last executing test programs: 3.221428987s ago: executing program 1: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000002b00)={&(0x7f0000000740)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x48000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xfc, 0x5, 0x0, 0x8c, 0x0, 0x1, 0x21900, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000480), 0x2}, 0x410, 0x800, 0x101, 0x0, 0xffffffff, 0xffff, 0x3, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90b24fc60100004000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xff, 0x1f, 0x6, 0x92, 0x0, 0xffff, 0x81560, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf2, 0x0, @perf_config_ext={0xff, 0x7}, 0x1004, 0x4, 0xfc000000, 0x2, 0x4, 0x3f, 0xfffc, 0x0, 0x7, 0x0, 0xc3}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0xa, 0x0, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000000)=0x80000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r7) write$cgroup_pid(r7, &(0x7f0000000400), 0x20000412) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000440)={'wg1\x00', 0x800}) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x23, 0x0, 0xc) sendmsg$kcm(r3, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000300)}, 0x810) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 2.771646393s ago: executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1c, 0xf, &(0x7f0000000340)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @printk={@ld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102000, 0x0, 0xfffffffd}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x13}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0), 0x4) r6 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r6, &(0x7f0000000200)={[{0x0, 'cpuset'}]}, 0x8) r8 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r8, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) close(r3) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0x4, 0xb, 0x5d1f66b7eaac1973, 0x20}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x1, 0x6, 0x80000000, 0xfffffffb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x5, 0x5, 0x6, 0x8}, {0x3, 0x3, 0x1, 0x4}, {0x0, 0x3, 0x0, 0xa}, {0x3, 0x1, 0xd, 0x2}, {0x3, 0x4, 0x2, 0xa}, {0x1, 0x2, 0x1, 0x4}, {0x4, 0x3, 0xd, 0xf}, {0x0, 0x3, 0x7, 0x7}], 0x10, 0xfffffffb}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000340)=r10, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)=@llc={0x1a, 0x110, 0xfb, 0x8, 0x2, 0x1f, @random="2092a889dcd6"}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000006c0)="2119efea92a3a23a6c223ceee55357167929b70bb4d939f5bc2ab9695c9aead04eb89b98a22b44bc2ed0956187b1fb9be596d8fb278d44241e4ebbdb75accbba11b38c69f4243aec15485bf17a9f97fdc78c95468b5bb290f4f80c65b1e48463529b7ccde418e1684bfe715bc12c8405709e20eec7b07eb3e6542a793856692ceb98c383adc443547f4ae4464ede84b08d538d89d37f89445ebc019940f6638a85f9028ff7bfbbcfa6d3d0edd85800d0779b572cb85f6bc60f23f843ced5cc6d0b1eddaccc41a045bdd750d3504aac9f29e46f79463d146250642ed72b7d5197efc5fedd3f200ac39ba80f42b070a4dbe304e2b7686d", 0xf6}, {&(0x7f00000007c0)="4c07df5a95cf88287c04c6470efdd90f704dbb03af9be03e74759e78465bb4b3a057dd9a3a0e3cd1ab91619389b95f1b7ad433b304a797c1df80fb267f2a4276f3646d4055c80c9f25d05df9327eadace6e55461f9e7b4839b92fe7fdc31223d8c112194c326c2ec5c87f85cfc7e5bbd9c395f4553ed7053949e667d6e1125f24cd6260dd28b1c71cb652f0d6110fa69bfaef362ff5e562f067a5ec277469b5ad5", 0xa1}, {&(0x7f0000000440)="6cf63a035f146fd480346897dda8e59d5afcb3ab16d67c414f1c01df8f58b63fe0f452b9f12f915aa5bdeecdf2b967378b68d83b5f3341b728b5a35f01b1", 0x3e}, {&(0x7f0000000880)="d0a9f160cb4057790369a224680a92485b3025dc4b7793dd368cdb0fb2574597cdf3c9a6b59d06ec4ee6dd05e595e776141d676e6656029c9d041a0771975ed7dc1d90fd9bbc2d589b93833b0bb45f521fc15c2370d5d602581e096588bd2ca2fb7aa07cf05650de0c53e2dd99dae6eeca1084386ab87d8cdb08898291906dc2ef09cd728524a122169d44797bf674ebd9a0eca3673bd296f13a85760695fa30243c28ee2d4091c12a40f588ad5ed8096e70b349c68cbc51862f49249b24a02eba7009bc706f82fd645be4b6c7cacdd56abdc799a6a0", 0xd6}, {&(0x7f0000000980)="2860a4435ac922be4e4f28e4ba9422b767", 0x11}], 0x5, &(0x7f0000000ac0)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x18}, 0x1) 2.768800765s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x7b}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x48) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$kcm(0x2, 0x1, 0x84) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="13100000660091ef"], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)="3f81e570ef573d6d3fcf2ca7241f1a685f83129fbf10a5249f920e57bf8fa92ec5d70172044d4cff341f5a4b67d36aae766e0b66f308269aad91832eb46d0de962e9948f515132aa68f38981424ef37c235d7ab77ee994cfbdb3c761f4dcefa2641b146e870a9b55", 0x68}, {0x0}, {&(0x7f0000000a00)="875e00e59511ef8a70a72ef66e4ae51b22d80f6cbd6cb7c9aa8d68d3621fc439d032fa561a789dc3d2facf510803f3c1756b4ffe07b483d8ebda68f93db4e1e792b5075d6284a61a7251326bad9eda4f3e1195583687baae273c6698eed9dd925603815da56d895a3cd0eeb63c90c623b290a24b56305cb4502fd768c9010dbba23e6118b6e078aa22bc64394cc5f52aff36fc7b1affa4ee8246cd1fa16450ebfb287fe0b521d24e7554aab414452e4d07782a903d124b1eb86a37447c3dd3229fc53235da001f4082040ff3db3f6c7f306eeb0b4a58", 0xd6}], 0x3, &(0x7f0000000b00)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x44, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}, {@loopback, 0x10001}, {@empty}, {@local, 0x2}, {@remote, 0xd7}, {@multicast1, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @multicast2}}}], 0xc0}, 0xc001) unlink(&(0x7f0000000080)='./cgroup\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 2.488254766s ago: executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100f01f20060000000000002020207b1af8ff00000000bfa10300000000000701030000000000008500"/73], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xffe6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x34100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_freezer_state(r5, &(0x7f0000000140)='FREEZING\x00', 0x9) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0xffffffff}, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'ipvlan0\x00', 0x3701}) sendmsg$inet(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8923, 0x20000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_es_find_extent_range_enter\x00', r10}, 0x10) 2.439112315s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9081139343d0189594c952e805fffa1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="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"/913], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xf, &(0x7f0000000240)=@ringbuf, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="2238239555624c55088ba212ebfbe9a25099f484c8fa088e4dd9b941f1736df8413b23337d83e692e33409327ab4cec21c6bdf56ca6eb818a382f9648a2e8b3117b0bc36ac3674b4ac37839d36fa15b89aa829369b3af9f045b5ad2055c4cc83bb542c4593b555dd26a6e4b2be09bb016884e413aae08a324dced1b6305d0047ba5605eedd4222a5b0671635e5ce135624366453e7362ab6e246f2ed48d538c1", 0xa0}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000002000009500000000ecffff260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100fc00142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0)=r5, 0x8) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 2.052817525s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000033850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) 1.926263494s ago: executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0xfffffff7, 0x1, 0x24bc}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x6}, 0x90) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x3, 0x2, 0x23}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0xe740, r0}, 0x38) 1.696101602s ago: executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10001}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 1.599681254s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000147b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=""/200}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_forget\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 1.530743972s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 1.43378824s ago: executing program 4: bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.40247348s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x20, 0x1, 0x1, 0x1, 0x0, 0x4, 0x21000, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x24}, 0x41a, 0x7, 0xffff, 0x6, 0x6, 0x6, 0x8, 0x0, 0xfd, 0x0, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000500)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000002500)={0x0, 0x2a, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1.37017617s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000300000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x23, 0x800, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d40)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='subflow_check_data_avail\x00'}, 0x14) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000240)) sendmsg$tipc(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db", 0x2b}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f3757f0086dd6317ce800000000000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.254920527s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc080661a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 1.240760715s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={0x0, r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_free_blocks\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.220498816s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.10363937s ago: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x56) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xd) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) 1.070916712s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) 