last executing test programs: 15.391224159s ago: executing program 2 (id=432): r0 = socket$kcm(0x18, 0x0, 0x2) close(r0) (async, rerun: 64) r1 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="210000000400000009000000af2245228f2b06d7", @ANYRES32=r2, @ANYBLOB="0400"/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02000000040000000300"/28], 0x50) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d4a}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000700)=ANY=[@ANYRESHEX=r0], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff51}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r7, 0x24, 0x0, 0xffff, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x120) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000000000000181000"/27, @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180)=r11, 0x17e) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r11, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) socketpair(0x9, 0x1, 0x47, &(0x7f00000004c0)) (async, rerun: 64) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000050000000000000003000004060000000a0000000500000005000000058304699e0ae211cb0000000500000003000000070000000e0000000000000c03040000005f006100"], &(0x7f00000002c0)=""/96, 0x59, 0x60, 0x0, 0x2}, 0x28) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x1ff, '\x00', r12, r13, 0x5, 0x5}, 0x50) (async) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001640)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000000c0)="87", 0x1}], 0x1}, 0x851) 15.095277252s ago: executing program 2 (id=436): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x62}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7fffffff}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x4}]}, @restrict={0x893}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}, @float={0x6, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000200)=""/1, 0x7f, 0x1, 0x0, 0xa, 0x10000}, 0x28) r6 = getpid() r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x61, 0x5, 0x9, 0x0, 0x0, 0x9, 0x1e008, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x4, @perf_config_ext={0x7ff, 0x7}, 0x2, 0x5, 0x1b9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x7, 0x0, 0x6}, r6, 0x4, r7, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7, '\x00', r4, r5, 0x3, 0x1, 0x4}, 0x50) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000005"], 0x30}, 0x0) 14.859149232s ago: executing program 2 (id=442): r0 = gettid() (async) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x81, 0x8, 0x7, 0x0, 0x4a6, 0x4000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x8, 0x7, 0x9, 0x6, 0xfbb5, 0x7, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x6, &(0x7f00000000c0)='-,+-.\x00'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0xb3c1) r2 = getpid() perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x81, 0x2, 0x2, 0xd5, 0x0, 0x4, 0xf020, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x3}, 0x2000, 0x7, 0x4, 0x5, 0x3, 0x4, 0x6000, 0x0, 0xca83, 0x0, 0x10}, r2, 0x1, 0xffffffffffffffff, 0xf6c30c9cad20adef) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x8, 0x1, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) recvmsg$unix(r3, &(0x7f0000000600)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000440)=""/159, 0x9f}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x88}, 0x143) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000840)={r7, &(0x7f0000000640)="ff9830b490777ce52858cdf86e5f68451f2346c02ddedffc16f1bf089435d4c9b87fc3f3e40a3d22ee309134febf3f570651a07f4887a230611a30b78feff0c108aea000a8b8e13b7c68b873400c5275d89f4cddf480e04b21ea71d5be9d563f14d837e150ee4a6695be89542c3ca25150d19d3c103da2890fb3c2d85658d19a06c0e85a1606c4bd75c7a440e8f4b55c087450a151b63d5d52fcf6239f37a05b5ab6458c4c055faf1d54d702adb243378148bc6668045cd6eb6e3938f67332adc5ba1015c57b83ead92682d4da24f82fb2798f7b32f3dce24826ff66859f81c5a9fcf44c2a05", &(0x7f0000000740)=""/226, 0x4}, 0x20) (async) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0xf7, 0x10, 0x7, 0xfd, 0x0, 0x5, 0x842c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000880), 0x4}, 0x20, 0x5, 0x8, 0x3, 0xd039, 0xffffff7f, 0x9175, 0x0, 0x9c, 0x0, 0x5}, r0, 0x8, r9, 0x2) write$cgroup_pid(r7, &(0x7f0000000940)=r4, 0x12) (async) sendmsg(r12, &(0x7f0000000a40)={&(0x7f0000000980)=@ieee802154={0x24, @long={0x3, 0xffff}}, 0x80, &(0x7f0000000a00)}, 0x44000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r10, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x18, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x28000}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xea20}, @cb_func, @call={0x85, 0x0, 0x0, 0xa7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x100, 0xa6, &(0x7f0000000bc0)=""/166, 0x41000, 0x40, '\x00', r16, 0x0, r9, 0x8, &(0x7f0000000f80)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000fc0)={0x3, 0x1, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001000)=[r10, r11, r5], 0x0, 0x10, 0x6}, 0x94) (async) r17 = bpf$ITER_CREATE(0x21, &(0x7f0000001100)={r8}, 0x8) (async) write$cgroup_pid(r3, &(0x7f0000001140)=r0, 0x12) (async) r18 = openat$cgroup_ro(r7, &(0x7f0000001180)='cpuacct.usage_sys\x00', 0x0, 0x0) r19 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x2b, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x9e}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3bb8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @alu={0x0, 0x1, 0x5, 0x7, 0x3, 0x20, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001340)='syzkaller\x00', 0x7, 0xb, &(0x7f0000001380)=""/11, 0x0, 0x10, '\x00', r16, 0x25, r13, 0x8, &(0x7f00000013c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x0, 0x3, 0x80000000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001440)=[0xffffffffffffffff, r7], &(0x7f0000001480)=[{0x0, 0x3, 0x5, 0x6}, {0x5, 0x1, 0xc}, {0x0, 0x3, 0xc, 0xb}]}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r18, 0x40042408, r19) (async) sendmsg$kcm(r11, &(0x7f0000001a80)={&(0x7f0000001580)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001600)="6fb39b5dc744962645ab40ac589e014471ea0ade65c24fff3cc2646e99220ebe224b7107578500fbefc33c519269a78da5fd3db5550074c6e2aa493ff0701f89c5df6347bfc737bd10f192e65f61dcb57cd86c0d6a1ba08a5e89c54c0070dada77503326d813c784352d9a54be5270c8c24ef80e1abd3c9fb693d8690596f18a7effb62d2097a23b19e95167a8f464fa0730726975e8aa6f3eb4ef2dd55235a4d3bb480f5dfe4f062ac0177888268d728079fbd3ba2a2c1f4a554cd66128b5de6e1aa8065ee64b41b8efa15915f7ad4cdc2baf7bf15e9f7428e63d24c6f5c32a646c81038dcbb9094d1d", 0xea}, {&(0x7f0000001700)="a2c6f36e61356126625468a6e87644831fd4fd26faffd7440965c2756f7c72bef886b3244be45217910ecc4d4cd8c749121cd5a99adbe243a67d356c400b9eb392937f783fc6d41c733babfba31e7ca816d7c3361829f689016174948bde1f92295561981b51dfd334572ecfce8a2445fa0c98925b38b0c739c80847e409a98fc22437354071711bd10f9a121255fe6db8be7ba26248d78dfb74314ce7c04c67ba3b15ff35bd0097e924f56decfeff1ca8cffa46d9f6ad3e73e0274d2afb643d62cd4b42c0e71596b0", 0xc9}, {&(0x7f0000001800)="54df977480a6f720ba93ce202c68807d2bc81c27e5393c619560d81bdad030", 0x1f}, {&(0x7f0000001840)="2abc1eaeac4f76b482c98fec431537581b4fb09d7070fab535a9b3cff80cb9e06f682ec033babcd3adae7e8398ac9b5a1178b0499831fd5625a9947a5694331eb776322a8175ecc974b3cd587c5d4bbeae5e25b6ff9cd1d42f66b6da56a99220fade97748a0dc9a91b61fbf73d3f1a045525a05204aa099dc6e56cee4ce4e07119815814c51534781824695a9dda107be3c3463e7d839d3a9d72173904caac53a3cc9d804682a647c8f71cccfe5d4e63e76715466378e0189dd702c256dc9626b0bd864300f4637d7dc8cea735e600d25d60f95d4bd2b2e661c8df", 0xdb}, {&(0x7f0000001940)="1376fcd5173d459c76e7c0285e3506f8baa99deae448684618c9ad8c5ccb1f145595cdb31870b83c17c28170bd15e919b302841e2018b6ddc1e0296b73ff2bf804652d6e8455712cb80a1334f9baf9b824316895f5a040adb5908ed8da9ecdeef872bb3a2d8eb8b3d903b50cf5d53246368d34ae237e06ad2468bad3534281629b7084a4214f1b6b1dd462fa1fbf2773b0b9ea9da58be3eb422acf7eb6639d26b65e8875f99d78fea9e1e2cf4b2e63bc60", 0xb1}], 0x5}, 0x8040) r20 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0xa, [@func={0xc, 0x0, 0x0, 0xc, 0x5}, @fwd={0x8}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @union={0xa, 0x6, 0x0, 0x5, 0x1, 0xfffffffb, [{0xe, 0x3, 0x6}, {0x2, 0x4, 0x7}, {0xd, 0x1, 0x6b5}, {0x1000, 0x2, 0x80f}, {0x1000, 0x4, 0x1}, {0x1, 0x4, 0x10}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e, 0x2e, 0x6f, 0x0, 0x2e, 0x2e, 0x2e, 0x0]}}, &(0x7f0000001b80)=""/184, 0xa6, 0xb8, 0x1, 0x5, 0x10000, @value=r8}, 0x28) r21 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c80)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0xfffffffb, '\x00', r16, r20, 0x3, 0x5, 0x5}, 0x50) (async) r22 = syz_open_procfs$namespace(r14, &(0x7f0000001d00)='ns/cgroup\x00') (async) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0xf, 0x4, 0x8001, 0x9, 0x30146, r21, 0x80, '\x00', 0x0, r7, 0x2, 0x1, 0x3, 0x0, @void, @value, @value=r12}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001dc0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', r16, r22, 0x3, 0x0, 0x3}, 0x50) (async) r23 = openat$cgroup_ro(r6, &(0x7f0000001e40)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000001e80)=r23, 0x4) 14.725935179s ago: executing program 2 (id=445): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000008fcff00ff7ff0ff0800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340), &(0x7f0000000440)=[0x0], 0x0, 0x84, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x58, 0x0}, 0x44895) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffff"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, 0x0, 0x20000811) socket$kcm(0x21, 0x2, 0xa) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000280)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x7c1c}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x60}, 0x8010) r5 = socket$kcm(0x11, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r4}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000003c0)={'veth1_to_bridge\x00', 0x100}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) 13.735897111s ago: executing program 2 (id=458): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x40, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x31, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) unlink(0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140), 0x1}, 0xc54) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 12.539330704s ago: executing program 2 (id=468): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc90a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000180)={r4}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d52", 0xd9}], 0x1}, 0x24000044) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x0, 0x28, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x80, 0x0}, 0x240440d1) sendmsg$sock(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20008800) 6.356017423s ago: executing program 3 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) r2 = socket$kcm(0x25, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x8386) (async, rerun: 64) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r1}, 0x4) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10005, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 6.088002005s ago: executing program 3 (id=501): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xfffffffc, 0x0, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000053000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000c6d482d18e263c97efd7455a4660d091421c570f8174a7cf183d5297ef1a9793b6d3c3703bbd3b4964077eeb6f651a942b69de2968b0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x18) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x20000884) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 5.313700309s ago: executing program 4 (id=503): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1}, 0x1b) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x5, 0x6, 0x9, 0x0, 0x9, 0x18050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x11440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02083300db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63, 0x4}, 0x48) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{0x14, 0x2, 0x0, 0xfffff004}, {0x6, 0x10, 0x0, 0x2}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x3, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, r3, 0x3, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) (async) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x56}, 0x28) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) 4.328146241s ago: executing program 1 (id=504): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23003f) (async) write$cgroup_devices(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4001, 0x0, @empty, 0xf5}, 0x80, 0x0}, 0x3004c041) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r3, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) (rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (rerun: 