last executing test programs: 21.16746155s ago: executing program 3 (id=1419): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e370248018000f0", 0x2a}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff59, &(0x7f0000000540)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x10000280}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="5c00000013006bcd9e3fe3dc6e48aa310000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c50900"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fe27008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r3, 0x0, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000080}, 0x41) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1004c081) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000440)="4d5f31d2c9cbca6816f33bf25c79f6c38a762e4c51c640aa2f145da0b96213c5d61c55073ddf919374264c625e2788f355b2e80d13c399cd0eba7d5a6882d742a3013f7e932dfbc800f7a96c8b7b5dedcf7936dd8dd1d6d62d2d69108e9cb947cd696e144b602b331564a2b04ef589bf7041e88f47e98b78628151f03bd0c9bbb723b7107300cb3458eea1ee3e42c8c72de42716c5d3adc0def80228893b431e136e9d451bc3bea35e643ee5b5cac90c8b6a193d0ff4d2ed6fd76ee61bd882727513ab4951", &(0x7f0000000680)=""/193, &(0x7f0000000780)="c417df2427ca9af782cb66cc226b6898cdba224c077e18a6cfefdbd83434189fc3cff968df0a797aa17f4a62c7627d74c6799de3e74556f7e4a1df393925f08c214a34056ae63e88288643b7e6c84ac633b2ccbf623c5b9aeb8328497e9de2ea00e753a9cc1e2b7db5fa29cbdce1c8fe98f1a23d3b7950d47e1231f16cb97c6e410944c37216ff5febd7552d8dd84a4a932ab7ddabe5ffeb275457ec81e8a6197b67c0b3a1f47e1126afb74e26959521ad220e130f357e08f88a5c6edc8c8a4421b44d9b740ef4be9ccb81451ac64033bc0315606d909a7dbff5f61736affdc7fb", &(0x7f0000000280)="0f360a4a79748cc26a56c33fed4cc23e9a4dd8e2982b75b63a90699b6c2cd15aa6b5e2a46d68b326ef538366499a131e9b1e3857a28703cb3ad93027beb97f481fcc3a7d10404b84edd7f7dcc7370f", 0xfff, r5}, 0x38) (async) socket$kcm(0x10, 0x2, 0x4) 20.341739241s ago: executing program 3 (id=1422): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x50, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0xf}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x3, &(0x7f0000001200)=ANY=[@ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, 0x21}, 0xffffffffffffff01) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x60, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x6b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000c850000001700000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x10, 0x4}, 0x90) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) 19.508868241s ago: executing program 3 (id=1428): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth0_vlan\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff020037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.927471863s ago: executing program 3 (id=1432): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) (async) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x540f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1680, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00'}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) getpid() (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000150081ae10003c00050001832d001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xff}, 0x38) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 17.726962169s ago: executing program 3 (id=1438): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000000006111540000000000460000000000000095000000000000006d1985eafbe5e187"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x10, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0000fb5fe4780e5ddc000002000000b704000008000800850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@ptr={0x6, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x2a, 0x0, 0x0, 0xfffffffe}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a02000000004c180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180800004b33f0c9c5a3e879a04463000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000feaa28766f74b0c0800fc878e2c03db00000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f9b080476ee7b8004469564262d81f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cf8b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb79a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175f2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ecce12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c493831121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0177a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0d995bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725bd6a59b4f16c203f2e152c6131bf1098d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d621919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee64b00000000000008ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb1edc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d504bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868000000000012bad81a38aa32bc0a04eb19ed758df325bcd974807f86b0f0c100e78ee3381c23d7465dadbc6cd672548e7bb04a23042f073a0cca24baace7a0fca3f49e632b598fe1d2ac52adf7347c5b7f815a3ebe1cbc55c77e78609c13b55ae1b7e18aa73b28b472568f85400ecb8196cc47556bc0391b5f221a19c73d603aa411a1756ff453226affa4f242486d3a21a0ebdd42b00b5395932a8037f192dae2052a09baf97d8a801405b189b4ca96fc27c46bd4304f294453fd353abf70f2c9ca8e3fa1d2dd000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0x10, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB='+cpuset'], 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x902, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 5.435023577s ago: executing program 2 (id=1487): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20048001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x200088c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20008000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc600400214002000003053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b5090200020000007b9af0ff00000000b509000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.345256378s ago: executing program 1 (id=1488): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0x1a, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffff2, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x4, 0xf}]}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @snprintf]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000004c0)="3f6c00c2231bc4cb500170870800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000cc0)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c80)="be", 0x1}], 0x1}, 0x48810) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7, '\x00', r0, 0x0, 0x6, 0x2, 0x83}, 0x48) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$kcm(0xa, 0x0, 0x0) (async) socket$kcm(0x10, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.875280782s ago: executing program 1 (id=1491): r0 = socket$kcm(0x29, 0xe, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000058008104", 0x8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r4, 0x40107446, 0x20000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab2, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xac, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0xfffffffe}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800894cb8719e6a576f4f7aca44f09100000000008de60000000000009500000000000000f3980c966a803178cf68074b0e3c016e9e3a2f486f576c93"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r6, 0x6, 0x5, &(0x7f0000000040)=r5, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) r7 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/13, 0xd}, 0x40002040) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000040)) 4.720864785s ago: executing program 2 (id=1492): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001401) ioctl$TUNSETOFFLOAD(r5, 0x8010743f, 0x20000000) 4.317696954s ago: executing program 0 (id=1493): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xffffdfff00000001}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000080)='ext4_evict_inode\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xa, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x5, &(0x7f00000001c0)=@raw=[@ldst={0x2571e5a0f09f5991, 0x1, 0x2, 0xa, 0xa, 0x2a, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000002c0)='GPL\x00', 0x9, 0x8b, &(0x7f0000000380)=""/139, 0x41100, 0x42, '\x00', r4, 0x35, r5, 0x8, &(0x7f0000000880)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x6, 0x0, 0x7}, 0x10, 0x0, r1, 0x3, &(0x7f0000000980)=[r0, r6], &(0x7f00000009c0)=[{0x1, 0x5, 0xb, 0xb}, {0x3, 0x2, 0x3, 0x5}, {0x4, 0x5, 0x5, 0x2}], 0x10, 0x3}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00003a00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 2.783260083s ago: executing program 2 (id=1494): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = syz_clone(0x100, &(0x7f00000002c0), 0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) socketpair(0x11, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0}, 0x18) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x2, &(0x7f0000000180), 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="eb51599a92c34fb6cfc1862f7038e346a08bff30f2b4784da60ae3a652f5a642842f4ded6e7f2b3bf6a15f40", @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x50) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0xfffffffffffffd7e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfed4}, 0x90) (rerun: 64) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000b0c0000000000000845000000002e2e2e61616161002e00ac1945ca02f40305d41214f9a45728768a4bd6654e7462309d1cc72d6a31a0525e"], &(0x7f0000000240)=""/36, 0x3b, 0x24, 0x1, 0x31}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x8, 0xc, 0x7, 0x30e4, r2, 0x38000000, '\x00', 0x0, r7, 0x3, 0x5, 0x0, 0xd}, 0x48) openat$cgroup_int(r6, &(0x7f0000000140)='memory.oom.group\x00', 0x2, 0x0) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) (rerun: 32) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r8, &(0x7f00000004c0)}, 0x20) (async, rerun: 32) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000400000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000ff9f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00feffc0000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x3b) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000500)='cgroup.kill\x00', 0x275a, 0x0) ioctl$TUNSETOFFLOAD(r12, 0x400454d0, 0xc) (async) write$cgroup_int(r12, &(0x7f0000000280), 0x12) 2.734812393s ago: executing program 0 (id=1495): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1d, 0x4, 0x5, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9101a040018740100147401000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0xb3, 0x7f}, 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000205}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x891c, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x7, [@restrict={0x5, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5}}, @datasec={0xa, 0x8, 0x0, 0xf, 0x1, [{0x0, 0x100024}, {0x3, 0x0, 0x3}, {}, {0x2, 0x7fff, 0x1}, {0x2, 0x7fffffff, 0x1}, {0x4, 0x40, 0x2}, {0x4}, {0x1, 0x10000, 0x5}], "c8"}, @typedef={0x9}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x9b777cfac6c0e2fd]}}, &(0x7f00000001c0)=""/189, 0xbf, 0xbd, 0x0, 0x3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='f2fs_destroy_extent_tree\x00'}, 0x10) 2.652697755s ago: executing program 4 (id=1496): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000001095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) close(0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={&(0x7f0000000840)=""/48, 0x30, 0x0, &(0x7f0000000880)=""/152, 0x98}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r4, 0x4) close(r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fed413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfcc1, 0x10, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r7}, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup(r9, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffe56, 0x2d, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10}, 0x90) 2.651886166s ago: executing program 1 (id=1497): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) (async) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x400, 0x0, 0x0, 0x7, 0x3, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14012, 0x6debe502, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000007000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000400)="b9ff0347000000005485f0e7000000", 0x0, 0x200000fe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2005, 0xc8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x100440, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.94197115s ago: executing program 4 (id=1498): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x110, 0xb}}], 0x18}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x2}, 0x8) 1.934949445s ago: executing program 1 (id=1499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c00)={&(0x7f0000000a40)="e3df62a1d5d36f95f98f00cab98eeb42d2bec176c2fb7b24da6b6914768438b572bf35069d86ead6f459918cba133ae81e0cedb6d8e04a05bec5d5e2093f0e6688e6e45fbd211c00af45e49b8671121d6e92f14e18d5ab7a65162dc8", &(0x7f0000000ac0)=""/159, &(0x7f0000000b80)="f7079ca8eef53b8401ea399c6884317a4baa470ba7739514980693355ff5c35a73b5c6ddb618ce60ab15ecde9959cbac19e2f6fa8c9433a3306248ad2efd4d919b66f3cbb842dd7ed1b2a30eabaf79a6ce55a178", &(0x7f0000000980)="33d8c57c276b9001aa3d07286c119373572c084bff5c607f917e", 0x401, r3, 0x4}, 0x38) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) recvmsg(r4, &(0x7f0000000780)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000000600)=""/180, 0xb4}, {&(0x7f0000000800)=""/213, 0xd5}], 0x6, &(0x7f0000000900)=""/84, 0x54}, 0x40000000) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @random="a2a89ea4e65c"}) 1.908314761s ago: executing program 0 (id=1500): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0), 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a9c03e7b3e19d4cabbb5a8da1aa1f000000000000180100002020782500000000002020207b1af8ff00000000bf8100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x6f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r2}, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r4}, 0x9) ioctl$SIOCSIFHWADDR(r3, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='c(u&\'\'\t|\t') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000000), 0x400000) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000680)='rdma.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.70190395s ago: executing program 4 (id=1501): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90a2, 0xca}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r3, 0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000c8"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010100)={0xf, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, 0x0}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'macvlan1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe3a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) close(0xffffffffffffffff) recvmsg$unix(r5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001980)='\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.607768334s ago: executing program 2 (id=1502): socket$kcm(0x10, 0x400000002, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x0, 0x0, 0x2, 0x0, 0x7fffffff, 0x83, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x0, 0x8}, 0x48) (async) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x31) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff0000000003000000fcffffff000000000000000d00000000000000000000000902"], 0x0, 0x4a}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000052012900000000009500000000000000f96754a65567689cba436351810b5aa74c3e45718b389b9c5c8e81e1c3df94751ad2ee857dae40e64c901f88df739e414cce1800e3cffeb56880c9e36076c55eccf7987a40da24f0b000eabd146a7478351bba67be8b1ccf40e3c8f5a5af7a5084cd2a1305d7e4560ea2cdac0fd5add1f17275d17c1445ad057bf345935ca36967d0f147424a14a91cdca1cee5b58cae675f28e27cdacc50cd03d25fdc1a0a4823abca26408544ec03d8556e4f55f86af12a7ac8d564a86a3cee099ec2d0fb351a", @ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x110000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x16, 0x0, 0x0}, 0x90) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0xfffffebd) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/157, 0x9d}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006001100000016000500002402000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000880), 0x12) 1.364737195s ago: executing program 4 (id=1503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000bfa200000000e29007020000f8ffffffb703000008000000b70400000000000085000000050000009542767300c00063e08ef9c857fde8e9bd7df265144d7d4c8afc2d30cc4244d90b278568df41953a99021a87ae2c996be0de1e150dbbb2bf018937c87f54cea2513f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x3, 0x4, 0x2}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000500)='sched_process_hang\x00', r6}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640), &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f00000006c0), 0x0, 0x10, &(0x7f0000000f40), &(0x7f00000007c0), 0x8, 0x75, 0x8, 0xffffffffffffffa8, &(0x7f0000000940)}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='.