1.066292578s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vxcan1\x00', 0xf101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b708000038ba9a7e7b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1e030800dd5c9801288563"], 0xffdd) 864.546472ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000006b113200000000009500000000000000df167050f5c9497e092cdbd18b88bcb06a000000000ffcb9"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a2, &(0x7f0000000080)) 467.462191ms ago: executing program 4: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00f90a0000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000280)=""/188, 0x26, 0xbc, 0x1}, 0x20) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) 452.821445ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000147b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=""/200}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_forget\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 412.855413ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000120000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='track_foreign_dirty\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000240)='THAWED\x00', 0x7) 270.888117ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r3}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 240.738401ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000004850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) 214.582655ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='ext4_fc_track_range\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f00000014c0)=""/4094, 0x0, 0xffe}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 122.245373ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 117.304023ms ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r2}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) 69.762279ms ago: executing program 0: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x13, &(0x7f0000000080), 0x48) 0s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000240), 0x20000000}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='global_dirty_state\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r10, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x3, &(0x7f0000000280)=@raw=[@alu={0x7, 0x0, 0xc, 0xa, 0x0, 0x4, 0x10}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000005c0)=""/195, 0x41100, 0x2, '\x00', r11, 0x7, r12, 0x8, &(0x7f0000000500)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x8, 0xa, 0xfffffffc}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000006c0)=[r6], 0x0, 0x10, 0x6}, 0x90) syz_open_procfs$namespace(0xffffffffffffffff, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts. 2024/05/31 17:30:22 fuzzer started 2024/05/31 17:30:22 dialing manager at 10.128.0.169:30012 [ 56.057715][ T5095] cgroup: Unknown subsys name 'net' [ 56.201449][ T5095] cgroup: Unknown subsys name 'rlimit' 2024/05/31 17:30:24 starting 5 executor processes [ 57.312267][ T5101] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.091540][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.101721][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.110736][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.129985][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.150175][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.150286][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.158743][ T5129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.166371][ T5130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.174821][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.186752][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.189454][ T5131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.194618][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.204442][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.208710][ T5133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.223059][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.223866][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.237750][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.238404][ T5131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.245259][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.252842][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.259223][ T5133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.267186][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.274412][ T5133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.280587][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.289037][ T5133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.295638][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.302168][ T5133] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.321147][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.329014][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.331254][ T5133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.852414][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 58.958999][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 58.991364][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 59.061121][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 59.171121][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 59.181358][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.190273][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.198048][ T5120] bridge_slave_0: entered allmulticast mode [ 59.204913][ T5120] bridge_slave_0: entered promiscuous mode [ 59.263177][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.271320][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.279266][ T5120] bridge_slave_1: entered allmulticast mode [ 59.287308][ T5120] bridge_slave_1: entered promiscuous mode [ 59.304755][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.312018][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.319704][ T5119] bridge_slave_0: entered allmulticast mode [ 59.327240][ T5119] bridge_slave_0: entered promiscuous mode [ 59.334916][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.342136][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.349865][ T5119] bridge_slave_1: entered allmulticast mode [ 59.357385][ T5119] bridge_slave_1: entered promiscuous mode [ 59.364158][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.371761][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.379063][ T5115] bridge_slave_0: entered allmulticast mode [ 59.385943][ T5115] bridge_slave_0: entered promiscuous mode [ 59.457604][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.464728][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.472327][ T5115] bridge_slave_1: entered allmulticast mode [ 59.479742][ T5115] bridge_slave_1: entered promiscuous mode [ 59.507186][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.518821][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.531620][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.576668][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.623849][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.635538][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.643469][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.651048][ T5114] bridge_slave_0: entered allmulticast mode [ 59.658640][ T5114] bridge_slave_0: entered promiscuous mode [ 59.692892][ T5120] team0: Port device team_slave_0 added [ 59.702054][ T5119] team0: Port device team_slave_0 added [ 59.710245][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.720176][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.727707][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.734926][ T5114] bridge_slave_1: entered allmulticast mode [ 59.742209][ T5114] bridge_slave_1: entered promiscuous mode [ 59.760024][ T5120] team0: Port device team_slave_1 added [ 59.766332][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.773470][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.781016][ T5123] bridge_slave_0: entered allmulticast mode [ 59.787936][ T5123] bridge_slave_0: entered promiscuous mode [ 59.797154][ T5119] team0: Port device team_slave_1 added [ 59.803221][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.811006][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.818220][ T5123] bridge_slave_1: entered allmulticast mode [ 59.824896][ T5123] bridge_slave_1: entered promiscuous mode [ 59.913990][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.927066][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.969137][ T5115] team0: Port device team_slave_0 added [ 59.984662][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.992510][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.018913][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.032376][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.039630][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.065643][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.084779][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.092029][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.118084][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.132282][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.143959][ T5115] team0: Port device team_slave_1 added [ 60.172181][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.179283][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.205391][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.230301][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.255082][ T5114] team0: Port device team_slave_0 added [ 60.265043][ T5114] team0: Port device team_slave_1 added [ 