32) close(r5) (async) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) 2.967263121s ago: executing program 4 (id=505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x4, 0x4}, 0x200, 0x0, 0x8f, 0x9, 0x0, 0x0, 0x100, 0x0, 0x4865, 0x0, 0x80000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x21100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10806, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000f00)=ANY=[@ANYRES32=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x30) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x100003c}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="b90703600000f007049e0ff086", 0x0, 0x104, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0xdb7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r7, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[], 0x0, 0x28}, 0x28) socketpair(0x1, 0x20000000000001, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8993, &(0x7f0000000900)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\x7fY\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xf2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xab\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\b\x00\x00\x00W_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x85\xde\xf3\x80/\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rF\x1e\x0f\x00\x00\x00\x00\x00\x00Un\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\xb6\xf7\x17,3\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd7\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab\'\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1fR\xde?b|K\xf6%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\xff\xff\xff\xff\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6\xc8pD\x108\x8e\b\x00\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81h\xbb\x87+\x89\xc5\x15\x8dclr\xe0\x93k\x90\xee&E\x8e\xe0\xd2`\xc9\xe9\x17\xf4J\x15*\xd0\x17\x02pF!\x0f\xcd\xb7\xaa\xde\xbc\xa1\x98\xd5fQ!F6\x7f\x1e3\xf71k\xb7\xc6\xe7pqu\xd4\x11\x8d\xdfV\xc5{\x89\xc6p3\xdc\xa7\xd1aK\x8f\x7f\xfb\xc3\xc4~c\"\x9b\xe2hy\xd7G.9`~\xe99\xc0\x15\xda\x0fP\xa7&cs\xa8\x11\xa110gmY\xc2\xe3BG5\xfe\x1d\x8e\xa2\xbd\xe33\x81Y\x8f_\x90\xb9\xc9\x9d\x84\xab\xd7\xf2\x0e\xc1P\xce\xe3\x96\xc8\xe2,\xb8\xc5\xcfBta\xbeVVY\xde\xc8\x16\xc2\xfez\xcaV\x8a\xe1e\xb6\x83}\a\x19\xdbf\x1e\xe0\xef\xe1\xd3\xfd\x0f\x94\x87<+l4H\xa2lhT\xb6\xd2S\x1d\xdd\xc1x\xd9?\xae\xe1\xc0s\x8b\x11\xee\xf18\xa3?\xb2vc\x1b\x8a\'^\x9d\a\xb4\xf6H\xb8\xb2qLw\x99V\xfd\xa2\xc6\x18\xbc\xdd\xcfA&\x01\x06\xc4\x05I\x93Q\xe0\xdd\xeb\xaf\x92J\xca\x9c\xe6\xd6i\x03\xd5\xf3=2\xc6\x87\x00V\xb3\xd9\xcbO\xf1\x86\x16\x14\x9d \x80h\xa8\xaf\xc3;\xed\xd8\x9b\xdd\x13Ya\x80\xb1\fM!d\xb3.\xa1\xb2y\x1fft\'\xff\xc0\xd1G/\v<\x80\xc2G\xda\x01@\x13\xc3i\x983\x1e\xd7\x03o\x98\xd2\x9e\xd9\xef@R\x86\x04\xca\x86\xa8\xbdjx\xfd#\xcd^.R\r\x1d\x0et\xce\xb5\xb1\x8b\xf3\xa0\xf4\x98 \xb2$j4\xefS{WO\'\x06\x91Sc\x80K\xe3\xc4\x8cH\xd2\xdd{\xc8(\x1a\x80W\x10\x92uc\xd8\n2]a*b\xfe\xec\x87\xc6\xd9=\xe1\xc9*\x13}\x84}S\xba\"\x8e\xa2\xb3\xb0\xa0?i\x00\xba\x81y\x11\xc98\x9b\x95S\xc51\xb1w\x91H4\xa25V\xf9s\xe6\x19\x02\xea\xccTp<\xb6\vR\xbe>\xb1\xfb\x1d\xe4\xe8\xbe\xff\x12X\x18\x8a\xafFK\x13\x9fa\xa5\x87c\xadR\xae\x1a\x8c\x8b\xfeZ\x87\xd2\xe9x\xfcT\xa2\xdeYk\xb4\x85\x8ck@\xa2\x9ao;\xf4\x17\xb1e\xa5S\x932\x1c\xaf\xa0\xe6\xc3\xaf}\\\xf4(X\x18\xe4#\nBOI\xe1NT\xa4m\x92\x88\x9b\x84}\x98\x1cA\vE\xbb\xf6\xaa@\xe2\xfeZOa\xdd\x92\xec\x15\t\xe8ZC\x1f\xd6\x98\xaf_\xba\xeb\x11\xf9x\xbe\x12+\xa5%2\xb8ML\xaa\xf0\xa5\xbc\x10\x9f\v\xb9\x1f\xed]7e\xfe\x8f>YT1\x14\x1f\x9e\'\xca\xbf\x1f\xbf\x86\'\x12[1\xd8a\xf4\xc7W\x9b#\xd1\xb8\t)\x9e\x81a') socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01008b201000"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000880)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) r9 = socket$kcm(0x25, 0xa, 0x0) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) 2.966750531s ago: executing program 3 (id=506): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xdf, 0xff, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x240, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x6132}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe3a) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) 2.484531632s ago: executing program 1 (id=507): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x804c2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESHEX, @ANYBLOB="feff88"], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x89, 0x1}, 0xffffffffffffffff, 0x200000000002, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) socketpair(0x1, 0x1, 0x2, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 2.430894444s ago: executing program 4 (id=508): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000000140)="100000002d000b02d25a806f8c636dccc69f08293144d46c0609858a94f9101a04000a7401", 0x25}], 0x1}, 0x20000010) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033b29396ee35e0e5c50002", @ANYRES32, @ANYRES8=r1], 0xfe33) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.096574169s ago: executing program 4 (id=509): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={0x0}, 0x8850, 0x2, 0xfffffffe, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(r1) (async) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000016c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\xe2\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1\x81\xca\x92\x8f\x0e\xfeo\xccXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N$\xc6\x93\v\x04ReY\xf4\xea\xf2\xdb\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8??\x1d\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x99\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x16\x83\xe9q\\\xf3\xc6\xadr\a5\xfa\x819\x1a/m\x13\xb4\x1c\x03\xc4V\xc8\r\xaey!Rd\xc6`\x9d\'k\xcdA\xc0\x1a\xd7\xcfl\x9b\xcc\xbb\xa6\xe8\x87\xf4s\xe3\x89#F&LU{\\{\x00\xe9)-Y,\xc8a\x10\xfe\x83>!\x88\xad\xa7u\x7f^\xfd\xfb\xe1\xd1j\xfb\x81#\x16+\x17\x06\x88\x81\xb5\xaf\x96\xa6\x94\x14\x93\xc3\xbe5\xd8\x1b\xea\xb1\xc7Bb\x9f\xec\xb0A\xd4\t>\xb0\xc3\xce\x9d\x99\x82B63\xaf\x86o\xb9\x0eW\b5\xd2\xe1$\xdc?\xc6\x19\xf4\"\b\xea \xad\xaa\x97z&\x0f\x95\r[u\x8f\xf6\xd1D\x0f[g\xcd\xe7\xbc\x9c\xc2\xe18=\x15\x0eb\x00\x00\x00\x00') (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000200)=0x7fff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_subtree(r2, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) (async, rerun: 32) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) (async, rerun: 32) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000a80)) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0xb9, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x7, 0x1}, 0x818, 0x8001, 0x1, 0x8, 0x3, 0x4f, 0x1, 0x0, 0x8, 0x0, 0x7119}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) 1.998902033s ago: executing program 1 (id=510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000100008500000004000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000b40)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe4c}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x27, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r11, 0x14, &(0x7f00000000c0)={0x20, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x10}, 0x18) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x19, 0xd, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r10, @ANYRESOCT=r3, @ANYRESDEC=0x0, @ANYRES64=r9, @ANYRESOCT=r1, @ANYRESOCT=r5, @ANYRES32, @ANYRES32=0x0], &(0x7f0000000200)='GPL\x00', 0xb48a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%-010d \x00'}, 0x20) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000060000000000000017f4ffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000008d9500000000000000c05ae0ffffffffef85000000c5000000184300000600000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1ee0c0000000000000000f8ffffffb702000008000000b70300000000000085000000060000001800000002000000000000002b000000df22300008000000185000000f0000000000000000000000bf9100000046f94a77833f40f1000000850000004c43aa23b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x3ece, 0x17, &(0x7f0000000300)=""/23, 0x41000, 0x0, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000800)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x10, 0x9, 0x100}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r12, r13, r14], &(0x7f0000000a40)=[{0x4, 0x5, 0x3, 0x1}, {0x5, 0x5, 0xd, 0x5}, {0x3, 0x2, 0x7, 0x1}], 0x10, 0xbb}, 0x94) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r16 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r16, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES32=r15, @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000400fcff000702000011bbca587eae219662e5f8ffffffb703000008000000b704000000000000850000004500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r7) 1.995273393s ago: executing program 4 (id=511): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r2 = getpid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfff", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{}], 0x1}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRES64=r3, @ANYRES32=r4, @ANYRESOCT=r1], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r6, 0x58, &(0x7f00000001c0)}, 0x51) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r9}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180311d916e0dab44e24abe3", @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r11) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.596752481s ago: executing program 4 (id=512): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.419139138s ago: executing program 1 (id=513): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcf, 0x0, 0x0, 0xd, 0x0, 0x0, 0x88880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x400}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r1}) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000001200"/24], 0x18}, 0x40000) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0xffffffffffffff16, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000000c0)={'veth0_to_bond', 0x32, 0x35}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000180)) r4 = socket$kcm(0xa, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x40002021) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x21, 0x2, 0x2) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002540)="84404f2e01cce615b19fbc7a79cdfb2743e202f0bc376f5ddb13ba9b536ab21d6b5276f042fc43c2256b5a71757d9950d727875980a8eea36899cc3030d36d5cd61f21e586fd6e21b4dd383dca5327e99ee676ea877cf8718fb4eb8681d9e6f72795de71af08358429568f781e3cc26996ee7cba9881060af9f57caae32bba4e4db6da4868481aa2eb21a1a630f1e2102fdf8c5484f84f741a6cebdbb6c9f516b775a27e5acb0f8a9f96553b16cdf11d8c5c2da1413a10555e74daadf171ab1e4e57e502691b283f78e01027ab579f79dceba1b45a9d37cb9791759feae6d15cf85cf77b40a4de07801a56979eb26f07d39ab3b17e3ce6dd18d412976bf2511f99e4de48ae38a08708053e8b2516ac5543167794e3d24b2caf9ac3157300a563733710a03da1fa2bc0bcd86e6ced2351f1de4b5676e575c8465c0dd2bedee53b80dcb10e65ad3e944646da590a20f0000d8ff49a80cd7b3f76e2f7a1768a6305cfdf9c9ebd2408918bec4c1434c8315882ccedd71f129f5202c1d5fff67106b3a2b90d8bb98847a291027298b594e4ba494b7bb9c29133737b02ec7fb2e111672efe72f91ce135b4bf88ce29c66ace3736cf69cecfbc9eeac7c42833c622076c70c34a3b126369062224e684a91df4558ff8242a627fbadc48beb81cbd63167183c5317b70a95eb3c4933632bd174b3f4d39f9885910b941456f8fee219e790eef9b0dbb7656233613ed29503d0c45d02a7bc65bf1b08647bb8962a9729ba5d0200930ebcb01b69aa7e6f3394245474207aec07b23a68e962ebc85600b94d5973ecb3e00ef8af378412e04cf7e6f6cdc0ce72c5da8ae925f66bbf2f3ff21fc74415dbef66767e22cdf325d716e71b2a7e7d1cf59d62d82e3a446879f7ee7e69cabf8bc30d463d5c5be5c324a7c8fc2ddda2a138e33a82baf3b5e32a26b23f1bbda6b3001b730b2e851b440b6d2d9cbaf4ea5e8f9761452c569aa0f4f02ad61f5cd144119d60440c740573c466f898c9d5aec7ee3bd196e63fb9fcfcaaf646b410c6a408d737c22a6fdea64e90da07445500f1ab673c01d7920af6eedfcb32e02b5f0b85353689a59d89aaaa6bb12bc056b1c3d4ff687ab81aaee9a1ac2e92a94280f7d307619f0fe28cbb00e01121482bcc1bd8b8903cd4e2c1d85dd1f13a2409ffe29011f01ae0fb1855323127a9ca931f27cbc3dd5680c4d53c570c2d08e05c0eb2fdb9549359a65a5471809ac76408ab9f1a2c9b29492c6a248d17213d425dff8720cfad15842a07cb5f48ca138d77bf64f3216492c1b21cb2ff12862cb43b98c38793b713c72f615b73dc35c23ff4acf06b1ce327028cb4956b64136de9a8feb44a51e7ea5deb1b5be43173305e3c1bbec61", 0x3d4}], 0x1}, 0x6004) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x1c1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xf6) 1.417536458s ago: executing program 0 (id=514): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3f1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async, rerun: 32) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xc0e00, 