\x00', 0x0, 0x4018, r4}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000900000000000000090000001853000003000000000000000000000085100000fcffffffb7080000000000007b8af8ff00000000b7080000520000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r7, @ANYBLOB="0000000600000000000000000800000085000000a50000001565000101000000183400000500000f000000000000000031b7f4ff080000001833000002000000000000000000000018150000", @ANYRES32=r5, @ANYRES16=r8], &(0x7f0000000400)='GPL\x00', 0x8001, 0xf2, &(0x7f00000006c0)=""/242, 0x41100, 0x11, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000a80)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0xd, 0xb}, 0x10, 0x13373, r3, 0x5, &(0x7f0000000bc0)=[0xffffffffffffffff, r4, r5], &(0x7f0000000d40)=[{0x4, 0x5, 0x1}, {0x3, 0x3, 0x7, 0x9}, {0x4, 0x2, 0x3}, {0x1, 0x2, 0x3, 0x9}, {0x4, 0x3, 0x1, 0x3}], 0x10, 0x2}, 0x39) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x60, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) socket$kcm(0x29, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x5}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r9}, &(0x7f0000000e80), &(0x7f0000000ec0)=r10}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r11) 1.302051244s ago: executing program 0 (id=1504): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001d00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x9, 0xc3, &(0x7f0000000380)=""/195}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x7, @loopback}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff1b}, 0x20000001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r5, 0xffffffffffffffff, 0x1b, 0x0, 0x4000}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13100000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89", 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x20ffffff}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) 1.163304554s ago: executing program 2 (id=1505): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x66043, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x1e}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)="d80000001a00810a1d08007b490d4f1e81f8d804000100ff05142603600e12080005007a01e300a80016002000034004000000035c0461c9d67f6f940071342e8728a84942de4fe3aefb8000a007a290457f01e84460dd46302af989b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025c4679ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e78", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)="d80000001a00810a1d08007b490d4f1e81f8d804000100ff05142603600e12080005007a01e300a80016002000034004000000035c0461c9d67f6f940071342e8728a84942de4fe3aefb8000a007a290457f01e84460dd46302af989b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025c4679ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e78", 0xd8}], 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socket$kcm(0x21, 0x2, 0x2) (async) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x110, 0xd, {[@noop]}}}, @ip_ttl={{0x14, 0x110}}], 0x30}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x6e000) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x6e000) socket$kcm(0x2, 0x2, 0x0) (async) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x89, 0x8, "04630b4d7d11"}]}}}], 0x18, 0x5}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x89, 0x8, "04630b4d7d11"}]}}}], 0x18, 0x5}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000180)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000180)}, 0x10) 1.033247431s ago: executing program 1 (id=1506): r0 = socket$kcm(0x29, 0xe, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782", 0xc}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r4, 0x40107446, 0x20000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab2, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xac, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0xfffffffe}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800894cb8719e6a576f4f7aca44f09100000000008de60000000000009500000000000000f3980c966a803178cf68074b0e3c016e9e3a2f486f576c93"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r6, 0x6, 0x5, &(0x7f0000000040)=r5, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) r7 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/13, 0xd}, 0x40002040) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000040)) 694.046498ms ago: executing program 0 (id=1507): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000740)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800800040000000000000000000000018110000", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f0000000200)="fd34633f1e4cb70e3711013a2a2f0fe23011cbc80e31d2975af08258a20adc559aadf2eb1a7cdc7de170912b98f0dea0d40f68c1d79005543c10f3f561a75a2d348a887c9912134b07294ec1bb2f7b4638cecf9efcdc82c6737b75731a91a462a4", &(0x7f0000000280)=""/36, &(0x7f0000000400)="c6f2bfb023487ec705f22fc5be4086abe446056067a0b716bc5ed276752e5b2d140173e760eb800b04c069002236d02d5f", &(0x7f0000000440)="eb77086807cbb3b33f71342b534f26bec28d773d59dd05a92e115fe89e669b04d9aafca33b0067c65ca31e1f182f91a556ada1831cf79cfa173dbce170b680032869fb0a68a42a211acd047f6a28fbe9d1a308365ca4d99e5efd72c135b77627eff01117e7deefebb7c7533c102d05a34415593335d68752c70aed515ecb2899fe69bdb6fc87fde707e017c26e60ca6724555bfc6a307846c2819ec9", 0x4, r0}, 0x38) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000900)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='tcp_probe\x00'}, 0xfffffffffffffd4a) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='N-N:N/8'], 0x6a) (async) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='N-N:N/8'], 0x6a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xc, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x208001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x64}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x64}, {0x6}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0xaa6, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) (async) sendmsg$inet(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) 562.004863ms ago: executing program 4 (id=1508): r0 = socket$kcm(0x29, 0x5, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000700)={'vlan0\x00', @multicast}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) (async) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xb0, 0x8, 0xffffffffffffffdf, &(0x7f00000006c0)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x13010}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000210081044e810382db44b9040a00007f00000500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40df8e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36511002b0006000100300017d34460bc247581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000009e79c7ad2600bb2b53e4", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) (async) r8 = socket$kcm(0x10, 0x0, 0x4) sendmsg$inet(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008102e00f80ecdb4cb9f207c804a01000000088080efb040002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 362.480481ms ago: executing program 2 (id=1509): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x5, 0x800, 0x101, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="51d4949d6dc0d5607d81184d21e37fa8da2cc35102503ba1ddaec4e01ca1bbaa638c48d4b5e9bd9b3328429df901a4cb8212c8a8d741141e7f8008d38ab7b126ba4dfdec2f0c34970aea38", 0x4b}], 0x1, &(0x7f0000000500)}, 0x4040040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES64=r1, @ANYRES16=0x0], &(0x7f0000000180)='GPL\x00'}, 0x90) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r4, r2}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x80005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8000, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000000400000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.freeze\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x967f47f5e981f8e1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3], &(0x7f0000000000)='GPL\x00', 0x5, 0xd2, &(0x7f00000009c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001827e4c2267a9120b164a7a700000000000000140000001400000002000000000000000100000d00000000f06c39a8000000000000"], &(0x7f0000000280)=""/25, 0x2e, 0x19, 0x1}, 0x20) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 132.739323ms ago: executing program 1 (id=1510): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="9feb01fd3700000000000000180000001800000008000000000000000000000202000200060000000000000c000000000000000000005f009903dd"], &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100ff010000000000000040000000000000000001a23200000000000000000000004a6966f82f"], 0x0, 0x49}, 0x20) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2a62}, 0x0, 0x0, 0x0, 0x0, 0x7fe632ec}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="31ea4f68000000006963000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0406618, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB='\x00'], 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000064000000000000001800000000580000000000000000000095000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='jbd2_handle_stats\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={0x0, 0x0, 0x0, r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='jbd2_handle_stats\x00', r5}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000000110100f000000009500000700000000c7f7ece027d6d6b2b5b6a6b8e3f535d04571db2ffc3b60ad6eb39a9507a1971dda87ae33b53b63f2cf0fbd5e6b348528c1cb82b39c7b9553405e220cc61865aae89c85a8cfdf8976aefa394a07f89c57d66caf11610e1942630facc9472d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="ff00000000aac16dc6810000000024000000000095000000000000003affffffffffffff4dc2cf4846f0d2c40ee6a68b6c81c75dfd622e88285a56c32bf590174feef76741b1fe79ba6a195d9534cb4544af3e54dbe2e1448a7c3750803fe38ca8982c4a7fe1637d1291e36e504aab5c67000000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) write$cgroup_int(r6, &(0x7f0000001300)=0x5169, 0x12) 33.975691ms ago: executing program 4 (id=1511): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x9, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r7, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x24e, 0xfffffffffffffcb7, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 33.208317ms ago: executing program 0 (id=1512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x20}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="473d2ee3dbd9359a80c409bbc808f015496cd04193131f61ebb3234771017d1fbc125174b9e1bfa4", @ANYRES64=r1, @ANYRES8=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000debff00000000032a202639"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_ext_remove_space_done\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000640)='ext4_ext_remove_space_done\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r7}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r8, &(0x7f0000000980), 0x20000992) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2165], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=1442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x10}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x2, 0x220108, 0x6, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001850000000e000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r5, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x5b, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x80, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xc}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x1}, @typedef={0x10}]}, {0x0, [0x2e, 0x0]}}, &(0x7f00000008c0)=""/30, 0x48, 0x1e, 0x1, 0x2}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) close(r11) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={r11, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ff08000000"], &(0x7f0000000b00)='syzkaller\x00', 0x1, 0x66, &(0x7f0000000b40)=""/102, 0x40f00, 0x2, '\x00', r7, 0x1d, r11, 0x8, &(0x7f0000000bc0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0xb, 0x0, 0x10001}, 0x10, 0xffffffffffffffff, r5, 0x1, &(0x7f0000000c80)=[r0, 0x1, r0, r12, r0, r11, r11, r6], &(0x7f0000000cc0)=[{0x2, 0x1, 0x8, 0x8}], 0x10, 0x81}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x0, 0x1, 0x0, 0x9, 0x3, 0xc, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5cc}, @jmp={0x5, 0x1, 0x9, 0x6, 0x7, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x1, 0xa, 0x3, 0x8, 0xfffffffffffffffe, 0x4}, @alu={0x4, 0x0, 0xb, 0x2, 0xa, 0x2, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7ff}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000002c0)='GPL\x00', 0x2, 0x8f, &(0x7f00000003c0)=""/143, 0x41100, 0x2, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000940)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x7, 0x2, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r11, r1, r0, r1, r0], 0x0, 0x10, 0x3}, 0x90) kernel console output (not intermixed with test programs): ] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.403716][ T5220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.416775][ T5220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.445159][ T5220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.458039][ T5220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.487814][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.527807][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.558591][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.566066][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.581218][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.588432][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.596226][ T54] Bluetooth: hci1: command tx timeout [ 74.599981][ T5233] Bluetooth: hci0: command tx timeout [ 74.605083][ T54] Bluetooth: hci2: command tx timeout [ 74.668678][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.676430][ T54] Bluetooth: hci3: command tx timeout [ 74.730834][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.737988][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.755392][ T54] Bluetooth: hci4: command tx timeout [ 74.791627][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.822043][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.829246][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.862213][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.891054][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.909253][ T5223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.951107][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.958337][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.008004][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.035945][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.043124][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.115864][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.123050][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.147010][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.194259][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.201574][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.302182][ T5221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.353875][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.378500][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.414545][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.421748][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.467485][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.474726][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.674379][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.721718][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.746526][ T5223] veth0_vlan: entered promiscuous mode [ 75.798110][ T5235] veth0_vlan: entered promiscuous mode [ 75.838580][ T5235] veth1_vlan: entered promiscuous mode [ 75.863177][ T5223] veth1_vlan: entered promiscuous mode [ 75.898071][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.011722][ T5221] veth0_vlan: entered promiscuous mode [ 76.061193][ T5221] veth1_vlan: entered promiscuous mode [ 76.083159][ T5235] veth0_macvtap: entered promiscuous mode [ 76.094274][ T5223] veth0_macvtap: entered promiscuous mode [ 76.119404][ T5235] veth1_macvtap: entered promiscuous mode [ 76.152537][ T5223] veth1_macvtap: entered promiscuous mode [ 76.256490][ T5221] veth0_macvtap: entered promiscuous mode [ 76.266452][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.287636][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.313354][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.333168][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.363583][ T5221] veth1_macvtap: entered promiscuous mode [ 76.387162][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.398683][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.411318][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.422201][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.433240][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.446438][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.457872][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.470450][ T5235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.479733][ T5235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.488551][ T5235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.497311][ T5235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.509712][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.521248][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.532464][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.573634][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.584387][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.599136][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.609628][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.623905][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.635958][ T5223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.645510][ T5223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.654257][ T5223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.663649][ T5223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.675382][ T54] Bluetooth: hci0: command tx timeout [ 76.675412][ T5233] Bluetooth: hci2: command tx timeout [ 76.680799][ T54] Bluetooth: hci1: command tx timeout [ 76.712039][ T5221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.721746][ T5221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.738668][ T5221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.748210][ T5221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.765386][ T54] Bluetooth: hci3: command tx timeout [ 76.835506][ T54] Bluetooth: hci4: command tx timeout [ 76.861734][ T5238] veth0_vlan: entered promiscuous mode [ 76.929997][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.947022][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.033382][ T5238] veth1_vlan: entered promiscuous mode [ 77.054434][ T5220] veth0_vlan: entered promiscuous mode [ 77.062521][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.082149][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.127148][ T5220] veth1_vlan: entered promiscuous mode [ 77.204272][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.212028][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.222066][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.222949][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.242814][ T5220] veth0_macvtap: entered promiscuous mode [ 77.323034][ T5220] veth1_macvtap: entered promiscuous mode [ 77.399346][ T5306] Illegal XDP return value 4294967274 on prog (id 2) dev N/A, expect packet loss! [ 