60.293157][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.300682][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.326967][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.342117][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.349514][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.376309][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.387073][ T53] Bluetooth: hci2: command tx timeout [ 60.392727][ T5118] Bluetooth: hci3: command tx timeout [ 60.392744][ T5133] Bluetooth: hci0: command tx timeout [ 60.393012][ T5133] Bluetooth: hci4: command tx timeout [ 60.399096][ T53] Bluetooth: hci1: command tx timeout [ 60.442225][ T5120] hsr_slave_0: entered promiscuous mode [ 60.448895][ T5120] hsr_slave_1: entered promiscuous mode [ 60.500113][ T5119] hsr_slave_0: entered promiscuous mode [ 60.506886][ T5119] hsr_slave_1: entered promiscuous mode [ 60.512963][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.520907][ T5119] Cannot create hsr debugfs directory [ 60.531441][ T5123] team0: Port device team_slave_0 added [ 60.540779][ T5123] team0: Port device team_slave_1 added [ 60.547644][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.554597][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.580608][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.593776][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.600797][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.626756][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.723101][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.730315][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.756867][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.770406][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.778885][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.805320][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.886015][ T5115] hsr_slave_0: entered promiscuous mode [ 60.892611][ T5115] hsr_slave_1: entered promiscuous mode [ 60.900163][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.908778][ T5115] Cannot create hsr debugfs directory [ 60.955759][ T5114] hsr_slave_0: entered promiscuous mode [ 60.962090][ T5114] hsr_slave_1: entered promiscuous mode [ 60.971685][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.979702][ T5114] Cannot create hsr debugfs directory [ 60.991621][ T5123] hsr_slave_0: entered promiscuous mode [ 60.997999][ T5123] hsr_slave_1: entered promiscuous mode [ 61.004082][ T5123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.011939][ T5123] Cannot create hsr debugfs directory [ 61.445025][ T5120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.456842][ T5120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.472920][ T5120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.488327][ T5120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.512445][ T5119] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.561269][ T5119] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.583423][ T5119] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.606950][ T5115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.617061][ T5115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.631255][ T5115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.641564][ T5119] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.662133][ T5115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.739965][ T5123] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.762657][ T5123] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.797624][ T5123] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.808393][ T5123] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.870663][ T5114] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.891874][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.906827][ T5114] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.919971][ T5114] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.930918][ T5114] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.038350][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.082269][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.089673][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.115435][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.124549][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.131739][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.189809][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.238572][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.291991][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.300373][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.307648][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.352587][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.359807][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.370533][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.378119][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.415007][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.422413][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.465996][ T5118] Bluetooth: hci3: command tx timeout [ 62.471535][ T53] Bluetooth: hci1: command tx timeout [ 62.477982][ T5118] Bluetooth: hci4: command tx timeout [ 62.480192][ T5133] Bluetooth: hci2: command tx timeout [ 62.483373][ T5118] Bluetooth: hci0: command tx timeout [ 62.517323][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.584938][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.596262][ T5119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.624757][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.638770][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.682778][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.689958][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.712739][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.749301][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.756589][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.844151][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.851355][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.863727][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.870910][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.948422][ T5120] veth0_vlan: entered promiscuous mode [ 62.958994][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.994972][ T5120] veth1_vlan: entered promiscuous mode [ 63.143049][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.170744][ T5120] veth0_macvtap: entered promiscuous mode [ 63.222619][ T5115] veth0_vlan: entered promiscuous mode [ 63.261282][ T5120] veth1_macvtap: entered promiscuous mode [ 63.334172][ T5115] veth1_vlan: entered promiscuous mode [ 63.357422][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.399211][ T5119] veth0_vlan: entered promiscuous mode [ 63.412889][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.433242][ T5119] veth1_vlan: entered promiscuous mode [ 63.450363][ T5120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.459737][ T5120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.469561][ T5120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.478657][ T5120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.499121][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.527049][ T5115] veth0_macvtap: entered promiscuous mode [ 63.565381][ T5115] veth1_macvtap: entered promiscuous mode [ 63.595276][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.607944][ T5119] veth0_macvtap: entered promiscuous mode [ 63.621286][ T5119] veth1_macvtap: entered promiscuous mode [ 63.713301][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.724449][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.742006][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.769427][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.784200][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.806120][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.817528][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.829854][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.846505][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.857502][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.869731][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.892335][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.904177][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.915062][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.925920][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.937674][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.950549][ T5115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.959445][ T5115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.968558][ T5115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.977656][ T5115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.043357][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.054896][ T5119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.059038][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.070733][ T5119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.081283][ T5119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.090350][ T5119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.121850][ T5123] veth0_vlan: entered promiscuous mode [ 64.205254][ T5123] veth1_vlan: entered promiscuous mode [ 64.248460][ T5167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.259521][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.269570][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.283993][ T5167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.325437][ T5114] veth0_vlan: entered promiscuous mode [ 64.369911][ T5169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.380770][ T5169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.394922][ T5114] veth1_vlan: entered promiscuous mode [ 64.472171][ T5123] veth0_macvtap: entered promiscuous mode [ 64.484597][ T5167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.509263][ T5167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.546602][ T53] Bluetooth: hci1: command tx timeout [ 64.546696][ T5133] Bluetooth: hci3: command tx timeout [ 64.552030][ T53] Bluetooth: hci2: command tx timeout [ 64.558135][ T5121] Bluetooth: hci4: command tx timeout [ 64.564560][ T5118] Bluetooth: hci0: command tx timeout [ 64.606662][ T5123] veth1_macvtap: entered promiscuous mode [ 64.702369][ T5205] netlink: 65047 bytes leftover after parsing attributes in process `syz-executor.0'. [ 64.739164][ T5114] veth0_macvtap: entered promiscuous mode [ 64.781985][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.831878][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.842808][ T5114] veth1_macvtap: entered promiscuous mode [ 64.895860][ T5118] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 64.914765][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.946571][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.962053][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.974207][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.985214][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.997317][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.009831][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.029397][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.044888][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.057996][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.071540][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.084855][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.108931][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.129937][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.187967][ T5123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.204405][ T5123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.214664][ T5123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.223902][ T5123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.324780][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.350653][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.400206][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.414210][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.427114][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.438104][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.448966][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.459623][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.472426][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.543208][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.559159][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.571483][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.595377][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.620344][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.636099][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.647013][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.658378][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.691139][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.793878][ T5114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.800993][ T5227] syz-executor.2[5227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.802864][ T5227] syz-executor.2[5227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.804632][ T5114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.870665][ T5114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.879733][ T5114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.894014][ T5230] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 65.911950][ T5230] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.106763][ T5234] sctp: [Deprecated]: syz-executor.1 (pid 5234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.106763][ T5234] Use struct sctp_sack_info instead [ 66.142972][ C1] hrtimer: interrupt took 69108 ns [ 66.161845][ T2409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.207139][ T2409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.334522][ T5169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.369650][ T5169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.557379][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.565299][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.646621][ T5118] Bluetooth: hci3: command tx timeout [ 66.652218][ T53] Bluetooth: hci4: command tx timeout [ 66.652277][ T5124] Bluetooth: hci0: command tx timeout [ 66.657806][ T5118] Bluetooth: hci2: command tx timeout [ 66.663533][ T5133] Bluetooth: hci1: command tx timeout [ 66.918488][ T5245] rose0: tun_chr_ioctl cmd 1074025680 [ 67.035913][ T5169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.058620][ T5250] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 67.094856][ T5169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.103761][ T5254] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 67.116161][ T5250] netlink: 212412 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.135002][ T5254] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.191534][ T5250] net_ratelimit: 2 callbacks suppressed [ 67.191554][ T5250] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 67.585515][ T5271] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 67.791756][ T5279] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.138994][ T5285] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 68.170728][ T5285] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.198427][ T5285] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 69.124822][ T5313] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 69.158657][ T5313] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.240037][ T5321] Zero length message leads to an empty skb [ 69.319270][ T5321] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.384001][ T5321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.621340][ T5334] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 69.682698][ T5334] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.056754][ T5343] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.286113][ T5349] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 70.316273][ T5349] netlink: 24859 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.565016][ T5361] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.951256][ T5375] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.966750][ T5376] syz-executor.0[5376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.966913][ T5376] syz-executor.0[5376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.790212][ T5405] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 71.832127][ T5409] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.842918][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.855902][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.864501][ T5405] netlink: 212412 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.960707][ T5405] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 73.343315][ T5449] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 73.388673][ T5455] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.390324][ T5449] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.452300][ T5457] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 73.524172][ T5457] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.584347][ T5457] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.051181][ T5478] wg2: entered promiscuous mode [ 74.056612][ T5480] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 74.071452][ T5478] wg2: entered allmulticast mode [ 74.109626][ T5480] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 74.133959][ T5481] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 74.170718][ T5480] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 74.197576][ T5480] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 74.246129][ T5480] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 74.271320][ T5480] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 74.288396][ T5487] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 75.458487][ T5534] __nla_validate_parse: 4 callbacks suppressed [ 75.458508][ T5534] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.543636][ T5534] team0: entered promiscuous mode [ 75.582240][ T5541] Driver unsupported XDP return value 0 on prog (id 78) dev N/A, expect packet loss! [ 75.584440][ T5534] team_slave_0: entered promiscuous mode [ 75.608482][ T5534] team_slave_1: entered promiscuous mode [ 75.627535][ T5534] team0: entered allmulticast mode [ 75.653486][ T5534] team_slave_0: entered allmulticast mode [ 75.683645][ T5534] team_slave_1: entered allmulticast mode [ 75.738312][ T5534] bridge0: port 3(team0) entered blocking state [ 75.774382][ T5534] bridge0: port 3(team0) entered disabled state [ 75.868622][ T5534] bridge0: port 3(team0) entered blocking state [ 75.875262][ T5534] bridge0: port 3(team0) entered forwarding state [ 76.950995][ T5579] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.975551][ T1798] cfg80211: failed to load regulatory.db [ 76.983693][ T5579] openvswitch: netlink: Duplicate key (type 0). [ 77.158290][ T5584] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.268966][ T5621] validate_nla: 10 callbacks suppressed [ 78.268984][ T5621] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 78.334131][ T5621] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 78.423489][ T5621] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 78.466897][ T5621] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 78.511068][ T5621] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 78.537307][ T5621] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 78.582612][ T5621] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 78.632333][ T5633] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 79.092258][ T5650] netlink: 15743 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.137499][ T5654] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 79.167563][ T5654] netlink: 92036 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.766961][ T5678] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 79.800856][ T5678] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.003368][ T5689] netlink: 211388 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.226039][ T5701] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 80.893668][ T5725] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.989587][ T5726] netlink: 211388 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.317649][ T5741] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.597242][ T5751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.640744][ T5751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.713416][ T5751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.765852][ T5751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.630790][ T5800] veth0_vlan: entered allmulticast mode [ 82.931680][ T5133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.942376][ T5133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.952407][ T5133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.963938][ T5133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.972914][ T5805] Â: renamed from pim6reg1 [ 82.973044][ T5133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.985531][ T5133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.059419][ T5115] syz-executor.2 (5115) used greatest stack depth: 18576 bytes left [ 83.255610][ T2868] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.448170][ T2868] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.540952][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.563233][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.591690][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.619262][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.730332][ T2868] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.893134][ T2868] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.222194][ T2868] bridge_slave_1: left allmulticast mode [ 84.235868][ T2868] bridge_slave_1: left promiscuous mode [ 84.242833][ T2868] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.305418][ T2868] bridge_slave_0: left allmulticast mode [ 84.346717][ T2868] bridge_slave_0: left promiscuous mode [ 84.352531][ T2868] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.741285][ T5865] validate_nla: 7 callbacks suppressed [ 84.741305][ T5865] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 84.767265][ T5865] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.026502][ T53] Bluetooth: hci1: command tx timeout [ 85.045078][ T2868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.059292][ T2868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.070835][ T2868] bond0 (unregistering): Released all slaves [ 85.091558][ T5857] Â: renamed from pim6reg1 [ 85.134117][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 85.722145][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.748408][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.778635][ T5811] bridge_slave_0: entered allmulticast mode [ 85.831548][ T5811] bridge_slave_0: entered promiscuous mode [ 86.313865][ T5895] tap0: tun_chr_ioctl cmd 1074025677 [ 86.337272][ T5895] tap0: linktype set to 769 [ 86.348998][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.383063][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.418310][ T5811] bridge_slave_1: entered allmulticast mode [ 86.446972][ T5811] bridge_slave_1: entered promiscuous mode [ 86.523759][ T5887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.719384][ T5918] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 86.743187][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.784169][ T2868] hsr_slave_0: left promiscuous mode [ 86.801636][ T2868] hsr_slave_1: left promiscuous mode [ 86.808304][ T2868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.821834][ T2868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.831817][ T2868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.844567][ T2868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.876491][ T2868] veth1_macvtap: left promiscuous mode [ 86.884117][ T2868] veth0_macvtap: left promiscuous mode [ 86.919647][ T2868] veth1_vlan: left promiscuous mode [ 86.929730][ T2868] veth0_vlan: left promiscuous mode [ 87.106180][ T53] Bluetooth: hci1: command tx timeout [ 87.798746][ T2868] team0 (unregistering): Port device team_slave_1 removed [ 87.871570][ T2868] team0 (unregistering): Port device team_slave_0 removed [ 88.565391][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.591364][ T5945] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.618009][ T5945] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.830824][ T5811] team0: Port device team_slave_0 added [ 88.885461][ T5811] team0: Port device team_slave_1 added [ 89.045553][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.072668][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.179531][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.187498][ T53] Bluetooth: hci1: command tx timeout [ 89.210515][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.221870][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.233365][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.243176][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.326399][ T5973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.376811][ T5965] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 89.402587][ T5965] bond0: (slave bond_slave_0): Releasing backup interface [ 89.458914][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.477314][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.513000][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.790243][ T5811] hsr_slave_0: entered promiscuous mode [ 89.806837][ T5989] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 89.831680][ T5811] hsr_slave_1: entered promiscuous mode [ 89.839190][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.853897][ T5811] Cannot create hsr debugfs directory [ 90.278595][ T6009] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.856160][ T6026] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 90.880552][ T6026] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.265907][ T53] Bluetooth: hci1: command tx timeout [ 92.118465][ T5133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.132128][ T5133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.141121][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.148771][ T5133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.160220][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.174065][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.183206][ T5133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.196464][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.243316][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.336717][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.655066][ T6074] syz-executor.1 (6074) used greatest stack depth: 16800 bytes left [ 92.757113][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.017511][ T6103] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.079879][ T6103] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.196709][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.252733][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.259976][ T5195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.358276][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.365571][ T5195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.391655][ T6076] chnl_net:caif_netlink_parms(): no params data found [ 94.306121][ T5133] Bluetooth: hci2: command tx timeout [ 96.385926][ T5133] Bluetooth: hci2: command tx timeout [ 96.849626][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.008093][ T6194] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.040252][ T6194] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.072459][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.082785][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.103526][ T6076] bridge_slave_0: entered allmulticast mode [ 97.131056][ T6076] bridge_slave_0: entered promiscuous mode [ 97.168290][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.175609][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.185249][ T6076] bridge_slave_1: entered allmulticast mode [ 97.208047][ T6076] bridge_slave_1: entered promiscuous mode [ 97.494036][ T6076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.531805][ T6076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.581306][ T6076] team0: Port device team_slave_0 added [ 97.592036][ T6076] team0: Port device team_slave_1 added [ 97.711463][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.766204][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.851210][ T6076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.903897][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.926205][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.995933][ T6076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.071639][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.476898][ T5133] Bluetooth: hci2: command tx timeout [ 