0x60, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) close(r0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (rerun: 64) 1.314183343s ago: executing program 3 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x10261, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r4, 0x5460, 0x20000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 1.254057946s ago: executing program 0 (id=516): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x9}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x40000}, 0x4000) (async) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r3) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34429, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.002129817s ago: executing program 3 (id=517): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e00280010000700028000001294", 0x2e}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYRESDEC=r2, @ANYBLOB="1d7f0abfc1acc01da0d0aec9d556bdc3bfd6ac654f4f273e26b4f2016a84e95e772a0747b72d7c41d7380585b5d150ed0791dba7308b041c662ccb8ae59f8d7f405d2c6c10724d833204b5e3f7841b9bb65b73c4e57b469adb0150f31b700a1b43c53b0e9b910026618483f58c5c5799b8f0982134ec1da7defef1507e44f9ff7eee2775695cba27ca69a4a527874d9cfcad5d03559d953e8fb10b17"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, r8, 0x8, &(0x7f0000000000), 0x8}, 0x94) gettid() 1.000610287s ago: executing program 1 (id=518): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000084000000000100000100000000000000", @ANYRES32, @ANYBLOB="00000000fdfffffffffffffff62e2e"], 0x50) 881.703232ms ago: executing program 0 (id=519): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000700)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0x2, 0x8, 0xb, 0x4, 0x4}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 783.039296ms ago: executing program 0 (id=520): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000480)=r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="00000000000000000000010000b60d0000ff6f", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="02000000010000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="ea9743f5f8c4834621d3a0d73099f89507b3d3ea303f34e298286a", @ANYRES64=0x0], 0x11) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 508.722108ms ago: executing program 0 (id=521): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8905, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008da0000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000001c0), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) r8 = socket$kcm(0x2, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000fc8500000000000000000000001812f936271cf02a837e371d021cfea5dd5f656c9cbbb349d1b4286fe431536296a253d6d52d44667ecf7697c73bd90c6745e622f76257bb6bae51bcc7951a2413932a273e72182d7f971585f0085769fb2bff6bbb55500eb2abf28a2bb211b2148a08668404a40948ad9e506c6811b40db83202d8d142470162a0be70215b15504e17", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x15, 0x101, 0x7ffc, 0x40}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r13, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000400)=@isdn={0x22, 0x0, 0xa, 0x8, 0xc}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffd4}, 0x240000c4) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe3a) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x12040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00fff5"], 0xcfa4) 472.848399ms ago: executing program 1 (id=522): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e1208001e007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e406dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8001}, 0x10408}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113920000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (rerun: 32) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r2) (async) r4 = socket$kcm(0x2, 0x5, 0x84) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa37}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x2a, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(r4, 0x84, 0x78, &(0x7f0000000040)=r5, 0x4) (async, rerun: 64) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}, @printk={@x={0x18, 0x0}, {0x2, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x42) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="1b00000212ba0d8105042300000019853ff973c0d0183d59b993f8d377a8c600000000e73b40405d22158e699560d95ee77e8fde67fcb2ea7c2c1890571e65295260d1445be1927edc79c6fde4748b", 0x4f}], 0x1}, 0x0) 328.177806ms ago: executing program 0 (id=523): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) syz_clone(0x64002800, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000040)='./cgroup/../file0\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x11, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x8000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a1, &(0x7f0000000080)) 0s ago: executing program 3 (id=524): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x200000c5) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000027090000000000007f00000018110000", @ANYRES32, @ANYBLOB="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"/342], &(0x7f00000000c0)='GPL\x00', 0xfffffffb, 0x2c, &(0x7f00000002c0)=""/44, 0x41000, 0x28, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xf, 0x2, 0x1}, 0x10, 0x956a, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x10, 0x7}, {0x5, 0x3, 0x0, 0x6}, {0x1, 0x2, 0x10, 0xb}, {0x2, 0x4, 0xe, 0x3}, {0x0, 0x2, 0xf, 0x5}, {0x4, 0x1, 0x8, 0x2}, {0x1, 0x3, 0x7, 0xa}, {0x3, 0x2, 0x7, 0x5}], 0x10, 0xfff}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c00000085000000050000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x27, 0x8, 0x0, &(0x7f0000000500)="96bec921b74c8132", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = perf_event_open$cgroup(&(0x7f0000000e00)={0x2, 0x80, 0x7f, 0x3, 0xb, 0x2, 0x0, 0x0, 0x41000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf, 0x4, @perf_bp={&(0x7f00000009c0), 0x2}, 0x1200, 0x2, 0xf, 0x2, 0x0, 0x98000000, 0xfffe, 0x0, 0xe57, 0x0, 0x4}, r6, 0x2, r6, 0x6) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@fallback=r9, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000ec0)=[0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="00000000200000000000000075013bcc47fd427cdf4ad4800f3302164313a305e8a3754c1dad8c9cdf3552853b14727dc9dfb8df6b456744aec1f9245b109441c7dc1c104e4a1d6f37581f5d593bb98a22dc857b2582c3c036994222df9134809925f976a0cb155ddfd38b2fbee37db95e2c1abe481248c94e1846f3fb693fb8a86a7d91cf216ee2c7970a69383de15313aa97b79f73f43e2c8fb139996c028745147d12cbb81e9746a6cbf56d37bf09180914", @ANYRES32, @ANYRES64=r10], 0x20) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@fallback=r1, r2, 0x4, 0x18, r5, @void, @value=r11, @void, @void, r10}, 0x20) r12 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @func={0x7, 0x0, 0x0, 0xc, 0xfffffffc}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000800)=""/169, 0x45, 0xa9, 0x1}, 0x28) sendmsg$inet(r12, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r12, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. [ 58.892281][ T4173] cgroup: Unknown subsys name 'net' [ 59.008321][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.502958][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.351472][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 62.384134][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 62.446779][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 62.456336][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 62.493201][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 62.604212][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.611986][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.620088][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.629204][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.636684][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.644823][ T4189] device bridge_slave_0 entered promiscuous mode [ 62.669343][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.676762][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.685028][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.693444][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.700691][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.708738][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.794489][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.801583][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.810203][ T4183] device bridge_slave_0 entered promiscuous mode [ 62.817743][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.824897][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.833251][ T4194] device bridge_slave_0 entered promiscuous mode [ 62.842827][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.853841][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.866362][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.876030][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.884429][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.892506][ T4195] device bridge_slave_0 entered promiscuous mode [ 62.900212][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.907766][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.915714][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.924227][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.931305][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.939376][ T4194] device bridge_slave_1 entered promiscuous mode [ 62.948091][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.965514][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.972792][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.980778][ T4195] device bridge_slave_1 entered promiscuous mode [ 63.034332][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.062693][ T4189] team0: Port device team_slave_0 added [ 63.076567][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.087894][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.099353][ T4184] team0: Port device team_slave_0 added [ 63.106746][ T4189] team0: Port device team_slave_1 added [ 63.114629][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.133050][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.143447][ T4184] team0: Port device team_slave_1 added [ 63.172150][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.204510][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.211482][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.237529][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.258110][ T4183] team0: Port device team_slave_0 added [ 63.275205][ T4194] team0: Port device team_slave_0 added [ 63.281436][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.288657][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.314861][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.335436][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.342627][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.368587][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.388874][ T4183] team0: Port device team_slave_1 added [ 63.403783][ T4194] team0: Port device team_slave_1 added [ 63.409961][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.417163][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.443223][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.460651][ T4195] team0: Port device team_slave_0 added [ 63.505101][ T4195] team0: Port device team_slave_1 added [ 63.513927][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.520713][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.528973][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.535999][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.566363][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.609472][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.616677][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.642711][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.654408][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.661375][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.687580][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.706934][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.714491][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.740589][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.756101][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.763612][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.789646][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.811847][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.818638][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.826013][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.833971][ T4189] Cannot create hsr debugfs directory [ 