last executing test programs: 3m27.713416741s ago: executing program 3 (id=1990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, 0x0, 0x66) 3m27.431447535s ago: executing program 3 (id=1994): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x14}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x45}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @broadcast}) 3m27.191125819s ago: executing program 3 (id=1997): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m27.004305582s ago: executing program 3 (id=1998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3m26.720771096s ago: executing program 3 (id=2004): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x17) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) 3m25.957004948s ago: executing program 3 (id=2012): perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffeed) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000410000005000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0], 0x48) perf_event_open(0x0, 0x0, 0xffeffbffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 3m10.454151836s ago: executing program 32 (id=2012): perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffeed) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000410000005000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0], 0x48) perf_event_open(0x0, 0x0, 0xffeffbffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 9.330979807s ago: executing program 2 (id=2761): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000640)={&(0x7f00000003c0)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000300)="16", 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x4000004}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800efffad8c979be8047acc", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) perf_event_open$cgroup(&(0x7f0000001000)={0x6, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) unlink(&(0x7f0000000140)='./cgroup\x00') socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 8.972672663s ago: executing program 2 (id=2762): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000b40)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x2, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, 0x0, &(0x7f0000000800)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r2, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair(0x1f, 0x1, 0x2, &(0x7f00000003c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x1ff) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 4.745503638s ago: executing program 4 (id=2768): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f00000004c0)}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000000f01f00810000007f000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, r3, 0x4, '\x00', 0x0, r4, 0x4000005, 0x1, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES16=r5, @ANYRES32], 0xffdd) 4.726234368s ago: executing program 2 (id=2769): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r6 = openat$cgroup_int(r3, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) write$cgroup_int(r6, 0x0, 0x0) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="2fd0ff0006094f492faff2f173e1ac871d48eef87bb90a19da77ed4bb5ae2e86f7b0cf112203043f022f05c93af58dc47d13e4ed9d9426f7db4e53422cbc58b6b2e48d2a7570b19a5bdcded6dfa976c4bce46e30294d29a8f2bbfa35a756c52f5861fc73de3cd1c8f287a49685e7518b86f45801c10da574d850fd5c2ad8f247931b3c139b7fa61e4af791a289") 4.220202946s ago: executing program 0 (id=2771): perf_event_open(&(0x7f0000000800)={0x2, 0xc0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{}, &(0x7f0000000e00), 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3.708808984s ago: executing program 4 (id=2772): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 3.611516545s ago: executing program 0 (id=2773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 3.567495406s ago: executing program 4 (id=2782): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000640)={&(0x7f00000003c0)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000300)="16", 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x4000004}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800efffad8c979be8047acc", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) perf_event_open$cgroup(&(0x7f0000001000)={0x6, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) unlink(&(0x7f0000000140)='./cgroup\x00') socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 3.516217256s ago: executing program 0 (id=2774): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a5181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x200, 0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) close(0xffffffffffffffff) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 2.63493551s ago: executing program 4 (id=2775): ioctl$TUNGETFILTER(0xffffffffffffffff, 0xc0189436, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x469, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9fef0076805268c98be14f06558", 0x0, 0xdc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = syz_clone(0x2002000, &(0x7f0000003100)="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", 0x9f8, &(0x7f0000000040), &(0x7f0000000200), &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x6, [@fwd={0x3}, @volatile={0x4}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x3}, @datasec={0x3, 0x0, 0x0, 0xf, 0x1, [], "8b"}, @datasec={0x6, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x9, 0x2}], "1f9c3b"}]}, {0x0, [0x0, 0x2e, 0x2e, 0x61]}}, &(0x7f00000002c0)=""/50, 0x6e, 0x32, 0x1, 0x3}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000300)='!@(*+\x00'}, 0x30) 2.389088584s ago: executing program 4 (id=2777): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 2.370941584s ago: executing program 4 (id=2778): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61122800000000006113480000000000bf1000000000000015000200091bfbff3d030100000000008701000257000000bc26000000000000bf67000000000000140300000ee600f06702000014000000160302000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad4301000000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.354924724s ago: executing program 1 (id=2779): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 2.272834725s ago: executing program 1 (id=2780): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="d4686c6b491cbd33ffffff0000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x40000}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x4, 0x9, 0x3, 0x1, 0x0, 0xffff, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0xa028, 0x9, 0xd6d9, 0x0, 0x812, 0x5, 0x5, 0x0, 0x6, 0x0, 0x101}, 0x0, 0x8, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x42) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x6c}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) close(r4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, r4, 0x2, 0x0, 0x4000}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x1ff) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x5, 0xe, 0x0, &(0x7f0000000280)="6a370000000000001f71a76d2688", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000006c77030a89079f03b180004415050300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 1.651434315s ago: executing program 2 (id=2783): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 1.630285326s ago: executing program 1 (id=2784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) 1.34818996s ago: executing program 2 (id=2785): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.208615102s ago: executing program 1 (id=2786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f00000004c0)}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000000f01f00810000007f000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, r3, 0x4, '\x00', 0x0, r4, 0x4000005, 0x1, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES16=r5, @ANYRES32], 0xffdd) 625.776641ms ago: executing program 0 (id=2787): ioctl$TUNGETFILTER(0xffffffffffffffff, 0xc0189436, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x469, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9fef0076805268c98be14f06558", 0x0, 0xdc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = syz_clone(0x2002000, &(0x7f0000003100)="0aaa40c3b4b23c5b429dbb49e81714985ae0cd1b8c1f8ee463cc4ae10d00db570975d3fa895670027533406a55cc0848092032de3c3928a7d27bd85a0f72e143896d2d5afff2fed28eea6fa0c6e83420ad718a87072869991a6ae532e681113da989bc90679d7a72dd0d62d9cd0a8fbafb4f6a53412320d89b346b5252f099eab7ac8e65b5d95f01001ec53bdeea5a7ae1961c6662a424805404321c4b469a76bdf44f8e7bafa8a28d347c6bd1980cf247d7795aece76a328b93f94ee0f6a8183c2cd53deb8b07232f4ae5d9c73b6c64f5d806249f3f37500fe95933047a25c5e84940bf6f403dc53896c658ec495b6eb07945a1e68bc04ec760045cc3d6eeb30e4155f5d4725b397c2856d14510d9644e374fe6feebc1c040a813f03492966b3b373411e7f6e95eb387d155a2207bade9238379760ea1924ae7dd66c4415d70d04a50053382b76f15659f67035a6fa94a609a3b2c9963506ba85cbe3a0c8151a9c74582ea03526fce12ee7e867f346065c7c40b5754fed2696835b3d1115ef8c3a88b40262db065a035c4d1230794f2996ce20dafd49b38ecbaffc59616b64960cedc249b55c06028a0d5639087d48c31aaf1973fe5d11c4ee5df6f8a857e6930851b935b1ae086279c7bd4e9c239f726c1a67a72d3b7243d4bbec0266adf55af95226dc37510daa1968d4a8f40f10764b8b32e748b03f1be6d1d1a1a3598b1a7c0935d7c611a4294a962b20bd5c1018f57df235e7c5a840030b6404b2f31eaadd3a9a0b4bc2e829562bc0fb162631db5ee10e8e339fa76224fc2e63edcf1361372816516b2b286c90f7ae8f127bbfa617fd23ec8149bd18e385b62eb300f79548b234fee69f5a6ee27f144d64ea5dc3176e3d1a178e8b63c18f3fc7f62d73dd538c24e61c7567306a9d28b7fda5a6719f686c8794ed583e0788fd343054a1e60c6c7e100ada729235b5bc6adca3663bbeb55e44c04efdaca0ed3bce5a1c57e15ee3a5935b957ae29b0bfad79193f7ab89bd95cb67bf37cba93eecec582adf0a4b5265c53d2d4b84303869cab80e4c0ebcbfc8411e7f664ded4b2d9902ab7aefbb3472edd1c2e90253bd8efb22628e089201a7f44e794a5d68df843a9b3eefe2e6594cbaf66a08acfe5097d7cb89327c2b4f749dfec0d3e6bef96c089d6284c67f5ae7f2920fe330de9a8af309a4aa1af591368f0d70179e6cd6c3dbedfdbc93cb675a6b0234d17fae40aa173c5945db1a371223aaf29354e011826d76cbae1136587cac78bd79b3d0d6e951dfb0fc06059b1395c0359a15ae30f97ccdd4b2ab169fbba4a31beebe880e0922eb3af957ffb02f37a63fe13d2801a95d22f1be02b006d3fe79f74bdecb98d593b19012a46daf992ad338cc0175f6490bfd812032344dbff8a66e093b17f6412d55a75475d86c2d530ee0bc17342c81db262ca448ec8ef98dad2481f05b437426165b6e858ec4b8714af397d7605aa627531905865a4b4769a256ebb415162e105e2ab15bfd4df079e678aded58da62fe75b0d42bde421bbbeefc6aed5f93926017add8c041a24220b2d12bda02b04c3e5c94cf26242b690c90b1995224980771380e16b201bdad3230ba84d47b02555d0a5af42315b4425df6931bf980b11c9883a896fcf234e6b03c201faeb00f4ad710e312332e2bec8eb0f8923b1d4cb00be88d8acaa84a8c3cee6024c2343e3cbc33d2d0320a34af15c6f0aec3ac4c5f0e4770b4d570ed20fb7cf55b0d6e0b50cbb1356d76308285b5904a6926aeaeae46b193f2bf9aa0c544e5feac10c4152a8172078d50d2467c383d7172e1cce0875e8e9c68630e3ad3c9cc9ad122dd8701ce426e4ccd7934580416c5d632d35b2247cb5ac49f33f016af28da1284f