last executing test programs: 2m49.078911214s ago: executing program 2 (id=1511): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000009376, 0x2241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x1, 0x4, 0x0, 0x20, 0xf6, 0x0, 0xd871}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x18000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"]) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) 2m48.963885709s ago: executing program 2 (id=1514): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000004) 2m48.74684437s ago: executing program 2 (id=1515): r0 = getpid() r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0xc, 0x3, 0x40, 0x4, 0x0, 0x95, 0x40000, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x9}, 0x1180, 0xd22, 0x1ff, 0xc, 0x8, 0x6, 0x5, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x1, 0x7, 0xd9, 0x0, 0x8, 0x40981, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0x7, 0x6}, 0x105, 0xfff, 0x2, 0x7, 0x8, 0x5e0, 0x8, 0x0, 0x10001, 0x0, 0x2}, r0, 0x5, r1, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(0x3) close(0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 2m48.591233987s ago: executing program 2 (id=1516): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2m46.713117615s ago: executing program 2 (id=1518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2m43.794572542s ago: executing program 2 (id=1522): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x13, 0x8, 0x0, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x9b, &(0x7f0000000580)}, 0x10) socketpair$unix(0x2f, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000280)="218aca9442b42ad53b8499469b2c655afbc5d12b56637c2d4847a589eb4e9707de9cd40350ca60882210bf37ef7c327596e9feef4481ebe5a3d51d45887e7f6f168f04db77ab02199b4d5d2fd736d3e4878d2e2ecae42d6854fa69f79fc990f4ce257aec5fd3ccf9044797501a1da481176130fe58b0ef0a66fdcb3d3c86d81ec7a40cb17042e05c49324425af13154017fd4a6cd749aa2338b705e2ecb5f2f747da24636169765444e1af0d3da5d4176bcd26e1a5a829605786a7b6ad9314a2c83e5a25bd3684aa9da7e6050efd8dfe", &(0x7f0000000380)=""/52}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b400, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000100)) 2m28.642994073s ago: executing program 32 (id=1522): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x13, 0x8, 0x0, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x9b, &(0x7f0000000580)}, 0x10) socketpair$unix(0x2f, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000280)="218aca9442b42ad53b8499469b2c655afbc5d12b56637c2d4847a589eb4e9707de9cd40350ca60882210bf37ef7c327596e9feef4481ebe5a3d51d45887e7f6f168f04db77ab02199b4d5d2fd736d3e4878d2e2ecae42d6854fa69f79fc990f4ce257aec5fd3ccf9044797501a1da481176130fe58b0ef0a66fdcb3d3c86d81ec7a40cb17042e05c49324425af13154017fd4a6cd749aa2338b705e2ecb5f2f747da24636169765444e1af0d3da5d4176bcd26e1a5a829605786a7b6ad9314a2c83e5a25bd3684aa9da7e6050efd8dfe", &(0x7f0000000380)=""/52}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b400, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000100)) 1m0.736959s ago: executing program 3 (id=1913): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, 0x0, 0x7, r2, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) 1m0.2999906s ago: executing program 3 (id=1917): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 57.187697816s ago: executing program 3 (id=1924): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3800, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0xfffffffffffffe5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffef, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0xa, 0x4, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 56.342285456s ago: executing program 3 (id=1926): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000004) 56.131588676s ago: executing program 3 (id=1927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80", @ANYRESDEC], 0xffdd) 54.252981064s ago: executing program 3 (id=1929): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 38.852316517s ago: executing program 33 (id=1929): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 10.918061708s ago: executing program 5 (id=2049): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="42000008006de0e9000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xe, 0x2c, 0x0, 0x0, 0xa14a, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x10, 0x9, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000001000)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001040)=[{0x1, 0x1, 0xc, 0x2}, {0x3, 0x4, 0x8}, {0x1, 0x1, 0x5, 0x9}, {0x5, 0x2, 0xc, 0x7}, {0x0, 0x5, 0xd, 0x7}, {0x5, 0x5, 0xc}, {0x3, 0x2, 0x0, 0x2}], 0x10, 0x80}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x40047440, 0x110c230000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4010}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x1}, 0x712, 0x0, 0xc2ba, 0x8, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0) 10.374048024s ago: executing program 5 (id=2051): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x8000000, 0xe, 0x0, &(0x7f0000000900)="e68886dd0000000400ffffdd8600", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.341284342s ago: executing program 5 (id=2053): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 4.170372365s ago: executing program 5 (id=2075): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x8000000, 0xe, 0x0, &(0x7f0000000900)="e68886dd0000000400ffffdd8600", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.748180225s ago: executing program 4 (id=2078): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, 0x0, 0x7, r2, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003", 0x37}], 0x1}, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) 3.393008472s ago: executing program 5 (id=2081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000800000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="32d540c7f2102766f2186bf787ff", 0x0, 0x2000005, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.128705534s ago: executing program 5 (id=2083): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.917102124s ago: executing program 1 (id=2085): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, 0x0, 0x7, r2, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004", 0x39}], 0x1}, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) 2.249307705s ago: executing program 4 (id=2086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.985825727s ago: executing program 1 (id=2088): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3800, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0xfffffffffffffe5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffef, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, 0x0, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0xa, 0x4, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.945771s ago: executing program 0 (id=2089): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x8000000, 0xe, 0x0, &(0x7f0000000900)="e68886dd0000000400ffffdd8600", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.162414996s ago: executing program 0 (id=2090): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6f"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001040401060404009bbc7a46e3988285dcdf12f213e6f768fec601955fd80009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000400)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @exit], &(0x7f0000000440)='GPL\x00', 0x100, 0xcc, &(0x7f00000008c0)=""/204, 0x40f00, 0x14, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000009c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0xa, 0x80000001, 0x881}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffff0001, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x26, 0x0, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x7, 0x18}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x161) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r7, @ANYBLOB="0200"/20, @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="02000000000000007abd14bf998ff579f26c0500000000000000000000000000000000000000ca29501171f4"], 0x50) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) 986.878824ms ago: executing program 1 (id=2091): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="32d540c7f2102766f2186bf787ff", 0x0, 0x2000005, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 851.015011ms ago: executing program 1 (id=2092): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r3) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 842.096261ms ago: executing program 0 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xb, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 841.523811ms ago: executing program 4 (id=2094): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="42000008006de0e9000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xe, 0x2c, 0x0, &(0x7f0000000280)='syzkaller\x00', 0xa14a, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000001000)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001040)=[{0x1, 0x1, 0xc, 0x2}, {0x3, 0x4, 0x8}, {0x1, 0x1, 0x5, 0x9}, {0x5, 0x2, 0xc, 0x7}, {0x0, 0x5, 0xd, 0x7}, {0x5, 0x5, 0xc}, {0x3, 0x2, 0x0, 0x2}], 0x10, 0x80}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x40047440, 0x110c230000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4010}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x1}, 0x712, 0x0, 0xc2ba, 0x8, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0) 731.572577ms ago: executing program 1 (id=2095): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000004) 658.2539ms ago: executing program 1 (id=2096): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 657.15118ms ago: executing program 0 (id=2104): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000004) 604.052172ms ago: executing program 4 (id=2097): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000009376, 0x2241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x1, 0x4, 0x0, 0x20, 0xf6, 0x0, 0xd871}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x18000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[]) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) 534.784206ms ago: executing program 0 (id=2098): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x8000000, 0xe, 0x0, &(0x7f0000000900)="e68886dd0000000400ffffdd8600", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 264.520678ms ago: executing program 4 (id=2099): r0 = getpid() r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0xc, 0x3, 0x40, 0x4, 0x0, 0x95, 0x40000, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x9}, 0x1180, 0xd22, 0x1ff, 0xc, 0x8, 0x6, 0x5, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x1, 0x7, 0xd9, 0x0, 0x8, 0x40981, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0x7, 0x6}, 0x105, 0xfff, 0x2, 0x7, 0x8, 0x5e0, 0x8, 0x0, 0x10001, 0x0, 0x2}, r0, 0x5, r1, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 139.809724ms ago: executing program 4 (id=2100): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3800, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0xfffffffffffffe5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffef, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, 0x0, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0xa, 0x4, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 0s ago: executing program 0 (id=2101): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, 0x0, 0x7, r2, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 74.619010][ T5766] cgroup: Unknown subsys name 'net' [ 74.748666][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.422553][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.369536][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.379276][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.402530][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.421381][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.424925][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.436081][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.437130][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.451104][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.455644][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.458931][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.466488][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.480084][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.481088][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.494487][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.496005][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.509654][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.509664][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.510003][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.532224][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.540092][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.547413][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.555170][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.556394][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.569608][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.067338][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 79.125032][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 79.135253][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 79.187669][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 79.333978][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.341375][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.348728][ T5778] bridge_slave_0: entered allmulticast mode [ 79.356728][ T5778] bridge_slave_0: entered promiscuous mode [ 79.377036][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.384304][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.391848][ T5779] bridge_slave_0: entered allmulticast mode [ 79.398633][ T5779] bridge_slave_0: entered promiscuous mode [ 79.406684][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.414465][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.421972][ T5779] bridge_slave_1: entered allmulticast mode [ 79.428881][ T5779] bridge_slave_1: entered promiscuous mode [ 79.436778][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.444044][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.451442][ T5778] bridge_slave_1: entered allmulticast mode [ 79.458248][ T5778] bridge_slave_1: entered promiscuous mode [ 79.562061][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.572292][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.579563][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.587082][ T5783] bridge_slave_0: entered allmulticast mode [ 79.595268][ T5783] bridge_slave_0: entered promiscuous mode [ 79.604926][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.618843][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.626509][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.634112][ T5777] bridge_slave_0: entered allmulticast mode [ 79.640929][ T5777] bridge_slave_0: entered promiscuous mode [ 79.650199][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.676980][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.684491][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.692038][ T5783] bridge_slave_1: entered allmulticast mode [ 79.698855][ T5783] bridge_slave_1: entered promiscuous mode [ 79.707973][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.735153][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.742523][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.749694][ T5777] bridge_slave_1: entered allmulticast mode [ 79.756800][ T5777] bridge_slave_1: entered promiscuous mode [ 79.777714][ T5779] team0: Port device team_slave_0 added [ 79.798220][ T5778] team0: Port device team_slave_0 added [ 79.807507][ T5778] team0: Port device team_slave_1 added [ 79.826140][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.837692][ T5779] team0: Port device team_slave_1 added [ 79.867728][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.888737][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.919679][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.926758][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.952926][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.974626][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.982006][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.008063][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.021924][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.048393][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.055439][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.082049][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.100979][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.108376][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.134461][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.157959][ T5777] team0: Port device team_slave_0 added [ 80.209912][ T5777] team0: Port device team_slave_1 added [ 80.229556][ T5778] hsr_slave_0: entered promiscuous mode [ 80.236851][ T5778] hsr_slave_1: entered promiscuous mode [ 80.246479][ T5783] team0: Port device team_slave_0 added [ 80.258170][ T5783] team0: Port device team_slave_1 added [ 80.299491][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.306710][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.333357][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.354986][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.362201][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.388397][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.409034][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.417388][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.446088][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.469276][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.476315][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.503010][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.559249][ T5779] hsr_slave_0: entered promiscuous mode [ 80.565873][ T5779] hsr_slave_1: entered promiscuous mode [ 80.572398][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.580235][ T5779] Cannot create hsr debugfs directory [ 80.582510][ T5788] Bluetooth: hci2: command tx timeout [ 80.651770][ T5788] Bluetooth: hci3: command tx timeout [ 80.657840][ T5791] Bluetooth: hci0: command tx timeout [ 80.657859][ T5790] Bluetooth: hci1: command tx timeout [ 80.678596][ T5783] hsr_slave_0: entered promiscuous mode [ 80.686011][ T5783] hsr_slave_1: entered promiscuous mode [ 80.692968][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.700753][ T5783] Cannot create hsr debugfs directory [ 80.774999][ T5777] hsr_slave_0: entered promiscuous mode [ 80.782298][ T5777] hsr_slave_1: entered promiscuous mode [ 80.788566][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.796884][ T5777] Cannot create hsr debugfs directory [ 81.036189][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.079919][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.116522][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.129411][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.178249][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.196612][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.209522][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.235483][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.314799][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.326249][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.337786][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.349317][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.450046][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.459970][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.488439][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.497999][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.577841][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.643358][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.670472][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