63.841220][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.848670][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.875135][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.952838][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 63.965548][ T4183] device hsr_slave_0 entered promiscuous mode [ 63.972799][ T4183] device hsr_slave_1 entered promiscuous mode [ 63.979394][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.987074][ T4183] Cannot create hsr debugfs directory [ 64.021832][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 64.021861][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 64.034447][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 64.041009][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 64.055049][ T4195] device hsr_slave_0 entered promiscuous mode [ 64.062112][ T4195] device hsr_slave_1 entered promiscuous mode [ 64.068700][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.076387][ T4195] Cannot create hsr debugfs directory [ 64.088914][ T4194] device hsr_slave_0 entered promiscuous mode [ 64.096433][ T4194] device hsr_slave_1 entered promiscuous mode [ 64.103261][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.110817][ T4194] Cannot create hsr debugfs directory [ 64.416807][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.428197][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.442515][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.451826][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.482186][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.492373][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.515928][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.529103][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.569376][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.579143][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.600125][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.610351][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.737873][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.754332][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.770374][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.794935][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.805101][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.818773][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.852284][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.868882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.878974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.888219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.896530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.908422][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.919798][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.937137][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.946596][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.956247][ T2005] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.963521][ T2005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.973532][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.996867][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.006948][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.017634][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.026498][ T2005] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.033633][ T2005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.041662][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.051598][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.060815][ T2005] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.067933][ T2005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.075981][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.090974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.099316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.107675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.117044][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.134283][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.147589][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.156931][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.166679][ T2005] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.173802][ T2005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.181484][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.191259][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.202735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.212371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.223072][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.236580][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.245912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.254540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.263577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.273814][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.280882][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.289485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.299491][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.317488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.327735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.336966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.348017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.374039][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.387116][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.395271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.404418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.416444][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.423554][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.431431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.440398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.449510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.458284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.497336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.507869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.517986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.528884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.537564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.546947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.556291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.565031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.575566][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.602222][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.650345][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.669935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.679278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.690971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.700508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.710938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.728244][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.752915][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.784116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.795305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.806627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.821463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.851090][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.872015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.883542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.900785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.943087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.950593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.959044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.969324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.977990][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.985100][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.993876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.002947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.011302][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.018397][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.025944][ T4253] Bluetooth: hci1: command 0x041b tx timeout [ 66.035066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.046222][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.067177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.082107][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.098596][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.114834][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 66.122472][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.129926][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.141867][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 66.149674][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 66.159713][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.168212][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 66.201620][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.212152][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.220816][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.230774][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.240639][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.249724][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.258769][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.267996][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.277539][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.286222][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.294899][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.302978][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.310768][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.318527][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.329731][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.349110][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.357945][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.366940][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.378325][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.389069][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.400055][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.413744][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.430233][ T4189] device veth0_vlan entered promiscuous mode [ 66.438796][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.447019][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.455563][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.464349][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.472945][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.480004][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.488049][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.504135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.513296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.522151][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.529227][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.550011][ T4189] device veth1_vlan entered promiscuous mode [ 66.579528][ T4184] device veth0_vlan entered promiscuous mode [ 66.588890][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.605320][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.618181][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.630340][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.642660][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.687629][ T4184] device veth1_vlan entered promiscuous mode [ 66.695697][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.705759][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.722512][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.738478][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.749186][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.758926][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.767727][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.778843][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.787587][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.796719][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.805507][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.837802][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.846423][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.855316][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.863893][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.873542][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.882968][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.890387][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.901026][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.911102][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.919178][ T4183] device veth0_vlan entered promiscuous