30202764b3d34fcae63133d9731fcde15c2a51b0cb1bf90eb96932a2b554a58387d3ca50b829d9404c49013f39be37f8781bb7e90da9d5137cc2fb775db0f0231b8c2a2b017f0fd0b5e78939c4957733512da10d63cc71f629a42312eda89daf2ecb9a9fb186f1657da3788c01f50fe393af2547bcafe07d464aaf9fed8870f11d128ae0995214631f2b58e71cfdfd302de45691589bdfa792c684a086a459ee52ea9c5c9f591eb3dfd99a9a8f6b93be4575d308cbd3b7301541855eb3a601757a81b7c1b644f195f56457860c4bd242edd4815cc7b6f7d01017e12782ebe9af3764dba404caf1879e2394db10879accbb32ac36e6512aa7d025f3b3cd2d74c392c672fc8fb8cf8dce3e8bd1d32153a8b343f581d9fa30d68dbc6121e4349210a97addb37b10aac1fe524305ebd45959baca343007a182c58bd45eb078b6343da3db90e879650e7ac7f35c20e519f24185fd920dd6173ee4b0bd86f0c4a26b05d98115fc1ba6895617e46313d89c7d97e955cd157c3d8b0b89a0aea59ebf963be85694ee93af122334d614bab982abb97294250ac20473303df34f638f6a45ad5583b5fb409acc3aebb8a6eed2453d64ff1c73d7e50f2842024adc5c9c895693b2f2e7e13aef069aeedd2d94e8d757d6417b40409a63ef753db8333d89586e1625b997be8acad69b1a017451316f25ae74274953b051210059addb6431c05e7a82c8eebf8dbdb433cf2c7ff85a5f975ead76318b3cbbb27999238debbb942e94fb5c5a16faaf07543e50403939135161181f62c77a01408e6e3aee0db2fd0232cad7ae5b14d378160b0b15ca0edbe46af0c7584594c2594e7b32e5eac10e682261ad6245e026e22515e396fa109183c82f2b32e01814b443bf4a8718677d1f046ab3a5863f557dd8558bdfe864d6b70e569f40a29769c28ee52f4e716aa9a5c6469dbf2789d2d52817c62d13f9079d96dbf79118c8b191f5de0eca939670f46c309abb245dd774a6e57ad7de52ac6dea42d83aa4911a6c4de59e7d1b1c58c974e8cc5cd992aec60fa196a0503a86899cfb7b4aef59697269619fa2faf58a5d78981183e8acce0500d9f3486ad0c47ea3f055d0ba9344eeca74558a329e5cd512e06538e7d02d50a7ddf0aa99368ed61b687cb821ccf27f186c1f77c22423c388c6f4c466916b88deb10315ff944cc9be64770d95ad3f7b493bffbfe2f7839e773062c4e7fe634f288d0703b80b15b71c65572e3c3f10fc6fe277057b2ea3a22d420ddfadf1c2d5b295025072edc1d7d9ce9fe4ac28c11b09acb33c579f98145beae687ba07a6e38a82414f348b5deb2bc4d9aa963ec8b785e59eb7f1b6640c7718f0f4acbe5108a9da4222a32f1307ddc1fdb03862e9e3fe469420759de8e75541d7c7ce53a33da024f958369ec8123b090ed71ede05de0302f0fa2fba7f33df20b0778a8a26a35d21078e753f32ef5c950ce869f8d510074bb650e5f326573196d7370aa99adfdca7a2e9730af533178d20a5d24abfa38e60112d33f1a5a4fcd4003b43eca38d9a1ae071a9314ad137af104774b8b26ce28c8c6846c0f3c74b8653369a5361724b75bbf71a428fe24ced61ee00a3b1dde94c1af2bf4d3aa9b278c06e29eb47653ac022b13e8f8005bb4ca5d459ae325144ec840f0270f0f3a2b17dfbf980a1d82715c17e4a3383020423422c1c7d61f55ebc672c1143f480", 0x9f8, &(0x7f0000000040), &(0x7f0000000200), &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x6, [@fwd={0x3}, @volatile={0x4}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x3}, @datasec={0x3, 0x0, 0x0, 0xf, 0x1, [], "8b"}, @datasec={0x6, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x9, 0x2}], "1f9c3b"}]}, {0x0, [0x0, 0x2e, 0x2e, 0x61]}}, &(0x7f00000002c0)=""/50, 0x6e, 0x32, 0x1, 0x3}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000300)='!@(*+\x00'}, 0x30) 230.767637ms ago: executing program 2 (id=2788): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000640)={&(0x7f00000003c0)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000300)="16", 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x4000004}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800efffad8c979be8047acc", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) perf_event_open$cgroup(&(0x7f0000001000)={0x6, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) unlink(&(0x7f0000000140)='./cgroup\x00') socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 169.087528ms ago: executing program 0 (id=2789): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 144.861428ms ago: executing program 1 (id=2790): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 49.52912ms ago: executing program 1 (id=2791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x4, [@ptr={0xc, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0x0, 0x3}, {0xd, 0x2}]}, @volatile={0x4}, @float={0x1, 0x0, 0x0, 0x10, 0x4}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0xc, 0xbae}, {0xf, 0x8}, {0xa}, {0xa, 0x8}]}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000b00)=""/253, 0x9c, 0xfd, 0x0, 0x10}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r2, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0], 0x0, 0x3f, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x10, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000006c0)='syzkaller\x00', 0x8001, 0x1f, &(0x7f0000000a00)=""/31, 0x41100, 0x1a, '\x00', r4, @sk_msg, r1, 0x8, &(0x7f0000000f00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0x5, 0xfffffffa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000fc0)=[r0, r0, r0, r0], &(0x7f0000001040)=[{0x0, 0x4, 0xf, 0x2}], 0x10, 0x1}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)='R', 0x1}], 0x1, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb5}, {}, {}, [@jmp={0x5, 0x0, 0x8, 0xb, 0x0, 0x4, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x51}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfffffffb, 0x62, &(0x7f0000000380)=""/98, 0x40f00, 0x1, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000400)=[r0, r0], &(0x7f00000007c0)=[{0x1, 0x5, 0x9, 0x3}, {0x1, 0x4, 0x10, 0xc}, {0x4, 0x2, 0x8, 0x1}, {0x4, 0x2, 0x10, 0x3}, {0x0, 0x5, 0x7, 0xc}, {0x1, 0x4, 0xe, 0x9}, {0x0, 0x3, 0x6, 0xc}, {0x3, 0x4, 0xc, 0x7}, {0x1, 0x2, 0xf, 0x5}], 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 0s ago: executing program 0 (id=2792): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0xfffffdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1510, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_pid(r3, &(0x7f0000000980), 0x20000992) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 74.552919][ T5774] cgroup: Unknown subsys name 'net' [ 74.719955][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.341342][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.414603][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.423112][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.430885][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.432383][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.439632][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.452434][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.460504][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.463711][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.469149][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.475896][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.482579][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.492378][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.496806][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.504213][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.510159][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.521350][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.524488][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.537867][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.546691][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.554667][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.564110][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.581365][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.583814][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.596118][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.081594][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 79.182644][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 79.232408][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 79.247626][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 79.369943][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.377288][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.385110][ T5785] bridge_slave_0: entered allmulticast mode [ 79.392851][ T5785] bridge_slave_0: entered promiscuous mode [ 79.400682][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.407976][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.415232][ T5784] bridge_slave_0: entered allmulticast mode [ 79.422271][ T5784] bridge_slave_0: entered promiscuous mode [ 79.449000][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.456240][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.463899][ T5785] bridge_slave_1: entered allmulticast mode [ 79.470791][ T5785] bridge_slave_1: entered promiscuous mode [ 79.478265][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.485680][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.493107][ T5784] bridge_slave_1: entered allmulticast mode [ 79.500021][ T5784] bridge_slave_1: entered promiscuous mode [ 79.606284][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.613626][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.620769][ T5783] bridge_slave_0: entered allmulticast mode [ 79.627867][ T5783] bridge_slave_0: entered promiscuous mode [ 79.635550][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.642872][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.650005][ T5793] bridge_slave_0: entered allmulticast mode [ 79.657389][ T5793] bridge_slave_0: entered promiscuous mode [ 79.667849][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.680397][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.689826][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.697590][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.705071][ T5783] bridge_slave_1: entered allmulticast mode [ 79.712106][ T5783] bridge_slave_1: entered promiscuous mode [ 79.718931][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.726386][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.733648][ T5793] bridge_slave_1: entered allmulticast mode [ 79.740541][ T5793] bridge_slave_1: entered promiscuous mode [ 79.749805][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.772866][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.832954][ T5785] team0: Port device team_slave_0 added [ 79.876992][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.888283][ T5785] team0: Port device team_slave_1 added [ 79.909661][ T5784] team0: Port device team_slave_0 added [ 79.919127][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.930275][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.951257][ T5784] team0: Port device team_slave_1 added [ 79.970808][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.016533][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.023711][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.050180][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.094220][ T5793] team0: Port device team_slave_0 added [ 80.104963][ T5783] team0: Port device team_slave_0 added [ 