77.407967][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.417539][ T5238] veth0_macvtap: entered promiscuous mode [ 77.419675][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.445457][ C1] hrtimer: interrupt took 89894 ns [ 77.450317][ T5238] veth1_macvtap: entered promiscuous mode [ 77.460533][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.471211][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.507823][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.537176][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.553785][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.573391][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.583692][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.609791][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.631723][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.683473][ T5306] bridge0: port 3(veth0_to_bond) entered blocking state [ 77.714491][ T5306] bridge0: port 3(veth0_to_bond) entered disabled state [ 77.734173][ T5306] veth0_to_bond: entered allmulticast mode [ 77.789334][ T5306] veth0_to_bond: entered promiscuous mode [ 77.912183][ T5306] bridge0: port 3(veth0_to_bond) entered blocking state [ 77.924031][ T5306] bridge0: port 3(veth0_to_bond) entered forwarding state [ 77.956129][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.968983][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.979266][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.990278][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.000906][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.012317][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.025232][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.046673][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.067735][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.092225][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.112575][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.136008][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.146292][ T5310] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.151749][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.156418][ T5310] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.167342][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.190026][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.214017][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.227697][ T5307] veth0_to_bond: left allmulticast mode [ 78.233525][ T5307] veth0_to_bond: left promiscuous mode [ 78.240393][ T5307] bridge0: port 3(veth0_to_bond) entered disabled state [ 78.269596][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.316047][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.332875][ T5312] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.355080][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.407390][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.437988][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.463450][ T5315] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.468989][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.499940][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.514396][ T5315] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 78.524289][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.551644][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.582134][ T5220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.624717][ T5220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.656281][ T5220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.678331][ T5220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.715076][ T5324] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6'. [ 78.764098][ T54] Bluetooth: hci2: command tx timeout [ 78.764135][ T5234] Bluetooth: hci1: command tx timeout [ 78.769801][ T5233] Bluetooth: hci0: command tx timeout [ 78.793311][ T5238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.836216][ T54] Bluetooth: hci3: command tx timeout [ 78.840751][ T5238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.848509][ T5333] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.8'. [ 78.862737][ T5238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.873886][ T5238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.914931][ T54] Bluetooth: hci4: command tx timeout [ 79.055309][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.110264][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.238000][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.266595][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.368700][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.399364][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.499560][ T2522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.522958][ T2522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.690863][ T5358] netlink: 'syz.1.13': attribute type 21 has an invalid length. [ 79.698852][ T5358] netlink: 'syz.1.13': attribute type 2 has an invalid length. [ 79.714896][ T5358] netlink: 15970 bytes leftover after parsing attributes in process `syz.1.13'. [ 80.173463][ T5372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16'. [ 80.210615][ T5372] netlink: 'syz.1.16': attribute type 3 has an invalid length. [ 80.231967][ T5372] netlink: 1 bytes leftover after parsing attributes in process `syz.1.16'. [ 80.418731][ T5375] warning: `syz.0.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.493343][ T5377] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 80.532293][ T5377] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.20'. [ 80.796807][ T5380] netlink: 'syz.3.19': attribute type 16 has an invalid length. [ 80.845115][ T5380] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19'. [ 80.918758][ T5380] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.969844][ T3026] tipc: Subscription rejected, illegal request [ 81.216573][ T5398] Zero length message leads to an empty skb [ 81.295333][ T5401] netlink: 'syz.3.25': attribute type 12 has an invalid length. [ 81.332692][ T5403] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 81.389262][ T5404] netlink: 'syz.1.24': attribute type 3 has an invalid length. [ 81.972441][ T54] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 82.770498][ T5446] bridge0: entered promiscuous mode [ 82.803992][ T5446] bridge0: entered allmulticast mode [ 83.268110][ T5466] validate_nla: 2 callbacks suppressed [ 83.268145][ T5466] netlink: 'syz.2.43': attribute type 7 has an invalid length. [ 83.399535][ T5471] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 83.436767][ T5471] __nla_validate_parse: 5 callbacks suppressed [ 83.436787][ T5471] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.44'. [ 83.493733][ T5466] netlink: 'syz.2.43': attribute type 3 has an invalid length. [ 83.527661][ T5466] netlink: 196520 bytes leftover after parsing attributes in process `syz.2.43'. [ 84.215384][ T5494] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.50'. [ 84.283231][ T5494] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.50'. [ 84.731314][ T5517] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.56'. [ 84.777900][ T5517] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 85.078546][ T5529] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.59'. [ 85.133008][ T5517] cgroup: fork rejected by pids controller in /syz0 [ 85.347133][ T5526] netlink: 'syz.1.57': attribute type 21 has an invalid length. [ 85.375191][ T5526] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 85.403682][ T5526] netlink: 100 bytes leftover after parsing attributes in process `syz.1.57'. [ 85.458452][ T5529] netlink: 'syz.4.59': attribute type 2 has an invalid length. [ 85.487337][ T5529] tipc: Started in network mode [ 85.493073][ T5529] tipc: Node identity a, cluster identity 4711 [ 85.500604][ T5529] tipc: Node number set to 10 [ 85.717346][ T2522] tipc: Subscription rejected, illegal request [ 85.785186][ T5544] netlink: 164 bytes leftover after parsing attributes in process `syz.1.62'. [ 86.223389][ T5555] netlink: 'syz.2.66': attribute type 3 has an invalid length. [ 86.250295][ T5561] netlink: 'syz.3.67': attribute type 3 has an invalid length. [ 86.275069][ T5561] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.67'. [ 86.284525][ T5555] netlink: 'syz.2.66': attribute type 11 has an invalid length. [ 86.365264][ T5555] netlink: 128512 bytes leftover after parsing attributes in process `syz.2.66'. [ 86.583997][ T2522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.830222][ T2522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.934201][ T46] cfg80211: failed to load regulatory.db [ 87.049181][ T2522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.121344][ T5575] netlink: 'syz.3.70': attribute type 3 has an invalid length. [ 87.158972][ T5581] batman_adv: batadv0: Adding interface: virt_wifi0 [ 87.184682][ T5581] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.286432][ T5581] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 87.467276][ T2522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.744047][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.753399][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.765894][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.776769][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.787513][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.797473][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.289479][ T2522] bridge_slave_1: left allmulticast mode [ 88.316557][ T2522] bridge_slave_1: left promiscuous mode [ 88.323734][ T2522] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.500626][ T2522] bridge_slave_0: left allmulticast mode [ 88.520197][ T2522] bridge_slave_0: left promiscuous mode [ 88.565074][ T2522] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.013390][ T5633] __nla_validate_parse: 4 callbacks suppressed [ 89.013413][ T5633] netlink: 121244 bytes leftover after parsing attributes in process `syz.3.82'. [ 89.285033][ T5639] validate_nla: 10 callbacks suppressed [ 89.285126][ T5639] netlink: 'syz.4.83': attribute type 16 has an invalid length. [ 89.339608][ T5639] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.83'. [ 89.585928][ T5646] netlink: 'syz.3.84': attribute type 9 has an invalid length. [ 89.601727][ T5646] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.84'. [ 89.878473][ T5233] Bluetooth: hci1: command tx timeout [ 90.476366][ T2522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.511117][ T2522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.542096][ T2522] bond0 (unregistering): Released all slaves [ 90.727664][ T5639] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 90.745339][ T5649] batadv0: entered promiscuous mode [ 90.760072][ T5639] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 90.839758][ T5657] netlink: 'syz.3.86': attribute type 4 has an invalid length. [ 90.857500][ T5657] netlink: 152 bytes leftover after parsing attributes in process `syz.3.86'. [ 90.911113][ T5657] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 90.957199][ T5659] netlink: 'syz.3.86': attribute type 33 has an invalid length. [ 91.222097][ T5670] syz.3.89 uses obsolete (PF_INET,SOCK_PACKET) [ 91.340590][ T5667] netlink: 40 bytes leftover after parsing attributes in process `syz.4.90'. [ 91.365393][ T5667] netlink: 'syz.4.90': attribute type 3 has an invalid length. [ 91.373006][ T5667] netlink: 1 bytes leftover after parsing attributes in process `syz.4.90'. [ 91.526871][ T5680] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.91'. [ 91.766207][ T5678] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.91'. [ 91.952996][ T2522] hsr_slave_0: left promiscuous mode [ 91.961270][ T5233] Bluetooth: hci1: command tx timeout [ 92.015848][ T2522] hsr_slave_1: left promiscuous mode [ 92.094943][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.122649][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.169024][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.192470][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.247032][ T5704] netlink: 'syz.3.97': attribute type 1 has an invalid length. [ 92.254368][ T2522] veth1_macvtap: left promiscuous mode [ 92.280270][ T5704] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.97'. [ 92.296647][ T2522] veth0_macvtap: left promiscuous mode [ 92.306692][ T2522] veth1_vlan: left promiscuous mode [ 92.323503][ T2522] veth0_vlan: left promiscuous mode [ 92.329774][ T5704] block nbd10: not configured, cannot reconfigure [ 92.793637][ T5724] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.101'. [ 92.825137][ T5724] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 94.035475][ T5233] Bluetooth: hci1: command tx timeout [ 94.301436][ T2522] team0 (unregistering): Port device team_slave_1 removed [ 94.391168][ T2522] team0 (unregistering): Port device team_slave_0 removed [ 95.268080][ T5727] syzkaller0: entered promiscuous mode [ 95.273601][ T5727] syzkaller0: entered allmulticast mode [ 95.314872][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.323273][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.362948][ T5749] bridge0: left promiscuous mode [ 95.824546][ T5600] chnl_net:caif_netlink_parms(): no params data found [ 95.966045][ T5781] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.113'. [ 95.985018][ T5781] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.113'. [ 96.031024][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.038775][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.116141][ T5233] Bluetooth: hci1: command tx timeout [ 96.203836][ T5782] bridge0: entered allmulticast mode [ 96.351716][ T5775] bridge_slave_1: left allmulticast mode [ 96.420739][ T5775] bridge_slave_1: left promiscuous mode [ 96.446231][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.525661][ T5775] bridge_slave_0: left allmulticast mode [ 96.542913][ T5775] bridge_slave_0: left promiscuous mode [ 96.564505][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.382018][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.413159][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.430977][ T5600] bridge_slave_0: entered allmulticast mode [ 97.444324][ T5600] bridge_slave_0: entered promiscuous mode [ 97.609398][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.639098][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.665855][ T5600] bridge_slave_1: entered allmulticast mode [ 97.699673][ T5600] bridge_slave_1: entered promiscuous mode [ 97.969928][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.025178][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.284032][ T5852] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.123'. [ 98.541988][ T5600] team0: Port device team_slave_0 added [ 98.571674][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.579477][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.591750][ T5859] bridge0: entered allmulticast mode [ 98.615463][ T5862] bridge_slave_1: left allmulticast mode [ 98.625413][ T5862] bridge_slave_1: left promiscuous mode [ 98.668759][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.770071][ T5862] bridge_slave_0: left promiscuous mode [ 98.780061][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.843037][ T5868] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.110177][ T5600] team0: Port device team_slave_1 added [ 99.466324][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.473391][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.589858][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.672945][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.730205][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.758937][ T5890] netlink: 'syz.2.132': attribute type 1 has an invalid length. [ 99.775288][ T5890] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.132'. [ 99.819737][ T5890] netlink: 'syz.2.132': attribute type 1 has an invalid length. [ 99.845546][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.984470][ T5894] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.133'. [ 100.186114][ T5600] hsr_slave_0: entered promiscuous mode [ 100.227231][ T5600] hsr_slave_1: entered promiscuous mode [ 100.248795][ T5600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.256515][ T5600] Cannot create hsr debugfs directory [ 101.220790][ T5948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.147'. [ 101.602673][ T5947] netlink: 132 bytes leftover after parsing attributes in process `syz.1.147'. [ 102.614147][ T5968] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.151'. [ 102.877809][ T5976] netlink: 'syz.3.153': attribute type 10 has an invalid length. [ 103.115762][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.177242][ T5976] bond0: (slave team0): Enslaving as an active interface with an up link [ 103.286296][ T5233] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 103.312328][ T5976] syz.3.153 (5976) used greatest stack depth: 18552 bytes left [ 103.537459][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.586973][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.638880][ T5996] bridge_slave_1: left allmulticast mode [ 103.653759][ T5996] bridge_slave_1: left promiscuous mode [ 103.671124][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.707708][ T5996] bridge_slave_0: left promiscuous mode [ 103.719529][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.763351][ T5233] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 103.870893][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.922237][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.429375][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.504486][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.562769][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.570642][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.602299][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.609551][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.661328][ T6037] netlink: 60 bytes leftover after parsing attributes in process `syz.2.169'. [ 104.914197][ T6046] netlink: zone id is out of range [ 104.995798][ T6046] netlink: get zone limit has 8 unknown bytes [ 105.619283][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.164927][ T5600] veth0_vlan: entered promiscuous mode [ 106.227468][ T5600] veth1_vlan: entered promiscuous mode [ 106.424949][ T5600] veth0_macvtap: entered promiscuous mode [ 106.501775][ T5600] veth1_macvtap: entered promiscuous mode [ 106.620933][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.640392][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.654247][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.675806][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.695418][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.712359][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.724485][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.742774][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.803674][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.818492][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.830349][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.843512][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.865047][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.894631][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.914614][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.924535][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.958682][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.983743][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.088225][ T5600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.118914][ T5600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.147906][ T5600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.184140][ T5600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.359484][ T6105] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.180'. [ 107.467753][ T6112] netlink: 'syz.1.183': attribute type 21 has an invalid length. [ 107.506357][ T6112] netlink: 128 bytes leftover after parsing attributes in process `syz.1.183'. [ 107.515889][ T6112] netlink: 'syz.1.183': attribute type 4 has an invalid length. [ 107.617270][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.636170][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.804522][ T2522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.846355][ T2522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.088826][ T6181] netlink: 'syz.4.196': attribute type 7 has an invalid length. [ 109.119432][ T6181] netlink: 140 bytes leftover after parsing attributes in process `syz.4.196'. [ 109.700721][ T6211] netlink: 'syz.3.202': attribute type 4 has an invalid length. [ 111.145853][ T6248] netlink: 'syz.0.211': attribute type 5 has an invalid length. [ 111.417891][ T6256] netlink: 'syz.2.210': attribute type 21 has an invalid length. [ 111.477326][ T6256] netlink: 128 bytes leftover after parsing attributes in process `syz.2.210'. [ 111.578578][ T6256] netlink: 'syz.2.210': attribute type 5 has an invalid length. [ 111.681742][ T6256] netlink: 'syz.2.210': attribute type 6 has an invalid length. [ 111.764154][ T6256] netlink: 3 bytes leftover after parsing attributes in process `syz.2.210'. [ 112.521532][ T6282] netlink: 'syz.3.218': attribute type 3 has an invalid length. [ 112.571939][ T6282] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.218'. [ 112.802843][ T6290] netlink: 'syz.2.219': attribute type 10 has an invalid length. [ 112.817113][ T6290] netlink: 'syz.2.219': attribute type 19 has an invalid length. [ 112.844952][ T6290] netlink: 156 bytes leftover after parsing attributes in process `syz.2.219'. [ 113.274409][ T6327] netlink: 'syz.1.227': attribute type 4 has an invalid length. [ 113.314765][ T6327] netlink: 176 bytes leftover after parsing attributes in process `syz.1.227'. [ 114.131887][ T6317] syzkaller0: entered promiscuous mode [ 114.155635][ T6317] syzkaller0: entered allmulticast mode [ 114.831418][ T6364] syz.4.235 (6364) used greatest stack depth: 18528 bytes left [ 117.787549][ T6402] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 117.878554][ T6408] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.239'. [ 117.916100][ T6404] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.239'. [ 119.086132][ T6451] : renamed from ipvlan1 [ 119.247584][ T6455] netlink: 'syz.0.253': attribute type 21 has an invalid length. [ 119.259919][ T6455] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 119.774934][ T6473] netlink: 'syz.1.260': attribute type 22 has an invalid length. [ 120.312819][ T6499] netlink: 133820 bytes leftover after parsing attributes in process `syz.1.267'. [ 120.354931][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 120.415394][ T6501] netlink: 'syz.2.268': attribute type 3 has an invalid length. [ 120.450562][ T6501] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.268'. [ 121.814742][ T6544] netlink: 'syz.2.277': attribute type 3 has an invalid length. [ 121.822449][ T6544] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.277'. [ 121.871789][ T6548] syz.1.279[6548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.902254][ T6548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.279'. [ 123.459520][ T6584] netlink: 'syz.0.289': attribute type 29 has an invalid length. [ 123.502075][ T6584] netlink: 'syz.0.289': attribute type 29 has an invalid length. [ 123.515990][ T6584] netlink: 'syz.0.289': attribute type 29 has an invalid length. [ 123.555940][ T6584] netlink: 'syz.0.289': attribute type 29 has an invalid length. [ 123.679199][ T6597] netlink: 16122 bytes leftover after parsing attributes in process `syz.2.292'. [ 123.709261][ T6597] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.292'. [ 123.744926][ T6597] netlink: 16122 bytes leftover after parsing attributes in process `syz.2.292'. [ 123.801040][ T6607] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.295'. [ 123.821117][ T6607] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.295'. [ 123.844263][ T6607] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.295'. [ 123.986916][ T6612] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 124.030716][ T5233] Bluetooth: hci0: ISO packet for unknown connection handle 2110 [ 124.094321][ T6612] batman_adv: batadv0: Adding interface: team0 [ 124.101686][ T6612] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.146519][ T6612] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 124.164794][ T6617] netlink: 2 bytes leftover after parsing attributes in process `syz.0.296'. [ 124.235538][ T6617] team0: entered promiscuous mode [ 124.263477][ T6617] team_slave_0: entered promiscuous mode [ 124.325612][ T6617] team_slave_1: entered promiscuous mode [ 124.356171][ T6617] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.379218][ T6617] batman_adv: batadv0: Interface activated: team0 [ 124.405026][ T6617] batman_adv: batadv0: Interface deactivated: team0 [ 124.417219][ T6617] batman_adv: batadv0: Removing interface: team0 [ 124.511137][ T6617] bridge0: port 3(team0) entered blocking state [ 124.556730][ T6617] bridge0: port 3(team0) entered disabled state [ 124.593387][ T6617] team0: entered allmulticast mode [ 124.616538][ T6617] team_slave_0: entered allmulticast mode [ 124.645791][ T6617] team_slave_1: entered allmulticast mode [ 124.693731][ T6617] bridge0: port 3(team0) entered blocking state [ 124.700436][ T6617] bridge0: port 3(team0) entered forwarding state [ 125.354389][ T6646] validate_nla: 1 callbacks suppressed [ 125.354413][ T6646] netlink: 'syz.0.305': attribute type 3 has an invalid length. [ 125.430884][ T6646] netlink: 70784 bytes leftover after parsing attributes in process `syz.0.305'. [ 126.162528][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.172174][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.186178][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.197851][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.214888][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 126.225167][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.610462][ T6676] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.315'. [ 127.058438][ T6686] pim6reg1: entered promiscuous mode [ 127.078811][ T6686] pim6reg1: entered allmulticast mode [ 127.473054][ T6667] chnl_net:caif_netlink_parms(): no params data found [ 127.734467][ T6706] netlink: 73368 bytes leftover after parsing attributes in process `syz.0.323'. [ 128.031688][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.049844][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.065301][ T6667] bridge_slave_0: entered allmulticast mode [ 128.080614][ T6667] bridge_slave_0: entered promiscuous mode [ 128.101677][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.122105][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.134502][ T6667] bridge_slave_1: entered allmulticast mode [ 128.152895][ T6667] bridge_slave_1: entered promiscuous mode [ 128.289154][ T54] Bluetooth: hci5: command tx timeout [ 128.459907][ T6667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.503343][ T6726] netlink: 'syz.4.327': attribute type 2 has an invalid length. [ 128.524770][ T6726] netlink: 'syz.4.327': attribute type 8 has an invalid length. [ 128.543980][ T6729] netlink: 'syz.0.328': attribute type 10 has an invalid length. [ 128.575260][ T6729] netlink: 'syz.0.328': attribute type 4 has an invalid length. [ 128.624373][ T6729] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.696346][ T6667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.828691][ T6732] netlink: 'syz.2.329': attribute type 10 has an invalid length. [ 128.857598][ T6732] __nla_validate_parse: 2 callbacks suppressed [ 128.857645][ T6732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.329'. [ 128.902172][ T6732] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 129.051107][ T6667] team0: Port device team_slave_0 added [ 129.103724][ T6667] team0: Port device team_slave_1 added [ 129.129258][ T6739] pim6reg1: entered promiscuous mode [ 129.150133][ T6739] pim6reg1: entered allmulticast mode [ 129.241272][ T6744] netlink: 'syz.3.332': attribute type 3 has an invalid length. [ 129.253974][ T6744] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.332'. [ 129.326425][ T6747] netlink: 3748 bytes leftover after parsing attributes in process `syz.2.333'. [ 129.389957][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.415332][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.462561][ T6667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.491751][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.509699][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.539782][ T6667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.691777][ T6667] hsr_slave_0: entered promiscuous mode [ 129.725560][ T6667] hsr_slave_1: entered promiscuous mode [ 129.746458][ T6667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.771701][ T6667] Cannot create hsr debugfs directory [ 129.801118][ T6751] netlink: 'syz.3.334': attribute type 10 has an invalid length. [ 129.836113][ T6751] netlink: 55 bytes leftover after parsing attributes in process `syz.3.334'. [ 129.954813][ T6762] netlink: 'syz.2.335': attribute type 29 has an invalid length. [ 129.975205][ T6772] netlink: 184472 bytes leftover after parsing attributes in process `syz.4.338'. [ 129.988503][ T6759] netlink: 'syz.2.335': attribute type 29 has an invalid length. [ 130.245788][ T6783] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'. [ 130.258095][ T6783] ipvlan1: entered promiscuous mode [ 130.263415][ T6783] ipvlan1: entered allmulticast mode [ 130.269734][ T6783] veth0_vlan: entered allmulticast mode [ 130.280394][ T6783] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 130.365344][ T54] Bluetooth: hci5: command tx timeout [ 130.500522][ T6667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.542342][ T6786] validate_nla: 1 callbacks suppressed [ 130.542379][ T6786] netlink: 'syz.3.342': attribute type 12 has an invalid length. [ 130.586218][ T6786] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 130.689555][ T6667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.891344][ T6794] netlink: 'syz.2.344': attribute type 17 has an invalid length. [ 130.904900][ T6794] netlink: 'syz.2.344': attribute type 41 has an invalid length. [ 130.925202][ T6791] netlink: 'syz.0.343': attribute type 3 has an invalid length. [ 130.936125][ T6794] netlink: 116 bytes leftover after parsing attributes in process `syz.2.344'. [ 130.965025][ T6791] netlink: 70784 bytes leftover after parsing attributes in process `syz.0.343'. [ 131.183014][ T6667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.487526][ T6667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.180230][ T6667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.250239][ T6667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.328048][ T6667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.406263][ T6667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.434719][ T54] Bluetooth: hci5: command tx timeout [ 132.603927][ T6667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.772147][ T6667] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.836290][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.843514][ T5224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.899032][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.906282][ T5303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.999199][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.005950][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.520566][ T6860] syzkaller0: entered promiscuous mode [ 134.518812][ T54] Bluetooth: hci5: command tx timeout [ 136.683047][ T6667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.950532][ T6893] netlink: 'syz.2.370': attribute type 15 has an invalid length. [ 136.972108][ T6893] netlink: 176 bytes leftover after parsing attributes in process `syz.2.370'. [ 137.273913][ T6905] netlink: 'syz.0.369': attribute type 29 has an invalid length. [ 137.479245][ T6909] netlink: 'syz.0.369': attribute type 29 has an invalid length. [ 137.556996][ T6892] netlink: 'syz.0.369': attribute type 29 has an invalid length. [ 137.587234][ T6915] netlink: 'syz.2.373': attribute type 29 has an invalid length. [ 137.655393][ T6911] netlink: 'syz.2.373': attribute type 29 has an invalid length. [ 137.753753][ T6908] netlink: 'syz.0.369': attribute type 29 has an invalid length. [ 137.775374][ T6902] netlink: 'syz.0.369': attribute type 29 has an invalid length. [ 137.839835][ T6667] veth0_vlan: entered promiscuous mode [ 137.856549][ T6915] netlink: 'syz.2.373': attribute type 29 has an invalid length. [ 138.041454][ T6892] netlink: 'syz.0.369': attribute type 29 has an invalid length. [ 138.236867][ T6667] veth1_vlan: entered promiscuous mode [ 138.298846][ T6667] veth0_macvtap: entered promiscuous mode [ 138.333901][ T6667] veth1_macvtap: entered promiscuous mode [ 138.399412][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.421353][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.441685][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.461694][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.495111][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.512319][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.540560][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.571262][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.582388][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.594293][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.606472][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.651640][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.694724][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.722162][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.767077][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.782049][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.798921][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.819938][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.837308][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.847573][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.858546][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.871481][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.921988][ T6964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.959537][ T6667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.984637][ T6667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.003666][ T6667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.035271][ T6667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.075363][ T6970] netlink: 6 bytes leftover after parsing attributes in process `syz.4.388'. [ 139.085386][ T6970] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.388'. [ 139.384794][ T6983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.399632][ T6983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.491576][ T7016] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.393'. [ 139.511453][ T7017] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.393'. [ 139.528611][ T6985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.597054][ T6985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.938934][ T7028] team0: Device hsr_slave_0 failed to register rx_handler [ 142.676231][ T7135] netlink: 132 bytes leftover after parsing attributes in process `syz.4.420'. [ 142.729118][ T7135] validate_nla: 7 callbacks suppressed [ 142.729142][ T7135] netlink: 'syz.4.420': attribute type 21 has an invalid length. [ 142.753860][ T7135] netlink: 128 bytes leftover after parsing attributes in process `syz.4.420'. [ 142.775543][ T7135] netlink: 'syz.4.420': attribute type 5 has an invalid length. [ 142.784463][ T7135] netlink: 'syz.4.420': attribute type 6 has an invalid length. [ 142.792883][ T7135] netlink: 3 bytes leftover after parsing attributes in process `syz.4.420'. [ 142.857401][ T7138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.867867][ T7138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.884364][ T7138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.896649][ T7138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.906781][ T7138] batman_adv: batadv0: Removing interface: virt_wifi0 [ 143.057624][ T7140] wg2: entered promiscuous mode [ 143.073643][ T7140] wg2: entered allmulticast mode [ 143.081932][ T7144] netlink: 830 bytes leftover after parsing attributes in process `syz.4.420'. [ 143.870533][ T7171] netlink: 'syz.1.429': attribute type 3 has an invalid length. [ 143.893721][ T7171] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 