mode [ 66.933168][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.945087][ T4189] device veth0_macvtap entered promiscuous mode [ 66.979493][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.990343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.005879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.014811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.024130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.035637][ T4184] device veth0_macvtap entered promiscuous mode [ 67.046592][ T4189] device veth1_macvtap entered promiscuous mode [ 67.055827][ T4183] device veth1_vlan entered promiscuous mode [ 67.067486][ T4184] device veth1_macvtap entered promiscuous mode [ 67.095236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.107786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.119998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.129444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.137836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.166159][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.185666][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.194296][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.228617][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.240887][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.257989][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.270178][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.281396][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.297893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.307290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.316791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.327371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.338905][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.356503][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.370322][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.383351][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.392982][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.402150][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.410952][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.425048][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.435180][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.444162][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.453031][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.471565][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.480760][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.507259][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.516887][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.541293][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.550291][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.584898][ T4183] device veth0_macvtap entered promiscuous mode [ 67.599425][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.608197][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.616886][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.626189][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.647262][ T4183] device veth1_macvtap entered promiscuous mode [ 67.674595][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.685872][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.695043][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.707754][ T4194] device veth0_vlan entered promiscuous mode [ 67.737772][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.746374][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.756385][ T4194] device veth1_vlan entered promiscuous mode [ 67.810374][ T4194] device veth0_macvtap entered promiscuous mode [ 67.818615][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.829718][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.840568][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.851282][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.864321][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.872199][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.880596][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.889348][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.898521][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.907684][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.917012][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.926457][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.935531][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.945778][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.969656][ T4194] device veth1_macvtap entered promiscuous mode [ 67.998680][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.000657][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.023800][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.031620][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.036148][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.051482][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.063506][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.080026][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.089168][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.098018][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.107527][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.112406][ T2287] Bluetooth: hci1: command 0x040f tx timeout [ 68.117440][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.130181][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.139404][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.147585][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.159852][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.172136][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.182895][ T2287] Bluetooth: hci3: command 0x040f tx timeout [ 68.188716][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.189169][ T2287] Bluetooth: hci4: command 0x040f tx timeout [ 68.199481][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.212090][ T2287] Bluetooth: hci0: command 0x040f tx timeout [ 68.215621][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.231797][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.244143][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.255893][ T4195] device veth0_vlan entered promiscuous mode [ 68.269377][ T4195] device veth1_vlan entered promiscuous mode [ 68.272713][ T2287] Bluetooth: hci2: command 0x040f tx timeout [ 68.281219][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.291192][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.300058][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.309722][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.326565][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.335964][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.344930][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.356336][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.366443][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.375789][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.378004][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.396968][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.407546][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.417400][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.428464][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.439521][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.450062][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.459388][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.468947][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.478544][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.497306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.506968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.515861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.571621][ T4195] device veth0_macvtap entered promiscuous mode [ 68.580274][ T3076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.580281][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.580331][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.597835][ T3076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.633385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.648383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.656704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.668157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.688585][ T4195] device veth1_macvtap entered promiscuous mode [ 68.727620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.737447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.777575][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.795574][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.807535][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.818527][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.829199][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.839752][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.851540][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.862876][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.874628][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.894651][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.916829][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.928159][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.937254][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.942081][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.956575][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.968365][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.978988][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.989664][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.000628][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.022630][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.042456][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.081904][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.139611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.171957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.226903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.267955][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.278267][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.288471][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.298297][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.331065][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.345237][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.360335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.391401][ T4297] netlink: set zone limit has 8 unknown bytes [ 69.439696][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.475287][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.476218][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.505227][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.512795][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.548802][ T4299] netlink: 'syz.0.7': attribute type 7 has an invalid length. [ 69.577792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.622443][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.630477][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.696419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.756099][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.780759][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.866513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.067741][ C0] hrtimer: interrupt took 39915 ns [ 70.142085][ T4321] Zero length message leads to an empty skb [ 70.182948][ T4253] Bluetooth: hci1: command 0x0419 tx timeout [ 70.262930][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 70.278331][ T4253] Bluetooth: hci4: command 0x0419 tx timeout [ 70.348916][ T4253] Bluetooth: hci3: command 0x0419 tx timeout [ 70.413595][ T4253] Bluetooth: hci2: command 0x0419 tx timeout [ 70.599659][ T4338] netlink: 'syz.1.17': attribute type 13 has an invalid length. [ 70.637722][ T4338] netlink: 160 bytes leftover after parsing attributes in process `syz.1.17'. [ 70.796457][ T4338] erspan0: refused to change device tx_queue_len [ 70.811015][ T4338] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 71.077593][ T4338] syz.1.17 (4338) used greatest stack depth: 20392 bytes left [ 71.386082][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.393082][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.812851][ T4392] netlink: 132 bytes leftover after parsing attributes in process `syz.4.30'. [ 72.457374][ T4405] netlink: 128 bytes leftover after parsing attributes in process `syz.2.35'. [ 72.941260][ T4424] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 72.999340][ T4422] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.38'. [ 