80.111519][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.118536][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.145825][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.158478][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.165759][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.191732][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.204347][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.211318][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.237308][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.250062][ T5793] team0: Port device team_slave_1 added [ 80.269021][ T5783] team0: Port device team_slave_1 added [ 80.324566][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.331538][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.357909][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.382149][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.389124][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.415613][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.445024][ T5785] hsr_slave_0: entered promiscuous mode [ 80.451553][ T5785] hsr_slave_1: entered promiscuous mode [ 80.459962][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.467503][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.493532][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.510489][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.517728][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.543787][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.591542][ T5784] hsr_slave_0: entered promiscuous mode [ 80.598042][ T5784] hsr_slave_1: entered promiscuous mode [ 80.604565][ T5794] Bluetooth: hci1: command tx timeout [ 80.610423][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.612160][ T5794] Bluetooth: hci0: command tx timeout [ 80.620805][ T5784] Cannot create hsr debugfs directory [ 80.682336][ T5800] Bluetooth: hci2: command tx timeout [ 80.688130][ T5794] Bluetooth: hci3: command tx timeout [ 80.705914][ T5783] hsr_slave_0: entered promiscuous mode [ 80.713394][ T5783] hsr_slave_1: entered promiscuous mode [ 80.719849][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.727931][ T5783] Cannot create hsr debugfs directory [ 80.783680][ T5793] hsr_slave_0: entered promiscuous mode [ 80.790071][ T5793] hsr_slave_1: entered promiscuous mode [ 80.797017][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.804701][ T5793] Cannot create hsr debugfs directory [ 81.218108][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.235960][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.252896][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.271601][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.329501][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.339730][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.364050][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.400433][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.446914][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.460261][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.478337][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.499527][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.586020][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.598111][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.621682][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.643305][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.743963][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.765600][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.805489][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.821594][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.839746][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.847042][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.862905][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.870062][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.930683][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.937913][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.971720][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.978935][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.011734][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.060673][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.084010][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.123926][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.185114][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.192318][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.255523][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.262794][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.304291][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.320412][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.416063][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.423318][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.508139][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.515336][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.690564][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.699209][ T5794] Bluetooth: hci0: command tx timeout [ 82.699230][ T5800] Bluetooth: hci1: command tx timeout [ 82.762127][ T5800] Bluetooth: hci3: command tx timeout [ 82.762154][ T5794] Bluetooth: hci2: command tx timeout [ 82.903971][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.931009][ T5784] veth0_vlan: entered promiscuous mode [ 83.002923][ T5784] veth1_vlan: entered promiscuous mode [ 83.120880][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.130569][ T5785] veth0_vlan: entered promiscuous mode [ 83.153885][ T5784] veth0_macvtap: entered promiscuous mode [ 83.187717][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.197245][ T5784] veth1_macvtap: entered promiscuous mode [ 83.218846][ T5785] veth1_vlan: entered promiscuous mode [ 83.267735][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.299297][ T5793] veth0_vlan: entered promiscuous mode [ 83.311632][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.326664][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.336821][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.346725][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.355789][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.388882][ T5793] veth1_vlan: entered promiscuous mode [ 83.398549][ T5783] veth0_vlan: entered promiscuous mode [ 83.429805][ T5783] veth1_vlan: entered promiscuous mode [ 83.440755][ T5785] veth0_macvtap: entered promiscuous mode [ 83.458384][ T5785] veth1_macvtap: entered promiscuous mode [ 83.531802][ T5793] veth0_macvtap: entered promiscuous mode [ 83.547901][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.559128][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.573330][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.602360][ T5783] veth0_macvtap: entered promiscuous mode [ 83.609822][ T5793] veth1_macvtap: entered promiscuous mode [ 83.641270][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.655446][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.670368][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.687724][ T5783] veth1_macvtap: entered promiscuous mode [ 83.718138][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.730100][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.739254][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.748568][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.758788][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.767750][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.822757][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.830628][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.842979][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.854266][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.864144][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.874625][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.888916][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.898423][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.910096][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.920526][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.931020][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.940932][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.952621][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.965114][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.990857][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.001551][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.013688][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.024442][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.036424][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.051088][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.060929][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.070002][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.078906][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.091124][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.102627][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.114729][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.127174][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.143124][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.154086][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.165912][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.193905][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.206405][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.218592][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.228290][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.280428][ C1] hrtimer: interrupt took 158887 ns [ 84.762183][ T5794] Bluetooth: hci0: command tx timeout [ 84.772191][ T5794] Bluetooth: hci1: command tx timeout [ 84.777739][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.792190][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.842989][ T5794] Bluetooth: hci3: command tx timeout [ 84.843001][ T5800] Bluetooth: hci2: command tx timeout [ 84.878545][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.891078][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.958491][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.978690][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.022045][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.029951][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.144072][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.171743][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.222326][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.230324][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.635917][ T5892] Zero length message leads to an empty skb [ 85.941507][ T5896] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 86.032088][ T5896] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.842190][ T5794] Bluetooth: hci1: command tx timeout [ 86.842201][ T5800] Bluetooth: hci0: command tx timeout [ 86.925577][ T5800] Bluetooth: hci2: command tx timeout [ 86.931075][ T5800] Bluetooth: hci3: command tx timeout [ 90.061376][ T5919] veth0_vlan: entered allmulticast mode [ 91.044943][ T5922] syzkaller0: entered promiscuous mode [ 91.051125][ T5922] syzkaller0: entered allmulticast mode [ 92.167758][ T9] cfg80211: failed to load regulatory.db [ 95.366146][ T5938] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 95.453674][ T5938] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.17'. [ 97.486552][ T5956] sit0: entered allmulticast mode [ 97.679231][ T5956] sit0: entered promiscuous mode [ 99.705414][ T5981] netlink: 'syz.1.30': attribute type 3 has an invalid length. [ 99.741771][ T5981] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.30'. [ 102.334133][ T6009] sit0: entered allmulticast mode [ 102.725082][ T6009] sit0: entered promiscuous mode [ 104.028467][ T6017] GPL: port 1(erspan0) entered blocking state [ 104.045008][ T6017] GPL: port 1(erspan0) entered disabled state [ 104.051358][ T6017] erspan0: entered allmulticast mode [ 104.061738][ T6017] erspan0: entered promiscuous mode [ 104.074296][ T6017] GPL: port 1(erspan0) entered blocking state [ 104.080816][ T6017] GPL: port 1(erspan0) entered forwarding state [ 104.275582][ T6028] netlink: 'syz.1.45': attribute type 3 has an invalid length. [ 104.287808][ T6028] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.45'. [ 108.815921][ T6087] netlink: 'syz.1.58': attribute type 3 has an invalid length. [ 108.823897][ T6087] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.58'. [ 113.285680][ T6119] netlink: 'syz.1.71': attribute type 3 has an invalid length. [ 113.331169][ T6119] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.71'. [ 114.276124][ T6128] sit0: left promiscuous mode [ 114.611772][ T6130] @ÿ: renamed from bond_slave_0 (while UP) [ 114.703383][ T6133] sit0: entered promiscuous mode [ 115.300806][ T6150] sit0: entered allmulticast mode [ 115.429894][ T6150] sit0: entered promiscuous mode [ 115.737916][ T6157] netlink: 'syz.2.82': attribute type 3 has an invalid length. [ 115.754121][ T6157] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.82'. [ 117.001373][ T6181] sit0: left promiscuous mode [ 117.858069][ T6202] netlink: 'syz.3.97': attribute type 3 has an invalid length. [ 117.873714][ T6202] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.97'. [ 117.894418][ T6192] sit0: entered allmulticast mode [ 117.919974][ T6193] sit0: entered promiscuous mode [ 118.561517][ T6226] sit0: left promiscuous mode [ 118.895741][ T6232] netlink: 'syz.1.109': attribute type 13 has an invalid length. [ 118.912667][ T6236] netlink: 'syz.3.111': attribute type 10 has an invalid length. [ 119.584169][ T6259] netlink: 'syz.0.119': attribute type 3 has an invalid length. [ 119.610418][ T6259] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.119'. [ 120.711148][ T6294] netlink: 'syz.0.139': attribute type 3 has an invalid length. [ 120.748983][ T6294] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.139'. [ 123.706495][ T6319] netlink: 'syz.2.142': attribute type 3 has an invalid length. [ 123.730606][ T6319] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.142'. [ 125.867549][ T6362] netlink: 'syz.2.161': attribute type 3 has an invalid length. [ 125.905377][ T6362] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.161'. [ 126.255162][ T6366] tap0: tun_chr_ioctl cmd 2148553947 [ 127.867727][ T6395] tap0: tun_chr_ioctl cmd 2148553947 [ 128.059839][ T6401] netlink: 'syz.1.174': attribute type 3 has an invalid length. [ 128.082213][ T6401] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.174'. [ 132.690166][ T6446] netlink: 'syz.1.193': attribute type 3 has an invalid length. [ 132.719768][ T6445] warning: `syz.0.194' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.737615][ T6446] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.193'. [ 133.119761][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.136575][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.873275][ T6463] wg2: entered promiscuous mode [ 133.879735][ T6463] wg2: entered allmulticast mode [ 134.309304][ T5794] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 134.594160][ T6482] netlink: 'syz.1.209': attribute type 3 has an invalid length. [ 134.628064][ T6482] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.209'. [ 136.950429][ T5794] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 137.656523][ T6535] netlink: 'syz.0.226': attribute type 3 has an invalid length. [ 137.699292][ T6535] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.226'. [ 138.592427][ T5794] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 138.949731][ T6562] netlink: 'syz.0.243': attribute type 3 has an invalid length. [ 139.022189][ T6562] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.243'. [ 139.333467][ T6565] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 139.340805][ T6565] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 142.355265][ T6603] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 142.377179][ T6603] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 142.429814][ T6614] netlink: 'syz.3.262': attribute type 3 has an invalid length. [ 142.467106][ T6614] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.262'. [ 145.768335][ T6651] netlink: 'syz.2.277': attribute type 3 has an invalid length. [ 145.781319][ T6651] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.277'. [ 148.588409][ T6681] sit0: entered promiscuous mode [ 153.320295][ T6712] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 153.374962][ T6712] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.304'. [ 154.092728][ T6731] netlink: 'syz.1.313': attribute type 3 has an invalid length. [ 154.114122][ T6731] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.313'. [ 154.695951][ T6744] netlink: 'syz.1.324': attribute type 3 has an invalid length. [ 154.709262][ T6744] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.324'. [ 154.864368][ T6748] sit0: entered promiscuous mode [ 155.835602][ T6770] netlink: 'syz.3.329': attribute type 3 has an invalid length. [ 155.852252][ T6770] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.329'. [ 155.877353][ T6772] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 155.941338][ T6774] sit0: left promiscuous mode [ 156.273821][ T6775] sit0: entered promiscuous mode [ 156.869456][ T6791] sit0: left promiscuous mode [ 157.415534][ T6801] netlink: 'syz.0.340': attribute type 3 has an invalid length. [ 157.446647][ T6801] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.340'. [ 158.133920][ T6824] netlink: 'syz.1.351': attribute type 3 has an invalid length. [ 158.154710][ T6824] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.351'. [ 158.375204][ T6833] sit0: left promiscuous mode [ 158.930904][ T5794] Bluetooth: hci1: Malformed HCI Event [ 159.044914][ T6851] netlink: 'syz.2.362': attribute type 3 has an invalid length. [ 159.058717][ T6851] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.362'. [ 159.854460][ T6878] netlink: 'syz.2.374': attribute type 3 has an invalid length. [ 159.884163][ T6878] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.374'. [ 160.083681][ T6883] sit0: left promiscuous mode [ 160.378990][ T6887] sit0: entered promiscuous mode [ 160.672879][ T6897] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 160.697935][ T6897] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 160.711508][ T6897] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 161.024128][ T6905] netlink: 'syz.0.385': attribute type 3 has an invalid length. [ 161.056601][ T6905] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.385'. [ 161.609548][ T6924] sit0: left promiscuous mode [ 161.949359][ T6925] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 161.986104][ T6925] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 162.003165][ T6930] sit0: entered promiscuous mode [ 162.503685][ T6939] netlink: 'syz.2.400': attribute type 3 has an invalid length. [ 162.515513][ T6939] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.400'. [ 163.163123][ T6957] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 163.180565][ T6957] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 163.211134][ T6961] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 163.219295][ T6961] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 164.659385][ T5794] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 169.663006][ T5794] Bluetooth: hci3: Malformed LE Event: 0x0d [ 173.525599][ T7192] Driver unsupported XDP return value 0 on prog (id 311) dev N/A, expect packet loss! [ 175.236558][ T5794] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 176.989948][ T7271] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 177.022011][ T7271] syzkaller0: group set to 0 [ 178.692101][ T7307] syzkaller0: entered promiscuous mode [ 178.697777][ T7307] syzkaller0: entered allmulticast mode [ 179.015161][ T5794] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6 [ 180.559832][ T7339] pim6reg1: entered promiscuous mode [ 180.599746][ T7339] pim6reg1: entered allmulticast mode [ 181.861267][ T5794] Bluetooth: hci2: Malformed LE Event: 0x0d [ 185.093050][ T7489] bridge_slave_0: mtu greater than device maximum [ 190.577875][ T5794] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 194.537741][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.563874][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.684742][ T7797] bridge0: port 3(bond0) entered blocking state [ 199.703731][ T7797] bridge0: port 3(bond0) entered disabled state [ 199.730076][ T7797] bond0: entered allmulticast mode [ 199.747271][ T7797] @ÿ: entered allmulticast mode [ 199.752534][ T7797] bond_slave_1: entered allmulticast mode [ 199.764112][ T7797] bond0: entered promiscuous mode [ 199.770160][ T7797] @ÿ: entered promiscuous mode [ 199.783105][ T7797] bond_slave_1: entered promiscuous mode [ 199.789631][ T7797] bridge0: port 3(bond0) entered blocking state [ 199.796119][ T7797] bridge0: port 3(bond0) entered forwarding state [ 201.724511][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 201.730690][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 201.731911][ T5101] Bluetooth: hci2: command 0x0406 tx timeout [ 207.872870][ T8000] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 221.271725][ T8186] veth1_to_bond: entered promiscuous mode [ 221.285836][ T8186] veth1_to_bond: entered allmulticast mode [ 230.463047][ T8291] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 242.783449][ T5791] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 244.546156][ T5791] Bluetooth: hci1: Malformed LE Event: 0x0d [ 247.762816][ T5791] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 249.806575][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 255.164446][ T6237] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 