98.616739][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.627508][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.638657][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.647664][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.655834][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.674351][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.546377][ T53] Bluetooth: hci2: command tx timeout [ 100.786106][ T53] Bluetooth: hci3: command tx timeout [ 101.063433][ T6076] hsr_slave_0: entered promiscuous mode [ 101.086613][ T6076] hsr_slave_1: entered promiscuous mode [ 101.103115][ T6076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.125579][ T6076] Cannot create hsr debugfs directory [ 101.329456][ T29] audit: type=1800 audit(1717176668.064:2): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1946 res=0 errno=0 [ 101.394466][ T29] audit: type=1804 audit(1717176668.084:3): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3532583642/syzkaller.srDt0r/87/memory.events" dev="sda1" ino=1946 res=1 errno=0 [ 101.401202][ T6234] syzkaller0: entered promiscuous mode [ 101.433933][ T6234] syzkaller0: entered allmulticast mode [ 102.872813][ T53] Bluetooth: hci3: command tx timeout [ 103.174189][ T5811] veth0_vlan: entered promiscuous mode [ 103.273080][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.289216][ T5811] veth1_vlan: entered promiscuous mode [ 103.360937][ T6076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.273476][ T6076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.440229][ T6076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.488814][ T6223] chnl_net:caif_netlink_parms(): no params data found [ 104.511000][ T5811] veth0_macvtap: entered promiscuous mode [ 104.603872][ T6076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.704458][ T5811] veth1_macvtap: entered promiscuous mode [ 104.855503][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.863396][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.871833][ T6223] bridge_slave_0: entered allmulticast mode [ 104.883603][ T6223] bridge_slave_0: entered promiscuous mode [ 104.894408][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.910581][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.933957][ T6223] bridge_slave_1: entered allmulticast mode [ 104.943946][ T6223] bridge_slave_1: entered promiscuous mode [ 104.956378][ T53] Bluetooth: hci3: command tx timeout [ 104.998489][ T6275] netlink: 65047 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.032940][ T6223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.057970][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.104714][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.123386][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.142086][ T6223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.278194][ T6283] netlink: 67516 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.309228][ T6223] team0: Port device team_slave_0 added [ 105.341468][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.361057][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.372946][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.384281][ T6223] team0: Port device team_slave_1 added [ 105.449363][ T6076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.504305][ T6290] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.511668][ T6076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.560399][ T6076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.627367][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.637783][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.650414][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.659584][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.676635][ T6076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.713087][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.733729][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.777666][ T6223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.848689][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.868918][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.935777][ T6223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.127330][ T6223] hsr_slave_0: entered promiscuous mode [ 106.148570][ T6223] hsr_slave_1: entered promiscuous mode [ 106.175758][ T6223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.183388][ T6223] Cannot create hsr debugfs directory [ 106.710677][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.729323][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.829705][ T6223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.978660][ T6223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.001362][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.023514][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.027508][ T53] Bluetooth: hci3: command tx timeout [ 107.069664][ T6223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.200638][ T6223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.348127][ T6076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.434779][ T6076] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.488570][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.495823][ T5195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.537019][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.544842][ T5195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.698273][ T6223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.738483][ T6223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.803780][ T6223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.846427][ T6223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.277699][ T6223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.422120][ T6223] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.500798][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.508063][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.536777][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.544134][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.526705][ T6376] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 110.577514][ T6076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.818718][ T6384] pim6reg1: entered promiscuous mode [ 110.849914][ T6384] pim6reg1: entered allmulticast mode [ 110.907603][ T6076] veth0_vlan: entered promiscuous mode [ 110.973872][ T6076] veth1_vlan: entered promiscuous mode [ 111.102169][ T6076] veth0_macvtap: entered promiscuous mode [ 111.123798][ T6223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.139870][ T6076] veth1_macvtap: entered promiscuous mode [ 111.182731][ T6394] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 111.194962][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.204173][ T6394] netlink: 209096 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.219495][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.229839][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.240754][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.254751][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.304310][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.332049][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.373948][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.393175][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.411007][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.448695][ T6076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.467713][ T6076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.479411][ T6076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.495851][ T6076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.584378][ T6223] veth0_vlan: entered promiscuous mode [ 111.651189][ T6223] veth1_vlan: entered promiscuous mode [ 111.862964][ T6223] veth0_macvtap: entered promiscuous mode [ 111.900454][ T5165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.915204][ T5165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.941797][ T6223] veth1_macvtap: entered promiscuous mode [ 112.011415][ T6414] pim6reg1: entered promiscuous mode [ 112.018507][ T6414] pim6reg1: entered allmulticast mode [ 112.059759][ T2409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.077663][ T2409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.089292][ T6417] pim6reg1: entered promiscuous mode [ 112.094695][ T6417] pim6reg1: entered allmulticast mode [ 112.143020][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.179688][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.189671][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.200361][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.210685][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.222070][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.237798][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.343572][ T6421] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.368408][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.394927][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.414042][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.429029][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.454781][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.490633][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.536944][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.572907][ T6223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.587669][ T6223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.611151][ T6223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.646948][ T6223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.940448][ T6439] pim6reg1: entered promiscuous mode [ 112.970681][ T6439] pim6reg1: entered allmulticast mode [ 113.196180][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.241229][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.384268][ T6451] pim6reg1: entered promiscuous mode [ 113.391536][ T6451] pim6reg1: entered allmulticast mode [ 113.429487][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.456580][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.635446][ T6497] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 114.645498][ T6492] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 114.687275][ T6497] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.687513][ T6492] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.080418][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 115.576939][ T6541] tap0: tun_chr_ioctl cmd 1074025677 [ 115.582687][ T6541] tap0: linktype set to 778 [ 115.694401][ T6543] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 115.713484][ T6543] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.762519][ T6550] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 115.836229][ T6550] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.959802][ T6559] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.080965][ T6563] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 116.106550][ T6563] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.938988][ T6588] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 117.028040][ T6591] tap0: tun_chr_ioctl cmd 1074025677 [ 117.033570][ T6591] tap0: linktype set to 778 [ 117.168024][ T6597] tap0: tun_chr_ioctl cmd 1074025677 [ 117.173552][ T6597] tap0: linktype set to 778 [ 117.282737][ T6592] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 117.324972][ T6592] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.642594][ T6604] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 117.666052][ T6604] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.981711][ T6622] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.032210][ T6622] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.685532][ T6655] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 118.751914][ T6655] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.755521][ T53] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 118.788990][ T6652] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.022989][ T6667] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 119.049421][ T6667] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.527561][ T6684] netlink: 105120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.428348][ T6708] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.713923][ T6718] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 120.739856][ T6718] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 120.763058][ T6717] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 120.974416][ T6728] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 121.704561][ T6747] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.734770][ T6747] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.038328][ T6761] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 122.055012][ T6761] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 123.392661][ T6799] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 123.413311][ T6799] __nla_validate_parse: 3 callbacks suppressed [ 123.413331][ T6799] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.678001][ T6810] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 123.690621][ T6810] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.930001][ T6843] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.852267][ T6867] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 125.863480][ T6867] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.143767][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.155132][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.289561][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.297079][ T6878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.304738][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.312109][ T6878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.353172][ T6878] bridge0: entered promiscuous mode [ 126.365807][ T6878] bridge0: entered allmulticast mode [ 126.524488][ T6884] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.557016][ T6884] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.586222][ T6889] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.613389][ T6884] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.649946][ T6884] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.913436][ T6899] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 127.290076][ T6910] netlink: zone id is out of range [ 127.302406][ T6910] netlink: set zone limit has 8 unknown bytes [ 127.433474][ T6912] netlink: zone id is out of range [ 127.442825][ T6912] netlink: set zone limit has 8 unknown bytes [ 127.786016][ T6920] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.925412][ T6925] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 127.950140][ T6925] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 127.977513][ T6925] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 128.017204][ T6925] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 128.045870][ T6925] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 128.167095][ T6936] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 128.470088][ T6949] __nla_validate_parse: 6 callbacks suppressed [ 128.470113][ T6949] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.493348][ T6949] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.520268][ T6949] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.559273][ T6949] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.624082][ T6958] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.861124][ T6962] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 128.905181][ T6967] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 128.921896][ T6962] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 128.940146][ T6967] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 129.046848][ T6971] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.086248][ T6971] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.476022][ T6989] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.540480][ T6989] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.595616][ T6989] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.835453][ T7012] syzkaller0: entered promiscuous mode [ 130.842515][ T7012] syzkaller0: entered allmulticast mode [ 133.280334][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.292184][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.442762][ T7033] validate_nla: 13 callbacks suppressed [ 133.442780][ T7033] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 133.584202][ T7060] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 133.611495][ T7060] __nla_validate_parse: 8 callbacks suppressed [ 133.611513][ T7060] netlink: 9482 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.771002][ T7076] netlink: 1010 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.786815][ T7074] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 133.795998][ T7075] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 133.805858][ T7075] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.816618][ T7074] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.828487][ T7076] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 134.147837][ T7089] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 134.174695][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.017186][ T7110] netlink: 1010 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.036721][ T7110] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 135.068892][ T7114] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 135.163070][ T7119] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.361807][ T7134] netlink: 94588 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.392406][ T7132] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 135.453307][ T7132] netlink: 17267 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.837843][ T7145] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 135.867264][ T7145] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 135.963904][ T7145] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 136.086034][ T7152] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.242126][ T7160] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.284631][ T7160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.292308][ T7160] IPv6: NLM_F_CREATE should be set when creating new route [ 136.299746][ T7160] IPv6: NLM_F_CREATE should be set when creating new route [ 136.307059][ T7160] IPv6: NLM_F_CREATE should be set when creating new route [ 138.023037][ T7216] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.921075][ T7247] validate_nla: 10 callbacks suppressed [ 138.921094][ T7247] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 138.955804][ T7247] __nla_validate_parse: 14 callbacks suppressed [ 138.955826][ T7247] netlink: 17267 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.006199][ T7250] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 139.028458][ T7250] netlink: 'syz-executor.0': attribute type 20 has an invalid length. [ 139.049623][ T7250] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.061687][ T7251] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 139.075815][ T7251] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 139.097267][ T7251] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.412661][ T7261] netlink: 'syz-executor.0': attribute type 153 has an invalid length. [ 139.425940][ T7261] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 139.482588][ T7261] netlink: 104088 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.517922][ T7264] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.532454][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.544338][ T7264] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.846293][ T7272] netlink: 4079 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.881702][ T7276] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 139.897606][ T7276] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 139.909129][ T7276] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.032130][ T7281] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 140.042140][ T7281] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.090134][ T7277] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.108609][ T7277] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.156071][ T7277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.163311][ T7277] IPv6: NLM_F_CREATE should be set when creating new route [ 140.170648][ T7277] IPv6: NLM_F_CREATE should be set when creating new route [ 140.177956][ T7277] IPv6: NLM_F_CREATE should be set when creating new route [ 140.200492][ T7285] veth0_vlan: entered allmulticast mode [ 140.430382][ T7296] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.524824][ T7285] netlink: 112865 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.857624][ T7339] bridge0: port 3(bond0) entered blocking state [ 141.917009][ T7339] bridge0: port 3(bond0) entered disabled state [ 141.923734][ T7339] bond0: entered allmulticast mode [ 141.946646][ T7339] bond_slave_0: entered allmulticast mode [ 141.952495][ T7339] bond_slave_1: entered allmulticast mode [ 141.976941][ T7339] bond0: entered promiscuous mode [ 141.982322][ T7339] bond_slave_0: entered promiscuous mode [ 141.988826][ T7339] bond_slave_1: entered promiscuous mode [ 141.998382][ T7339] bridge0: port 3(bond0) entered blocking state [ 142.005059][ T7339] bridge0: port 3(bond0) entered forwarding state [ 142.500269][ T7368] syz-executor.3[7368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.500620][ T7368] syz-executor.3[7368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.571566][ T7372] vxcan1: entered promiscuous mode [ 143.347455][ T7382] syzkaller0: entered promiscuous mode [ 143.370449][ T7382] syzkaller0: entered allmulticast mode [ 143.561910][ T7400] [ 143.564287][ T7400] ====================================================== [ 143.571287][ T7400] WARNING: possible circular locking dependency detected [ 143.578391][ T7400] 6.9.0-syzkaller-12125-g9dfdb706e164 #0 Not tainted [ 143.585038][ T7400] ------------------------------------------------------ [ 143.592118][ T7400] syz-executor.3/7400 is trying to acquire lock: [ 143.598416][ T7400] ffff8880b9529430 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18a/0x790 [ 143.607049][ T7400] [ 143.607049][ T7400] but task is already holding lock: [ 143.614392][ T7400] ffff8880b952a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 143.623247][ T7400] [ 143.623247][ T7400] which lock already depends on the new lock. [ 143.623247][ T7400] [ 143.633625][ T7400] [ 143.633625][ T7400] the existing dependency chain (in reverse order) is: [ 143.642613][ T7400] [ 143.642613][ T7400] -> #1 (&base->lock){-.-.}-{2:2}: [ 143.649973][ T7400] lock_acquire+0x1ed/0x550 [ 143.654994][ T7400] _raw_spin_lock_irqsave+0xd5/0x120 [ 143.660802][ T7400] lock_timer_base+0x112/0x240 [ 143.666068][ T7400] __mod_timer+0x1ca/0xeb0 [ 143.670982][ T7400] queue_delayed_work_on+0x1ca/0x390 [ 143.676780][ T7400] kvfree_call_rcu+0x47f/0x790 [ 143.682048][ T7400] rtnl_register_internal+0x482/0x590 [ 143.688007][ T7400] rtnl_register+0x36/0x80 [ 143.692924][ T7400] ip_rt_init+0x2f6/0x3a0 [ 143.697848][ T7400] ip_init+0xe/0x20 [ 143.702154][ T7400] inet_init+0x3d8/0x580 [ 143.706898][ T7400] do_one_initcall+0x248/0x880 [ 143.712166][ T7400] do_initcall_level+0x157/0x210 [ 143.717702][ T7400] do_initcalls+0x3f/0x80 [ 143.722535][ T7400] kernel_init_freeable+0x435/0x5d0 [ 143.728241][ T7400] kernel_init+0x1d/0x2b0 [ 143.733075][ T7400] ret_from_fork+0x4b/0x80 [ 143.738010][ T7400] ret_from_fork_asm+0x1a/0x30 [ 143.743275][ T7400] [ 143.743275][ T7400] -> #0 (krc.lock){..-.}-{2:2}: [ 143.750287][ T7400] validate_chain+0x18e0/0x5900 [ 143.755644][ T7400] __lock_acquire+0x1346/0x1fd0 [ 143.760991][ T7400] lock_acquire+0x1ed/0x550 [ 143.765992][ T7400] _raw_spin_lock+0x2e/0x40 [ 143.770996][ T7400] kvfree_call_rcu+0x18a/0x790 [ 143.776260][ T7400] trie_delete_elem+0x546/0x6a0 [ 143.781609][ T7400] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 143.787580][ T7400] bpf_trace_run2+0x2ec/0x540 [ 143.792761][ T7400] enqueue_timer+0x3ce/0x570 [ 143.797865][ T7400] __mod_timer+0xa0e/0xeb0 [ 143.802792][ T7400] sk_reset_timer+0x23/0xc0 [ 143.807796][ T7400] tipc_sk_finish_conn+0x16b/0x820 [ 143.813496][ T7400] tipc_socketpair+0x25c/0x4b0 [ 143.818782][ T7400] __sys_socketpair+0x40f/0x720 [ 143.824149][ T7400] __x64_sys_socketpair+0x9b/0xb0 [ 143.829676][ T7400] do_syscall_64+0xf3/0x230 [ 143.834679][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.841073][ T7400] [ 143.841073][ T7400] other info that might help us debug this: [ 143.841073][ T7400] [ 143.851403][ T7400] Possible unsafe locking scenario: [ 143.851403][ T7400] [ 143.858866][ T7400] CPU0 CPU1 [ 143.864242][ T7400] ---- ---- [ 143.869622][ T7400] lock(&base->lock); [ 143.873684][ T7400] lock(krc.lock); [ 143.880093][ T7400] lock(&base->lock); [ 143.886680][ T7400] lock(krc.lock); [ 143.890466][ T7400] [ 143.890466][ T7400] *** DEADLOCK *** [ 143.890466][ T7400] [ 143.898601][ T7400] 2 locks held by syz-executor.3/7400: [ 143.904049][ T7400] #0: ffff8880b952a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 143.913339][ T7400] #1: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 143.922716][ T7400] [ 143.922716][ T7400] stack backtrace: [ 143.928593][ T7400] CPU: 1 PID: 7400 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-12125-g9dfdb706e164 #0 [ 143.938548][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 143.948604][ T7400] Call Trace: [ 143.951878][ T7400] [ 143.954801][ T7400] dump_stack_lvl+0x241/0x360 [ 143.959561][ T7400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.964743][ T7400] ? print_circular_bug+0x130/0x1a0 [ 143.969923][ T7400] check_noncircular+0x36a/0x4a0 [ 143.974842][ T7400] ? __pfx_check_noncircular+0x10/0x10 [ 143.980281][ T7400] ? lockdep_lock+0x123/0x2b0 [ 143.984942][ T7400] ? mark_lock+0x9a/0x350 [ 143.989443][ T7400] validate_chain+0x18e0/0x5900 [ 143.994306][ T7400] ? __pfx_validate_chain+0x10/0x10 [ 143.999548][ T7400] ? stack_depot_save_flags+0x6e4/0x830 [ 144.005106][ T7400] ? do_raw_spin_lock+0x14f/0x370 [ 144.010146][ T7400] ? __pfx_lock_release+0x10/0x10 [ 144.015179][ T7400] ? do_raw_spin_unlock+0x13c/0x8b0 [ 144.020898][ T7400] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 144.026807][ T7400] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 144.033136][ T7400] ? stack_trace_save+0x118/0x1d0 [ 144.038165][ T7400] ? mark_lock+0x9a/0x350 [ 144.042507][ T7400] __lock_acquire+0x1346/0x1fd0 [ 144.047389][ T7400] lock_acquire+0x1ed/0x550 [ 144.051903][ T7400] ? kvfree_call_rcu+0x18a/0x790 [ 144.056845][ T7400] ? __pfx_lock_acquire+0x10/0x10 [ 144.061857][ T7400] ? __phys_addr+0xba/0x170 [ 144.066345][ T7400] _raw_spin_lock+0x2e/0x40 [ 144.070829][ T7400] ? kvfree_call_rcu+0x18a/0x790 [ 144.075748][ T7400] kvfree_call_rcu+0x18a/0x790 [ 144.080495][ T7400] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 144.086370][ T7400] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 144.091655][ T7400] ? longest_prefix_match+0x49f/0x650 [ 144.097013][ T7400] trie_delete_elem+0x546/0x6a0 [ 144.101865][ T7400] ? bpf_trace_run2+0x1fc/0x540 [ 144.106705][ T7400] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 144.112147][ T7400] bpf_trace_run2+0x2ec/0x540 [ 144.116814][ T7400] ? __pfx_bpf_trace_run2+0x10/0x10 [ 144.121996][ T7400] ? __pfx_debug_object_activate+0x10/0x10 [ 144.127807][ T7400] ? __lock_acquire+0x1346/0x1fd0 [ 144.132816][ T7400] enqueue_timer+0x3ce/0x570 [ 144.137409][ T7400] __mod_timer+0xa0e/0xeb0 [ 144.141841][ T7400] ? __pfx___mod_timer+0x10/0x10 [ 144.146855][ T7400] ? __pfx_lock_acquire+0x10/0x10 [ 144.151863][ T7400] ? net_generic+0x1f/0x240 [ 144.156370][ T7400] ? __pfx_lock_release+0x10/0x10 [ 144.161386][ T7400] sk_reset_timer+0x23/0xc0 [ 144.165871][ T7400] tipc_sk_finish_conn+0x16b/0x820 [ 144.170992][ T7400] tipc_socketpair+0x25c/0x4b0 [ 144.176039][ T7400] ? bpf_lsm_socket_socketpair+0x9/0x10 [ 144.181581][ T7400] __sys_socketpair+0x40f/0x720 [ 144.186507][ T7400] ? __pfx___sys_socketpair+0x10/0x10 [ 144.191859][ T7400] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.197821][ T7400] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.204128][ T7400] ? do_syscall_64+0x100/0x230 [ 144.208870][ T7400] __x64_sys_socketpair+0x9b/0xb0 [ 144.213878][ T7400] do_syscall_64+0xf3/0x230 [ 144.218357][ T7400] ? clear_bhb_loop+0x35/0x90 [ 144.223115][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.228996][ T7400] RIP: 0033:0x7ff43be7cee9 [ 144.233399][ T7400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 144.252993][ T7400] RSP: 002b:00007ff43cb1f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 144.261390][ T7400] RAX: ffffffffffffffda RBX: 00007ff43bfb3fa0 RCX: 00007ff43be7cee9 [ 144.269344][ T7400] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 144.277309][ T7400] RBP: 00007ff43bec947f R08: 0000000000000000 R09: 0000000000000000 [ 144.285262][ T7400] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000000 [ 144.293217][ T7400] R13: 000000000000000b R14: 00007ff43bfb3fa0 R15: 00007fffbfd27f18 [ 144.301219][ T7400] 2024/05/31 17:31:51 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF