last executing test programs: 28.768980526s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xffe6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x1b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.numa_stat\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'cpuacct'}]}, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000001) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070036060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee59b22f2e056d935562beb176c"], &(0x7f0000000100)='GPL\x00'}, 0x48) 28.208084853s ago: executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x23, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x28dd724ef6dbc052) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) close(r2) 27.994969665s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001240)='block_split\x00', r0}, 0x9) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) 26.952093973s ago: executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89e1, &(0x7f0000000040)={'ipvlan0\x00', @remote}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000015c0)=ANY=[], 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050700000000000069116ecade6c76a0d9b49127000000000085100000020000008500"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 21.415861407s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x1ff, 0x200, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xff46, &(0x7f0000000340)=""/238}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x0, 0x8001, 0x384, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x0, 0xffffff81, 0x0, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x3, 0x80, 0x74, 0xd4, 0x9, 0x9, 0x0, 0x100000000, 0x4, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x9, 0xef11}, 0x8000, 0x9, 0x1, 0x9, 0x5, 0x4000000, 0x7, 0x0, 0x3ff, 0x0, 0x401}, r3, 0x6, 0xffffffffffffffff, 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{}, 0x0, &(0x7f0000001340)='%-5lx \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 20.382519766s ago: executing program 0: socket$kcm(0xa, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001980)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) 20.185134998s ago: executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x7, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x1e000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0506617, &(0x7f0000000040)=0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000002c0)=""/241, 0xf1, 0x0, &(0x7f0000001880)=""/4096, 0x1000}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000200)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) 17.013010798s ago: executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001280)) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='console\x00'}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001480), 0x2, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f0000000000)={0x1, 0x0, [0x0]}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0xb, &(0x7f0000000000)=r8, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001500), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x4, 0x17, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff27f7}, {}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x20}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001580)='syzkaller\x00', 0x5, 0x64, &(0x7f00000015c0)=""/100, 0x0, 0x29, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x3, 0x9, 0x7, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000016c0)=[{0x4, 0x3, 0x1, 0xa}], 0x10, 0x7}, 0x90) close(0xffffffffffffffff) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x99, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x1, @perf_config_ext={0x2, 0xffffffffffffff73}, 0x40, 0x200, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYBLOB="2be26cdb396f202b667265657a658f59"], 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000c40)={&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x2, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x18, 0x1, 0x1, [r10, r9]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000012c0)=0x2) socket$kcm(0x10, 0x2, 0x10) 11.184921121s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) 10.705853308s ago: executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0xff, 0x7fffffff, 0x5, 0x3000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, &(0x7f0000000400), &(0x7f0000000600)}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000001240)="b9ff03076804268c", 0x0, 0x300, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) 8.335319286s ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @union={0x0, 0x0, 0x0, 0xd}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, &(0x7f0000000180)=""/253, 0x3e, 0xfd, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x1, &(0x7f00000001c0)=@raw=[@generic={0x80, 0x1, 0x6, 0x6, 0x5}], &(0x7f0000000200)='GPL\x00', 0x9, 0xb6, &(0x7f0000000300)=""/182, 0x41100, 0x20, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xf, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x2, 0xf, 0x9}, {0x81, 0x5}, {0x0, 0x4, 0xb}, {0x4, 0x1, 0x0, 0x4}], 0x10, 0x2}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) sendmsg$inet(r0, 0x0, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2e, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x20, 0x4, 0x3862, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010400000000009500000000000000ef319972b77105839d9a6ab45951c0e5ca7221ecc872946ee8eab780b470b4825003b3dbfe11f4b4fc35c351e15ba2c5648ab6f47bae012bd0e010ea6b7607fd7f5461c9e639b6e29b9353107abd2a71a7b68660eaccd27e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x3, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x2, 0x7f, 0x2124, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0x5}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r9}, 0x8) ioctl$SIOCSIFHWADDR(r8, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x18, 0x26, &(0x7f0000001800)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd2}}, @jmp={0x5, 0x0, 0x6, 0x4, 0x0, 0xfffffffffffffff0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x400, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002280)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000022c0)={0x3, 0x7, 0x4, 0x105}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002440)=[0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000002480)=[{0x0, 0x3, 0x6, 0x3}, {0x4, 0x1, 0x10, 0xb}, {0x5, 0x3, 0x1, 0x4}, {0x0, 0x1, 0x0, 0x9}, {0x4, 0x1, 0x0, 0x6}, {0x2, 0x4, 0x0, 0x4}, {0x2, 0x3, 0xa, 0xb}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x8}, 0x90) 7.06881806s ago: executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0xff, 0x7fffffff, 0x5, 0x3000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, &(0x7f0000000400), &(0x7f0000000600)}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000001240)="b9ff03076804268c", 0x0, 0x300, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) 6.604731076s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x2b, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x3, 0x0, 0x0) 6.377254433s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffd, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308"], 0xffdd) 5.798544837s ago: executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x0, 0x3ff, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$kcm(0x2, 0x0, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 5.430484366s ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r8}, 0x10) 5.351605597s ago: executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89e1, &(0x7f0000000040)={'ipvlan0\x00', @remote}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000015c0)=ANY=[], 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050700000000000069116ecade6c76a0d9b49127000000000085100000020000008500"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 5.327029292s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x29}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f00000004c0)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpu.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4004662b, &(0x7f0000000040)=0x1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4004662b, &(0x7f00000005c0)=0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0xfdef) 5.011541705s ago: executing program 4: socket$kcm(0xa, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001980)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) 2.986302873s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.613774665s ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x2b, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x3, 0x0, 0x0) 2.477540181s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x5452, 0x20001439) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000fcffffffffffff17110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000001a000007020000f8ffffffb703000008000000b7040000000000008500000019001600950000000000000070226d75f4fa40716581999e4bc8a95baf26c677dfd5624f6a497cdf0add87f16542d4a9a9151319d4a8e9c7c0e3715d89c7831016fcb77196e81f9772e9a53ba7fc0e10a416486f2b2fcf7ab8efaa318e0d2bbd3ba5ed6c27bedf11438fb0441221f6a5b9b721717cf8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff02d}, {0x6}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800e51e8403ca40113e3fc0cb9cf8fcbf0e000008000000000000000100008018450000030000000000000000000000cd5506000100000001c767000100000043c200000000000085100000040000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0xfc, &(0x7f0000000580)=""/252, 0x41100, 0x12, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000380)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x5, 0x7, 0xfff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4c9}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='percpu_alloc_percpu\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 2.28991336s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) 2.183040609s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) 2.060550477s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_request_inode\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 1.877220263s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000280), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='-.\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000400000007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x90) 720.089066ms ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @union={0x0, 0x0, 0x0, 0xd}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, &(0x7f0000000180)=""/253, 0x3e, 0xfd, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x1, &(0x7f00000001c0)=@raw=[@generic={0x80, 0x1, 0x6, 0x6, 0x5}], &(0x7f0000000200)='GPL\x00', 0x9, 0xb6, &(0x7f0000000300)=""/182, 0x41100, 0x20, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xf, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x2, 0xf, 0x9}, {0x81, 0x5}, {0x0, 0x4, 0xb}, {0x4, 0x1, 0x0, 0x4}], 0x10, 0x2}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) sendmsg$inet(r0, 0x0, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2e, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x20, 0x4, 0x3862, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010400000000009500000000000000ef319972b77105839d9a6ab45951c0e5ca7221ecc872946ee8eab780b470b4825003b3dbfe11f4b4fc35c351e15ba2c5648ab6f47bae012bd0e010ea6b7607fd7f5461c9e639b6e29b9353107abd2a71a7b68660eaccd27e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x3, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x2, 0x7f, 0x2124, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0x5}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r9}, 0x8) ioctl$SIOCSIFHWADDR(r8, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x18, 0x26, &(0x7f0000001800)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd2}}, @jmp={0x5, 0x0, 0x6, 0x4, 0x0, 0xfffffffffffffff0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x400, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002280)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000022c0)={0x3, 0x7, 0x4, 0x105}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002440)=[0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000002480)=[{0x0, 0x3, 0x6, 0x3}, {0x4, 0x1, 0x10, 0xb}, {0x5, 0x3, 0x1, 0x4}, {0x0, 0x1, 0x0, 0x9}, {0x4, 0x1, 0x0, 0x6}, {0x2, 0x4, 0x0, 0x4}, {0x2, 0x3, 0xa, 0xb}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x8}, 0x90) 141.173038ms ago: executing program 2: bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000101d9e80000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 117.198295ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r2}, 0x10) write$cgroup_type(r1, &(0x7f0000000180), 0x2000) 0s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. 2024/06/14 16:57:19 fuzzer started 2024/06/14 16:57:19 dialing manager at 10.128.0.169:30012 [ 70.857376][ T5095] cgroup: Unknown subsys name 'net' [ 71.026875][ T5095] cgroup: Unknown subsys name 'rlimit' [ 71.906112][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.913240][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/14 16:57:21 starting 5 executor processes [ 72.462699][ T5103] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.466117][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.501228][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.523403][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.531908][ T5132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.540091][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.547732][ T5133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.552372][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.556345][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.564423][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.570734][ T5132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.579607][ T5133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.586148][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.594895][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.601208][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.613679][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.621272][ T5134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.626962][ T5136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.639498][ T5136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.642878][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.648256][ T5136] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.654319][ T4490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.661807][ T5136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.672805][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.676501][ T5136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.682460][ T5133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.697152][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.699968][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.716397][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.720097][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.733191][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.283103][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 74.438301][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 74.609435][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 74.641570][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 74.697881][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.705528][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.714388][ T5122] bridge_slave_0: entered allmulticast mode [ 74.722293][ T5122] bridge_slave_0: entered promiscuous mode [ 74.733211][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.741067][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.748583][ T5119] bridge_slave_0: entered allmulticast mode [ 74.758158][ T5119] bridge_slave_0: entered promiscuous mode [ 74.766262][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 74.806942][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.814276][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.822135][ T5122] bridge_slave_1: entered allmulticast mode [ 74.829852][ T5122] bridge_slave_1: entered promiscuous mode [ 74.837451][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.845585][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.853423][ T5119] bridge_slave_1: entered allmulticast mode [ 74.860708][ T5119] bridge_slave_1: entered promiscuous mode [ 74.993518][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.007400][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.051791][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.065146][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.169150][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.176793][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.185063][ T5116] bridge_slave_0: entered allmulticast mode [ 75.194348][ T5116] bridge_slave_0: entered promiscuous mode [ 75.220913][ T5119] team0: Port device team_slave_0 added [ 75.241422][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.248720][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.256962][ T5125] bridge_slave_0: entered allmulticast mode [ 75.264740][ T5125] bridge_slave_0: entered promiscuous mode [ 75.273015][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.281659][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.289009][ T5116] bridge_slave_1: entered allmulticast mode [ 75.296932][ T5116] bridge_slave_1: entered promiscuous mode [ 75.308525][ T5122] team0: Port device team_slave_0 added [ 75.319745][ T5122] team0: Port device team_slave_1 added [ 75.329454][ T5119] team0: Port device team_slave_1 added [ 75.336118][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.343784][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.351171][ T5121] bridge_slave_0: entered allmulticast mode [ 75.358215][ T5121] bridge_slave_0: entered promiscuous mode [ 75.367739][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.375360][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.382773][ T5121] bridge_slave_1: entered allmulticast mode [ 75.390018][ T5121] bridge_slave_1: entered promiscuous