255.967356][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.973805][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.683816][ T8708] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 258.712443][ T8708] syzkaller0: linktype set to 774 [ 259.941089][ T5156] udevd[5156]: worker [8641] terminated by signal 33 (Unknown signal 33) [ 259.976547][ T5156] udevd[5156]: worker [8641] failed while handling '/devices/virtual/block/loop0' [ 260.286255][ T5800] Bluetooth: hci1: Dropping invalid advertising data [ 260.295429][ T5800] Bluetooth: hci1: Malformed LE Event: 0x02 [ 264.032452][ T8779] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 264.038429][ T8779] syzkaller0: linktype set to 512 [ 266.613250][ T8823] syzkaller0: entered promiscuous mode [ 266.618992][ T8823] syzkaller0: entered allmulticast mode [ 266.956978][ T5800] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 281.224579][ T9044] syzkaller0: entered promiscuous mode [ 281.286984][ T9044] syzkaller0: entered allmulticast mode [ 294.787345][ T5800] Bluetooth: hci3: unknown advertising packet type: 0xff [ 294.876905][ T9209] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 295.195301][ T5800] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 298.740252][ T9260] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.033081][ T5800] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 309.659817][ T5800] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 311.722817][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 317.405424][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.413413][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.937548][ T9577] syz.2.1487[9577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.937696][ T9577] syz.2.1487[9577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.408396][ T9615] syz.0.1498[9615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.456718][ T9615] syz.0.1498[9615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.213011][ T5800] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 343.281126][ T9804] syzkaller0: entered promiscuous mode [ 343.295068][ T9804] syzkaller0: entered allmulticast mode [ 349.839659][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.847480][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.861520][ T9863] bridge0: entered allmulticast mode [ 353.974107][ T9910] wg2: entered promiscuous mode [ 353.984571][ T9910] wg2: entered allmulticast mode [ 354.145617][ T9923] syzkaller0: entered promiscuous mode [ 354.151258][ T9923] syzkaller0: entered allmulticast mode [ 356.418352][ T9958] veth1_macvtap: left promiscuous mode [ 363.960294][T10050] bond_slave_1: mtu less than device minimum [ 368.690656][T10126] bond_slave_1: mtu less than device minimum [ 370.822142][T10147] sit0: left promiscuous mode [ 371.422052][T10156] bond_slave_1: mtu less than device minimum [ 373.871281][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.889193][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.992009][T10181] bridge0: entered allmulticast mode [ 374.260352][T10186] bridge_slave_1: left allmulticast mode [ 374.266261][T10186] bridge_slave_1: left promiscuous mode [ 374.272927][T10186] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.284991][T10186] bridge_slave_0: left allmulticast mode [ 374.290787][T10186] bridge_slave_0: left promiscuous mode [ 374.297037][T10186] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.371776][T10187] wg2: entered promiscuous mode [ 374.377325][T10187] wg2: entered allmulticast mode [ 375.309357][T10220] syz.1.1723[10220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.309608][T10220] syz.1.1723[10220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.397816][T10214] veth0_vlan: entered allmulticast mode [ 375.782185][T10217] veth0_vlan: left promiscuous mode [ 375.797385][T10217] veth0_vlan: entered promiscuous mode [ 378.851037][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.863032][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.811633][T10289] sit0: entered promiscuous mode [ 405.077244][T10544] wg2: left promiscuous mode [ 405.106607][T10544] wg2: left allmulticast mode [ 420.772130][T10695] syz.3.1885[10695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.772270][T10695] syz.3.1885[10695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.849703][T10696] bond_slave_1: mtu less than device minimum [ 424.030796][T10718] bond_slave_1: mtu less than device minimum [ 426.351766][T10734] sit0: entered promiscuous mode [ 427.290555][T10750] syzkaller0: entered promiscuous mode [ 427.296351][T10750] syzkaller0: entered allmulticast mode [ 433.975111][T10810] veth1_to_bond: entered promiscuous mode [ 433.980926][T10810] veth1_to_bond: entered allmulticast mode [ 436.231518][T10827] bond_slave_1: mtu less than device minimum [ 436.581102][T10836] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.607184][T10877] syzkaller0: entered promiscuous mode [ 438.613083][T10877] syzkaller0: entered allmulticast mode [ 440.378203][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.384750][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.346358][T10917] pim6reg1: entered promiscuous mode [ 443.357109][T10917] pim6reg1: entered allmulticast mode [ 444.209105][ T5855] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 447.159572][T10972] wg2: entered promiscuous mode [ 447.166916][T10972] wg2: entered allmulticast mode [ 448.212372][T10996] pim6reg1: entered promiscuous mode [ 448.217781][T10996] pim6reg1: entered allmulticast mode [ 448.274114][T11000] wg2: entered promiscuous mode [ 448.279053][T11000] wg2: entered allmulticast mode [ 450.773029][T11052] syz.1.2022[11052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.773173][T11052] syz.1.2022[11052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.408791][T11197] syzkaller0: entered promiscuous mode [ 462.425943][T11197] syzkaller0: entered allmulticast mode [ 466.045847][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 466.054960][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 466.064149][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 466.078426][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 466.086545][ T5791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 466.096590][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 466.373222][T11226] chnl_net:caif_netlink_parms(): no params data found [ 466.654512][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.662677][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.669977][T11226] bridge_slave_0: entered allmulticast mode [ 466.679082][T11226] bridge_slave_0: entered promiscuous mode [ 466.688253][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.697147][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.704767][T11226] bridge_slave_1: entered allmulticast mode [ 466.733371][T11226] bridge_slave_1: entered promiscuous mode [ 466.817203][T11226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.832119][T11226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.704530][T11226] team0: Port device team_slave_0 added [ 468.124065][ T5791] Bluetooth: hci4: command tx timeout [ 468.151214][T11226] team0: Port device team_slave_1 added [ 468.388424][T11226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.396561][T11226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.429004][T11226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.485818][ T1097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.532601][T11226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.539620][T11226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.688978][T11226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.922460][ T1097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.389608][ T1097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.594437][T11226] hsr_slave_0: entered promiscuous mode [ 469.619550][T11226] hsr_slave_1: entered promiscuous mode [ 469.630489][T11226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.639714][T11226] Cannot create hsr debugfs directory [ 469.734789][ T1097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.232951][ T5791] Bluetooth: hci4: command tx timeout [ 470.917023][T11226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 470.966608][T11226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 470.980085][T11226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 470.992806][T11226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 471.307320][T11226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.331038][T11226] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.366388][ T1097] GPL: port 1(erspan0) entered disabled state [ 471.388538][ T1097] erspan0 (unregistering): left allmulticast mode [ 471.412195][ T1097] erspan0 (unregistering): left promiscuous mode [ 471.419154][ T1097] GPL: port 1(erspan0) entered disabled state [ 471.473306][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.481562][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.580863][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.588118][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.121521][ T1097] hsr_slave_0: left promiscuous mode [ 472.135061][ T1097] hsr_slave_1: left promiscuous mode [ 472.146070][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.161201][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.178442][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.187846][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.206726][ T1097] bridge_slave_1: left allmulticast mode [ 472.216526][ T1097] bridge_slave_1: left promiscuous mode [ 472.225722][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.251535][ T1097] bridge_slave_0: left allmulticast mode [ 472.267179][ T1097] bridge_slave_0: left promiscuous mode [ 472.278390][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.293478][ T5791] Bluetooth: hci4: command tx timeout [ 472.362843][ T1097] veth1_macvtap: left promiscuous mode [ 472.368912][ T1097] veth0_macvtap: left promiscuous mode [ 472.389167][ T1097] veth1_vlan: left promiscuous mode [ 472.406864][ T1097] veth0_vlan: left promiscuous mode [ 473.005409][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 473.046626][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 473.088484][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.131004][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.579086][ T1097] bond0 (unregistering): Released all slaves [ 473.780621][T11226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.063663][T11226] veth0_vlan: entered promiscuous mode [ 474.076215][T11226] veth1_vlan: entered promiscuous mode [ 474.108424][T11226] veth0_macvtap: entered promiscuous mode [ 474.119118][T11226] veth1_macvtap: entered promiscuous mode [ 