143.949315][ T7171] netlink: 'syz.1.429': attribute type 10 has an invalid length. [ 143.985720][ T7171] netlink: 55 bytes leftover after parsing attributes in process `syz.1.429'. [ 144.212621][ T7182] netlink: 'syz.0.432': attribute type 30 has an invalid length. [ 144.721719][ T7179] syz.3.431 (7179) used obsolete PPPIOCDETACH ioctl [ 145.391939][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.433634][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.500625][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.548172][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.262980][ T7222] vxcan1: entered allmulticast mode [ 146.495928][ T7225] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.445'. [ 146.650485][ T7234] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 146.691334][ T7234] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.447'. [ 147.111099][ T7245] veth1_macvtap: left promiscuous mode [ 147.135155][ T7245] macsec0: entered promiscuous mode [ 147.554121][ T7258] netlink: 'syz.0.452': attribute type 3 has an invalid length. [ 147.616300][ T7258] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.452'. [ 147.974961][ T7269] netlink: 160 bytes leftover after parsing attributes in process `syz.2.458'. [ 148.041813][ T7270] delete_channel: no stack [ 148.085866][ T7274] netlink: 'syz.4.460': attribute type 46 has an invalid length. [ 148.122159][ T7274] netlink: 212868 bytes leftover after parsing attributes in process `syz.4.460'. [ 148.294302][ T7281] netlink: 'syz.1.463': attribute type 10 has an invalid length. [ 148.300290][ T7282] netlink: 'syz.3.462': attribute type 9 has an invalid length. [ 148.351115][ T7281] team0: Device veth1_macvtap failed to register rx_handler [ 148.369329][ T7282] netlink: 399 bytes leftover after parsing attributes in process `syz.3.462'. [ 149.119131][ T7313] netlink: 'syz.2.471': attribute type 10 has an invalid length. [ 149.758612][ T7325] netlink: 'syz.1.475': attribute type 3 has an invalid length. [ 149.831554][ T7325] netlink: 'syz.1.475': attribute type 11 has an invalid length. [ 149.839887][ T7325] netlink: 128512 bytes leftover after parsing attributes in process `syz.1.475'. [ 149.898584][ T7313] team0: Port device geneve1 added [ 150.186147][ T7341] netlink: 'syz.4.477': attribute type 12 has an invalid length. [ 150.209668][ T7341] netlink: 132 bytes leftover after parsing attributes in process `syz.4.477'. [ 150.763822][ T7349] tap0: tun_chr_ioctl cmd 1074025672 [ 150.782277][ T7349] tap0: ignored: set checksum enabled [ 151.268371][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.333764][ T7371] bridge0: entered allmulticast mode [ 152.677475][ T7416] netlink: 'syz.4.497': attribute type 10 has an invalid length. [ 152.710829][ T7416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.497'. [ 152.734980][ T7416] hsr0: entered promiscuous mode [ 152.753901][ T7416] hsr0: entered allmulticast mode [ 152.772517][ T7416] hsr_slave_0: entered allmulticast mode [ 152.826068][ T7416] hsr_slave_1: entered allmulticast mode [ 152.937751][ T7416] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 153.152930][ T7437] netlink: 'syz.2.506': attribute type 3 has an invalid length. [ 153.175213][ T7437] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.506'. [ 153.222641][ T7434] netlink: 'syz.3.505': attribute type 3 has an invalid length. [ 153.255577][ T7434] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.505'. [ 153.325035][ T7443] netlink: 'syz.1.509': attribute type 10 has an invalid length. [ 153.381935][ T7443] netlink: 152 bytes leftover after parsing attributes in process `syz.1.509'. [ 153.517676][ T7443] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 153.575082][ T7447] netlink: 'syz.1.509': attribute type 10 has an invalid length. [ 153.583269][ T7447] netlink: 152 bytes leftover after parsing attributes in process `syz.1.509'. [ 153.690938][ T7447] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 153.754465][ T7458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.905032][ T7491] netlink: 'syz.1.521': attribute type 10 has an invalid length. [ 154.961579][ T7491] bridge0: port 3(veth0_macvtap) entered blocking state [ 155.007453][ T7491] bridge0: port 3(veth0_macvtap) entered disabled state [ 155.035654][ T7491] veth0_macvtap: entered allmulticast mode [ 155.070893][ T7491] veth0_macvtap: left allmulticast mode [ 155.224266][ T7497] netlink: 'syz.0.523': attribute type 3 has an invalid length. [ 155.254782][ T7497] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.523'. [ 155.312318][ T7502] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.524'. [ 155.344217][ T7502] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.524'. [ 155.367883][ T7502] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.524'. [ 156.755714][ T7560] netlink: 'syz.0.539': attribute type 29 has an invalid length. [ 156.853921][ T7560] netlink: 'syz.0.539': attribute type 29 has an invalid length. [ 157.020959][ T7566] netlink: 'syz.0.539': attribute type 29 has an invalid length. [ 157.104239][ T7563] netlink: 'syz.0.539': attribute type 29 has an invalid length. [ 157.231751][ T7569] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.541'. [ 157.527077][ T7577] netlink: 35347 bytes leftover after parsing attributes in process `syz.1.544'. [ 158.855581][ T7621] validate_nla: 1 callbacks suppressed [ 158.855627][ T7621] netlink: 'syz.1.557': attribute type 10 has an invalid length. [ 158.888396][ T7621] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.557'. [ 159.485846][ T7642] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.561'. [ 160.235229][ T7668] netlink: 'syz.0.567': attribute type 16 has an invalid length. [ 160.253482][ T7668] netlink: 'syz.0.567': attribute type 3 has an invalid length. [ 160.278996][ T7668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.567'. [ 160.847461][ T7679] netlink: 'syz.2.570': attribute type 10 has an invalid length. [ 160.872167][ T7679] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.570'. [ 162.384399][ T7695] netlink: 'syz.2.575': attribute type 30 has an invalid length. [ 166.277798][ T7692] netlink: 'syz.1.574': attribute type 21 has an invalid length. [ 166.287279][ T7692] netlink: 'syz.1.574': attribute type 1 has an invalid length. [ 166.508863][ T7716] syz.0.581[7716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.508971][ T7716] syz.0.581[7716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.562029][ T7721] syz.0.581[7721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.568954][ T7716] syz.0.581[7716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.641504][ T7721] syz.0.581[7721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.943601][ T7732] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.584'. [ 167.069825][ T7737] netlink: 'syz.1.586': attribute type 10 has an invalid length. [ 167.090286][ T7736] netlink: 'syz.3.585': attribute type 3 has an invalid length. [ 167.107985][ T7736] netlink: 'syz.3.585': attribute type 11 has an invalid length. [ 167.130642][ T7736] netlink: 128512 bytes leftover after parsing attributes in process `syz.3.585'. [ 167.170373][ T7737] batman_adv: batadv0: Adding interface: team0 [ 167.176734][ T7737] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.221521][ T7737] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 167.233323][ T7742] netlink: 'syz.1.586': attribute type 10 has an invalid length. [ 167.241659][ T7742] netlink: 2 bytes leftover after parsing attributes in process `syz.1.586'. [ 167.251295][ T7742] team0: entered promiscuous mode [ 167.257422][ T7742] team_slave_0: entered promiscuous mode [ 167.263465][ T7742] team_slave_1: entered promiscuous mode [ 167.272646][ T7742] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.295146][ T7742] batman_adv: batadv0: Interface activated: team0 [ 167.301707][ T7742] batman_adv: batadv0: Interface deactivated: team0 [ 167.338032][ T7742] batman_adv: batadv0: Removing interface: team0 [ 167.376632][ T7742] bridge0: port 3(team0) entered blocking state [ 167.389994][ T7742] bridge0: port 3(team0) entered disabled state [ 167.404017][ T7742] team0: entered allmulticast mode [ 167.410168][ T7742] team_slave_0: entered allmulticast mode [ 167.420858][ T7742] team_slave_1: entered allmulticast mode [ 167.431063][ T7742] bridge0: port 3(team0) entered blocking state [ 167.437561][ T7742] bridge0: port 3(team0) entered forwarding state [ 167.773210][ T7754] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.593'. [ 167.866363][ T7754] netlink: 'syz.3.593': attribute type 2 has an invalid length. [ 167.881544][ T7754] tipc: Started in network mode [ 167.901135][ T7754] tipc: Node identity c1823505, cluster identity 4711 [ 167.944374][ T7754] tipc: Node number set to 3246535941 [ 168.190659][ T7771] netlink: 'syz.0.595': attribute type 10 has an invalid length. [ 168.813141][ T7802] netlink: 'syz.2.600': attribute type 29 has an invalid length. [ 168.841120][ T7804] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 168.878351][ T7802] netlink: 'syz.2.600': attribute type 29 has an invalid length. [ 168.893474][ T7804] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.603'. [ 169.138148][ T7814] netlink: 55 bytes leftover after parsing attributes in process `syz.4.605'. [ 170.529128][ T7858] syz.2.615[7858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.529886][ T7858] syz.2.615[7858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.192608][ T7907] netlink: 10 bytes leftover after parsing attributes in process `syz.2.626'. [ 172.331244][ T7917] netlink: 35347 bytes leftover after parsing attributes in process `syz.3.628'. [ 172.356227][ T7916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.629'. [ 172.793095][ T7931] validate_nla: 5 callbacks suppressed [ 172.793116][ T7931] netlink: 'syz.2.633': attribute type 21 has an invalid length. [ 172.851291][ T7931] netlink: 'syz.2.633': attribute type 20 has an invalid length. [ 172.909398][ T7931] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.629428][ T7944] netlink: 2220 bytes leftover after parsing attributes in process `syz.2.637'. [ 173.902809][ T7955] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.949695][ T7955] netlink: 1 bytes leftover after parsing attributes in process `syz.3.640'. [ 174.009481][ T7961] syz.3.640[7961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.009617][ T7961] syz.3.640[7961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.754057][ T7985] syzkaller0: entered promiscuous mode [ 176.480691][ T8059] netlink: 'syz.2.666': attribute type 2 has an invalid length. [ 176.489787][ T8059] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.666'. [ 177.476685][ T8023] veth0_vlan: entered allmulticast mode [ 177.508992][ T8028] veth0_vlan: left promiscuous mode [ 177.533211][ T8028] veth0_vlan: entered promiscuous mode [ 177.556650][ T8056] netlink: 'syz.1.665': attribute type 11 has an invalid length. [ 177.564507][ T8056] netlink: 'syz.1.665': attribute type 5 has an invalid length. [ 177.879529][ T8077] veth0_vlan: entered allmulticast mode [ 179.854340][ T8142] veth0_vlan: entered allmulticast mode [ 180.210145][ T8155] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.696'. [ 180.663018][ T8164] syz.1.698: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 180.735176][ T8164] CPU: 1 PID: 8164 Comm: syz.1.698 Not tainted 6.10.0-syzkaller-04559-g7d30b8aa4fc3 #0 [ 180.744958][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 180.755138][ T8164] Call Trace: [ 180.758491][ T8164] [ 180.761481][ T8164] dump_stack_lvl+0x241/0x360 [ 180.766259][ T8164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.771530][ T8164] ? __pfx__printk+0x10/0x10 [ 180.776214][ T8164] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 180.782696][ T8164] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 180.789286][ T8164] warn_alloc+0x278/0x410 [ 180.793683][ T8164] ? stack_depot_save_flags+0x6e4/0x830 [ 180.799292][ T8164] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 180.805459][ T8164] ? __pfx_warn_alloc+0x10/0x10 [ 180.810421][ T8164] ? kasan_save_track+0x3f/0x80 [ 180.815366][ T8164] ? __kasan_kmalloc+0x98/0xb0 [ 180.820255][ T8164] ? xsk_setsockopt+0x598/0x950 [ 180.825257][ T8164] ? do_sock_setsockopt+0x3af/0x720 [ 180.830504][ T8164] ? __sys_setsockopt+0x1ae/0x250 [ 180.835571][ T8164] ? __x64_sys_setsockopt+0xb5/0xd0 [ 180.840812][ T8164] ? do_syscall_64+0xf3/0x230 [ 180.845539][ T8164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.851718][ T8164] __vmalloc_node_range_noprof+0x130/0x1460 [ 180.857837][ T8164] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.864264][ T8164] ? __kasan_kmalloc+0x98/0xb0 [ 180.869096][ T8164] ? xskq_create+0x54/0x170 [ 180.873711][ T8164] vmalloc_user_noprof+0x74/0x80 [ 180.878710][ T8164] ? xskq_create+0xb6/0x170 [ 180.883268][ T8164] xskq_create+0xb6/0x170 [ 180.887677][ T8164] xsk_init_queue+0xa1/0x100 [ 180.892360][ T8164] xsk_setsockopt+0x598/0x950 [ 180.897118][ T8164] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.902410][ T8164] ? __pfx_lock_acquire+0x10/0x10 [ 180.907499][ T8164] ? aa_sock_opt_perm+0x79/0x120 [ 180.912510][ T8164] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 180.918129][ T8164] ? security_socket_setsockopt+0x87/0xb0 [ 180.923922][ T8164] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.929180][ T8164] do_sock_setsockopt+0x3af/0x720 [ 180.934318][ T8164] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 180.939922][ T8164] ? __fget_files+0x29/0x470 [ 180.944698][ T8164] ? __fget_files+0x3f6/0x470 [ 180.949501][ T8164] __sys_setsockopt+0x1ae/0x250 [ 180.954446][ T8164] __x64_sys_setsockopt+0xb5/0xd0 [ 180.959549][ T8164] do_syscall_64+0xf3/0x230 [ 180.964119][ T8164] ? clear_bhb_loop+0x35/0x90 [ 180.968875][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.974888][ T8164] RIP: 0033:0x7f30c0377299 [ 180.979372][ T8164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.999042][ T8164] RSP: 002b:00007f30c11dc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.007539][ T8164] RAX: ffffffffffffffda RBX: 00007f30c0505f80 RCX: 00007f30c0377299 [ 181.015592][ T8164] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 181.023654][ T8164] RBP: 00007f30c03e48e6 R08: 0000000000000004 R09: 0000000000000000 [ 181.031684][ T8164] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000 [ 181.039711][ T8164] R13: 000000000000000b R14: 00007f30c0505f80 R15: 00007fff13514038 [ 181.047841][ T8164] [ 181.275981][ T8164] Mem-Info: [ 181.279217][ T8164] active_anon:5127 inactive_anon:0 isolated_anon:0 [ 181.279217][ T8164] active_file:15957 inactive_file:38178 isolated_file:0 [ 181.279217][ T8164] unevictable:768 dirty:64 writeback:0 [ 181.279217][ T8164] slab_reclaimable:8751 slab_unreclaimable:98317 [ 181.279217][ T8164] mapped:20840 shmem:1366 pagetables:835 [ 181.279217][ T8164] sec_pagetables:0 bounce:0 [ 181.279217][ T8164] kernel_misc_reclaimable:0 [ 181.279217][ T8164] free:1375671 free_pcp:513 free_cma:0 [ 181.329390][ T8164] Node 0 active_anon:20608kB inactive_anon:0kB active_file:63828kB inactive_file:152632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83360kB dirty:252kB writeback:0kB shmem:4028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11220kB pagetables:3340kB sec_pagetables:0kB all_unreclaimable? no [ 181.365002][ T8164] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 181.395718][ T8164] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.425791][ T8164] lowmem_reserve[]: 0 2563 2565 0 0 [ 181.431267][ T8164] Node 0 DMA32 free:1539104kB boost:0kB min:35036kB low:43792kB high:52548kB reserved_highatomic:0KB active_anon:20564kB inactive_anon:0kB active_file:63828kB inactive_file:151064kB unevictable:1536kB writepending:252kB present:3129332kB managed:2653356kB mlocked:0kB bounce:0kB free_pcp:2348kB local_pcp:1492kB free_cma:0kB [ 181.566145][ T8164] lowmem_reserve[]: 0 0 1 0 0 [ 181.571447][ T8164] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 181.627758][ T8164] lowmem_reserve[]: 0 0 0 0 0 [ 181.635799][ T8164] Node 1 Normal free:3947440kB boost:0kB min:54844kB low:68552kB high:82260kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.720978][ T8164] lowmem_reserve[]: 0 0 0 0 0 [ 181.744721][ T8164] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 181.794811][ T8164] Node 0 DMA32: 438*4kB (UE) 125*8kB (UME) 621*16kB (UME) 721*32kB (UME) 284*64kB (UME) 56*128kB (UME) 42*256kB (UME) 20*512kB (UME) 12*1024kB (UME) 5*2048kB (ME) 350*4096kB (UM) = 1538224kB [ 181.836969][ T8164] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 181.849926][ T8164] Node 1 Normal: 4*4kB (UM) 10*8kB (UM) 7*16kB (UM) 3*32kB (UM) 2*64kB (U) 6*128kB (U) 3*256kB (UM) 6*512kB (UM) 2*1024kB (U) 2*2048kB (U) 961*4096kB (M) = 3947440kB [ 181.867961][ T8164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.915283][ T8164] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 181.956504][ T8164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.984693][ T8164] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.016407][ T8164] 56301 total pagecache pages [ 182.021170][ T8164] 0 pages in swap cache [ 182.054745][ T8164] Free swap = 124996kB [ 182.060015][ T8164] Total swap = 124996kB [ 182.074697][ T8164] 2097051 pages RAM [ 182.078590][ T8164] 0 pages HighMem/MovableOnly [ 182.103875][ T8164] 402182 pages reserved [ 182.108740][ T8164] 0 pages cma reserved [ 183.254443][ T8200] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.709'. [ 183.622442][ T8207] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.710'. [ 187.414826][ T8278] bond0: entered promiscuous mode [ 187.465577][ T8278] bond_slave_0: entered promiscuous mode [ 187.471563][ T8278] bond_slave_1: entered promiscuous mode [ 187.507401][ T8278] bond0: entered allmulticast mode [ 187.512617][ T8278] bond_slave_0: entered allmulticast mode [ 187.554335][ T8278] bond_slave_1: entered allmulticast mode [ 188.255514][ T8285] syzkaller0: entered promiscuous mode [ 194.465524][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.472016][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.163217][ T8303] netlink: 132 bytes leftover after parsing attributes in process `syz.4.732'. [ 196.184689][ T8308] netlink: 60 bytes leftover after parsing attributes in process `syz.1.734'. [ 196.193680][ T8310] netlink: 'syz.0.733': attribute type 21 has an invalid length. [ 196.202132][ T8310] netlink: 'syz.0.733': attribute type 6 has an invalid length. [ 196.226707][ T8310] netlink: 132 bytes leftover after parsing attributes in process `syz.0.733'. [ 196.282317][ T8315] IPv6: Can't replace route, no match found [ 196.514739][ T5237] Bluetooth: hci2: command 0x0406 tx timeout [ 196.521752][ T5237] Bluetooth: hci4: command 0x0406 tx timeout [ 196.523897][ T5232] Bluetooth: hci0: command 0x0406 tx timeout [ 196.659514][ T8335] netlink: 'syz.2.738': attribute type 10 has an invalid length. [ 196.730477][ T8335] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.738'. [ 196.849669][ T8334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.257519][ T8356] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.745'. [ 198.007884][ T8392] netlink: 'syz.2.754': attribute type 21 has an invalid length. [ 198.054672][ T8392] netlink: 156 bytes leftover after parsing attributes in process `syz.2.754'. [ 198.445368][ T8414] netlink: 'syz.4.758': attribute type 3 has an invalid length. [ 198.466559][ T8414] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.758'. [ 198.577118][ T8413] netlink: 'syz.3.757': attribute type 2 has an invalid length. [ 198.701897][ T8420] netlink: 'syz.4.759': attribute type 280 has an invalid length. [ 198.886690][ T8425] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.760'. [ 199.174742][ T8434] netlink: 60 bytes leftover after parsing attributes in process `syz.2.763'. [ 199.185059][ T8434] netlink: 60 bytes leftover after parsing attributes in process `syz.2.763'. [ 199.926533][ T8461] netlink: 'syz.4.771': attribute type 2 has an invalid length. [ 199.950451][ T8461] netlink: 'syz.4.771': attribute type 11 has an invalid length. [ 200.191043][ T8475] syz_tun: refused to change device tx_queue_len [ 202.145829][ T8524] __nla_validate_parse: 2 callbacks suppressed [ 202.145851][ T8524] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.787'. [ 203.039624][ T8545] netlink: 'syz.3.795': attribute type 10 has an invalid length. [ 203.064342][ T8545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.795'. [ 203.100917][ T8545] : entered promiscuous mode [ 203.105857][ T8545] : entered allmulticast mode [ 203.112663][ T8545] bridge0: port 3(5) entered blocking state [ 203.119573][ T8545] bridge0: port 3(5) entered disabled state [ 203.142045][ T8545] A link change request failed with some changes committed already. Interface 5 may have been left with an inconsistent configuration, please check. [ 203.210413][ T8563] netlink: 'syz.3.795': attribute type 10 has an invalid length. [ 203.230342][ T8563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.795'. [ 203.242950][ T8563] bridge0: port 3(5) entered blocking state [ 203.249814][ T8563] bridge0: port 3(5) entered disabled state [ 203.260060][ T8563] A link change request failed with some changes committed already. Interface 5 may have been left with an inconsistent configuration, please check. [ 203.277863][ T8565] macsec0: left promiscuous mode [ 203.643077][ T8579] netlink: 'syz.2.802': attribute type 3 has an invalid length. [ 203.674445][ T8579] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.802'. [ 203.921224][ T8598] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.806'. [ 204.349628][ T8620] netlink: 'syz.3.813': attribute type 3 has an invalid length. [ 204.368157][ T8620] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 204.383094][ T8620] netlink: 129924 bytes leftover after parsing attributes in process `syz.3.813'. [ 204.828261][ T8640] netlink: 'syz.1.819': attribute type 29 has an invalid length. [ 204.859527][ T8644] netlink: 'syz.1.819': attribute type 29 has an invalid length. [ 205.296144][ T8662] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.822'. [ 205.333584][ T8664] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.823'. [ 205.527013][ T8657] syzkaller0: entered promiscuous mode [ 205.551131][ T8657] syzkaller0: entered allmulticast mode [ 206.113651][ T8688] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.830'. [ 206.743332][ T5234] Bluetooth: hci0: unexpected event 0x01 length: 15 > 1 [ 207.680781][ T8707] netlink: 'syz.4.834': attribute type 23 has an invalid length. [ 207.999918][ T8725] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.838'. [ 208.358420][ T8740] raw_sendmsg: syz.4.843 forgot to set AF_INET. Fix it! [ 208.428664][ T8746] netlink: 'syz.2.844': attribute type 28 has an invalid length. [ 208.438954][ T8746] netlink: 'syz.2.844': attribute type 3 has an invalid length. [ 208.445540][ T8747] netlink: 'syz.2.844': attribute type 28 has an invalid length. [ 208.449415][ T8746] netlink: 132 bytes leftover after parsing attributes in process `syz.2.844'. [ 208.484777][ T8747] netlink: 'syz.2.844': attribute type 3 has an invalid length. [ 208.494055][ T8747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.844'. [ 208.721633][ T8750] netlink: 'syz.0.846': attribute type 6 has an invalid length. [ 209.021451][ T8760] netlink: 'syz.3.850': attribute type 2 has an invalid length. [ 209.041878][ T8760] netlink: 'syz.3.850': attribute type 8 has an invalid length. [ 209.050491][ T8760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.850'. [ 209.245889][ T8772] netlink: 'syz.1.854': attribute type 3 has an invalid length. [ 209.253672][ T8772] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 209.289475][ T8774] netlink: 'syz.1.854': attribute type 3 has an invalid length. [ 209.313583][ T8775] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.853'. [ 209.321505][ T8774] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.854'. [ 209.344460][ T8772] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.854'. [ 209.673252][ T8789] netlink: 10 bytes leftover after parsing attributes in process `syz.2.859'. [ 210.156660][ T8807] netlink: 168 bytes leftover after parsing attributes in process `syz.4.865'. [ 210.467064][ T8831] netlink: 'syz.2.870': attribute type 11 has an invalid length. [ 210.520411][ T8835] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.869'. [ 210.981381][ T8855] veth1_macvtap: left promiscuous mode [ 210.993101][ T8855] macsec0: entered promiscuous mode [ 211.090099][ T8862] veth1_macvtap: entered promiscuous mode [ 211.099704][ T8862] macsec0: entered allmulticast mode [ 211.105928][ T8862] veth1_macvtap: entered allmulticast mode [ 211.360230][ T8876] veth0_vlan: left promiscuous mode [ 211.369981][ T8876] veth0_vlan: entered promiscuous mode [ 211.523440][ T8876] tap0: tun_chr_ioctl cmd 1074025677 [ 211.576366][ T8876] tap0: linktype set to 780 [ 211.877403][ T5233] Bluetooth: hci1: command 0x0406 tx timeout [ 213.116799][ T8965] __nla_validate_parse: 5 callbacks suppressed [ 213.116820][ T8965] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.903'. [ 213.787497][ T9002] validate_nla: 4 callbacks suppressed [ 213.787518][ T9002] netlink: 'syz.0.911': attribute type 27 has an invalid length. [ 213.831362][ T9002] netlink: 'syz.0.911': attribute type 3 has an invalid length. [ 213.839538][ T9002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.911'. [ 214.920202][ T9023] netlink: 'syz.0.917': attribute type 13 has an invalid length. [ 214.945947][ T9023] veth0_macvtap: left promiscuous mode [ 214.968318][ T9023] macvtap0: entered allmulticast mode [ 214.992735][ T9023] macvtap0: refused to change device tx_queue_len [ 215.198083][ T9042] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.920'. [ 215.712956][ T9073] netlink: 133820 bytes leftover after parsing attributes in process `syz.0.929'. [ 215.753489][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 217.172026][ T9103] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.938'. [ 217.245840][ T9116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.942'. [ 217.408910][ T9130] netlink: 'syz.2.945': attribute type 33 has an invalid length. [ 217.727420][ T5234] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 217.829526][ T9137] delete_channel: no stack [ 218.380422][ T9170] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.956'. [ 219.256595][ T9213] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.966'. [ 219.328998][ T9215] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.967'. [ 219.598174][ T9218] netlink: 'syz.1.968': attribute type 4 has an invalid length. [ 219.635504][ T9218] netlink: 'syz.1.968': attribute type 1 has an invalid length. [ 219.666272][ T9223] syz.4.969[9223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.666386][ T9223] syz.4.969[9223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.667001][ T9218] netlink: 88156 bytes leftover after parsing attributes in process `syz.1.968'. [ 219.697337][ T9223] syz.4.969[9223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.040961][ T9233] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.972'. [ 220.304802][ T9247] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 220.341890][ T9247] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.976'. [ 220.677382][ T9241] syzkaller0: entered promiscuous mode [ 220.682904][ T9241] syzkaller0: entered allmulticast mode [ 221.179291][ T9268] syz.3.982[9268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.179982][ T9268] syz.3.982[9268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.666081][ T9276] netlink: 'syz.2.985': attribute type 3 has an invalid length. [ 221.685337][ T9276] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.985'. [ 223.469407][ T9260] tun0: tun_chr_ioctl cmd 2147767521 [ 223.583147][ T9287] netlink: 'syz.2.988': attribute type 39 has an invalid length. [ 224.171161][ T9310] netlink: 'syz.3.995': attribute type 21 has an invalid length. [ 224.221155][ T9310] netlink: 'syz.3.995': attribute type 20 has an invalid length. [ 224.250500][ T9310] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.639225][ T9330] netlink: 'syz.3.1001': attribute type 17 has an invalid length. [ 224.682755][ T9330] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1001'. [ 224.853207][ T9330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.054449][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.075318][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.091371][ T1124] bond0 (unregistering): Released all slaves [ 226.117008][ T9345] netlink: 'syz.4.1006': attribute type 11 has an invalid length. [ 226.139046][ T9350] netlink: 'syz.1.1008': attribute type 17 has an invalid length. [ 226.164980][ T9350] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1008'. [ 226.234378][ T9370] netlink: 'syz.0.1014': attribute type 4 has an invalid length. [ 226.243427][ T9370] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1014'. [ 227.020525][ T9394] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1022'. [ 227.032868][ T9392] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1021'. [ 227.358242][ T1124] hsr_slave_0: left promiscuous mode [ 227.419916][ T1124] hsr_slave_1: left promiscuous mode [ 227.441753][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.467026][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.505285][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.533121][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.698974][ T9418] netlink: 'syz.0.1028': attribute type 2 has an invalid length. [ 227.712515][ T1124] veth1_macvtap: left promiscuous mode [ 227.728208][ T9418] netlink: 187100 bytes leftover after parsing attributes in process `syz.0.1028'. [ 227.734719][ T1124] veth0_macvtap: left promiscuous mode [ 227.754776][ T1124] veth1_vlan: left promiscuous mode [ 227.760747][ T1124] veth0_vlan: left promiscuous mode [ 228.733175][ T9453] netlink: 'syz.2.1038': attribute type 1 has an invalid length. [ 228.741589][ T9453] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1038'. [ 228.755702][ T9453] netlink: 'syz.2.1038': attribute type 1 has an invalid length. [ 229.259751][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 229.328277][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 229.731079][ T9425] netlink: 'syz.4.1031': attribute type 21 has an invalid length. [ 229.739493][ T9425] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.752543][ T9425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.759837][ T9425] IPv6: NLM_F_CREATE should be set when creating new route [ 229.767173][ T9425] IPv6: NLM_F_CREATE should be set when creating new route [ 229.774901][ T9425] IPv6: NLM_F_CREATE should be set when creating new route [ 230.613238][ T9503] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1049'. [ 230.623776][ T9503] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1049'. [ 230.639069][ T9503] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1049'. [ 230.919306][ T9523] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1053'. [ 231.110072][ T9534] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1054'. [ 231.313376][ T9539] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1057'. [ 231.330921][ T9539] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 232.308976][ T9570] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1064'. [ 232.421063][ T9568] netlink: 'syz.2.1061': attribute type 10 has an invalid length. [ 232.448035][ T9568] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1061'. [ 232.480692][ T9568] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 232.675810][ T9575] veth1_macvtap: left promiscuous mode [ 232.684841][ T9575] macsec0: entered promiscuous mode [ 233.120095][ T9576] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1066'. [ 233.491535][ T9587] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1068'. [ 234.378443][ T9600] netlink: 'syz.2.1072': attribute type 29 has an invalid length. [ 234.412802][ T9600] netlink: 'syz.2.1072': attribute type 29 has an invalid length. [ 234.437760][ T9600] netlink: 'syz.2.1072': attribute type 29 has an invalid length. [ 234.481557][ T9600] netlink: 'syz.2.1072': attribute type 29 has an invalid length. [ 234.522634][ T9600] netlink: 'syz.2.1072': attribute type 29 has an invalid length. [ 234.565154][ T9600] netlink: 'syz.2.1072': attribute type 29 has an invalid length. [ 235.336968][ T9614] syz.4.1076[9614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.337091][ T9614] syz.4.1076[9614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.619730][ T9629] netlink: 'syz.3.1081': attribute type 10 has an invalid length. [ 235.832742][ T9629] team0: Port device wlan1 added [ 235.864331][ T9632] ªªªªªª: renamed from vlan0 (while UP) [ 235.871328][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.335625][ T9649] netlink: 'syz.0.1086': attribute type 11 has an invalid length. [ 236.343491][ T9649] __nla_validate_parse: 2 callbacks suppressed [ 236.343506][ T9649] netlink: 134768 bytes leftover after parsing attributes in process `syz.0.1086'. [ 236.727166][ T9669] netlink: 'syz.4.1091': attribute type 11 has an invalid length. [ 236.763859][ T9669] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.1091'. [ 236.949760][ T9662] netlink: 'syz.1.1087': attribute type 2 has an invalid length. [ 237.052959][ T9662] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1087'. [ 237.611949][ T9693] netlink: 'syz.2.1100': attribute type 29 has an invalid length. [ 237.645060][ T9693] netlink: 'syz.2.1100': attribute type 29 has an invalid length. [ 237.665402][ T9695] sctp: [Deprecated]: syz.4.1101 (pid 9695) Use of int in max_burst socket option deprecated. [ 237.665402][ T9695] Use struct sctp_assoc_value instead [ 237.691304][ T9693] netlink: 'syz.2.1100': attribute type 29 has an invalid length. [ 237.718809][ T9693] netlink: 'syz.2.1100': attribute type 29 has an invalid length. [ 237.761168][ T9693] netlink: 'syz.2.1100': attribute type 29 has an invalid length. [ 237.823133][ T9693] netlink: 'syz.2.1100': attribute type 29 has an invalid length. [ 238.183032][ T9707] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 238.616480][ T9725] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1110'. [ 238.657009][ T9727] netlink: 'syz.1.1107': attribute type 10 has an invalid length. [ 238.847390][ T9727] vlan0: entered promiscuous mode [ 238.853195][ T9727] vlan0: entered allmulticast mode [ 238.934413][ T9727] team0: Port device vlan0 added [ 239.019095][ T9729] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1111'. [ 239.040044][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.049039][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.075236][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.098402][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.111282][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 239.120774][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.748172][ T9749] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1116'. [ 239.869358][ T9749] netlink: zone id is out of range [ 239.899531][ T9749] netlink: zone id is out of range [ 239.922556][ T9749] netlink: zone id is out of range [ 239.943595][ T9749] netlink: zone id is out of range [ 239.970545][ T9749] netlink: zone id is out of range [ 240.007133][ T9749] netlink: zone id is out of range [ 240.029011][ T9749] netlink: zone id is out of range [ 240.053829][ T9749] netlink: zone id is out of range [ 240.078939][ T9749] netlink: zone id is out of range [ 240.103926][ T9749] netlink: zone id is out of range [ 241.178462][ T5234] Bluetooth: hci3: command tx timeout [ 242.778296][ T9763] syzkaller0: entered promiscuous mode [ 242.783824][ T9763] syzkaller0: entered allmulticast mode [ 242.961852][ T9769] netlink: 'syz.1.1119': attribute type 3 has an invalid length. [ 242.987185][ T9769] netlink: 'syz.1.1119': attribute type 4 has an invalid length. [ 242.996346][ T9769] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 243.004463][ T9769] netlink: 88156 bytes leftover after parsing attributes in process `syz.1.1119'. [ 243.249127][ T5234] Bluetooth: hci3: command tx timeout [ 243.966606][ T9797] netlink: 'syz.3.1127': attribute type 3 has an invalid length. [ 243.978200][ T9797] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1127'. [ 245.130504][ T9795] netlink: 'syz.0.1126': attribute type 10 has an invalid length. [ 245.139368][ T9795] bond0: (slave wlan1): Opening slave failed [ 245.321024][ T5234] Bluetooth: hci3: command tx timeout [ 245.347301][ T9806] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1129'. [ 245.419746][ T9817] netlink: 'syz.1.1131': attribute type 3 has an invalid length. [ 245.458313][ T9817] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1131'. [ 245.473372][ T9811] net_ratelimit: 163 callbacks suppressed [ 245.473390][ T9811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.499743][ T9733] chnl_net:caif_netlink_parms(): no params data found [ 245.568008][ T9818] pim6reg1: entered promiscuous mode [ 245.593743][ T9818] pim6reg1: entered allmulticast mode [ 245.953119][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.988661][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.004851][ T9733] bridge_slave_0: entered allmulticast mode [ 246.014441][ T9733] bridge_slave_0: entered promiscuous mode [ 246.024659][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.032324][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.051744][ T9733] bridge_slave_1: entered allmulticast mode [ 246.076388][ T9733] bridge_slave_1: entered promiscuous mode [ 246.160742][ T9846] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1139'. [ 246.211665][ T9733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.319362][ T9733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.372751][ T9854] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1141'. [ 246.399244][ T9855] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1140'. [ 246.420551][ T9854] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 246.446135][ T9855] nbd: must specify at least one socket [ 246.568175][ T9857] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1142'. [ 246.586697][ T9733] team0: Port device team_slave_0 added [ 246.598175][ T9733] team0: Port device team_slave_1 added [ 246.708972][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.724129][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.753642][ T9733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.767432][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.774424][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.814264][ T9733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.861823][ T9865] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 246.870988][ T9865] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1146'. [ 246.880289][ T9865] bridge0: port 4(bond0) entered blocking state [ 246.888139][ T9865] bridge0: port 4(bond0) entered disabled state [ 246.899520][ T9865] bridge0: port 4(bond0) entered blocking state [ 246.906049][ T9865] bridge0: port 4(bond0) entered forwarding state [ 246.961522][ T9733] hsr_slave_0: entered promiscuous mode [ 246.969139][ T9733] hsr_slave_1: entered promiscuous mode [ 246.981052][ T9733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.989473][ T9733] Cannot create hsr debugfs directory [ 247.237339][ T9733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.375775][ T9884] netlink: 133820 bytes leftover after parsing attributes in process `syz.2.1152'. [ 247.387108][ T9733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.407622][ T5234] Bluetooth: hci3: command tx timeout [ 247.510670][ T9733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.676274][ T9733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.931633][ T9901] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 247.961676][ T9733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.028751][ T9733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.041884][ T9733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.064078][ T9733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.488555][ T9733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.513050][ T9919] __nla_validate_parse: 3 callbacks suppressed [ 248.513067][ T9919] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1164'. [ 248.554345][ T9920] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1164'. [ 248.658714][ T9733] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.691487][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.698823][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.747839][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.755150][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.391375][ T9944] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1170'. [ 249.722989][ T9733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.876629][ T5234] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 250.653800][ T9733] veth0_vlan: entered promiscuous mode [ 250.716029][ T9733] veth1_vlan: entered promiscuous mode [ 250.842787][ T9995] syzkaller0: entered promiscuous mode [ 250.852528][ T9995] syzkaller0: entered allmulticast mode [ 250.904434][ T9733] veth0_macvtap: entered promiscuous mode [ 250.922508][ T9733] veth1_macvtap: entered promiscuous mode [ 250.970836][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.981578][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.997043][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.013161][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.027772][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.041203][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.056966][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.326702][T10020] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1186'. [ 251.337199][T10017] can: request_module (can-proto-0) failed. [ 251.352199][T10020] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1186'. [ 252.839531][ T5234] Bluetooth: hci5: command 0x0406 tx timeout [ 252.889390][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.901257][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.912716][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.925412][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.937625][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.949582][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.961593][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.981187][T10019] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1184'. [ 253.014470][ T9733] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.023599][ T9733] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.041913][ T9733] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.052252][ T9733] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.300521][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.344841][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.438874][ T7006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.484639][ T7006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.998528][T10059] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1198'. [ 254.176714][T10064] netlink: 'syz.0.1199': attribute type 2 has an invalid length. [ 254.190445][T10064] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1199'. [ 254.248587][T10064] netlink: 'syz.0.1199': attribute type 6 has an invalid length. [ 254.287201][T10064] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1199'. [ 254.422079][T10074] netlink: 'syz.3.1200': attribute type 12 has an invalid length. [ 254.471060][T10074] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1200'. [ 254.677567][T10081] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1201'. [ 255.036562][T10082] netlink: 'syz.2.1202': attribute type 2 has an invalid length. [ 255.104991][T10082] netlink: 'syz.2.1202': attribute type 1 has an invalid length. [ 255.123664][T10082] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1202'. [ 255.879302][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.886985][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.002359][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 256.365279][T10124] syzkaller0: entered promiscuous mode [ 256.371556][T10124] syzkaller0: entered allmulticast mode [ 256.390273][T10130] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1215'. [ 256.955639][T10155] syz.0.1225[10155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.955773][T10155] syz.0.1225[10155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.308003][T10166] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1229'. [ 258.390209][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1223'. [ 258.772931][T10196] netlink: 'syz.4.1237': attribute type 10 has an invalid length. [ 258.808270][T10196] bridge0: port 3(syz_tun) entered blocking state [ 258.815760][T10196] bridge0: port 3(syz_tun) entered disabled state [ 258.843769][T10196] syz_tun: entered allmulticast mode [ 258.867626][T10196] syz_tun: entered promiscuous mode [ 258.897921][T10196] bridge0: port 3(syz_tun) entered blocking state [ 258.904573][T10196] bridge0: port 3(syz_tun) entered forwarding state [ 259.105121][T10216] netlink: 'syz.1.1242': attribute type 3 has an invalid length. [ 259.144976][T10216] __nla_validate_parse: 1 callbacks suppressed [ 259.145016][T10216] netlink: 196520 bytes leftover after parsing attributes in process `syz.1.1242'. [ 259.666749][T10217] syz.1.1242 (10217) used greatest stack depth: 17616 bytes left [ 259.951255][T10229] delete_channel: no stack [ 260.292197][T10256] netlink: 'syz.4.1252': attribute type 9 has an invalid length. [ 260.301792][T10256] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1252'. [ 260.451516][T10258] netlink: 'syz.0.1251': attribute type 3 has an invalid length. [ 263.161715][T10244] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1248'. [ 263.174747][T10266] netlink: 'syz.3.1254': attribute type 11 has an invalid length. [ 263.185596][T10266] netlink: 'syz.3.1254': attribute type 5 has an invalid length. [ 263.254648][T10257] netlink: 'syz.4.1252': attribute type 9 has an invalid length. [ 263.283133][T10257] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1252'. [ 263.555604][ T5233] Bluetooth: hci5: unexpected event 0x31 length: 15 > 6 [ 263.800476][T10289] bridge0: left allmulticast mode [ 263.884448][T10289] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.891689][T10289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.923640][T10289] bridge0: entered promiscuous mode [ 263.935241][T10289] bridge0: entered allmulticast mode [ 264.147612][T10315] netlink: 'syz.4.1266': attribute type 10 has an invalid length. [ 264.171165][T10315] netlink: 'syz.4.1266': attribute type 16 has an invalid length. [ 264.195082][T10315] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1266'. [ 264.327108][T10321] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1268'. [ 264.458747][T10320] netlink: 'syz.1.1270': attribute type 16 has an invalid length. [ 264.495672][T10320] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1270'. [ 264.537882][T10320] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 264.562820][T10320] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 264.981990][T10347] netlink: 'syz.2.1276': attribute type 3 has an invalid length. [ 265.005159][T10347] netlink: 179952 bytes leftover after parsing attributes in process `syz.2.1276'. [ 265.261492][T10345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.427844][T10353] netlink: 'syz.3.1277': attribute type 21 has an invalid length. [ 265.466539][T10353] netlink: 'syz.3.1277': attribute type 1 has an invalid length. [ 265.678154][T10357] netlink: 'syz.1.1278': attribute type 11 has an invalid length. [ 265.704111][T10363] netlink: 'syz.2.1281': attribute type 29 has an invalid length. [ 265.714152][T10357] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.1278'. [ 265.779532][T10357] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1278'. [ 265.983982][T10376] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1283'. [ 266.078460][T10379] 7’ç÷ï: renamed from syzkaller0 [ 266.711051][T10395] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1291'. [ 267.392271][T10422] sit0: entered allmulticast mode [ 267.487547][T10425] sit0: entered promiscuous mode [ 268.330391][T10433] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1299'. [ 268.572003][T10450] netlink: 'syz.1.1305': attribute type 3 has an invalid length. [ 268.617494][T10450] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 268.646536][T10450] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1305'. [ 269.537763][T10467] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.1310'. [ 269.698487][T10472] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.1311'. [ 270.365875][T10507] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1320'. [ 271.980139][T10552] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1332'. [ 272.835471][T10588] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1342'. [ 272.882942][T10588] team0: default FDB implementation only supports local addresses [ 273.100578][T10604] netlink: 'syz.0.1347': attribute type 7 has an invalid length. [ 273.207153][T10602] netlink: 'syz.2.1346': attribute type 3 has an invalid length. [ 273.238379][T10602] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1346'. [ 273.262185][T10613] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1348'. [ 273.397441][T10616] pim6reg1: entered promiscuous mode [ 273.642189][T10628] netlink: 'syz.1.1354': attribute type 10 has an invalid length. [ 273.697662][T10628] bridge0: port 3(team0) entered disabled state [ 273.763440][T10628] team0: left allmulticast mode [ 273.791535][T10628] team_slave_0: left allmulticast mode [ 273.825723][T10628] team_slave_1: left allmulticast mode [ 273.831393][T10628] vlan0: left allmulticast mode [ 273.914866][T10628] team0: left promiscuous mode [ 273.919751][T10628] team_slave_0: left promiscuous mode [ 273.973018][T10628] team_slave_1: left promiscuous mode [ 274.009790][T10628] vlan0: left promiscuous mode [ 274.039584][T10628] bridge0: port 3(team0) entered disabled state [ 274.102768][T10628] batman_adv: batadv0: Adding interface: team0 [ 274.138675][T10628] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.221252][T10628] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 274.340657][T10645] bond0: entered promiscuous mode [ 274.351148][T10645] bond_slave_0: entered promiscuous mode [ 274.370121][T10645] bond_slave_1: entered promiscuous mode [ 274.395995][T10645] bond0: entered allmulticast mode [ 274.420314][T10645] bond_slave_0: entered allmulticast mode [ 274.444845][T10645] bond_slave_1: entered allmulticast mode [ 274.609899][T10661] netlink: 'syz.2.1363': attribute type 21 has an invalid length. [ 274.638382][T10661] netlink: 'syz.2.1363': attribute type 1 has an invalid length. [ 274.691468][T10661] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1363'. [ 274.998336][T10664] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1364'. [ 275.760150][ T5233] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 275.765950][T10697] netlink: 'syz.4.1373': attribute type 3 has an invalid length. [ 275.790763][T10697] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1373'. [ 276.466205][T10724] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1380'. [ 276.588419][T10722] netlink: 'syz.1.1381': attribute type 25 has an invalid length. [ 276.598775][T10722] netlink: 'syz.1.1381': attribute type 7 has an invalid length. [ 276.937375][T10737] netlink: 'syz.1.1385': attribute type 2 has an invalid length. [ 276.973077][T10737] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1385'. [ 277.209181][T10742] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.1386'. [ 277.224911][T10742] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1386'. [ 277.972168][T10756] tap0: tun_chr_ioctl cmd 1074025677 [ 277.985745][T10756] tap0: linktype set to 823 [ 279.742279][T10795] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1400'. [ 280.324272][T10805] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1401'. [ 280.354877][T10805] team0: default FDB implementation only supports local addresses [ 280.698113][ T5233] Bluetooth: hci5: unexpected event 0x30 length: 15 > 3 [ 280.896685][T10817] netlink: 'syz.0.1404': attribute type 9 has an invalid length. [ 281.019509][T10817] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1404'. [ 281.070308][T10817] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1404'. [ 281.193728][T10809] netlink: 'syz.1.1402': attribute type 12 has an invalid length. [ 281.274857][T10809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1402'. [ 282.148465][T10843] netlink: 'syz.2.1410': attribute type 4 has an invalid length. [ 282.175184][T10843] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1410'. [ 282.588198][T10844] veth0_vlan: entered allmulticast mode [ 283.823448][T10874] netlink: 'syz.2.1417': attribute type 21 has an invalid length. [ 283.860596][T10875] netlink: 'syz.4.1418': attribute type 21 has an invalid length. [ 283.889603][T10875] netlink: 'syz.4.1418': attribute type 21 has an invalid length. [ 283.925896][T10875] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1418'. [ 284.206851][T10882] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1419'. [ 284.225426][T10875] netlink: 'syz.4.1418': attribute type 21 has an invalid length. [ 284.264366][T10875] netlink: 'syz.4.1418': attribute type 21 has an invalid length. [ 284.318697][T10875] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1418'. [ 284.344268][T10890] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1416'. [ 285.330909][T10909] netlink: 'syz.0.1425': attribute type 33 has an invalid length. [ 285.395532][ T5233] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6 [ 285.555434][T10911] netlink: 'syz.3.1428': attribute type 1 has an invalid length. [ 285.594936][T10911] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1428'. [ 286.836571][T10941] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1435'. [ 288.011529][T10957] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1441'. [ 288.789483][T10962] netlink: 'syz.0.1444': attribute type 29 has an invalid length. [ 288.857127][T10963] netlink: 'syz.0.1444': attribute type 29 has an invalid length. [ 288.925731][T10962] netlink: 'syz.0.1444': attribute type 29 has an invalid length. [ 288.935095][T10962] netlink: 'syz.0.1444': attribute type 29 has an invalid length. [ 290.242149][T10981] netlink: 'syz.4.1448': attribute type 28 has an invalid length. [ 290.294263][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.317035][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.329178][T10985] netlink: 'syz.4.1448': attribute type 3 has an invalid length. [ 