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.070650][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.110102][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.160811][ T5788] veth0_vlan: entered promiscuous mode [ 89.212180][ T5788] veth1_vlan: entered promiscuous mode [ 89.264218][ T5787] veth0_vlan: entered promiscuous mode [ 89.273145][ T5792] veth0_vlan: entered promiscuous mode [ 89.299418][ T5786] veth0_vlan: entered promiscuous mode [ 89.320905][ T5787] veth1_vlan: entered promiscuous mode [ 89.342299][ T5792] veth1_vlan: entered promiscuous mode [ 89.367584][ T5786] veth1_vlan: entered promiscuous mode [ 89.378644][ T5788] veth0_macvtap: entered promiscuous mode [ 89.406419][ T5788] veth1_macvtap: entered promiscuous mode [ 89.458708][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.472937][ T5787] veth0_macvtap: entered promiscuous mode [ 89.492663][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.515352][ T5792] veth0_macvtap: entered promiscuous mode [ 89.523534][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.533634][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.544147][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.553019][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.565352][ T5787] veth1_macvtap: entered promiscuous mode [ 89.580300][ T5792] veth1_macvtap: entered promiscuous mode [ 89.599189][ T5786] veth0_macvtap: entered promiscuous mode [ 89.632514][ T5786] veth1_macvtap: entered promiscuous mode [ 89.663086][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.677543][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.690536][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.718063][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.728921][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.739174][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.750092][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.762058][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.780241][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.790898][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.802924][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.813239][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.826122][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.836265][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.846826][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.859499][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.873673][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.887783][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.896869][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.906679][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.933013][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.943943][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.954121][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.963336][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.006974][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.019346][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.030017][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.040649][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.051061][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.061631][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.074164][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.127160][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.129720][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.145694][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.163343][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.173537][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.184115][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.194095][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.204610][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.220043][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.236781][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.245930][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.254799][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.263520][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.385032][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.397733][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.427591][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.441807][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.454228][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.463866][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.509375][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.519314][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.545157][ T5800] Bluetooth: hci0: command tx timeout [ 90.617871][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.624836][ T5800] Bluetooth: hci2: command tx timeout [ 90.628182][ T5797] Bluetooth: hci1: command tx timeout [ 90.631170][ T5800] Bluetooth: hci3: command tx timeout [ 90.660908][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.728662][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.745676][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.816463][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.853348][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.958416][ C1] hrtimer: interrupt took 56895 ns [ 91.818610][ T5892] veth0_vlan: entered allmulticast mode [ 92.257161][ T9] cfg80211: failed to load regulatory.db [ 92.625489][ T5800] Bluetooth: hci0: command tx timeout [ 92.704661][ T5800] Bluetooth: hci3: command tx timeout [ 92.704885][ T5797] Bluetooth: hci1: command tx timeout [ 92.710105][ T5800] Bluetooth: hci2: command tx timeout [ 96.691485][ T5901] syz.2.6 (5901) used greatest stack depth: 20808 bytes left [ 97.812194][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.520234][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.549908][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.634419][ T5922] bridge0: entered allmulticast mode [ 100.031519][ T5920] bridge_slave_1: left allmulticast mode [ 100.106123][ T5920] bridge_slave_1: left promiscuous mode [ 100.116973][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.150432][ T5920] bridge_slave_0: left allmulticast mode [ 100.177124][ T5920] bridge_slave_0: left promiscuous mode [ 100.250316][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.298176][ T5930] sit0: entered allmulticast mode [ 101.491682][ T5930] sit0: entered promiscuous mode [ 106.096906][ T5971] bond_slave_1: mtu less than device minimum [ 106.104058][ T5958] GPL: port 1(erspan0) entered blocking state [ 106.164139][ T5958] GPL: port 1(erspan0) entered disabled state [ 106.211324][ T5958] erspan0: entered allmulticast mode [ 106.236993][ T5958] erspan0: entered promiscuous mode [ 106.302284][ T5958] GPL: port 1(erspan0) entered blocking state [ 106.308630][ T5958] GPL: port 1(erspan0) entered forwarding state [ 106.614516][ T5975] bond_slave_1: mtu less than device minimum [ 109.410091][ T5978] veth0_vlan: entered allmulticast mode [ 111.342567][ T5983] veth1_macvtap: left promiscuous mode [ 113.499418][ T5991] sit0: left promiscuous mode [ 113.822863][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.844479][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.050744][ T5994] bridge0: entered allmulticast mode [ 114.234926][ T5995] bridge_slave_1: left allmulticast mode [ 114.240666][ T5995] bridge_slave_1: left promiscuous mode [ 114.284545][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.314981][ T5995] bridge_slave_0: left allmulticast mode [ 114.320739][ T5995] bridge_slave_0: left promiscuous mode [ 114.331956][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.061037][ T6011] bond_slave_1: mtu less than device minimum [ 123.082007][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.091573][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.101889][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.131647][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.185055][ T5797] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.195138][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.268098][ T6071] sit0: entered allmulticast mode [ 125.345456][ T5797] Bluetooth: hci4: command tx timeout [ 126.720598][ T6060] chnl_net:caif_netlink_parms(): no params data found [ 127.113080][ T2931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.200761][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.208257][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.215597][ T6060] bridge_slave_0: entered allmulticast mode [ 127.222986][ T6060] bridge_slave_0: entered promiscuous mode [ 127.243868][ T2931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.268895][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.276551][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.283802][ T6060] bridge_slave_1: entered allmulticast mode [ 127.291617][ T6060] bridge_slave_1: entered promiscuous mode [ 127.352293][ T2931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.372370][ T6060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.389986][ T6060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.424947][ T5797] Bluetooth: hci4: command tx timeout [ 127.440916][ T6060] team0: Port device team_slave_0 added [ 127.454013][ T6060] team0: Port device team_slave_1 added [ 127.474180][ T2931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.532753][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.540345][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.572260][ T6060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.586710][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.593732][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.620199][ T6060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.693021][ T6060] hsr_slave_0: entered promiscuous mode [ 127.706488][ T6060] hsr_slave_1: entered promiscuous mode [ 127.720126][ T6060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.729609][ T6060] Cannot create hsr debugfs directory [ 128.126556][ T6060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.137863][ T6060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.189368][ T6060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.208219][ T6060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.483484][ T6060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.543702][ T6060] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.569667][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.576915][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.637637][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.644955][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.064830][ T6060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.119114][ T2931] hsr_slave_0: left promiscuous mode [ 129.136924][ T2931] hsr_slave_1: left promiscuous mode [ 129.160372][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.169608][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.179856][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.202581][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.254150][ T2931] veth1_macvtap: left promiscuous mode [ 129.260816][ T2931] veth0_macvtap: left promiscuous mode [ 129.273402][ T2931] veth1_vlan: left promiscuous mode [ 129.279570][ T2931] veth0_vlan: left promiscuous mode [ 129.505324][ T5797] Bluetooth: hci4: command tx timeout [ 129.886076][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 129.933563][ T2931] team0 (unregistering): Port device team_slave_0 removed [ 