474.137153][T11226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.148767][T11226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.158826][T11226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.170723][T11226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.180709][T11226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.191190][T11226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.207313][T11226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.223077][T11226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.234006][T11226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.244237][T11226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.256412][T11226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.266341][T11226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.276862][T11226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.289728][T11226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.303667][T11226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.314050][T11226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.323100][T11226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.331920][T11226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.361855][ T5791] Bluetooth: hci4: command tx timeout [ 474.405364][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.415657][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.441301][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.449374][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.882220][T11339] bridge0: port 3(bond0) entered disabled state [ 475.955871][T11339] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.108500][T11339] bridge0: entered allmulticast mode [ 476.430782][T11344] bond0: left allmulticast mode [ 476.440840][T11344] @ÿ: left allmulticast mode [ 476.453906][T11344] bond_slave_1: left allmulticast mode [ 476.459469][T11344] bond0: left promiscuous mode [ 476.472642][T11344] @ÿ: left promiscuous mode [ 476.477748][T11344] bond_slave_1: left promiscuous mode [ 476.489648][T11344] bridge0: port 3(bond0) entered disabled state [ 476.505944][T11344] bridge_slave_1: left allmulticast mode [ 476.532611][T11344] bridge_slave_1: left promiscuous mode [ 476.543696][T11344] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.553122][T11344] bridge_slave_0: left allmulticast mode [ 476.558817][T11344] bridge_slave_0: left promiscuous mode [ 476.564781][T11344] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.203296][T11459] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 485.793784][T11497] bridge_slave_1: left allmulticast mode [ 485.799502][T11497] bridge_slave_1: left promiscuous mode [ 485.878323][T11497] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.000703][T11497] bridge_slave_0: left allmulticast mode [ 486.058736][T11497] bridge_slave_0: left promiscuous mode [ 486.096423][T11497] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.762337][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.768735][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.199433][T11609] veth1_to_bond: entered promiscuous mode [ 504.215253][T11609] veth1_to_bond: entered allmulticast mode [ 526.341579][T11792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 526.357171][T11792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 526.366084][T11792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 526.377519][T11792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 526.388240][T11792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 526.396092][T11792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.618130][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.845192][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.045403][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.254400][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.289019][T11791] chnl_net:caif_netlink_parms(): no params data found [ 527.697843][T11804] sit0: left promiscuous mode [ 528.129368][ T5840] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 528.363366][T11806] sit0: entered promiscuous mode [ 528.451831][T11792] Bluetooth: hci2: command tx timeout [ 528.453485][T11791] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.490970][T11791] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.503616][T11791] bridge_slave_0: entered allmulticast mode [ 528.511154][T11791] bridge_slave_0: entered promiscuous mode [ 528.520248][T11791] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.528223][T11791] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.535964][T11791] bridge_slave_1: entered allmulticast mode [ 528.543883][T11791] bridge_slave_1: entered promiscuous mode [ 528.648971][T11791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.674509][T11791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.356528][T11791] team0: Port device team_slave_0 added [ 529.411057][T11791] team0: Port device team_slave_1 added [ 529.611556][T11791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.625931][T11791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.666191][T11791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.691359][T11791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.701075][T11791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.738994][T11791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.015801][T11791] hsr_slave_0: entered promiscuous mode [ 530.035294][T11791] hsr_slave_1: entered promiscuous mode [ 530.044498][T11791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.100856][T11791] Cannot create hsr debugfs directory [ 530.541010][T11792] Bluetooth: hci2: command tx timeout [ 532.601976][T11792] Bluetooth: hci2: command tx timeout [ 533.825069][ T48] hsr_slave_0: left promiscuous mode [ 533.870938][ T48] hsr_slave_1: left promiscuous mode [ 533.927255][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.964983][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.982027][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.989512][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.031329][ T48] veth1_macvtap: left promiscuous mode [ 534.041947][ T48] veth0_macvtap: left promiscuous mode [ 534.054538][ T48] veth1_vlan: left promiscuous mode [ 534.691915][T11792] Bluetooth: hci2: command tx timeout [ 534.821360][ T48] team0 (unregistering): Port device team_slave_1 removed [ 534.868344][ T48] team0 (unregistering): Port device team_slave_0 removed [ 534.915045][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.960952][ T48] bond0 (unregistering): (slave 0@ÿ): Releasing backup interface [ 535.410791][ T48] bond0 (unregistering): Released all slaves [ 536.416349][T11791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 536.431959][T11791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 536.464054][T11791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 536.502575][T11791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 536.807745][T11791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.854452][T11791] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.970335][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.977587][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.034210][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.041481][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.902425][T11791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.186546][T11791] veth0_vlan: entered promiscuous mode [ 538.287668][T11791] veth1_vlan: entered promiscuous mode [ 538.514373][T11791] veth0_macvtap: entered promiscuous mode [ 538.545901][T11791] veth1_macvtap: entered promiscuous mode [ 538.624528][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.652488][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.671853][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.690873][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.708918][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.805524][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.820359][ T5785] cgroup: fork rejected by pids controller in /syz0 [ 538.854830][T11791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.913989][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.945325][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.029628][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.069813][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.112438][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.127501][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.145667][T11791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.178961][T11791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.195381][T11791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.205563][T11791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.214533][T11791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.743183][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.751108][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.940061][ T1097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.996568][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.010876][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.065484][ T1097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.214850][ T1097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.341102][ T1097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.160779][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 541.170931][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 541.180166][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 541.190132][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 541.198108][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 541.206888][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 542.378045][T12019] syzkaller0: entered promiscuous mode [ 542.383916][T12019] syzkaller0: entered allmulticast mode [ 543.326669][T11792] Bluetooth: hci1: command tx timeout [ 545.177976][T12012] chnl_net:caif_netlink_parms(): no params data found [ 545.411867][T11792] Bluetooth: hci1: command tx timeout [ 545.467433][ T1097] hsr_slave_0: left promiscuous mode [ 545.489645][ T1097] hsr_slave_1: left promiscuous mode [ 545.496832][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.517831][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.573546][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.581117][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.955518][ T1097] veth1_macvtap: left promiscuous mode [ 545.965187][ T1097] veth0_macvtap: left promiscuous mode [ 545.981755][ T1097] veth1_vlan: left promiscuous mode [ 545.995999][ T1097] veth0_vlan: left promiscuous mode [ 546.881179][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 546.923858][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 546.970796][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.015012][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.465200][ T1097] bond0 (unregistering): Released all slaves [ 547.487276][T11792] Bluetooth: hci1: command tx timeout [ 547.561085][T12012] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.602954][T12012] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.620589][T12012] bridge_slave_0: entered allmulticast mode [ 547.647811][T12012] bridge_slave_0: entered promiscuous mode [ 547.670561][T12012] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.697474][T12012] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.706645][T12012] bridge_slave_1: entered allmulticast mode [ 547.719569][T12012] bridge_slave_1: entered promiscuous mode [ 547.865093][T12012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.021747][T12078] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.030310][T12078] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.056121][T12078] bridge0: entered allmulticast mode [ 548.112944][T12012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.158066][T12080] bridge_slave_1: left allmulticast mode [ 548.190577][T12080] bridge_slave_1: left promiscuous mode [ 548.219912][T12080] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.260324][T12080] bridge_slave_0: left allmulticast mode [ 548.277480][T12080] bridge_slave_0: left promiscuous mode [ 548.287296][T12080] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.465691][T12012] team0: Port device team_slave_0 added [ 548.505997][T12012] team0: Port device team_slave_1 added [ 548.686381][T12012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.704364][T12012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.749795][T12012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.767973][T12012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.786038][T12012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.818943][T12012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.947873][T12012] hsr_slave_0: entered promiscuous mode [ 548.956583][T12012] hsr_slave_1: entered promiscuous mode [ 549.570506][T11792] Bluetooth: hci1: command tx timeout [ 554.519651][T12012] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 554.830841][T12012] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 554.881380][T12012] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.927100][T12146] sit0: entered promiscuous mode [ 554.992824][T12012] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 555.428641][T12012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.542016][T12012] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.594444][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.601694][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.628203][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.635479][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.992847][T12012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.080725][T12012] veth0_vlan: entered promiscuous mode [ 557.122899][T12012] veth1_vlan: entered promiscuous mode [ 557.218916][T12012] veth0_macvtap: entered promiscuous mode [ 557.249465][T12012] veth1_macvtap: entered promiscuous mode [ 557.314368][T12012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.343859][T12012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.361973][T12012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.377997][T12012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.389191][T12012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.416122][T12012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.430933][T12012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.446275][T12194] sit0: left promiscuous mode [ 557.514483][T12190] sit0: entered promiscuous mode [ 557.757748][T12012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.769723][T12012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.784663][T12012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.795237][T12012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.805450][T12012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.818889][T12012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.830840][T12012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.860184][T12012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.881934][T12012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.891616][T12012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.901108][T12012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.079945][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.091927][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.144517][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.193693][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.720125][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 559.733459][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 559.753138][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 559.777047][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 559.794578][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 559.832848][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.720497][T12242] syzkaller0: entered promiscuous mode [ 560.726301][T12242] syzkaller0: entered allmulticast mode [ 561.963533][ T5791] Bluetooth: hci0: command tx timeout [ 563.173165][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.179578][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.044350][ T5791] Bluetooth: hci0: command tx timeout [ 564.304770][T12231] chnl_net:caif_netlink_parms(): no params data found [ 564.418814][T12231] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.426147][T12231] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.437258][T12231] bridge_slave_0: entered allmulticast mode [ 564.447304][T12231] bridge_slave_0: entered promiscuous mode [ 564.461028][T12231] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.468972][T12231] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.480548][T12231] bridge_slave_1: entered allmulticast mode [ 564.487848][T12231] bridge_slave_1: entered promiscuous mode [ 564.527127][T12231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.540545][T12231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.586446][T12231] team0: Port device team_slave_0 added [ 564.594772][T12231] team0: Port device team_slave_1 added [ 564.656474][ T1097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.677242][T12231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.690367][T12231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.717458][T12231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.730537][T12231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.737611][T12231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.763636][T12231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.787710][ T1097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.856201][ T1097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.875350][T12231] hsr_slave_0: entered promiscuous mode [ 564.886834][T12231] hsr_slave_1: entered promiscuous mode [ 564.895070][T12231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.902895][T12231] Cannot create hsr debugfs directory [ 564.924859][ T1097] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.134688][ T5791] Bluetooth: hci0: command tx timeout [ 567.620996][T12294] bond_slave_1: mtu less than device minimum [ 568.187586][T12231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 568.202135][ T5791] Bluetooth: hci0: command tx timeout [ 568.529848][T12231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 568.728625][T12231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 568.759394][T12231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 568.886657][T12313] sit0: entered allmulticast mode [ 569.501942][T12315] sit0: entered promiscuous mode [ 570.061925][ T1097] hsr_slave_0: left promiscuous mode [ 570.085970][ T1097] hsr_slave_1: left promiscuous mode [ 570.111007][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.119198][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.137167][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.148175][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.273347][ T1097] veth0_macvtap: left promiscuous mode [ 570.279097][ T1097] veth1_vlan: left promiscuous mode [ 570.291717][ T1097] veth0_vlan: left promiscuous mode [ 571.491566][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 571.552370][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 571.624271][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.673497][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.144943][ T1097] bond0 (unregistering): Released all slaves [ 572.355564][T12231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.426085][T12231] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.443418][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.450647][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.541001][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.548254][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.842765][T12349] sit0: entered allmulticast mode [ 573.312980][T12352] sit0: entered promiscuous mode [ 574.496398][T12376] wg2: entered promiscuous mode [ 574.515681][T12376] wg2: entered allmulticast mode [ 574.831186][T12231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.100432][T12231] veth0_vlan: entered promiscuous mode [ 575.148073][T12231] veth1_vlan: entered promiscuous mode [ 575.197387][T12231] veth0_macvtap: entered promiscuous mode [ 575.323711][T12231] veth1_macvtap: entered promiscuous mode [ 575.467342][T12231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.526114][T12231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.566533][T12231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.582718][T12231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.595347][T12231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.608464][T12231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.632384][T12231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.674539][T12231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.715989][T12231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.771197][T12231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.817749][T12231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.854279][T12231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.904412][T12231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.045718][T12231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.343633][T12231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.419726][T12231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.549643][T12231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.612050][T12231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.972773][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.021790][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.248962][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.301935][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.513626][T12425] sit0: left promiscuous mode [ 578.864525][T12443] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.872357][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.925995][T12443] bridge0: entered allmulticast mode [ 578.948721][T12445] bridge_slave_1: left allmulticast mode [ 578.966236][T12445] bridge_slave_1: left promiscuous mode [ 578.996330][T12445] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.028674][T12445] bridge_slave_0: left allmulticast mode [ 579.041825][T12445] bridge_slave_0: left promiscuous mode [ 579.089991][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.756215][T12518] sit0: left promiscuous mode [ 585.849046][T12517] sit0: entered promiscuous mode [ 586.425090][T12540] veth0_vlan: entered allmulticast mode [ 587.192439][T12543] veth0_vlan: left promiscuous mode [ 587.197733][T12543] veth0_vlan: entered promiscuous mode [ 588.516643][T12573] veth0_vlan: entered allmulticast mode [ 589.235252][T12579] veth0_vlan: left promiscuous mode [ 589.266702][T12579] veth0_vlan: entered promiscuous mode [ 590.841908][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 591.313127][T12623] pim6reg1: entered promiscuous mode [ 591.318496][T12623] pim6reg1: entered allmulticast mode [ 592.992493][T12667] veth0_vlan: entered allmulticast mode [ 596.916367][T12726] veth0_vlan: left promiscuous mode [ 596.932452][T12726] veth0_vlan: entered promiscuous mode [ 598.435379][T12746] syzkaller0: entered promiscuous mode [ 598.607408][T12746] syzkaller0: entered allmulticast mode [ 606.621631][T12815] syzkaller0: entered promiscuous mode [ 606.630469][T12815] syzkaller0: entered allmulticast mode [ 613.651026][T12873] syzkaller0: entered promiscuous mode [ 613.656640][T12873] syzkaller0: entered allmulticast mode [ 618.648359][T12933] pim6reg1: entered promiscuous mode [ 618.662394][T12933] pim6reg1: entered allmulticast mode [ 624.609245][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.615762][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.910715][T13165] syzkaller0: entered promiscuous mode [ 631.916374][T13165] syzkaller0: entered allmulticast mode [ 634.496866][T13185] veth0_vlan: entered allmulticast mode [ 634.577637][T13186] veth0_vlan: left promiscuous mode [ 634.601199][T13186] veth0_vlan: entered promiscuous mode [ 636.753890][T13217] syzkaller0: entered promiscuous mode [ 636.759446][T13217] syzkaller0: entered allmulticast mode [ 642.116574][T13269] veth0_vlan: left promiscuous mode [ 642.128381][T13269] veth0_vlan: entered promiscuous mode [ 645.460479][T13344] veth0_vlan: left promiscuous mode [ 645.654369][T13344] veth0_vlan: entered promiscuous mode [ 652.286573][T11792] Bluetooth: hci2: command 0x0406 tx timeout [ 652.384595][T13406] veth0_vlan: left promiscuous mode [ 652.390768][T13406] veth0_vlan: entered promiscuous mode [ 655.120153][T13453] ------------[ cut here ]------------ [ 655.125757][T13453] Please remove unsupported % in format string [ 655.133155][T13453] WARNING: CPU: 1 PID: 13453 at lib/vsprintf.c:2679 format_decode+0xcfd/0x13d0 [ 655.142234][T13453] Modules linked in: [ 655.146184][T13453] CPU: 1 PID: 13453 Comm: syz.1.2791 Not tainted 6.6.96-syzkaller #0 [ 655.154328][T13453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.164485][T13453] RIP: 0010:format_decode+0xcfd/0x13d0 [ 655.170008][T13453] Code: ff e8 17 5a 26 f7 c6 05 28 f0 d5 03 01 41 0f b6 04 1c 84 c0 0f 85 be 06 00 00 41 0f b6 36 48 c7 c7 40 3f c9 8b e8 63 be f0 f6 <0f> 0b e9 79 fe ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c 46 f3 ff ff [ 655.189741][T13453] RSP: 0018:ffffc9000441f888 EFLAGS: 00010246 [ 655.195902][T13453] RAX: aa9d49069018f800 RBX: dffffc0000000000 RCX: 0000000000080000 [ 655.203975][T13453] RDX: ffffc90014292000 RSI: 0000000000003304 RDI: 0000000000003305 [ 655.212101][T13453] RBP: ffff0000ffffff00 R08: ffffc9000441f487 R09: 1ffff92000883e90 [ 655.220117][T13453] R10: dffffc0000000000 R11: fffff52000883e91 R12: 1ffff92000883f55 [ 655.228179][T13453] R13: 0000000000000000 R14: ffffc9000441faac R15: ffff0a00ffffff00 [ 655.236237][T13453] FS: 00007f044c16b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 655.245265][T13453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 655.251929][T13453] CR2: 000000110c309e2d CR3: 000000002f32d000 CR4: 00000000003506e0 [ 655.259958][T13453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 655.268019][T13453] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 655.276098][T13453] Call Trace: [ 655.279428][T13453] [ 655.282484][T13453] bstr_printf+0xc4/0xf90 [ 655.286865][T13453] ? lock_chain_count+0x20/0x20 [ 655.291800][T13453] ? bpf_trace_printk+0xc2/0x190 [ 655.296812][T13453] bpf_trace_printk+0x10f/0x190 [ 655.301762][T13453] ? ktime_get+0x7f/0x280 [ 655.306149][T13453] ? bpf_probe_write_user+0xe0/0xe0 [ 655.311399][T13453] ? bpf_prog_test_run+0x321/0x390 [ 655.316765][T13453] ? __local_bh_disable_ip+0xf2/0x190 [ 655.322247][T13453] ? read_tsc+0x9/0x20 [ 655.326362][T13453] ? ktime_get+0x24b/0x280 [ 655.330833][T13453] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 655.336416][T13453] bpf_test_run+0x340/0x8a0 [ 655.340992][T13453] ? bpf_test_run+0x1da/0x8a0 [ 655.345767][T13453] ? convert___skb_to_skb+0x590/0x590 [ 655.351192][T13453] ? eth_get_headlen+0x200/0x200 [ 655.356253][T13453] ? slab_build_skb+0x25f/0x3f0 [ 655.361157][T13453] ? convert___skb_to_skb+0x3d/0x590 [ 655.366547][T13453] bpf_prog_test_run_skb+0xa67/0x11c0 [ 655.372016][T13453] ? cpu_online+0x60/0x60 [ 655.376388][T13453] bpf_prog_test_run+0x321/0x390 [ 655.381388][T13453] __sys_bpf+0x440/0x800 [ 655.385749][T13453] ? bpf_link_show_fdinfo+0x350/0x350 [ 655.391190][T13453] ? lock_chain_count+0x20/0x20 [ 655.396157][T13453] __x64_sys_bpf+0x7c/0x90 [ 655.400626][T13453] do_syscall_64+0x55/0xb0 [ 655.405139][T13453] ? clear_bhb_loop+0x40/0x90 [ 655.409875][T13453] ? clear_bhb_loop+0x40/0x90 [ 655.414659][T13453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.420598][T13453] RIP: 0033:0x7f044b38e929 [ 655.425205][T13453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.444917][T13453] RSP: 002b:00007f044c16b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 655.453439][T13453] RAX: ffffffffffffffda RBX: 00007f044b5b5fa0 RCX: 00007f044b38e929 [ 655.461454][T13453] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 655.469521][T13453] RBP: 00007f044b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 655.477577][T13453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.485638][T13453] R13: 0000000000000000 R14: 00007f044b5b5fa0 R15: 00007fffe5b3e7a8 [ 655.493721][T13453] [ 655.496785][T13453] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 655.504096][T13453] CPU: 1 PID: 13453 Comm: syz.1.2791 Not tainted 6.6.96-syzkaller #0 [ 655.512211][T13453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.522306][T13453] Call Trace: [ 655.525618][T13453] [ 655.528585][T13453] dump_stack_lvl+0x16c/0x230 [ 655.533314][T13453] ? show_regs_print_info+0x20/0x20 [ 655.538588][T13453] ? load_image+0x3b0/0x3b0 [ 655.543149][T13453] panic+0x2c0/0x710 [ 655.547086][T13453] ? bpf_jit_dump+0xd0/0xd0 [ 655.551659][T13453] __warn+0x2e0/0x470 [ 655.555669][T13453] ? format_decode+0xcfd/0x13d0 [ 655.560556][T13453] ? format_decode+0xcfd/0x13d0 [ 655.565461][T13453] report_bug+0x2be/0x4f0 [ 655.569838][T13453] ? format_decode+0xcfd/0x13d0 [ 655.574731][T13453] ? format_decode+0xcfd/0x13d0 [ 655.579658][T13453] ? format_decode+0xcff/0x13d0 [ 655.584547][T13453] handle_bug+0xcf/0x120 [ 655.588839][T13453] exc_invalid_op+0x1a/0x50 [ 655.593387][T13453] asm_exc_invalid_op+0x1a/0x20 [ 655.598272][T13453] RIP: 0010:format_decode+0xcfd/0x13d0 [ 655.603768][T13453] Code: ff e8 17 5a 26 f7 c6 05 28 f0 d5 03 01 41 0f b6 04 1c 84 c0 0f 85 be 06 00 00 41 0f b6 36 48 c7 c7 40 3f c9 8b e8 63 be f0 f6 <0f> 0b e9 79 fe ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c 46 f3 ff ff [ 655.623413][T13453] RSP: 0018:ffffc9000441f888 EFLAGS: 00010246 [ 655.629527][T13453] RAX: aa9d49069018f800 RBX: dffffc0000000000 RCX: 0000000000080000 [ 655.637531][T13453] RDX: ffffc90014292000 RSI: 0000000000003304 RDI: 0000000000003305 [ 655.645534][T13453] RBP: ffff0000ffffff00 R08: ffffc9000441f487 R09: 1ffff92000883e90 [ 655.653544][T13453] R10: dffffc0000000000 R11: fffff52000883e91 R12: 1ffff92000883f55 [ 655.661548][T13453] R13: 0000000000000000 R14: ffffc9000441faac R15: ffff0a00ffffff00 [ 655.669577][T13453] ? format_decode+0xcfd/0x13d0 [ 655.674486][T13453] bstr_printf+0xc4/0xf90 [ 655.678854][T13453] ? lock_chain_count+0x20/0x20 [ 655.683740][T13453] ? bpf_trace_printk+0xc2/0x190 [ 655.688736][T13453] bpf_trace_printk+0x10f/0x190 [ 655.693633][T13453] ? ktime_get+0x7f/0x280 [ 655.698037][T13453] ? bpf_probe_write_user+0xe0/0xe0 [ 655.703283][T13453] ? bpf_prog_test_run+0x321/0x390 [ 655.708431][T13453] ? __local_bh_disable_ip+0xf2/0x190 [ 655.713839][T13453] ? read_tsc+0x9/0x20 [ 655.717942][T13453] ? ktime_get+0x24b/0x280 [ 655.722406][T13453] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 655.727902][T13453] bpf_test_run+0x340/0x8a0 [ 655.732461][T13453] ? bpf_test_run+0x1da/0x8a0 [ 655.737185][T13453] ? convert___skb_to_skb+0x590/0x590 [ 655.742602][T13453] ? eth_get_headlen+0x200/0x200 [ 655.747590][T13453] ? slab_build_skb+0x25f/0x3f0 [ 655.752484][T13453] ? convert___skb_to_skb+0x3d/0x590 [ 655.757805][T13453] bpf_prog_test_run_skb+0xa67/0x11c0 [ 655.763260][T13453] ? cpu_online+0x60/0x60 [ 655.767625][T13453] bpf_prog_test_run+0x321/0x390 [ 655.772600][T13453] __sys_bpf+0x440/0x800 [ 655.776883][T13453] ? bpf_link_show_fdinfo+0x350/0x350 [ 655.782307][T13453] ? lock_chain_count+0x20/0x20 [ 655.787222][T13453] __x64_sys_bpf+0x7c/0x90 [ 655.791675][T13453] do_syscall_64+0x55/0xb0 [ 655.796158][T13453] ? clear_bhb_loop+0x40/0x90 [ 655.800878][T13453] ? clear_bhb_loop+0x40/0x90 [ 655.805600][T13453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.811541][T13453] RIP: 0033:0x7f044b38e929 [ 655.815999][T13453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.835646][T13453] RSP: 002b:00007f044c16b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 655.844102][T13453] RAX: ffffffffffffffda RBX: 00007f044b5b5fa0 RCX: 00007f044b38e929 [ 655.852124][T13453] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 655.860130][T13453] RBP: 00007f044b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 655.868136][T13453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.876138][T13453] R13: 0000000000000000 R14: 00007f044b5b5fa0 R15: 00007fffe5b3e7a8 [ 655.884166][T13453] [ 655.887567][T13453] Kernel Offset: disabled [ 655.891953][T13453] Rebooting in 86400 seconds..