73.037570][ T4427] netlink: 'syz.4.41': attribute type 21 has an invalid length. [ 73.181268][ T4429] netlink: 'syz.4.41': attribute type 10 has an invalid length. [ 73.228803][ T4429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41'. [ 73.287811][ T4429] device batadv0 entered promiscuous mode [ 73.319030][ T4429] bridge0: port 3(batadv0) entered blocking state [ 73.358007][ T4429] bridge0: port 3(batadv0) entered disabled state [ 73.382759][ T4429] bridge0: port 3(batadv0) entered blocking state [ 73.389587][ T4429] bridge0: port 3(batadv0) entered forwarding state [ 73.431158][ T4436] netlink: 'syz.0.43': attribute type 21 has an invalid length. [ 73.456296][ T144] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 73.466738][ T144] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 73.733181][ T4443] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.46'. [ 73.858206][ T4452] netlink: 'syz.1.48': attribute type 10 has an invalid length. [ 73.902167][ T4452] netlink: 2 bytes leftover after parsing attributes in process `syz.1.48'. [ 74.000369][ T4452] device team0 entered promiscuous mode [ 74.047549][ T4452] device team_slave_0 entered promiscuous mode [ 74.208128][ T4452] device team_slave_1 entered promiscuous mode [ 74.400829][ T4452] bridge0: port 3(team0) entered blocking state [ 74.452682][ T4464] netlink: 'syz.0.52': attribute type 4 has an invalid length. [ 74.493505][ T4452] bridge0: port 3(team0) entered disabled state [ 74.624312][ T4464] netlink: 'syz.0.52': attribute type 3 has an invalid length. [ 74.634977][ T4452] bridge0: port 3(team0) entered blocking state [ 74.641387][ T4452] bridge0: port 3(team0) entered forwarding state [ 74.644983][ T4464] netlink: 152988 bytes leftover after parsing attributes in process `syz.0.52'. [ 74.763909][ T4452] syz.1.48 (4452) used greatest stack depth: 20224 bytes left [ 75.725715][ T4487] device sit0 entered promiscuous mode [ 75.814941][ T4494] device wg2 entered promiscuous mode [ 76.125538][ T4507] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.61'. [ 76.593079][ T4518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.65'. [ 76.936201][ T4538] netlink: 60 bytes leftover after parsing attributes in process `syz.4.70'. [ 77.066251][ T4541] netlink: 'syz.0.71': attribute type 9 has an invalid length. [ 77.086247][ T4541] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.71'. [ 77.274657][ T4540] device wlan0 entered promiscuous mode [ 77.282922][ T4538] netlink: 60 bytes leftover after parsing attributes in process `syz.4.70'. [ 77.292890][ T4539] netlink: 60 bytes leftover after parsing attributes in process `syz.4.70'. [ 77.318384][ T4542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.70'. [ 78.535681][ T4596] netlink: 'syz.0.84': attribute type 1 has an invalid length. [ 78.564466][ T4596] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.84'. [ 78.591385][ T4596] netlink: 9 bytes leftover after parsing attributes in process `syz.0.84'. [ 78.810793][ T4600] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.86'. [ 78.965082][ T4615] netlink: 'syz.3.90': attribute type 4 has an invalid length. [ 79.282989][ T4623] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 79.415805][ T4623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.460677][ T4623] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 79.502455][ T4621] netlink: 'syz.0.92': attribute type 10 has an invalid length. [ 79.532919][ T4621] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 79.642370][ T4621] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.708907][ T4621] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 79.812351][ T4623] syz.3.94 (4623) used greatest stack depth: 20192 bytes left [ 79.829196][ T4639] netlink: 'syz.1.95': attribute type 29 has an invalid length. [ 79.845248][ T4639] netlink: 'syz.1.95': attribute type 29 has an invalid length. [ 79.921219][ T4645] netlink: 'syz.1.95': attribute type 29 has an invalid length. [ 79.964731][ T4644] netlink: 'syz.4.99': attribute type 21 has an invalid length. [ 80.298847][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 80.347394][ T4658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.426958][ T4658] syz.4.102 (4658) used greatest stack depth: 19776 bytes left [ 80.729517][ T4678] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 81.206262][ T4686] __nla_validate_parse: 9 callbacks suppressed [ 81.206279][ T4686] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.108'. [ 81.288663][ T4681] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.108'. [ 81.783582][ T4680] delete_channel: no stack [ 81.788956][ T4680] delete_channel: no stack [ 82.285195][ T4718] netlink: 'syz.3.118': attribute type 9 has an invalid length. [ 82.322159][ T4718] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.118'. [ 82.371189][ T4726] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 82.432551][ T4726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.120'. [ 82.634146][ T4726] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 82.643073][ T4726] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.693072][ T4726] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 82.786024][ T4740] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.123'. [ 83.248910][ T4734] device bridge0 entered promiscuous mode [ 83.459062][ T4750] netlink: 'syz.2.124': attribute type 21 has an invalid length. [ 83.513947][ T4750] netlink: 'syz.2.124': attribute type 6 has an invalid length. [ 83.551502][ T4750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.124'. [ 83.863421][ T4763] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 83.888533][ T4763] netlink: 132 bytes leftover after parsing attributes in process `syz.3.131'. [ 84.259228][ T4779] team0: Port device geneve1 added [ 84.978909][ T4782] delete_channel: no stack [ 85.058379][ T4801] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.140'. [ 86.267366][ T4842] validate_nla: 1 callbacks suppressed [ 86.267383][ T4842] netlink: 'syz.1.152': attribute type 10 has an invalid length. [ 86.475484][ T4842] device geneve1 entered promiscuous mode [ 86.510537][ T4842] team0: Port device geneve1 added [ 86.743954][ T1106] cfg80211: failed to load regulatory.db [ 86.881233][ T4869] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.160'. [ 87.210279][ T4878] netlink: 'syz.4.165': attribute type 9 has an invalid length. [ 87.584546][ T4895] netlink: 'syz.3.170': attribute type 33 has an invalid length. [ 87.640342][ T4895] netlink: 152 bytes leftover after parsing attributes in process `syz.3.170'. [ 87.666175][ T4899] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.172'. [ 87.723992][ T4899] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 87.803291][ T4899] netlink: 199572 bytes leftover after parsing attributes in process `syz.2.172'. [ 87.836780][ T4895] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 87.892462][ T4897] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 88.069816][ T4897] team0: Port device geneve1 added [ 88.368235][ T4923] netlink: 'syz.1.178': attribute type 3 has an invalid length. [ 88.393638][ T4923] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.178'. [ 88.505157][ T4916] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.473495][ T4953] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.187'. [ 89.512613][ T4960] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.187'. [ 90.628798][ T4992] netlink: 'syz.3.199': attribute type 10 has an invalid length. [ 90.662053][ T4992] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.199'. [ 91.074959][ T5006] team0: Port device team_slave_0 removed [ 91.234413][ T5006] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 91.492811][ T5006] syz.4.201 (5006) used greatest stack depth: 19456 bytes left [ 91.725195][ T5038] netlink: 10 bytes leftover after parsing attributes in process `syz.2.210'. [ 91.831222][ T5041] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.256276][ T5054] team0: Port device team_slave_0 removed [ 92.392729][ T5054] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 92.475906][ T5048] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.212'. [ 92.943910][ T5080] netlink: 'syz.4.221': attribute type 3 has an invalid length. [ 92.972351][ T5080] netlink: 'syz.4.221': attribute type 1 has an invalid length. [ 92.980033][ T5080] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.221'. [ 98.314182][ T5186] netlink: 144 bytes leftover after parsing attributes in process `syz.2.249'. [ 98.338191][ T5188] netlink: 'syz.0.250': attribute type 11 has an invalid length. [ 98.352715][ T5188] netlink: 'syz.0.250': attribute type 5 has an invalid length. [ 98.444848][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.519371][ T5186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.593446][ T5188] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.250'. [ 98.622434][ T5190] netlink: 830 bytes leftover after parsing attributes in process `syz.2.249'. [ 99.447628][ T5217] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 99.486857][ T5217] netlink: 'syz.1.257': attribute type 3 has an invalid length. [ 99.537509][ T5217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.257'. [ 99.770091][ T5228] delete_channel: no stack [ 100.383304][ T5233] netlink: 'syz.2.262': attribute type 29 has an invalid length. [ 100.391389][ T5233] netlink: 'syz.2.262': attribute type 29 has an invalid length. [ 100.643136][ T5234] netlink: 'syz.2.262': attribute type 29 has an invalid length. [ 101.745869][ T5264] netlink: 'syz.1.269': attribute type 21 has an invalid length. [ 101.788049][ T5264] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.269'. [ 102.076825][ T5273] netlink: 'syz.3.270': attribute type 11 has an invalid length. [ 102.147251][ T5269] netlink: 'syz.0.271': attribute type 21 has an invalid length. [ 102.940806][ T5293] netlink: 184 bytes leftover after parsing attributes in process `syz.3.276'. [ 103.575261][ T5315] netlink: 201660 bytes leftover after parsing attributes in process `syz.0.281'. [ 103.704790][ T5315] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 103.749012][ T5315] CPU: 1 PID: 5315 Comm: syz.0.281 Not tainted syzkaller #0 [ 103.756364][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.766461][ T5315] Call Trace: [ 103.769761][ T5315] [ 103.772700][ T5315] dump_stack_lvl+0x168/0x230 [ 103.777387][ T5315] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 103.783567][ T5315] ? show_regs_print_info+0x20/0x20 [ 103.788773][ T5315] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 103.794950][ T5315] sysfs_warn_dup+0x8a/0xa0 [ 103.799463][ T5315] sysfs_do_create_link_sd+0xc0/0x110 [ 103.804853][ T5315] device_add+0x7ed/0xfb0 [ 103.809207][ T5315] wiphy_register+0x1d67/0x2b20 [ 103.814089][ T5315] ? cfg80211_event_work+0x40/0x40 [ 103.819207][ T5315] ? minstrel_ht_alloc+0x808/0x980 [ 103.824350][ T5315] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 103.830442][ T5315] ieee80211_register_hw+0x29b1/0x39d0 [ 103.836021][ T5315] ? ieee80211_tasklet_handler+0x20/0x20 [ 103.841683][ T5315] ? rcu_is_watching+0x11/0xa0 [ 103.846461][ T5315] ? memset+0x1e/0x40 [ 103.850451][ T5315] ? hrtimer_init+0x10c/0x220 [ 103.855146][ T5315] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 103.860904][ T5315] hwsim_new_radio_nl+0xa6f/0xc40 [ 103.865952][ T5315] genl_rcv_msg+0xbc6/0xf40 [ 103.870475][ T5315] ? genl_bind+0x370/0x370 [ 103.874900][ T5315] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 103.880895][ T5315] ? lock_chain_count+0x20/0x20 [ 103.885765][ T5315] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 103.891928][ T5315] ? lockdep_hardirqs_on+0x94/0x140 [ 103.897135][ T5315] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 103.903297][ T5315] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 103.909812][ T5315] ? lock_acquire+0x1f2/0x3f0 [ 103.914504][ T5315] netlink_rcv_skb+0x1e0/0x430 [ 103.919272][ T5315] ? genl_bind+0x370/0x370 [ 103.923692][ T5315] ? netlink_ack+0xb60/0xb60 [ 103.928286][ T5315] ? __lock_acquire+0x7c60/0x7c60 [ 103.933321][ T5315] ? preempt_count_add+0x8d/0x190 [ 103.938357][ T5315] ? down_read+0x1aa/0x2e0 [ 103.942782][ T5315] genl_rcv+0x24/0x40 [ 103.946776][ T5315] netlink_unicast+0x774/0x920 [ 103.951559][ T5315] netlink_sendmsg+0x8ab/0xbc0 [ 103.956340][ T5315] ? netlink_getsockopt+0x560/0x560 [ 103.961541][ T5315] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 103.967700][ T5315] ? aa_sock_msg_perm+0x94/0x150 [ 103.972652][ T5315] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 103.977939][ T5315] ? security_socket_sendmsg+0x7c/0xa0 [ 103.983404][ T5315] ? netlink_getsockopt+0x560/0x560 [ 103.988608][ T5315] ____sys_sendmsg+0x5a2/0x8c0 [ 103.993416][ T5315] ? memset+0x1e/0x40 [ 103.997582][ T5315] ? __sys_sendmsg_sock+0x30/0x30 [ 104.002626][ T5315] ? import_iovec+0x6f/0xa0 [ 104.007149][ T5315] ___sys_sendmsg+0x1f0/0x260 [ 104.011840][ T5315] ? __sys_sendmsg+0x250/0x250 [ 104.016623][ T5315] ? trace_event_raw_event_lock+0x250/0x250 [ 104.022555][ T5315] ? __fdget+0x18b/0x210 [ 104.026806][ T5315] __se_sys_sendmsg+0x190/0x250 [ 104.031766][ T5315] ? __x64_sys_sendmsg+0x80/0x80 [ 104.036706][ T5315] ? lockdep_hardirqs_on+0x94/0x140 [ 104.041932][ T5315] do_syscall_64+0x4c/0xa0 [ 104.046384][ T5315] ? clear_bhb_loop+0x30/0x80 [ 104.051072][ T5315] ? clear_bhb_loop+0x30/0x80 [ 104.055762][ T5315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.061692][ T5315] RIP: 0033:0x7f963e6ea749 [ 104.066114][ T5315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.085727][ T5315] RSP: 002b:00007f963c951038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.094236][ T5315] RAX: ffffffffffffffda RBX: 00007f963e940fa0 RCX: 00007f963e6ea749 [ 104.102210][ T5315] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 104.110184][ T5315] RBP: 00007f963e76ef91 R08: 0000000000000000 R09: 0000000000000000 [ 104.118156][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.126130][ T5315] R13: 00007f963e941038 R14: 00007f963e940fa0 R15: 00007ffe3de5a3e8 [ 104.134123][ T5315] [ 105.082013][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 105.153735][ T5359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.106002][ T5384] device sit0 entered promiscuous mode [ 108.112614][ T5437] ÿÿÿÿÿÿ: renamed from vlan1 [ 108.432854][ T5455] validate_nla: 1 callbacks suppressed [ 108.432871][ T5455] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 108.500091][ T5455] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.321'. [ 109.397841][ T5482] delete_channel: no stack [ 109.511020][ T5493] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.330'. [ 109.632026][ T5496] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 [ 110.322389][ T5527] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.337'. [ 110.545296][ T5544] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.342'. [ 110.783391][ T5556] netlink: 'syz.2.346': attribute type 9 has an invalid length. [ 110.820443][ T5556] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.346'. [ 110.874949][ T5564] netlink: 10 bytes leftover after parsing attributes in process `syz.4.348'. [ 110.897472][ T5568] netlink: 172 bytes leftover after parsing attributes in process `syz.3.349'. [ 111.130738][ T5570] ÿÿÿÿÿÿ: renamed from vlan1 [ 111.608003][ T5588] device pim6reg1 entered promiscuous mode [ 111.640696][ T5604] netlink: 'syz.1.359': attribute type 3 has an invalid length. [ 111.668495][ T5604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.359'. [ 111.945765][ T5617] netlink: 'syz.3.363': attribute type 10 has an invalid length. [ 111.998299][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.031414][ T5617] team0: Port device bond0 added [ 112.044577][ T5620] netlink: 'syz.2.364': attribute type 1 has an invalid length. [ 112.080340][ T5620] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.364'. [ 112.110152][ T5620] netlink: 1 bytes leftover after parsing attributes in process `syz.2.364'. [ 112.185071][ T5622] macvtap0: refused to change device tx_queue_len [ 112.373294][ T5638] netlink: 'syz.3.368': attribute type 9 has an invalid length. [ 112.380982][ T5638] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.368'. [ 112.559639][ T5636] device wlan0 entered promiscuous mode [ 112.567883][ T5635] ÿÿÿÿÿÿ: renamed from vlan1 [ 112.651378][ T5644] netlink: 'syz.4.370': attribute type 10 has an invalid length. [ 112.735097][ T5644] bridge0: port 3(batadv0) entered disabled state [ 112.742853][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.753062][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.844218][ T5644] bridge0: port 3(batadv0) entered blocking state [ 112.851061][ T5644] bridge0: port 3(batadv0) entered forwarding state [ 112.859224][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.866644][ T5644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.874778][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.882271][ T5644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.003547][ T5644] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 113.680354][ T5696] netlink: 'syz.3.384': attribute type 3 has an invalid length. [ 113.918951][ T5703] Ÿë: port 1(syz_tun) entered blocking state [ 113.938558][ T5703] Ÿë: port 1(syz_tun) entered disabled state [ 113.992166][ T5703] device syz_tun entered promiscuous mode [ 114.147571][ T5716] netlink: 'syz.4.391': attribute type 17 has an invalid length. [ 114.259557][ T5716] netlink: 'syz.4.391': attribute type 16 has an invalid length. [ 114.443749][ T5726] device sit0 left promiscuous mode [ 114.641203][ T5741] netlink: 'syz.3.397': attribute type 10 has an invalid length. [ 114.659700][ T5741] __nla_validate_parse: 2 callbacks suppressed [ 114.659715][ T5741] netlink: 2 bytes leftover after parsing attributes in process `syz.3.397'. [ 114.690915][ T5741] device team0 entered promiscuous mode [ 114.707340][ T5741] device team_slave_1 entered promiscuous mode [ 114.723086][ T5741] device geneve1 entered promiscuous mode [ 114.735517][ T5741] device bond0 entered promiscuous mode [ 114.757385][ T5741] device bond_slave_0 entered promiscuous mode [ 114.777534][ T5741] device bond_slave_1 entered promiscuous mode [ 114.857657][ T5741] device batadv0 entered promiscuous mode [ 114.875659][ T5742] netlink: 'syz.4.395': attribute type 21 has an invalid length. [ 114.889623][ T5742] netlink: 128 bytes leftover after parsing attributes in process `syz.4.395'. [ 114.905337][ T5752] netlink: 'syz.1.398': attribute type 3 has an invalid length. [ 114.919904][ T5742] netlink: 'syz.4.395': attribute type 3 has an invalid length. [ 114.926907][ T5752] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.398'. [ 114.946431][ T5742] netlink: 3 bytes leftover after parsing attributes in process `syz.4.395'. [ 114.960356][ T5737] netlink: 'syz.0.393': attribute type 4 has an invalid length. [ 115.261323][ T5759] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.401'. [ 115.281995][ T5759] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 115.731157][ T5786] netlink: 'syz.0.407': attribute type 2 has an invalid length. [ 115.751445][ T5786] netlink: 'syz.0.407': attribute type 1 has an invalid length. [ 115.759298][ T5786] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.407'. [ 115.849817][ T5791] netlink: 164 bytes leftover after parsing attributes in process `syz.4.411'. [ 115.960536][ T5794] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.422'. [ 116.036033][ T5802] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.422'. [ 116.076034][ T5799] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.412'. [ 117.104601][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.137855][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.186865][ T5839] bond0 (unregistering): Released all slaves [ 117.250662][ T5845] -1: renamed from syzkaller0 [ 119.554169][ T5945] validate_nla: 9 callbacks suppressed [ 119.554188][ T5945] netlink: 'syz.3.454': attribute type 10 has an invalid length. [ 119.711524][ T5948] device team_slave_0 left promiscuous mode [ 119.942763][ T5948] team0: Port device team_slave_0 removed [ 119.955322][ T5948] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 120.116069][ T5954] __nla_validate_parse: 12 callbacks suppressed [ 120.116089][ T5954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.455'. [ 120.190790][ T5953] netlink: 'syz.0.457': attribute type 21 has an invalid length. [ 120.214504][ T5953] netlink: 128 bytes leftover after parsing attributes in process `syz.0.457'. [ 120.255622][ T5953] netlink: 'syz.0.457': attribute type 5 has an invalid length. [ 120.291845][ T5953] netlink: 3 bytes leftover after parsing attributes in process `syz.0.457'. [ 120.880434][ T5996] netlink: 144 bytes leftover after parsing attributes in process `syz.3.467'. [ 121.277760][ T6004] netlink: 'syz.2.468': attribute type 4 has an invalid length. [ 122.254334][ T6032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.476'. [ 122.352123][ T6032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.476'. [ 122.478526][ T6032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.476'. [ 122.641333][ T6037] delete_channel: no stack [ 122.836319][ T6046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.480'. [ 122.897594][ T6046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.480'. [ 122.944275][ T6050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.480'. [ 123.050622][ T6049] netlink: 'syz.3.480': attribute type 3 has an invalid length. [ 124.693671][ T6085] bridge0: port 4(veth0_to_bridge) entered blocking state [ 124.741278][ T6085] bridge0: port 4(veth0_to_bridge) entered disabled state [ 124.852103][ T6085] device veth0_to_bridge entered promiscuous mode [ 124.890087][ T6085] bridge0: port 4(veth0_to_bridge) entered blocking state [ 124.897767][ T6085] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 125.152552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 125.165128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 125.177718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 125.190270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 125.202756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 125.215229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 125.227688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 125.240137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 125.252654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 125.265255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 125.721338][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.914716][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.026004][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.151714][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.236769][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.299674][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.354791][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.414444][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.502065][ T6097] netlink: 'syz.4.495': attribute type 21 has an invalid length. [ 126.933916][ T6111] __nla_validate_parse: 3 callbacks suppressed [ 126.933953][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 127.638036][ T6125] device sit0 left promiscuous mode [ 127.940553][ T6128] device sit0 entered promiscuous mode [ 127.947609][ T6129] netlink: 'syz.1.502': attribute type 11 has an invalid length. [ 128.048904][ T6129] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.502'. [ 128.675552][ T6129] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 130.161745][ C0] net_ratelimit: 3988 callbacks suppressed [ 130.161766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 130.180255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 130.192725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 130.205376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 130.219154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 130.231753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 130.244304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 130.256813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 130.269237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 130.281793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 131.095684][ T6148] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.508'. [ 131.153031][ T6150] netlink: 128 bytes leftover after parsing attributes in process `syz.4.508'. [ 132.498789][ T6183] netlink: 10 bytes leftover after parsing attributes in process `syz.3.517'. [ 132.703069][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 132.786904][ T6192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.520'. [ 132.851716][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.858214][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.112927][ T6163] ODEBUG: Out of memory. ODEBUG disabled [ 134.113807][ T6163] [ 134.113813][ T6163] ====================================================== [ 134.113818][ T6163] WARNING: possible circular locking dependency detected [ 134.113837][ T6163] syzkaller #0 Not tainted [ 134.113846][ T6163] ------------------------------------------------------ [ 134.113851][ T6163] syz.4.512/6163 is trying to acquire lock: [ 134.113860][ T6163] ffffffff8c1111c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 134.113929][ T6163] [ 134.113929][ T6163] but task is already holding lock: [ 134.113933][ T6163] ffff88801b386238 (&trie->lock){-...