129.974393][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.019026][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.410262][ T2931] bond0 (unregistering): Released all slaves [ 130.789135][ T6060] veth0_vlan: entered promiscuous mode [ 130.831965][ T6060] veth1_vlan: entered promiscuous mode [ 130.905202][ T6060] veth0_macvtap: entered promiscuous mode [ 130.917519][ T6060] veth1_macvtap: entered promiscuous mode [ 130.945252][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.959198][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.969970][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.980858][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.991120][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.001965][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.014701][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.042765][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.060769][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.071008][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.086920][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.097052][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.112161][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.139357][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.153720][ T6060] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.163641][ T6060] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.179173][ T6060] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.196481][ T6060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.333638][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.363307][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.442628][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.452757][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.584598][ T5797] Bluetooth: hci4: command tx timeout [ 132.029533][ T6167] sit0: entered allmulticast mode [ 133.488164][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.509972][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.290719][ T6199] Driver unsupported XDP return value 0 on prog (id 83) dev N/A, expect packet loss! [ 135.512610][ T6219] ip6_vti0: mtu greater than device maximum [ 136.520155][ T6243] syz.2.73[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.520303][ T6243] syz.2.73[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.209541][ T6253] veth1_macvtap: left promiscuous mode [ 137.352491][ T6259] veth1_macvtap: entered promiscuous mode [ 137.390649][ T6259] macsec0: entered promiscuous mode [ 137.424851][ T6259] macsec0: entered allmulticast mode [ 137.430252][ T6259] veth1_macvtap: entered allmulticast mode [ 139.575602][ T6300] syz.0.89[6300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.575798][ T6300] syz.0.89[6300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.529595][ T6310] veth1_macvtap: left promiscuous mode [ 140.606966][ T6315] veth1_macvtap: entered promiscuous mode [ 140.612855][ T6315] macsec0: entered promiscuous mode [ 140.634824][ T6315] macsec0: entered allmulticast mode [ 140.727321][ T6315] veth1_macvtap: entered allmulticast mode [ 142.550998][ T6340] bond_slave_1: mtu less than device minimum [ 143.145755][ T6353] syz.1.105[6353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.145886][ T6353] syz.1.105[6353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.667071][ T6358] veth1_macvtap: entered promiscuous mode [ 143.754519][ T6358] macsec0: entered promiscuous mode [ 143.770330][ T6358] macsec0: entered allmulticast mode [ 143.803278][ T6358] veth1_macvtap: entered allmulticast mode [ 146.889810][ T6408] veth1_macvtap: left promiscuous mode [ 147.022397][ T6409] veth1_macvtap: entered promiscuous mode [ 147.051989][ T6409] macsec0: entered promiscuous mode [ 147.072800][ T6409] macsec0: entered allmulticast mode [ 147.094502][ T6409] veth1_macvtap: entered allmulticast mode [ 149.117311][ T6448] pim6reg1: entered promiscuous mode [ 149.122928][ T6448] pim6reg1: entered allmulticast mode [ 149.648573][ T6459] syz.0.140[6459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.648725][ T6459] syz.0.140[6459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.740046][ T6553] pim6reg1: entered promiscuous mode [ 154.781608][ T6553] pim6reg1: entered allmulticast mode [ 156.943399][ T6567] sit0: entered promiscuous mode [ 165.806525][ T6690] wg2: entered promiscuous mode [ 165.811561][ T6690] wg2: entered allmulticast mode [ 170.462437][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.474075][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.486851][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.503000][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.512677][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.523725][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.423209][ T6805] wg2: left promiscuous mode [ 171.450821][ T6805] wg2: left allmulticast mode [ 171.516556][ T6781] chnl_net:caif_netlink_parms(): no params data found [ 171.562896][ T6808] wg2: entered promiscuous mode [ 171.600807][ T6808] wg2: entered allmulticast mode [ 172.556170][ T5797] Bluetooth: hci0: command tx timeout [ 173.093983][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.116600][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.135348][ T6781] bridge_slave_0: entered allmulticast mode [ 173.159391][ T6781] bridge_slave_0: entered promiscuous mode [ 173.178639][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.199700][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.226035][ T6781] bridge_slave_1: entered allmulticast mode [ 173.260220][ T6781] bridge_slave_1: entered promiscuous mode [ 173.513235][ T6781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.541797][ T6781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.711061][ T6781] team0: Port device team_slave_0 