290.337702][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.345216][T10985] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1448'. [ 290.361895][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.372056][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 290.387846][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.270643][T10997] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1451'. [ 291.972274][T10983] chnl_net:caif_netlink_parms(): no params data found [ 292.514780][ T5234] Bluetooth: hci0: command tx timeout [ 292.691786][T10983] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.700505][T10983] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.725247][T10983] bridge_slave_0: entered allmulticast mode [ 292.757506][T10983] bridge_slave_0: entered promiscuous mode [ 292.800367][T10983] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.854864][T10983] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.885150][T10983] bridge_slave_1: entered allmulticast mode [ 292.893790][T10983] bridge_slave_1: entered promiscuous mode [ 293.468953][T10983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.505708][T11027] bridge0: port 3(syz_tun) entered disabled state [ 293.514760][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.528928][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.591495][T11027] bridge0: entered allmulticast mode [ 293.708478][T10983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.908492][T11030] netlink: 'syz.0.1460': attribute type 28 has an invalid length. [ 293.938175][T10983] team0: Port device team_slave_0 added [ 293.972854][T11030] netlink: 'syz.0.1460': attribute type 3 has an invalid length. [ 293.986324][T10983] team0: Port device team_slave_1 added [ 294.026398][T11030] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1460'. [ 294.126825][T10983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.144602][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.220935][T10983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.277159][T11042] netlink: 'syz.1.1462': attribute type 29 has an invalid length. [ 294.359320][T11046] netlink: 'syz.1.1462': attribute type 29 has an invalid length. [ 294.419819][T10983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.436205][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.551254][T10983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.597776][ T5234] Bluetooth: hci0: command tx timeout [ 294.709713][T11042] netlink: 'syz.1.1462': attribute type 29 has an invalid length. [ 295.219069][T11046] netlink: 'syz.1.1462': attribute type 29 has an invalid length. [ 295.319293][T11059] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1464'. [ 295.465631][T10983] hsr_slave_0: entered promiscuous mode [ 295.539707][T10983] hsr_slave_1: entered promiscuous mode [ 295.574603][T10983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.582306][T10983] Cannot create hsr debugfs directory [ 296.674776][ T5234] Bluetooth: hci0: command tx timeout [ 296.743052][T10983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.915572][T10983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.965207][T11091] netlink: 'syz.1.1475': attribute type 28 has an invalid length. [ 297.009265][T11091] netlink: 'syz.1.1475': attribute type 3 has an invalid length. [ 297.043181][T11091] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1475'. [ 297.098572][T10983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.233477][T10983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.525603][ T5234] Bluetooth: hci1: ISO packet for unknown connection handle 1342 [ 297.788208][T10983] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 297.836528][T10983] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 297.949866][T10983] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 298.041451][T10983] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 298.184627][T11120] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1479'. [ 298.755777][ T5234] Bluetooth: hci0: command tx timeout [ 299.528564][T11138] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1486'. [ 299.598994][T10983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.916799][T10983] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.976435][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.983633][ T5304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.082158][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.089395][ T5224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.355605][T11159] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1491'. [ 300.397492][T10983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.022283][T11173] veth1_macvtap: left allmulticast mode [ 302.029035][T11173] veth1_macvtap: left promiscuous mode [ 302.035957][T11173] macsec0: left promiscuous mode [ 302.040936][T11173] macsec0: left allmulticast mode [ 302.062633][T11174] veth1_macvtap: entered promiscuous mode [ 302.085183][T11174] macsec0: entered promiscuous mode [ 302.090623][T11174] macsec0: entered allmulticast mode [ 302.103479][T11174] veth1_macvtap: entered allmulticast mode [ 302.277080][T10983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.421494][T11189] netlink: 105108 bytes leftover after parsing attributes in process `syz.0.1495'. [ 302.509901][T11189] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 302.545983][T11184] can: request_module (can-proto-5) failed. [ 302.656413][T10983] veth0_vlan: entered promiscuous mode [ 302.837562][T10983] veth1_vlan: entered promiscuous mode [ 302.991375][T10983] veth0_macvtap: entered promiscuous mode [ 303.029472][T10983] veth1_macvtap: entered promiscuous mode [ 303.137960][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.190436][T11205] syz.1.1499[11205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.190555][T11205] syz.1.1499[11205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.220731][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.263777][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.278681][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.289501][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.298692][T11205] syz.1.1499[11205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.313468][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.347245][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.359622][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.380616][ T5234] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 303.381177][T10983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.405583][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.416826][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.426796][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.437338][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.447353][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.462758][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.474275][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.490747][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.503565][T10983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.550711][T10983] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.581736][T10983] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.612529][T10983] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.630175][T10983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.362266][T11232] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1506'. [ 304.417167][ T7004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.445992][ T7004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.598291][T11242] netlink: 'syz.4.1508': attribute type 6 has an invalid length. [ 304.618248][T11242] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1508'. [ 304.741929][ T6969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.765200][ T6969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.001333][T11247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.159916][T11254] [ 305.162295][T11254] ====================================================== [ 305.169331][T11254] WARNING: possible circular locking dependency detected [ 305.176358][T11254] 6.10.0-syzkaller-04559-g7d30b8aa4fc3 #0 Not tainted [ 305.183220][T11254] ------------------------------------------------------ [ 305.190256][T11254] syz.0.1512/11254 is trying to acquire lock: [ 305.196338][T11254] ffff8880172de418 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb0/0x1470 [ 305.205190][T11254] [ 305.205190][T11254] but task is already holding lock: [ 305.212567][T11254] ffff8880b9238798 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_released+0x83/0x620 [ 305.222366][T11254] [ 305.222366][T11254] which lock already depends on the new lock. [ 305.222366][T11254] [ 305.232803][T11254] [ 305.232803][T11254] the existing dependency chain (in reverse order) is: [ 305.241815][T11254] [ 305.241815][T11254] -> #2 (lock#10){+.+.}-{2:2}: [ 305.248795][T11254] lock_acquire+0x1ed/0x550 [ 305.253825][T11254] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 305.261026][T11254] stack_map_get_build_id_offset+0x9af/0x9d0 [ 305.267538][T11254] __bpf_get_stack+0x4ad/0x5a0 [ 305.272829][T11254] bpf_get_stack_raw_tp+0x1a3/0x240 [ 305.278549][T11254] bpf_prog_8e0e2561a5fce473+0x3b/0x6a [ 305.284526][T11254] bpf_trace_run2+0x2ec/0x540 [ 305.289810][T11254] trace_tlb_flush+0x118/0x140 [ 305.295114][T11254] switch_mm_irqs_off+0x7cb/0xae0 [ 305.300680][T11254] __schedule+0x1079/0x4a60 [ 305.305712][T11254] preempt_schedule_common+0x84/0xd0 [ 305.311530][T11254] preempt_schedule+0xe1/0xf0 [ 305.316734][T11254] preempt_schedule_thunk+0x1a/0x30 [ 305.322459][T11254] unwind_next_frame+0x2124/0x2a00 [ 305.328109][T11254] __unwind_start+0x641/0x7c0 [ 305.333325][T11254] arch_stack_walk+0x103/0x1b0 [ 305.338615][T11254] stack_trace_save+0x118/0x1d0 [ 305.344001][T11254] kasan_save_track+0x3f/0x80 [ 305.349215][T11254] __kasan_slab_alloc+0x66/0x80 [ 305.354598][T11254] kmem_cache_alloc_noprof+0x135/0x2a0 [ 305.360625][T11254] getname_flags+0xb7/0x540 [ 305.365651][T11254] __x64_sys_rename+0x6a/0x90 [ 305.370852][T11254] do_syscall_64+0xf3/0x230 [ 305.375883][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.382316][T11254] [ 305.382316][T11254] -> #1 (&rq->__lock){-.-.}-{2:2}: [ 305.389613][T11254] lock_acquire+0x1ed/0x550 [ 305.394635][T11254] _raw_spin_lock_nested+0x31/0x40 [ 305.400274][T11254] raw_spin_rq_lock_nested+0x2a/0x140 [ 305.406185][T11254] task_fork_fair+0x61/0x1e0 [ 305.411304][T11254] sched_cgroup_fork+0x37c/0x410 [ 305.416777][T11254] copy_process+0x2217/0x3dc0 [ 305.421989][T11254] kernel_clone+0x226/0x8f0 [ 305.427024][T11254] user_mode_thread+0x132/0x1a0 [ 305.432405][T11254] rest_init+0x23/0x300 [ 305.437085][T11254] start_kernel+0x47a/0x500 [ 305.442206][T11254] x86_64_start_reservations+0x2a/0x30 [ 305.448190][T11254] x86_64_start_kernel+0x99/0xa0 [ 305.453648][T11254] common_startup_64+0x13e/0x147 [ 305.459109][T11254] [ 305.459109][T11254] -> #0 (&p->pi_lock){-.-.}-{2:2}: [ 305.466419][T11254] validate_chain+0x18e0/0x5900 [ 305.471793][T11254] __lock_acquire+0x1346/0x1fd0 [ 305.477177][T11254] lock_acquire+0x1ed/0x550 [ 305.482201][T11254] _raw_spin_lock_irqsave+0xd5/0x120 [ 305.488004][T11254] try_to_wake_up+0xb0/0x1470 [ 305.493197][T11254] rcu_read_unlock_special+0x3db/0x550 [ 305.499172][T11254] __rcu_read_unlock+0xa1/0x110 [ 305.504549][T11254] __mmap_lock_do_trace_released+0x1f2/0x620 [ 305.511063][T11254] exc_page_fault+0x7a2/0x8c0 [ 305.516282][T11254] asm_exc_page_fault+0x26/0x30 [ 305.521762][T11254] fault_in_readable+0x165/0x2b0 [ 305.527223][T11254] fault_in_iov_iter_readable+0x229/0x280 [ 305.533464][T11254] generic_perform_write+0x220/0x640 [ 305.539289][T11254] shmem_file_write_iter+0xfc/0x120 [ 305.545034][T11254] vfs_write+0xa72/0xc90 [ 305.549811][T11254] ksys_write+0x1a0/0x2c0 [ 305.554670][T11254] do_syscall_64+0xf3/0x230 [ 305.559708][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.566129][T11254] [ 305.566129][T11254] other info that might help us debug this: [ 305.566129][T11254] [ 305.576551][T11254] Chain exists of: [ 305.576551][T11254] &p->pi_lock --> &rq->__lock --> lock#10 [ 305.576551][T11254] [ 305.588204][T11254] Possible unsafe locking scenario: [ 305.588204][T11254] [ 305.595652][T11254] CPU0 CPU1 [ 305.601039][T11254] ---- ---- [ 305.606416][T11254] lock(lock#10); [ 305.610169][T11254] lock(&rq->__lock); [ 305.616766][T11254] lock(lock#10); [ 305.623100][T11254] lock(&p->pi_lock); [ 305.627169][T11254] [ 305.627169][T11254] *** DEADLOCK *** [ 305.627169][T11254] [ 305.635310][T11254] 5 locks held by syz.0.1512/11254: [ 305.640500][T11254] #0: ffff8880299d65c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 305.649729][T11254] #1: ffff88805e300420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 305.658630][T11254] #2: ffff888011c1e4c0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x83/0x120 [ 305.669785][T11254] #3: ffff88802f06b118 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 305.679712][T11254] #4: ffff8880b9238798 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_released+0x83/0x620 [ 305.689818][T11254] [ 305.689818][T11254] stack backtrace: [ 305.695697][T11254] CPU: 0 PID: 11254 Comm: syz.0.1512 Not tainted 6.10.0-syzkaller-04559-g7d30b8aa4fc3 #0 [ 305.705530][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 305.715596][T11254] Call Trace: [ 305.718879][T11254] [ 305.721812][T11254] dump_stack_lvl+0x241/0x360 [ 305.726506][T11254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.731725][T11254] ? print_circular_bug+0x130/0x1a0 [ 305.736938][T11254] check_noncircular+0x36a/0x4a0 [ 305.741906][T11254] ? mark_lock+0x9a/0x350 [ 305.746242][T11254] ? mark_lock+0x9a/0x350 [ 305.750578][T11254] ? __pfx_check_noncircular+0x10/0x10 [ 305.756177][T11254] ? lockdep_lock+0x123/0x2b0 [ 305.760866][T11254] ? __lock_acquire+0x1346/0x1fd0 [ 305.765900][T11254] validate_chain+0x18e0/0x5900 [ 305.770773][T11254] ? perf_trace_lock+0x136/0x490 [ 305.775744][T11254] ? __pfx_validate_chain+0x10/0x10 [ 305.780948][T11254] ? validate_chain+0x11e/0x5900 [ 305.785896][T11254] ? __pfx_perf_trace_lock+0x10/0x10 [ 305.791217][T11254] ? page_ext_put+0x97/0xc0 [ 305.795735][T11254] ? handle_pte_fault+0x50a8/0x7090 [ 305.800958][T11254] ? __pfx_validate_chain+0x10/0x10 [ 305.806166][T11254] ? __pfx_lock_release+0x10/0x10 [ 305.811203][T11254] ? __page_table_check_ptes_set+0x30f/0x410 [ 305.817193][T11254] ? mark_lock+0x9a/0x350 [ 305.821528][T11254] __lock_acquire+0x1346/0x1fd0 [ 305.826405][T11254] lock_acquire+0x1ed/0x550 [ 305.830911][T11254] ? try_to_wake_up+0xb0/0x1470 [ 305.835777][T11254] ? __pfx_lock_acquire+0x10/0x10 [ 305.840825][T11254] ? mark_lock+0x9a/0x350 [ 305.845170][T11254] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 305.851170][T11254] ? kernfs_path_from_node+0x235/0xb00 [ 305.856636][T11254] _raw_spin_lock_irqsave+0xd5/0x120 [ 305.861929][T11254] ? try_to_wake_up+0xb0/0x1470 [ 305.866807][T11254] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 305.872712][T11254] try_to_wake_up+0xb0/0x1470 [ 305.877415][T11254] ? rcu_read_unlock_special+0x12b/0x550 [ 305.883054][T11254] ? __pfx_try_to_wake_up+0x10/0x10 [ 305.888258][T11254] ? get_mm_memcg_path+0x36c/0x600 [ 305.893386][T11254] rcu_read_unlock_special+0x3db/0x550 [ 305.898846][T11254] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 305.904835][T11254] ? get_mm_memcg_path+0x1b0/0x600 [ 305.909992][T11254] __rcu_read_unlock+0xa1/0x110 [ 305.914851][T11254] __mmap_lock_do_trace_released+0x1f2/0x620 [ 305.920839][T11254] ? __mmap_lock_do_trace_released+0x83/0x620 [ 305.926917][T11254] exc_page_fault+0x7a2/0x8c0 [ 305.931605][T11254] asm_exc_page_fault+0x26/0x30 [ 305.936473][T11254] RIP: 0010:fault_in_readable+0x165/0x2b0 [ 305.942198][T11254] Code: b4 ff 4c 8d b3 ff 0f 00 00 48 89 d8 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 6b e8 35 d7 b4 ff 4c 39 f3 74 6e 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 305.961803][T11254] RSP: 0018:ffffc9000dad7a00 EFLAGS: 00050287 [ 305.967866][T11254] RAX: ffffffff81e1868b RBX: 000000002000a000 RCX: 0000000000040000 [ 305.975836][T11254] RDX: ffffc9000460a000 RSI: 0000000000002042 RDI: 0000000000002043 [ 305.983803][T11254] RBP: ffffc9000dad7ab8 R08: ffffffff81e18628 R09: ffffffff84adca99 [ 305.991771][T11254] R10: 0000000000000002 R11: ffff888060781e00 R12: 0000000000001000 [ 305.999741][T11254] R13: dffffc0000000000 R14: 000000002000b000 R15: 1ffff92001b5af48 [ 306.007716][T11254] ? fault_in_iov_iter_readable+0x49/0x280 [ 306.013528][T11254] ? fault_in_readable+0xf8/0x2b0 [ 306.018555][T11254] ? fault_in_readable+0x15b/0x2b0 [ 306.023673][T11254] ? __pfx_fault_in_readable+0x10/0x10 [ 306.029138][T11254] ? folio_unlock+0x126/0x2f0 [ 306.033814][T11254] ? inode_to_bdi+0x69/0xf0 [ 306.038323][T11254] fault_in_iov_iter_readable+0x229/0x280 [ 306.044066][T11254] generic_perform_write+0x220/0x640 [ 306.049381][T11254] ? __pfx_generic_perform_write+0x10/0x10 [ 306.055210][T11254] ? mnt_put_write_access_file+0xc2/0x100 [ 306.060939][T11254] ? file_update_time+0x3b8/0x430 [ 306.065971][T11254] shmem_file_write_iter+0xfc/0x120 [ 306.071185][T11254] vfs_write+0xa72/0xc90 [ 306.075442][T11254] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 306.081272][T11254] ? __pfx_vfs_write+0x10/0x10 [ 306.086043][T11254] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 306.092215][T11254] ksys_write+0x1a0/0x2c0 [ 306.096558][T11254] ? lockdep_hardirqs_on+0x99/0x150 [ 306.101790][T11254] ? __pfx_ksys_write+0x10/0x10 [ 306.106661][T11254] do_syscall_64+0xf3/0x230 [ 306.111177][T11254] ? clear_bhb_loop+0x35/0x90 [ 306.115857][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.121760][T11254] RIP: 0033:0x7fb289777299 [ 306.126175][T11254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.145783][T11254] RSP: 002b:00007fb28a4b3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 306.154202][T11254] RAX: ffffffffffffffda RBX: 00007fb289905f80 RCX: 00007fb289777299 [ 306.162180][T11254] RDX: 0000000020000992 RSI: 0000000020000980 RDI: 000000000000000e [ 306.170157][T11254] RBP: 00007fb2897e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 306.178130][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.186100][T11254] R13: 000000000000000b R14: 00007fb289905f80 R15: 00007ffe910f1268 [ 306.194084][T11254]