}-{2:2}, at: trie_update_elem+0xc7/0xc50 [ 134.113974][ T6163] [ 134.113974][ T6163] which lock already depends on the new lock. [ 134.113974][ T6163] [ 134.113979][ T6163] [ 134.113979][ T6163] the existing dependency chain (in reverse order) is: [ 134.113984][ T6163] [ 134.113984][ T6163] -> #5 (&trie->lock){-...}-{2:2}: [ 134.114007][ T6163] _raw_spin_lock_irqsave+0xa4/0xf0 [ 134.114026][ T6163] trie_delete_elem+0x90/0x710 [ 134.114043][ T6163] 0xffffffffa002c5a9 [ 134.114055][ T6163] bpf_trace_run2+0x242/0x2d0 [ 134.114071][ T6163] trace_tlb_flush+0xe6/0x110 [ 134.114087][ T6163] switch_mm_irqs_off+0x6e3/0x9a0 [ 134.114103][ T6163] __schedule+0x1024/0x4390 [ 134.114121][ T6163] schedule+0x11b/0x1e0 [ 134.114138][ T6163] schedule_preempt_disabled+0xf/0x20 [ 134.114157][ T6163] __mutex_lock_common+0xc71/0x2390 [ 134.114177][ T6163] mutex_lock_nested+0x17/0x20 [ 134.114195][ T6163] devinet_ioctl+0x258/0x1a70 [ 134.114214][ T6163] inet_ioctl+0x2c9/0x400 [ 134.114231][ T6163] sock_do_ioctl+0xd3/0x2f0 [ 134.114251][ T6163] sock_ioctl+0x4ed/0x6e0 [ 134.114269][ T6163] __se_sys_ioctl+0xfa/0x170 [ 134.114290][ T6163] do_syscall_64+0x4c/0xa0 [ 134.114306][ T6163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.114325][ T6163] [ 134.114325][ T6163] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 134.114348][ T6163] _raw_spin_lock_nested+0x2e/0x40 [ 134.114365][ T6163] raw_spin_rq_lock_nested+0x26/0x140 [ 134.114384][ T6163] task_fork_fair+0x5c/0x350 [ 134.114399][ T6163] sched_cgroup_fork+0x2c6/0x320 [ 134.114418][ T6163] copy_process+0x22d1/0x3e00 [ 134.114435][ T6163] kernel_clone+0x219/0x930 [ 134.114451][ T6163] kernel_thread+0xc8/0x120 [ 134.114467][ T6163] rest_init+0x21/0x330 [ 134.114484][ T6163] start_kernel+0x486/0x530 [ 134.114501][ T6163] secondary_startup_64_no_verify+0xb1/0xbb [ 134.114521][ T6163] [ 134.114521][ T6163] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 134.114544][ T6163] _raw_spin_lock_irqsave+0xa4/0xf0 [ 134.114560][ T6163] try_to_wake_up+0x5c/0x1050 [ 134.114579][ T6163] __wake_up_common+0x2a4/0x4e0 [ 134.114597][ T6163] __wake_up+0x108/0x180 [ 134.114615][ T6163] tty_port_default_wakeup+0xa5/0xf0 [ 134.114634][ T6163] serial8250_tx_chars+0x629/0x830 [ 134.114654][ T6163] serial8250_handle_irq+0x519/0x610 [ 134.114673][ T6163] serial8250_default_handle_irq+0xb4/0x1a0 [ 134.114694][ T6163] serial8250_interrupt+0x9b/0x1c0 [ 134.114712][ T6163] __handle_irq_event_percpu+0x291/0x9b0 [ 134.114731][ T6163] handle_irq_event+0xa5/0x220 [ 134.114747][ T6163] handle_edge_irq+0x243/0xb20 [ 134.114767][ T6163] __common_interrupt+0xd7/0x1e0 [ 134.114783][ T6163] common_interrupt+0xb0/0xd0 [ 134.114800][ T6163] asm_common_interrupt+0x22/0x40 [ 134.114817][ T6163] kasan_check_range+0xd/0x290 [ 134.114835][ T6163] PageHuge+0x26/0x130 [ 134.114854][ T6163] page_remove_rmap+0x621/0x10f0 [ 134.114878][ T6163] unmap_page_range+0xfbc/0x2520 [ 134.114894][ T6163] unmap_vmas+0x11b/0x230 [ 134.114908][ T6163] exit_mmap+0x38f/0x5f0 [ 134.114925][ T6163] __mmput+0x115/0x3b0 [ 134.114940][ T6163] exit_mm+0x567/0x6c0 [ 134.114958][ T6163] do_exit+0x5a1/0x20a0 [ 134.114976][ T6163] do_group_exit+0x12e/0x300 [ 134.114995][ T6163] __x64_sys_exit_group+0x3b/0x40 [ 134.115015][ T6163] do_syscall_64+0x4c/0xa0 [ 134.115031][ T6163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.115049][ T6163] [ 134.115049][ T6163] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 134.115073][ T6163] _raw_spin_lock_irqsave+0xa4/0xf0 [ 134.115089][ T6163] __wake_up+0xed/0x180 [ 134.115107][ T6163] tty_port_default_wakeup+0xa5/0xf0 [ 134.115124][ T6163] serial8250_tx_chars+0x629/0x830 [ 134.115144][ T6163] serial8250_handle_irq+0x519/0x610 [ 134.115163][ T6163] serial8250_default_handle_irq+0xb4/0x1a0 [ 134.115184][ T6163] serial8250_interrupt+0x9b/0x1c0 [ 134.115202][ T6163] __handle_irq_event_percpu+0x291/0x9b0 [ 134.115220][ T6163] handle_irq_event+0xa5/0x220 [ 134.115237][ T6163] handle_edge_irq+0x243/0xb20 [ 134.115256][ T6163] __common_interrupt+0xd7/0x1e0 [ 134.115272][ T6163] common_interrupt+0xb0/0xd0 [ 134.115289][ T6163] asm_common_interrupt+0x22/0x40 [ 134.115306][ T6163] default_idle+0xb/0x10 [ 134.115320][ T6163] default_idle_call+0x81/0xc0 [ 134.115335][ T6163] do_idle+0x21b/0x5b0 [ 134.115352][ T6163] cpu_startup_entry+0x14/0x20 [ 134.115371][ T6163] start_secondary+0x31f/0x430 [ 134.115390][ T6163] secondary_startup_64_no_verify+0xb1/0xbb [ 134.115409][ T6163] [ 134.115409][ T6163] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 134.115432][ T6163] _raw_spin_lock_irqsave+0xa4/0xf0 [ 134.115449][ T6163] serial8250_console_write+0x170/0xf80 [ 134.115469][ T6163] console_unlock+0xc86/0x1200 [ 134.115484][ T6163] vprintk_emit+0xc0/0x150 [ 134.115503][ T6163] _printk+0xcc/0x110 [ 134.115520][ T6163] register_console+0x682/0x960 [ 134.115536][ T6163] univ8250_console_init+0x41/0x50 [ 134.115555][ T6163] console_init+0x177/0x5d0 [ 134.115570][ T6163] start_kernel+0x2f9/0x530 [ 134.115586][ T6163] secondary_startup_64_no_verify+0xb1/0xbb [ 134.115605][ T6163] [ 134.115605][ T6163] -> #0 (console_owner){-.-.}-{0:0}: [ 134.115628][ T6163] __lock_acquire+0x2c33/0x7c60 [ 134.115647][ T6163] lock_acquire+0x197/0x3f0 [ 134.115666][ T6163] console_lock_spinning_enable+0x51/0x60 [ 134.115682][ T6163] console_unlock+0x9f8/0x1200 [ 134.115697][ T6163] vprintk_emit+0xc0/0x150 [ 134.115717][ T6163] _printk+0xcc/0x110 [ 134.115735][ T6163] debug_objects_oom+0x89/0x2f0 [ 134.115754][ T6163] debug_object_activate+0x409/0x480 [ 134.115775][ T6163] kvfree_call_rcu+0xb5/0x7c0 [ 134.115791][ T6163] trie_update_elem+0x86e/0xc50 [ 134.115809][ T6163] bpf_map_update_value+0x57d/0x650 [ 134.115827][ T6163] generic_map_update_batch+0x525/0x7c0 [ 134.115845][ T6163] bpf_map_do_batch+0x466/0x600 [ 134.115863][ T6163] __sys_bpf+0x601/0x670 [ 134.115888][ T6163] __x64_sys_bpf+0x78/0x90 [ 134.115905][ T6163] do_syscall_64+0x4c/0xa0 [ 134.115921][ T6163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.115939][ T6163] [ 134.115939][ T6163] other info that might help us debug this: [ 134.115939][ T6163] [ 134.115944][ T6163] Chain exists of: [ 134.115944][ T6163] console_owner --> &rq->__lock --> &trie->lock [ 134.115944][ T6163] [ 134.115969][ T6163] Possible unsafe locking scenario: [ 134.115969][ T6163] [ 134.115973][ T6163] CPU0 CPU1 [ 134.115977][ T6163] ---- ---- [ 134.115981][ T6163] lock(&trie->lock); [ 134.115991][ T6163] lock(&rq->__lock); [ 134.116002][ T6163] lock(&trie->lock); [ 134.116013][ T6163] lock(console_owner); [ 134.116024][ T6163] [ 134.116024][ T6163] *** DEADLOCK *** [ 134.116024][ T6163] [ 134.116027][ T6163] 3 locks held by syz.4.512/6163: [ 134.116037][ T6163] #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 134.116081][ T6163] #1: ffff88801b386238 (&trie->lock){-...}-{2:2}, at: trie_update_elem+0xc7/0xc50 [ 134.116124][ T6163] #2: ffffffff8c1112a0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 134.116169][ T6163] [ 134.116169][ T6163] stack backtrace: [ 134.116174][ T6163] CPU: 0 PID: 6163 Comm: syz.4.512 Not tainted syzkaller #0 [ 134.116191][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.116208][ T6163] Call Trace: [ 134.116213][ T6163] [ 134.116221][ T6163] dump_stack_lvl+0x168/0x230 [ 134.116244][ T6163] ? load_image+0x3b0/0x3b0 [ 134.116265][ T6163] ? show_regs_print_info+0x20/0x20 [ 134.116294][ T6163] ? print_circular_bug+0x12b/0x1a0 [ 134.116315][ T6163] check_noncircular+0x274/0x310 [ 134.116335][ T6163] ? add_chain_block+0x940/0x940 [ 134.116352][ T6163] ? lockdep_lock+0xdc/0x1e0 [ 134.116374][ T6163] ? lockdep_unlock+0x134/0x2d0 [ 134.116395][ T6163] ? lockdep_lock+0x1e0/0x1e0 [ 134.116416][ T6163] ? mark_lock+0x94/0x320 [ 134.116440][ T6163] __lock_acquire+0x2c33/0x7c60 [ 134.116460][ T6163] ? put_dec_trunc8+0x1fd/0x340 [ 134.116500][ T6163] ? verify_lock_unused+0x140/0x140 [ 134.116533][ T6163] ? sprintf+0xd6/0x120 [ 134.116559][ T6163] lock_acquire+0x197/0x3f0 [ 134.116579][ T6163] ? console_lock_spinning_enable+0x2c/0x60 [ 134.116599][ T6163] ? prb_read_valid+0x60/0x60 [ 134.116622][ T6163] ? read_lock_is_recursive+0x10/0x10 [ 134.116643][ T6163] ? do_raw_spin_lock+0x11d/0x280 [ 134.116664][ T6163] ? __rwlock_init+0x140/0x140 [ 134.116683][ T6163] ? do_raw_spin_unlock+0x11d/0x230 [ 134.116705][ T6163] console_lock_spinning_enable+0x51/0x60 [ 134.116723][ T6163] ? console_lock_spinning_enable+0x2c/0x60 [ 134.116741][ T6163] console_unlock+0x9f8/0x1200 [ 134.116765][ T6163] ? console_trylock_spinning+0x350/0x350 [ 134.116791][ T6163] ? __down_trylock_console_sem+0x184/0x1e0 [ 134.116809][ T6163] ? vprintk_emit+0xa7/0x150 [ 134.116830][ T6163] ? printk_parse_prefix+0x330/0x330 [ 134.116852][ T6163] ? vprintk_emit+0xa7/0x150 [ 134.116879][ T6163] ? console_trylock+0x70/0x70 [ 134.116907][ T6163] ? vprintk_emit+0x150/0x150 [ 134.116928][ T6163] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 134.116953][ T6163] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 134.116975][ T6163] ? __kernel_text_address+0x9a/0x100 [ 134.116998][ T6163] ? unwind_get_return_address+0x49/0x80 [ 134.117023][ T6163] vprintk_emit+0xc0/0x150 [ 134.117047][ T6163] _printk+0xcc/0x110 [ 134.117072][ T6163] ? load_image+0x3b0/0x3b0 [ 134.117094][ T6163] ? __lock_acquire+0x7c60/0x7c60 [ 134.117115][ T6163] ? do_raw_spin_lock+0x11d/0x280 [ 134.117139][ T6163] debug_objects_oom+0x89/0x2f0 [ 134.117159][ T6163] ? do_raw_spin_unlock+0x11d/0x230 [ 134.117180][ T6163] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 134.117199][ T6163] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 134.117230][ T6163] debug_object_activate+0x409/0x480 [ 134.117257][ T6163] kvfree_call_rcu+0xb5/0x7c0 [ 134.117279][ T6163] ? call_rcu+0x930/0x930 [ 134.117307][ T6163] trie_update_elem+0x86e/0xc50 [ 134.117343][ T6163] bpf_map_update_value+0x57d/0x650 [ 134.117368][ T6163] generic_map_update_batch+0x525/0x7c0 [ 134.117399][ T6163] ? rcu_read_unlock+0x90/0x90 [ 134.117422][ T6163] ? __fdget+0x18b/0x210 [ 134.117441][ T6163] ? rcu_read_unlock+0x90/0x90 [ 134.117458][ T6163] bpf_map_do_batch+0x466/0x600 [ 134.117483][ T6163] __sys_bpf+0x601/0x670 [ 134.117505][ T6163] ? bpf_link_show_fdinfo+0x340/0x340 [ 134.117535][ T6163] ? vtime_user_exit+0x2dc/0x400 [ 134.117560][ T6163] __x64_sys_bpf+0x78/0x90 [ 134.117581][ T6163] do_syscall_64+0x4c/0xa0 [ 134.117598][ T6163] ? clear_bhb_loop+0x30/0x80 [ 134.117616][ T6163] ? clear_bhb_loop+0x30/0x80 [ 134.117636][ T6163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.117656][ T6163] RIP: 0033:0x7ff2cd4ea749 [ 134.117672][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.117688][ T6163] RSP: 002b:00007ff2cb751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.117706][ T6163] RAX: ffffffffffffffda RBX: 00007ff2cd740fa0 RCX: 00007ff2cd4ea749 [ 134.117721][ T6163] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001a [ 134.117733][ T6163] RBP: 00007ff2cd56ef91 R08: 0000000000000000 R09: 0000000000000000 [ 134.117744][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.117755][ T6163] R13: 00007ff2cd741038 R14: 00007ff2cd740fa0 R15: 00007fffe9588bc8 [ 134.117781][ T6163] [ 135.337287][ C0] net_ratelimit: 2089 callbacks suppressed [ 135.337304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 135.355659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 135.368936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 135.381285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 135.391237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.394252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 135.406186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.417462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 135.429860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.442095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 137.586704][ T6200] netlink: 'syz.1.522': attribute type 15 has an invalid length. [ 137.603101][ T6200] netlink: 'syz.1.522': attribute type 7 has an invalid length. [ 140.341845][ C1] net_ratelimit: 14841 callbacks suppressed [ 140.341864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.342374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 140.348496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.359977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 140.372472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.383985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:36:aa:4e:0d:24, vlan:0) [ 140.396263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.408420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 140.420350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.431691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)