added [ 173.729368][ T6781] team0: Port device team_slave_1 added [ 173.836330][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.844064][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.878584][ T6781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.893186][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.907101][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.971836][ T6781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.330810][ T6781] hsr_slave_0: entered promiscuous mode [ 174.407018][ T6781] hsr_slave_1: entered promiscuous mode [ 174.432824][ T6781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.463931][ T6781] Cannot create hsr debugfs directory [ 174.624584][ T5797] Bluetooth: hci0: command tx timeout [ 175.799225][ T6781] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 175.848335][ T6781] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.888289][ T6781] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.969623][ T6781] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.706057][ T5797] Bluetooth: hci0: command tx timeout [ 178.665102][ T6781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.706389][ T6781] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.721551][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.728820][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.753319][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.761296][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.784408][ T5797] Bluetooth: hci0: command tx timeout [ 179.147478][ T6781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.585347][ T6781] veth0_vlan: entered promiscuous mode [ 179.610989][ T6781] veth1_vlan: entered promiscuous mode [ 179.652747][ T6781] veth0_macvtap: entered promiscuous mode [ 179.671573][ T6781] veth1_macvtap: entered promiscuous mode [ 179.707286][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.718533][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.729256][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.740075][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.752399][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.763131][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.773245][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.786120][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.798431][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.812369][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.823079][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.833757][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.844394][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.854523][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.865070][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.874979][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.887816][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.901496][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.931010][ T6781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.940000][ T6781] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.948963][ T6781] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.957746][ T6781] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.070238][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.078232][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.131275][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.140645][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.063775][ T6957] pim6reg1: entered promiscuous mode [ 183.071217][ T6957] pim6reg1: entered allmulticast mode [ 183.795812][ T6967] wg2: entered promiscuous mode [ 183.805034][ T6967] wg2: entered allmulticast mode [ 187.404568][ T7023] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 187.410562][ T7023] syzkaller0: group set to 0 [ 188.237039][ T7039] warning: `syz.2.285' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 194.636014][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.653302][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.318277][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.330190][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.385519][ T7238] bridge0: entered allmulticast mode [ 198.532605][ T7242] syzkaller0: entered promiscuous mode [ 198.538673][ T7242] syzkaller0: entered allmulticast mode [ 198.744884][ T7240] bridge_slave_1: left allmulticast mode [ 198.750625][ T7240] bridge_slave_1: left promiscuous mode [ 198.758043][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.824025][ T7240] bridge_slave_0: left allmulticast mode [ 198.865254][ T7240] bridge_slave_0: left promiscuous mode [ 198.890041][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.101214][ T7348] syzkaller0: entered promiscuous mode [ 206.116735][ T7348] syzkaller0: entered allmulticast mode [ 206.946038][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 206.946975][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 206.952170][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 210.007816][ T7398] lo: entered allmulticast mode [ 210.075088][ T7398] lo: entered promiscuous mode [ 210.079977][ T7398] lo: left allmulticast mode [ 210.238638][ T2931] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.671266][ T2931] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.961373][ T2931] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.291851][ T2931] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.003901][ T7443] syzkaller0: entered promiscuous mode [ 213.065331][ T7443] syzkaller0: entered allmulticast mode [ 213.323004][ T52] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 218.330625][ T2931] GPL: port 1(erspan0) entered disabled state [ 218.582574][ T2931] erspan0 (unregistering): left allmulticast mode [ 218.589274][ T2931] erspan0 (unregistering): left promiscuous mode [ 218.674378][ T2931] GPL: port 1(erspan0) entered disabled state [ 220.747362][ T2931] hsr_slave_0: left promiscuous mode [ 220.763209][ T2931] hsr_slave_1: left promiscuous mode [ 220.781081][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.814641][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.869564][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.928722][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.973586][ T2931] bridge_slave_1: left allmulticast mode [ 221.022902][ T2931] bridge_slave_1: left promiscuous mode [ 221.044903][ T2931] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.110240][ T2931] bridge_slave_0: left promiscuous mode [ 221.134568][ T2931] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.477541][ T2931] veth1_macvtap: left allmulticast mode [ 221.489653][ T2931] veth1_macvtap: left promiscuous mode [ 221.501094][ T2931] veth0_macvtap: left promiscuous mode [ 221.509503][ T2931] veth1_vlan: left promiscuous mode [ 222.998469][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 223.132328][ T2931] team0 (unregistering): Port device team_slave_0 removed [ 223.220757][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.349603][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.182006][ T2931] bond0 (unregistering): Released all slaves [ 226.917597][ T7644] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 226.923728][ T7644] syzkaller0: persist disabled [ 230.487027][ T7714] veth1_to_bond: entered promiscuous mode [ 230.512906][ T7714] veth1_to_bond: entered allmulticast mode [ 233.616704][ T7776] syz.0.546 (7776) used obsolete PPPIOCDETACH ioctl [ 235.547842][ T7820] pim6reg1: entered promiscuous mode [ 235.671175][ T7820] pim6reg1: entered allmulticast mode [ 237.627599][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.906303][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 256.080904][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.091449][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.732045][ T8226] syzkaller0: entered allmulticast mode [ 273.190039][ T8431] syzkaller0: entered promiscuous mode [ 273.247903][ T8431] syzkaller0: entered allmulticast mode [ 273.399163][ T8435] syz.4.747 (8435) used greatest stack depth: 20776 bytes left [ 279.514864][ T8516] veth1_to_bond: entered promiscuous mode [ 279.550530][ T8516] veth1_to_bond: entered allmulticast mode [ 281.295857][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.128147][ T8626] syz.5.812[8626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.366065][ T8699] veth1_to_bond: left promiscuous mode [ 291.460265][ T8699] veth1_to_bond: left allmulticast mode [ 291.989089][ T8707] syzkaller0: entered promiscuous mode [ 291.997180][ T8707] syzkaller0: entered allmulticast mode [ 293.994426][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 295.615682][ T8726] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 296.379235][ T8745] xfrm0: entered promiscuous mode [ 296.401327][ T8745] xfrm0: entered allmulticast mode [ 298.228189][ T1143] wlan1: Trigger new scan to find an IBSS to join [ 298.408702][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.421529][ T8790] bridge0: entered allmulticast mode [ 298.509809][ T8790] bridge_slave_1: left promiscuous mode [ 298.539775][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.588118][ T8790] bridge_slave_0: left allmulticast mode [ 298.596541][ T8790] bridge_slave_0: left promiscuous mode [ 298.603239][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.496829][ T8829] lo: entered allmulticast mode [ 303.287854][ T2940] wlan1: Trigger new scan to find an IBSS to join [ 304.455874][ T11] wlan1: Creating new IBSS network, BSSID 3e:00:f7:c7:a4:af [ 310.766691][ T9014] lo: entered allmulticast mode [ 310.822954][ T9014] lo: entered promiscuous mode [ 310.880630][ T9014] lo: left allmulticast mode [ 314.993245][ T9073] syzkaller0: entered promiscuous mode [ 315.011930][ T9073] syzkaller0: entered allmulticast mode [ 315.562304][ T9089] Zero length message leads to an empty skb [ 315.633381][ T9089] netlink: 132 bytes leftover after parsing attributes in process `syz.4.984'. [ 317.641262][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.649101][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.862492][ T9120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.994'. [ 319.598669][ T9160] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1006'. [ 321.168221][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.195180][ T9188] bridge0: entered allmulticast mode [ 321.222618][ T9187] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1017'. [ 326.370985][ T9220] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1029'. [ 327.306694][ T9247] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1038'. [ 328.822072][ T9268] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1044'. [ 329.230780][ T9284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1050'. [ 331.022346][ T9319] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1063'. [ 333.288894][ T42] wlan1: Trigger new scan to find an IBSS to join [ 333.456379][ T9366] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1077'. [ 335.413187][ T9395] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1088'. [ 335.579519][ T9404] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1091'. [ 337.185165][ T42] wlan1: Trigger new scan to find an IBSS to join [ 338.227214][ T42] wlan1: Creating new IBSS network, BSSID 7a:45:c3:84:79:37 [ 345.093818][ T9499] syzkaller0: entered promiscuous mode [ 345.213208][ T9499] syzkaller0: entered allmulticast mode [ 352.309488][ T9561] veth1_to_bond: entered promiscuous mode [ 352.333254][ T9561] veth1_to_bond: entered allmulticast mode [ 357.011568][ T9577] wg2: left promiscuous mode [ 357.017586][ T9577] wg2: left allmulticast mode [ 357.035210][ T9578] wg2: entered promiscuous mode [ 357.042798][ T9578] wg2: entered allmulticast mode [ 359.841093][ T9623] bridge_slave_1: left allmulticast mode [ 359.848709][ T9623] bridge_slave_1: left promiscuous mode [ 359.860910][ T9623] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.948296][ T9623] bridge_slave_0: left allmulticast mode [ 360.001115][ T9623] bridge_slave_0: left promiscuous mode [ 360.030153][ T9623] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.906796][ T9642] lo: entered promiscuous mode [ 360.933730][ T9642] lo: left allmulticast mode [ 361.803150][ T9651] lo: entered allmulticast mode [ 362.010039][ T9651] lo: entered promiscuous mode [ 362.044324][ T9651] lo: left allmulticast mode [ 363.150894][ T9663] pim6reg1: entered promiscuous mode [ 363.169553][ T9663] pim6reg1: entered allmulticast mode [ 368.326653][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 368.848319][ T9700] pim6reg1: entered promiscuous mode [ 368.874561][ T9700] pim6reg1: entered allmulticast mode [ 369.427639][ T9707] syzkaller0: entered promiscuous mode [ 369.474671][ T9707] syzkaller0: entered allmulticast mode [ 378.950849][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.960141][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.847904][ T9840] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1230'. [ 388.380171][ T9852] syzkaller0: entered allmulticast mode [ 388.420654][ T9854] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1237'. [ 393.537825][ T9895] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1248'. [ 398.996809][ T9932] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1257'. [ 399.451549][ T2931] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 399.858981][ T9941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1259'. [ 399.905671][ T9944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1259'. [ 402.442979][ T9972] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1270'. [ 402.540081][ T9973] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1277'. [ 406.530502][T10024] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1283'. [ 414.695119][T10078] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1299'. [ 425.772838][T10161] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1318'. [ 428.555498][T10191] syzkaller0: entered allmulticast mode [ 430.076419][T10210] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1328'. [ 430.569749][ T1143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 434.849697][T10235] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1335'. [ 435.239864][T10241] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1337'. [ 436.004088][T10250] syzkaller0: entered allmulticast mode [ 436.395116][T10261] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1341'. [ 440.263210][T10282] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1348'. [ 440.498783][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.521161][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.184370][T10300] netlink: 65023 bytes leftover after parsing attributes in process `syz.5.1352'. [ 442.661074][T10307] netlink: 65023 bytes leftover after parsing attributes in process `syz.5.1354'. [ 443.253528][T10317] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.1357'. [ 443.461764][T10320] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.1358'. [ 444.723659][T10333] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.1361'. [ 445.578316][T10354] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1365'. [ 445.800850][T10356] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1367'. [ 449.831499][T10370] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.1372'. [ 451.049838][T10387] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.1374'. [ 451.387339][T10398] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1378'. [ 451.662645][T10412] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1381'. [ 452.833927][T10421] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.1384'. [ 456.140671][T10448] netlink: 65023 bytes leftover after parsing attributes in process `syz.5.1391'. [ 460.013618][T10460] netlink: 65023 bytes leftover after parsing attributes in process `syz.5.1395'. Stopping sshd: stopped /usr/sbin/sshd (pid 5549) OK [ 461.135552][T10472] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.1396'. Stopping crond: [ 461.510976][ T1143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 461.617341][T10479] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.1400'. stopped /usr/sbin/crond (pid 5533) OK [ 462.445487][T10497] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.1411'. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5454) [ 463.242450][T10511] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1405'. Stopping network: [ 464.820373][T10539] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1413'. OK Stopping iptables: [ 467.837249][T10573] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1419'. OK Stopping system message bus: [ 469.977856][T10623] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1428'. done [ 471.898312][T10663] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1441'. Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5142) OK umount: can't remount debugfs read-only [ 480.702031][T10772] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1457'. [ 482.509689][T10790] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1463'. [ 485.004488][T10816] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1469'. [ 486.149824][T10830] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1481'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.196 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff serialport: VM disconnected.