mode [ 75.405743][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.413142][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.423320][ T5125] bridge_slave_1: entered allmulticast mode [ 75.431400][ T5125] bridge_slave_1: entered promiscuous mode [ 75.541052][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.554999][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.608684][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.633222][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.641154][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.668827][ T5131] Bluetooth: hci0: command tx timeout [ 75.675554][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.688948][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.696587][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.723652][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.737932][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.748871][ T5131] Bluetooth: hci1: command tx timeout [ 75.748897][ T53] Bluetooth: hci2: command tx timeout [ 75.761331][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.775608][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.814267][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.822019][ T5131] Bluetooth: hci3: command tx timeout [ 75.822044][ T53] Bluetooth: hci4: command tx timeout [ 75.822520][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.862379][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.883241][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.890762][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.918152][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.973516][ T5116] team0: Port device team_slave_0 added [ 75.983585][ T5116] team0: Port device team_slave_1 added [ 76.003460][ T5121] team0: Port device team_slave_0 added [ 76.017175][ T5125] team0: Port device team_slave_0 added [ 76.063988][ T5121] team0: Port device team_slave_1 added [ 76.073129][ T5125] team0: Port device team_slave_1 added [ 76.113129][ T5122] hsr_slave_0: entered promiscuous mode [ 76.119929][ T5122] hsr_slave_1: entered promiscuous mode [ 76.176704][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.185488][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.212431][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.255795][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.262918][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.290979][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.303096][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.310631][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.336901][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.349088][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.356575][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.384574][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.414718][ T5119] hsr_slave_0: entered promiscuous mode [ 76.421900][ T5119] hsr_slave_1: entered promiscuous mode [ 76.428454][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.437310][ T5119] Cannot create hsr debugfs directory [ 76.446673][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.454307][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.484652][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.497032][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.504337][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.530859][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.685606][ T5121] hsr_slave_0: entered promiscuous mode [ 76.692701][ T5121] hsr_slave_1: entered promiscuous mode [ 76.699269][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.707426][ T5121] Cannot create hsr debugfs directory [ 76.807397][ T5125] hsr_slave_0: entered promiscuous mode [ 76.814712][ T5125] hsr_slave_1: entered promiscuous mode [ 76.821577][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.829373][ T5125] Cannot create hsr debugfs directory [ 76.865948][ T5116] hsr_slave_0: entered promiscuous mode [ 76.873625][ T5116] hsr_slave_1: entered promiscuous mode [ 76.881521][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.889265][ T5116] Cannot create hsr debugfs directory [ 77.375672][ T5122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.408636][ T5122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.422624][ T5122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.442730][ T5122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.500032][ T5119] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.532015][ T5119] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.544357][ T5119] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.558350][ T5119] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.665455][ T5125] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.684317][ T5125] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.696145][ T5125] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.708291][ T5125] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.742354][ T5131] Bluetooth: hci0: command tx timeout [ 77.827595][ T5131] Bluetooth: hci2: command tx timeout [ 77.828116][ T53] Bluetooth: hci1: command tx timeout [ 77.850778][ T5121] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.867740][ T5121] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.900913][ T53] Bluetooth: hci3: command tx timeout [ 77.906720][ T53] Bluetooth: hci4: command tx timeout [ 77.924157][ T5121] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.954495][ T5121] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.037957][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.045350][ T5116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.059421][ T5116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.096644][ T5116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.107720][ T5116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.196039][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.225530][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.256498][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.264028][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.304106][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.311863][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.348010][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.373743][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.405094][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.448167][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.455599][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.466173][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.473454][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.528323][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.535878][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.551658][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.559458][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.774416][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.862081][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.889307][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.948364][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.964178][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.971735][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.068451][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.076104][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.105768][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.175961][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.183277][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.264890][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.272120][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.315674][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.337856][ T5122] veth0_vlan: entered promiscuous mode [ 79.363697][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.407167][ T5122] veth1_vlan: entered promiscuous mode [ 79.595719][ T5122] veth0_macvtap: entered promiscuous mode [ 79.637492][ T5122] veth1_macvtap: entered promiscuous mode [ 79.671866][ T5119] veth0_vlan: entered promiscuous mode [ 79.713195][ T5119] veth1_vlan: entered promiscuous mode [ 79.775491][ T5125] veth0_vlan: entered promiscuous mode [ 79.804388][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.835325][ T53] Bluetooth: hci0: command tx timeout [ 79.865480][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.901072][ T53] Bluetooth: hci1: command tx timeout [ 79.901734][ T5131] Bluetooth: hci2: command tx timeout [ 79.933431][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.960877][ T5125] veth1_vlan: entered promiscuous mode [ 79.980751][ T5131] Bluetooth: hci3: command tx timeout [ 79.982149][ T53] Bluetooth: hci4: command tx timeout [ 79.986701][ T5122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.005255][ T5122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.015016][ T5122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.024245][ T5122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.038642][ T5119] veth0_macvtap: entered promiscuous mode [ 80.072924][ T5119] veth1_macvtap: entered promiscuous mode [ 80.097686][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.214935][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.229915][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.243769][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.295260][ T5125] veth0_macvtap: entered promiscuous mode [ 80.326540][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.347828][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.361803][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.375971][ T5119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.385567][ T5119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.395079][ T5119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.404225][ T5119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.424605][ T5125] veth1_macvtap: entered promiscuous mode [ 80.551441][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.559840][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.571938][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.588718][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.599065][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.610073][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.626228][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.673548][ T5121] veth0_vlan: entered promiscuous mode [ 80.690985][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.711701][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.722427][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.733206][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.748717][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.777369][ T5125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.788436][ T5125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.798255][ T5125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.807822][ T5125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.822177][ T5116] veth0_vlan: entered promiscuous mode [ 80.834397][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.850825][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.873881][ T5116] veth1_vlan: entered promiscuous mode [ 80.899731][ T5121] veth1_vlan: entered promiscuous mode [ 80.933753][ T4403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.946322][ T4403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.053132][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.072672][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.157180][ T5121] veth0_macvtap: entered promiscuous mode [ 81.215397][ T5116] veth0_macvtap: entered promiscuous mode [ 81.227732][ T5121] veth1_macvtap: entered promiscuous mode [ 81.307719][ T5116] veth1_macvtap: entered promiscuous mode [ 81.353630][ T5203] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 81.381214][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.401127][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.439246][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.453444][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.464837][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.484619][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.496876][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.509002][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.532645][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.549043][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.561042][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.573090][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.586274][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.618544][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.637943][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.648368][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.659768][ T29] audit: type=1800 audit(1718384251.047:2): pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 81.683582][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.696560][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.731900][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.746538][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.756866][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.767835][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.778524][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.795665][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.797400][ C1] hrtimer: interrupt took 74526 ns [ 81.813543][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.828624][ T5210] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.868640][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.871568][ T5121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.883812][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.887840][ T5121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.907115][ T5121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.916956][ T53] Bluetooth: hci0: command tx timeout [ 81.927891][ T5121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.958165][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.974450][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.985720][ T53] Bluetooth: hci2: command tx timeout [ 81.990950][ T53] Bluetooth: hci1: command tx timeout [ 82.002303][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.013094][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.023408][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.035533][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.045887][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.057696][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.068326][ T53] Bluetooth: hci3: command tx timeout [ 82.068937][ T53] Bluetooth: hci4: command tx timeout [ 82.102338][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.225198][ T5116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.241116][ T5116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.249977][ T5116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.262757][ T5116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.901732][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.928571][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.043214][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.072776][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.139055][ T5220] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 83.224435][ T5220] veth0_macvtap: left promiscuous mode [ 83.266368][ T5220] macvtap0: entered promiscuous mode [ 83.431564][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.450121][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.560504][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.623781][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.398871][ T5244] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.117951][ T5264] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 85.251352][ T5264] syz_tun: entered promiscuous mode [ 85.329786][ T5264] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 85.677689][ T5273] Illegal XDP return value 4294967274 on prog (id 20) dev N/A, expect packet loss! [ 87.464021][ T5309] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 92.387725][ T45] cfg80211: failed to load regulatory.db [ 94.097488][ T5448] syzkaller0: entered promiscuous mode [ 94.103355][ T5448] syzkaller0: entered allmulticast mode [ 97.076926][ T5469] syzkaller0: entered promiscuous mode [ 97.082662][ T5469] syzkaller0: entered allmulticast mode [ 99.716078][ T5510] : renamed from ipvlan1 [ 99.761092][ T5521] wg2: entered promiscuous mode [ 99.779697][ T5521] wg2: entered allmulticast mode [ 103.967500][ T5576] wg2: entered promiscuous mode [ 103.975849][ T5576] wg2: entered allmulticast mode [ 105.023194][ T29] audit: type=1804 audit(1718384274.427:3): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1293006347/syzkaller.vBK8kT/28/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 105.166556][ T29] audit: type=1800 audit(1718384274.427:4): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 105.847583][ T5649] pim6reg1: entered promiscuous mode [ 105.899646][ T5649] pim6reg1: entered allmulticast mode [ 106.941072][ T5663] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 108.819535][ T5695] pim6reg1: entered promiscuous mode [ 108.850072][ T5695] pim6reg1: entered allmulticast mode [ 109.350761][ T5704] syz-executor.3[5704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.350964][ T5704] syz-executor.3[5704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.614846][ T5725] syz-executor.4[5725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.661905][ T5725] syz-executor.4[5725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.512965][ T5751] pim6reg1: entered promiscuous mode [ 112.538598][ T5751] pim6reg1: entered allmulticast mode [ 112.775969][ T5753] syzkaller0: entered promiscuous mode [ 112.840314][ T5753] syzkaller0: entered allmulticast mode [ 115.580002][ T5800] syz-executor.2[5800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.580400][ T5800] syz-executor.2[5800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.156574][ T5830] syz-executor.1[5830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.206053][ T5830] syz-executor.1[5830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.684531][ T5840] syzkaller0: entered promiscuous mode [ 118.741578][ T5840] syzkaller0: entered allmulticast mode [ 121.657465][ T5896] syzkaller0: entered promiscuous mode [ 121.681912][ T5896] syzkaller0: entered allmulticast mode [ 126.198722][ T5972] syzkaller0: entered promiscuous mode [ 126.209351][ T5972] syzkaller0: entered allmulticast mode [ 126.315094][ T5964] syzkaller0: entered promiscuous mode [ 126.334751][ T5964] syzkaller0: entered allmulticast mode [ 127.584515][ T6000] syz-executor.1[6000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.584687][ T6000] syz-executor.1[6000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.917326][ T6009] syz-executor.2[6009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.929965][ T6009] syz-executor.2[6009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.314100][ T6003] syzkaller0: entered promiscuous mode [ 130.339641][ T6003] syzkaller0: entered allmulticast mode [ 130.351986][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.456840][ T6035] syz-executor.0[6035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.457008][ T6035] syz-executor.0[6035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.483845][ T6036] syz-executor.4[6036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.506081][ T6036] syz-executor.4[6036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.816780][ T6048] syz-executor.2[6048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.847369][ T6048] syz-executor.2[6048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.975629][ T6060] syzkaller0: entered promiscuous mode [ 133.003108][ T6060] syzkaller0: entered allmulticast mode [ 133.346579][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.354069][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.322157][ T6122] veth0_vlan: entered allmulticast mode [ 136.420453][ T6123] veth0_vlan: left promiscuous mode [ 136.453172][ T6123] veth0_vlan: entered promiscuous mode [ 136.561143][ T6145] bpf_get_probe_write_proto: 8 callbacks suppressed [ 136.561163][ T6145] syz-executor.4[6145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.574711][ T6145] syz-executor.4[6145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.649030][ T6145] syz-executor.4[6145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.667797][ T6145] syz-executor.4[6145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.582018][ T6172] syzkaller0: entered promiscuous mode [ 138.628690][ T6172] syzkaller0: entered allmulticast mode [ 141.982009][ T6224] syz-executor.2 (6224) used greatest stack depth: 18336 bytes left [ 155.518708][ T6373] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.351429][ T6457] syz-executor.1[6457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.351721][ T6457] syz-executor.1[6457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.155133][ T6463] syzkaller0: entered promiscuous mode [ 159.204850][ T6463] syzkaller0: entered allmulticast mode [ 159.566949][ T5131] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.576376][ T5131] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.590449][ T5131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.613835][ T5131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.637297][ T5131] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.655014][ T5131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.245546][ T6501] syzkaller0: entered promiscuous mode [ 161.740463][ T53] Bluetooth: hci1: command tx timeout [ 163.179435][ T6510] syzkaller0: entered promiscuous mode [ 163.185187][ T6510] syzkaller0: entered allmulticast mode [ 163.193692][ T6530] vxcan1: entered promiscuous mode [ 163.820425][ T53] Bluetooth: hci1: command tx timeout [ 165.349125][ T2459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.672280][ T2459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.854576][ T2459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.883536][ T6570] syz-executor.0[6570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.883708][ T6570] syz-executor.0[6570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.900362][ T53] Bluetooth: hci1: command tx timeout [ 166.246231][ T6571] syzkaller0: entered promiscuous mode [ 166.267150][ T6571] syzkaller0: entered allmulticast mode [ 166.353804][ T2459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.949120][ T6575] syzkaller0: entered promiscuous mode [ 167.956656][ T6575] syzkaller0: entered allmulticast mode [ 167.981521][ T53] Bluetooth: hci1: command tx timeout [ 170.395940][ T6486] chnl_net:caif_netlink_parms(): no params data found [ 170.594936][ T2459] bridge_slave_1: left allmulticast mode [ 170.609192][ T2459] bridge_slave_1: left promiscuous mode [ 170.618210][ T2459] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.681820][ T2459] bridge_slave_0: left allmulticast mode [ 170.697504][ T2459] bridge_slave_0: left promiscuous mode [ 170.709239][ T2459] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.824949][ T6642] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 768 (only 8 groups) [ 172.897009][ T2459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.913243][ T2459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.927579][ T2459] bond0 (unregistering): Released all slaves [ 173.716666][ T6676] can: request_module (can-proto-0) failed. [ 173.769558][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.783261][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.840567][ T6486] bridge_slave_0: entered allmulticast mode [ 173.862588][ T6486] bridge_slave_0: entered promiscuous mode [ 173.913193][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.953248][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.992069][ T6486] bridge_slave_1: entered allmulticast mode [ 174.019496][ T6486] bridge_slave_1: entered promiscuous mode [ 174.342448][ T6691] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 768 (only 8 groups) [ 174.438665][ T6486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.487209][ T6486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.350295][ T6486] team0: Port device team_slave_0 added [ 175.363679][ T6486] team0: Port device team_slave_1 added [ 175.597572][ T2459] hsr_slave_0: left promiscuous mode [ 175.638316][ T2459] hsr_slave_1: left promiscuous mode [ 175.673449][ T2459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.711467][ T2459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.749489][ T2459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.779688][ T2459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.864908][ T2459] veth1_macvtap: left promiscuous mode [ 175.875131][ T2459] veth0_macvtap: left promiscuous mode [ 175.881154][ T2459] veth1_vlan: left promiscuous mode [ 175.892737][ T2459] veth0_vlan: left promiscuous mode [ 176.318485][ T6720] syz-executor.0[6720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.318615][ T6720] syz-executor.0[6720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.734688][ T2459] team0 (unregistering): Port device team_slave_1 removed [ 176.785494][ T2459] team0 (unregistering): Port device team_slave_0 removed [ 177.415578][ T6721] syzkaller0: entered promiscuous mode [ 177.421832][ T6721] syzkaller0: entered allmulticast mode [ 177.462108][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.476262][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.530566][ T6486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.580511][ T6727] can: request_module (can-proto-0) failed. [ 179.661942][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.676856][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.703283][ T6486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.940107][ T6486] hsr_slave_0: entered promiscuous mode [ 179.959790][ T6486] hsr_slave_1: entered promiscuous mode [ 179.983506][ T6486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.020427][ T6486] Cannot create hsr debugfs directory [ 180.324737][ T6764] can: request_module (can-proto-0) failed. [ 180.595010][ T6771] syz-executor.4 (6771) used greatest stack depth: 18232 bytes left [ 181.497561][ T6486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.541749][ T6486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.573759][ T6486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.847085][ T6486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.407981][ T6809] mac80211_hwsim hwsim3 €Â: renamed from wlan1 (while UP) [ 182.530026][ T6486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.263175][ T6486] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.297007][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.304377][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.396692][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.404156][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.371307][ T6486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.637542][ T6486] veth0_vlan: entered promiscuous mode [ 184.697692][ T6486] veth1_vlan: entered promiscuous mode [ 184.853041][ T6486] veth0_macvtap: entered promiscuous mode [ 184.895770][ T6486] veth1_macvtap: entered promiscuous mode [ 185.072494][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.117355][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.155023][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.173275][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.217353][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.276611][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.311250][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.343439][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.389049][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.815903][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.841423][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.856784][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.867906][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.884769][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.906348][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.923272][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.934017][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.946483][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.973495][ T6486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.998264][ T6486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.024458][ T6486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.046275][ T6486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.072009][ T6887] mac80211_hwsim hwsim7 €Â: renamed from wlan1 (while UP) [ 186.506736][ T2459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.516047][ T2459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.900067][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.971443][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.101177][ T6987] syzkaller0: entered promiscuous mode [ 194.152709][ T7018] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.162426][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.173046][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.188357][ T7026] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 194.711182][ T7046] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 195.047068][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.060834][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.690914][ T7057] syzkaller0: entered promiscuous mode [ 195.697740][ T7057] syzkaller0: entered allmulticast mode [ 197.022719][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 197.029012][ T5124] Bluetooth: hci2: command 0x0406 tx timeout [ 197.035518][ T5133] Bluetooth: hci0: command 0x0406 tx timeout [ 197.042114][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 200.991307][ T7148] syzkaller0: entered allmulticast mode [ 201.325245][ T7152] syz-executor.0 (7152) used greatest stack depth: 18016 bytes left [ 201.621893][ T5121] bond0: (slave syz_tun): Releasing backup interface [ 201.629934][ T4490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.640060][ T4490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.648646][ T4490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.695452][ T4490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.703873][ T4490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 201.712304][ T4490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.937970][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.258515][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.433794][ T7174] sit0: entered allmulticast mode [ 202.852293][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.912422][ T7186] sit0: entered promiscuous mode [ 203.383530][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.461949][ T7159] chnl_net:caif_netlink_parms(): no params data found [ 203.791673][ T4490] Bluetooth: hci3: command tx timeout [ 204.001585][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.010276][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.091694][ T7208] bridge0: entered allmulticast mode [ 205.003085][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.042664][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.078815][ T7159] bridge_slave_0: entered allmulticast mode [ 205.106077][ T7159] bridge_slave_0: entered promiscuous mode [ 205.143889][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.169403][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.197132][ T7159] bridge_slave_1: entered allmulticast mode [ 205.236498][ T7159] bridge_slave_1: entered promiscuous mode [ 205.313962][ T7228] sit0: entered promiscuous mode [ 205.319009][ T7228] sit0: entered allmulticast mode [ 205.535014][ T7238] syzkaller0: entered promiscuous mode [ 205.821541][ T5120] Bluetooth: hci3: command tx timeout [ 207.708856][ T7159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.719862][ T12] bridge_slave_1: left allmulticast mode [ 207.729308][ T12] bridge_slave_1: left promiscuous mode [ 207.737861][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.748753][ T12] bridge_slave_0: left allmulticast mode [ 207.755317][ T12] bridge_slave_0: left promiscuous mode [ 207.761428][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.900892][ T5120] Bluetooth: hci3: command tx timeout [ 208.185201][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.201788][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.217582][ T12] bond0 (unregistering): Released all slaves [ 208.292378][ T7264] syzkaller0: entered promiscuous mode [ 208.297927][ T7264] syzkaller0: entered allmulticast mode [ 209.990298][ T5120] Bluetooth: hci3: command tx timeout [ 210.114369][ T7159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.417425][ T7159] team0: Port device team_slave_0 added [ 210.455523][ T7159] team0: Port device team_slave_1 added [ 210.748104][ T12] hsr_slave_0: left promiscuous mode [ 210.760634][ T12] hsr_slave_1: left promiscuous mode [ 210.785244][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.804240][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.827687][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.838616][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.897091][ T12] veth1_macvtap: left promiscuous mode [ 210.913118][ T12] veth0_macvtap: left promiscuous mode [ 210.918913][ T12] veth1_vlan: left promiscuous mode [ 210.948317][ T12] veth0_vlan: left promiscuous mode [ 212.435737][ T12] team0 (unregistering): Port device team_slave_1 removed [ 212.536802][ T12] team0 (unregistering): Port device team_slave_0 removed [ 213.245965][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.253601][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.280537][ T7159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.338130][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.377037][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.413070][ T7159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.676800][ T7159] hsr_slave_0: entered promiscuous mode [ 213.694043][ T7159] hsr_slave_1: entered promiscuous mode [ 213.717507][ T7159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.731056][ T7159] Cannot create hsr debugfs directory [ 213.857905][ T29] audit: type=1800 audit(1718384383.257:5): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 214.183023][ T7391] : renamed from ipvlan1 [ 214.606279][ T7407] bridge0: left allmulticast mode [ 214.665586][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.676173][ T7407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.688833][ T7407] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.698798][ T7407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.761592][ T7407] bridge0: entered promiscuous mode [ 214.768175][ T7407] bridge0: entered allmulticast mode [ 215.018589][ T7159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.041342][ T7159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.078210][ T7159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.198988][ T7159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.549623][ T7159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.557408][ T7159] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.701398][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.708764][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.906006][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.913489][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.111547][ T7468] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.405353][ T3512] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.564404][ T7474] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 217.647254][ T3512] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.813890][ T3512] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.053826][ T3512] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.453966][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.465767][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.476419][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.488060][ T7159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.505305][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.515171][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.523999][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.542251][ T3512] bridge_slave_1: left allmulticast mode [ 218.548069][ T3512] bridge_slave_1: left promiscuous mode [ 218.597490][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.666907][ T3512] bridge_slave_0: left promiscuous mode [ 218.676418][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.927545][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.940725][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.956412][ T3512] bond0 (unregistering): Released all slaves [ 220.088950][ T7159] veth0_vlan: entered promiscuous mode [ 220.243321][ T7159] veth1_vlan: entered promiscuous mode [ 220.243409][ T7528] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 220.304112][ T7528] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.509324][ T7159] veth0_macvtap: entered promiscuous mode [ 220.630477][ T4490] Bluetooth: hci0: command tx timeout [ 220.658472][ T7159] veth1_macvtap: entered promiscuous mode [ 221.014518][ T3512] hsr_slave_0: left promiscuous mode [ 221.092408][ T3512] hsr_slave_1: left promiscuous mode [ 221.128314][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.149708][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.161455][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.179289][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.277915][ T3512] veth1_macvtap: left promiscuous mode [ 221.306190][ T3512] veth0_macvtap: left promiscuous mode [ 221.325798][ T3512] veth1_vlan: left promiscuous mode [ 221.335100][ T3512] veth0_vlan: left promiscuous mode [ 222.019192][ T7568] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 222.036147][ T7568] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.438694][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 222.507149][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 222.706418][ T4490] Bluetooth: hci0: command tx timeout [ 223.833544][ T7497] chnl_net:caif_netlink_parms(): no params data found [ 223.946328][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.017686][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.082322][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.139907][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.160358][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.171676][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.191074][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.585097][ T7588] syzkaller0: entered promiscuous mode [ 224.590902][ T7588] syzkaller0: entered allmulticast mode [ 224.780481][ T4490] Bluetooth: hci0: command tx timeout [ 226.409186][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.420432][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.430686][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.441558][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.452161][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.463261][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.477043][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.649285][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.765085][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.860742][ T4490] Bluetooth: hci0: command tx timeout [ 226.948397][ T7497] bridge_slave_0: entered allmulticast mode [ 227.127327][ T7497] bridge_slave_0: entered promiscuous mode [ 227.285169][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.300562][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.307910][ T7497] bridge_slave_1: entered allmulticast mode [ 228.080003][ T7497] bridge_slave_1: entered promiscuous mode [ 229.071253][ T7159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.214198][ T7159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.313296][ T7159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.322136][ T7159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.418392][ T7497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.462733][ T7618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.554594][ T7497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.706634][ T7497] team0: Port device team_slave_0 added [ 229.802073][ T7497] team0: Port device team_slave_1 added [ 229.910979][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.939852][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.021200][ T7497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.052701][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.059834][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.129098][ T7497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.319100][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.334218][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.344785][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.353921][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.364449][ T5120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 230.372727][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.520856][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.538843][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.349410][ T7497] hsr_slave_0: entered promiscuous mode [ 231.359234][ T7497] hsr_slave_1: entered promiscuous mode [ 231.369983][ T7497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.466367][ T7497] Cannot create hsr debugfs directory [ 231.594971][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.647619][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.664181][ T4403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.010449][ T4403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.188353][ T4403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.405344][ T4403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.460431][ T4490] Bluetooth: hci4: command tx timeout [ 232.697332][ T7677] Zero length message leads to an empty skb [ 234.540454][ T4490] Bluetooth: hci4: command tx timeout [ 235.220557][ T7637] chnl_net:caif_netlink_parms(): no params data found [ 235.253973][ T4403] bridge_slave_1: left allmulticast mode [ 235.261923][ T4403] bridge_slave_1: left promiscuous mode [ 235.267790][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.314532][ T4403] bridge_slave_0: left allmulticast mode [ 235.330337][ T4403] bridge_slave_0: left promiscuous mode [ 235.342014][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.274522][ T4403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.297969][ T4403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.317388][ T4403] bond0 (unregistering): Released all slaves [ 236.418897][ T7724] syz-executor.1[7724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.419066][ T7724] syz-executor.1[7724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.621472][ T4490] Bluetooth: hci4: command tx timeout [ 237.070196][ T7738] veth0_vlan: entered allmulticast mode [ 237.766342][ T7742] veth0_vlan: left promiscuous mode [ 237.795984][ T7742] veth0_vlan: entered promiscuous mode [ 238.147052][ T4403] hsr_slave_0: left promiscuous mode [ 238.190621][ T4403] hsr_slave_1: left promiscuous mode [ 238.212604][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.234847][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.262465][ T7756] syz-executor.3[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.262646][ T7756] syz-executor.3[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.288605][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.348373][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.399550][ T7762] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 238.423727][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.451873][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.460388][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.479019][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.491711][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 238.500488][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.528256][ T4403] veth1_macvtap: left promiscuous mode [ 238.535394][ T4403] veth0_macvtap: left promiscuous mode [ 238.547338][ T4403] veth1_vlan: left promiscuous mode [ 238.570808][ T4403] veth0_vlan: left promiscuous mode [ 239.585481][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.598279][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.616243][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.624895][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.633363][ T5120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 239.641869][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.794385][ T5120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.803771][ T5120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.818367][ T5120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.833640][ T5120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.846361][ T5120] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 239.861406][ T5120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.008554][ T4403] team0 (unregistering): Port device team_slave_1 removed [ 240.051217][ T4403] team0 (unregistering): Port device team_slave_0 removed [ 240.541837][ T5120] Bluetooth: hci0: command tx timeout [ 240.686062][ T7776] pim6reg1: entered promiscuous mode [ 240.693335][ T7776] pim6reg1: entered allmulticast mode [ 240.815147][ T5122] syz-executor.3 (5122) used greatest stack depth: 17488 bytes left [ 241.410958][ T7787] sit0: entered allmulticast mode [ 241.568763][ T7785] sit0: entered promiscuous mode [ 241.740473][ T5120] Bluetooth: hci4: command tx timeout [ 241.901000][ T5120] Bluetooth: hci5: command tx timeout [ 242.621857][ T5120] Bluetooth: hci0: command tx timeout [ 243.363253][ T7771] chnl_net:caif_netlink_parms(): no params data found [ 243.446239][ T7761] chnl_net:caif_netlink_parms(): no params data found [ 243.546674][ T7773] chnl_net:caif_netlink_parms(): no params data found [ 243.613179][ T2459] [ 243.615579][ T2459] ====================================================== [ 243.622603][ T2459] WARNING: possible circular locking dependency detected [ 243.629715][ T2459] 6.10.0-rc2-syzkaller-00242-g36534d3c5453 #0 Not tainted [ 243.636824][ T2459] ------------------------------------------------------ [ 243.643925][ T2459] kworker/u8:6/2459 is trying to acquire lock: [ 243.650338][ T2459] ffff8880b9429430 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18a/0x790 [ 243.658989][ T2459] [ 243.658989][ T2459] but task is already holding lock: [ 243.666369][ T2459] ffff8880b942a718 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x744/0xeb0 [ 243.674927][ T2459] [ 243.674927][ T2459] which lock already depends on the new lock. [ 243.674927][ T2459] [ 243.685333][ T2459] [ 243.685333][ T2459] the existing dependency chain (in reverse order) is: [ 243.694348][ T2459] [ 243.694348][ T2459] -> #1 (&base->lock){-.-.}-{2:2}: [ 243.701683][ T2459] lock_acquire+0x1ed/0x550 [ 243.706730][ T2459] _raw_spin_lock_irqsave+0xd5/0x120 [ 243.712564][ T2459] lock_timer_base+0x112/0x240 [ 243.717859][ T2459] __mod_timer+0x1ca/0xeb0 [ 243.722888][ T2459] queue_delayed_work_on+0x1ca/0x390 [ 243.728699][ T2459] kvfree_call_rcu+0x47f/0x790 [ 243.734102][ T2459] rtnl_register_internal+0x482/0x590 [ 243.740028][ T2459] rtnl_register+0x36/0x80 [ 243.745066][ T2459] ip_rt_init+0x2f6/0x3a0 [ 243.749921][ T2459] ip_init+0xe/0x20 [ 243.754260][ T2459] inet_init+0x3d8/0x580 [ 243.759059][ T2459] do_one_initcall+0x248/0x880 [ 243.764441][ T2459] do_initcall_level+0x157/0x210 [ 243.769915][ T2459] do_initcalls+0x3f/0x80 [ 243.774789][ T2459] kernel_init_freeable+0x435/0x5d0 [ 243.780525][ T2459] kernel_init+0x1d/0x2b0 [ 243.786773][ T2459] ret_from_fork+0x4b/0x80 [ 243.791998][ T2459] ret_from_fork_asm+0x1a/0x30 [ 243.797308][ T2459] [ 243.797308][ T2459] -> #0 (krc.lock){..-.}-{2:2}: [ 243.804359][ T2459] validate_chain+0x18e0/0x5900 [ 243.809781][ T2459] __lock_acquire+0x1346/0x1fd0 [ 243.815172][ T2459] lock_acquire+0x1ed/0x550 [ 243.820314][ T2459] _raw_spin_lock+0x2e/0x40 [ 243.825364][ T2459] kvfree_call_rcu+0x18a/0x790 [ 243.830746][ T2459] trie_delete_elem+0x546/0x6a0 [ 243.836124][ T2459] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 243.842115][ T2459] bpf_trace_run2+0x2ec/0x540 [ 243.847347][ T2459] enqueue_timer+0x3ce/0x570 [ 243.852473][ T2459] __mod_timer+0xa0e/0xeb0 [ 243.857410][ T2459] queue_delayed_work_on+0x1ca/0x390 [ 243.863219][ T2459] process_scheduled_works+0xa2c/0x1830 [ 243.869464][ T2459] worker_thread+0x86d/0xd70 [ 243.874581][ T2459] kthread+0x2f0/0x390 [ 243.879188][ T2459] ret_from_fork+0x4b/0x80 [ 243.884140][ T2459] ret_from_fork_asm+0x1a/0x30 [ 243.889434][ T2459] [ 243.889434][ T2459] other info that might help us debug this: [ 243.889434][ T2459] [ 243.899772][ T2459] Possible unsafe locking scenario: [ 243.899772][ T2459] [ 243.907220][ T2459] CPU0 CPU1 [ 243.912845][ T2459] ---- ---- [ 243.918302][ T2459] lock(&base->lock); [ 243.922387][ T2459] lock(krc.lock); [ 243.928720][ T2459] lock(&base->lock); [ 243.935311][ T2459] lock(krc.lock); [ 243.939124][ T2459] [ 243.939124][ T2459] *** DEADLOCK *** [ 243.939124][ T2459] [ 243.947264][ T2459] 4 locks held by kworker/u8:6/2459: [ 243.952545][ T2459] #0: ffff88802af9d148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 243.963870][ T2459] #1: ffffc900095dfd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 243.977038][ T2459] #2: ffff8880b942a718 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x744/0xeb0 [ 243.986012][ T2459] #3: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 243.995431][ T2459] [ 243.995431][ T2459] stack backtrace: [ 244.001345][ T2459] CPU: 0 PID: 2459 Comm: kworker/u8:6 Not tainted 6.10.0-rc2-syzkaller-00242-g36534d3c5453 #0 [ 244.011790][ T2459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 244.021862][ T2459] Workqueue: bat_events batadv_nc_worker [ 244.027600][ T2459] Call Trace: [ 244.030888][ T2459] [ 244.033917][ T2459] dump_stack_lvl+0x241/0x360 [ 244.038605][ T2459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.043814][ T2459] ? print_circular_bug+0x130/0x1a0 [ 244.049026][ T2459] check_noncircular+0x36a/0x4a0 [ 244.054003][ T2459] ? __pfx_check_noncircular+0x10/0x10 [ 244.059500][ T2459] ? lockdep_lock+0x123/0x2b0 [ 244.064201][ T2459] ? mark_lock+0x9a/0x350 [ 244.068567][ T2459] ? _find_first_zero_bit+0xd3/0x100 [ 244.073878][ T2459] validate_chain+0x18e0/0x5900 [ 244.078760][ T2459] ? __pfx_validate_chain+0x10/0x10 [ 244.083995][ T2459] ? stack_depot_save_flags+0x6e4/0x830 [ 244.089545][ T2459] ? do_raw_spin_lock+0x14f/0x370 [ 244.094585][ T2459] ? __pfx_lock_release+0x10/0x10 [ 244.099618][ T2459] ? do_raw_spin_unlock+0x13c/0x8b0 [ 244.104832][ T2459] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 244.110739][ T2459] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 244.117100][ T2459] ? stack_trace_save+0x118/0x1d0 [ 244.122159][ T2459] ? mark_lock+0x9a/0x350 [ 244.126506][ T2459] __lock_acquire+0x1346/0x1fd0 [ 244.131403][ T2459] lock_acquire+0x1ed/0x550 [ 244.135934][ T2459] ? kvfree_call_rcu+0x18a/0x790 [ 244.141069][ T2459] ? __pfx_lock_acquire+0x10/0x10 [ 244.146195][ T2459] ? __phys_addr+0xba/0x170 [ 244.150744][ T2459] _raw_spin_lock+0x2e/0x40 [ 244.155424][ T2459] ? kvfree_call_rcu+0x18a/0x790 [ 244.160433][ T2459] kvfree_call_rcu+0x18a/0x790 [ 244.165312][ T2459] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 244.171597][ T2459] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 244.176912][ T2459] ? longest_prefix_match+0x49f/0x650 [ 244.182315][ T2459] trie_delete_elem+0x546/0x6a0 [ 244.187190][ T2459] ? bpf_trace_run2+0x1fc/0x540 [ 244.192058][ T2459] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 244.197550][ T2459] bpf_trace_run2+0x2ec/0x540 [ 244.202246][ T2459] ? __pfx_bpf_trace_run2+0x10/0x10 [ 244.207468][ T2459] ? __pfx_debug_object_activate+0x10/0x10 [ 244.213309][ T2459] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 244.218799][ T2459] enqueue_timer+0x3ce/0x570 [ 244.223409][ T2459] __mod_timer+0xa0e/0xeb0 [ 244.227842][ T2459] ? __pfx___mod_timer+0x10/0x10 [ 244.232797][ T2459] ? __local_bh_enable_ip+0x168/0x200 [ 244.238209][ T2459] ? __pfx_lock_release+0x10/0x10 [ 244.243283][ T2459] ? batadv_nc_purge_paths+0x30f/0x3b0 [ 244.248762][ T2459] ? __queue_delayed_work+0x1ae/0x250 [ 244.254279][ T2459] queue_delayed_work_on+0x1ca/0x390 [ 244.259599][ T2459] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 244.265424][ T2459] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 244.271340][ T2459] ? batadv_nc_worker+0x4fa/0x610 [ 244.276374][ T2459] ? process_scheduled_works+0x945/0x1830 [ 244.282102][ T2459] process_scheduled_works+0xa2c/0x1830 [ 244.287732][ T2459] ? __pfx_process_scheduled_works+0x10/0x10 [ 244.293855][ T2459] ? assign_work+0x364/0x3d0 [ 244.298464][ T2459] worker_thread+0x86d/0xd70 [ 244.303072][ T2459] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 244.308983][ T2459] ? __kthread_parkme+0x169/0x1d0 [ 244.314017][ T2459] ? __pfx_worker_thread+0x10/0x10 [ 244.319138][ T2459] kthread+0x2f0/0x390 [ 244.323316][ T2459] ? __pfx_worker_thread+0x10/0x10 [ 244.328433][ T2459] ? __pfx_kthread+0x10/0x10 [ 244.333122][ T2459] ret_from_fork+0x4b/0x80 [ 244.337554][ T2459] ? __pfx_kthread+0x10/0x10 [ 244.342159][ T2459] ret_from_fork_asm+0x1a/0x30 [ 244.346952][ T2459] [ 244.354955][ T4403] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/06/14 17:00:13 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 244.367572][ T5120] Bluetooth: hci4: command tx timeout [ 244.373246][ T5120] Bluetooth: hci5: command tx timeout [ 244.397698][ T7771] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 244.701672][ T5120] Bluetooth: hci0: command tx timeout [ 244.747085][ T4403] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0