.686530][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.694029][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.707392][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.714522][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.794482][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.816050][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.834703][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.841901][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.860395][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.886818][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.894035][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.904643][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.940360][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.947547][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.976813][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.990397][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.997597][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.046542][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.053755][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.129122][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.136370][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.208413][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.314290][ T5777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.351879][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.428231][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.575352][ T5778] veth0_vlan: entered promiscuous mode [ 82.599926][ T5778] veth1_vlan: entered promiscuous mode [ 82.653149][ T5791] Bluetooth: hci2: command tx timeout [ 82.718803][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.732684][ T5791] Bluetooth: hci1: command tx timeout [ 82.738321][ T5791] Bluetooth: hci0: command tx timeout [ 82.743917][ T5788] Bluetooth: hci3: command tx timeout [ 82.746292][ T5778] veth0_macvtap: entered promiscuous mode [ 82.800751][ T5778] veth1_macvtap: entered promiscuous mode [ 82.837942][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.865319][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.878987][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.897422][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.906835][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.916289][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.925158][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.959315][ T5783] veth0_vlan: entered promiscuous mode [ 82.980808][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.023814][ T5783] veth1_vlan: entered promiscuous mode [ 83.132219][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.140274][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.189702][ T5783] veth0_macvtap: entered promiscuous mode [ 83.207815][ T5779] veth0_vlan: entered promiscuous mode [ 83.227968][ T5783] veth1_macvtap: entered promiscuous mode [ 83.252624][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.262216][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.270489][ T5777] veth0_vlan: entered promiscuous mode [ 83.282220][ T5779] veth1_vlan: entered promiscuous mode [ 83.306889][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.317773][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.330132][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.364184][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.376945][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.393661][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.405725][ T5777] veth1_vlan: entered promiscuous mode [ 83.433567][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.447334][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.467871][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.491288][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.558816][ T5779] veth0_macvtap: entered promiscuous mode [ 83.576562][ T5777] veth0_macvtap: entered promiscuous mode [ 83.599745][ T5777] veth1_macvtap: entered promiscuous mode [ 83.625192][ T5779] veth1_macvtap: entered promiscuous mode [ 83.664884][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.676898][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.687507][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.698352][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.716304][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.750231][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.753903][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.769492][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.774822][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.789824][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.800590][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.814788][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.824463][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.836377][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.846449][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.858447][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.869228][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.880402][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.895172][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.920940][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.930156][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.940525][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.949721][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.970222][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.981483][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.991621][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.002337][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.012504][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.025540][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.036577][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.064907][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.075416][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.084420][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.094697][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.109765][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.128273][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.211157][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.220854][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.367191][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.396738][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.463563][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.491014][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.617261][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.628958][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.651223][ C1] hrtimer: interrupt took 67646 ns [ 84.732186][ T5791] Bluetooth: hci2: command tx timeout [ 84.811341][ T5791] Bluetooth: hci1: command tx timeout [ 84.821844][ T5788] Bluetooth: hci3: command tx timeout [ 84.827363][ T5791] Bluetooth: hci0: command tx timeout [ 85.714576][ T5859] syz.2.3 (5859) used greatest stack depth: 20136 bytes left [ 86.351671][ T5885] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14'. [ 86.457345][ T5888] netlink: 188 bytes leftover after parsing attributes in process `syz.1.17'. [ 86.829694][ T5895] netlink: 'syz.3.19': attribute type 10 has an invalid length. [ 86.842195][ T5791] Bluetooth: hci2: command tx timeout [ 86.855989][ T5895] netlink: 168 bytes leftover after parsing attributes in process `syz.3.19'. [ 86.887584][ T5897] raw_sendmsg: syz.3.19 forgot to set AF_INET. Fix it! [ 86.906517][ T5791] Bluetooth: hci0: command tx timeout [ 86.912341][ T5791] Bluetooth: hci3: command tx timeout [ 86.917755][ T5791] Bluetooth: hci1: command tx timeout [ 86.970608][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 88.537951][ T5930] netlink: 'syz.0.30': attribute type 10 has an invalid length. [ 88.548383][ T5930] netlink: 168 bytes leftover after parsing attributes in process `syz.0.30'. [ 92.253703][ T9] cfg80211: failed to load regulatory.db [ 92.522849][ T6006] syzkaller0: entered promiscuous mode [ 92.530704][ T6006] syzkaller0: entered allmulticast mode [ 99.329581][ T6077] netdevsim netdevsim1: Direct firmware load for .net/syz1 failed with error -2 [ 99.342602][ T6077] netdevsim netdevsim1: Falling back to sysfs fallback for: .net/syz1 [ 102.505801][ T6140] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 102.515766][ T6140] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 104.283586][ T6174] syzkaller0: entered promiscuous mode [ 104.289567][ T6174] syzkaller0: entered allmulticast mode [ 104.312053][ T6172] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 104.337813][ T6172] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 107.213438][ T6215] Zero length message leads to an empty skb [ 108.554171][ T6223] netlink: 36 bytes leftover after parsing attributes in process `syz.1.144'. [ 110.038733][ T6243] netlink: 'syz.0.152': attribute type 29 has an invalid length. [ 110.047772][ T6243] netlink: 'syz.0.152': attribute type 29 has an invalid length. [ 110.067819][ T6243] netlink: 'syz.0.152': attribute type 29 has an invalid length. [ 110.405803][ T6252] syzkaller0: entered promiscuous mode [ 110.422891][ T6252] syzkaller0: entered allmulticast mode [ 110.606484][ T6261] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 110.861114][ T6261] team0: Device wg1 is of different type [ 110.944387][ T6261] syz.0.158 (6261) used greatest stack depth: 19096 bytes left [ 114.888510][ T6302] syzkaller0: entered promiscuous mode [ 114.924865][ T6302] syzkaller0: entered allmulticast mode [ 119.443416][ T6318] netlink: 'syz.2.180': attribute type 10 has an invalid length. [ 119.473063][ T6318] team0: Device wg1 is of different type [ 122.661488][ T6366] warning: `syz.1.198' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.045101][ T6387] syzkaller0: entered promiscuous mode [ 123.071276][ T6387] syzkaller0: entered allmulticast mode [ 126.977920][ T6436] netlink: 'syz.1.223': attribute type 10 has an invalid length. [ 127.028928][ T6436] netlink: 55 bytes leftover after parsing attributes in process `syz.1.223'. [ 131.754509][ T6509] macsec0: entered promiscuous mode [ 131.759964][ T6509] macsec0: entered allmulticast mode [ 131.821086][ T6509] veth1_macvtap: entered allmulticast mode [ 133.224992][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.232817][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.045515][ T6546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.271'. [ 135.679289][ T6586] syz.2.288 uses obsolete (PF_INET,SOCK_PACKET) [ 142.557899][ T6694] syzkaller0: entered promiscuous mode [ 142.563738][ T6694] syzkaller0: entered allmulticast mode [ 147.419317][ T6772] syzkaller0: entered promiscuous mode [ 147.445352][ T6772] syzkaller0: entered allmulticast mode [ 149.927024][ T6792] ¥: port 1(bond0) entered blocking state [ 149.933768][ T6792] ¥: port 1(bond0) entered disabled state [ 149.939814][ T6792] bond0: entered allmulticast mode [ 149.946185][ T6792] bond_slave_0: entered allmulticast mode [ 149.952372][ T6792] bond_slave_1: entered allmulticast mode [ 149.960345][ T6792] bond0: entered promiscuous mode [ 150.000083][ T6792] bond_slave_0: entered promiscuous mode [ 150.011504][ T6792] bond_slave_1: entered promiscuous mode [ 150.715875][ T6820] syzkaller0: entered promiscuous mode [ 150.722362][ T6820] syzkaller0: entered allmulticast mode [ 153.107085][ T6834] ¥: port 1(bond0) entered blocking state [ 153.113333][ T6834] ¥: port 1(bond0) entered disabled state [ 153.119346][ T6834] bond0: entered allmulticast mode [ 153.128661][ T6834] bond_slave_0: entered allmulticast mode [ 153.137535][ T6834] bond_slave_1: entered allmulticast mode [ 153.150541][ T6834] bond0: entered promiscuous mode [ 153.158470][ T6834] bond_slave_0: entered promiscuous mode [ 153.171737][ T6834] bond_slave_1: entered promiscuous mode [ 153.865765][ T6881] netlink: 152 bytes leftover after parsing attributes in process `syz.2.410'. [ 153.984293][ T6885] syzkaller0: entered promiscuous mode [ 154.010679][ T6885] syzkaller0: entered allmulticast mode [ 155.994430][ T6890] ¥: port 1(bond0) entered blocking state [ 156.000432][ T6890] ¥: port 1(bond0) entered disabled state [ 156.006476][ T6890] bond0: entered allmulticast mode [ 156.015568][ T6890] bond_slave_0: entered allmulticast mode [ 156.021589][ T6890] bond_slave_1: entered allmulticast mode [ 156.028980][ T6890] bond0: entered promiscuous mode [ 156.034376][ T6890] bond_slave_0: entered promiscuous mode [ 156.040276][ T6890] bond_slave_1: entered promiscuous mode [ 171.397596][ T7089] syzkaller0: entered promiscuous mode [ 171.404207][ T7089] syzkaller0: entered allmulticast mode [ 173.140978][ T7115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.504'. [ 173.164052][ T7115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.504'. [ 173.186897][ T7115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.504'. [ 173.282199][ T7115] netlink: 56 bytes leftover after parsing attributes in process `syz.2.504'. [ 175.343641][ T7142] syzkaller0: entered promiscuous mode [ 175.349237][ T7142] syzkaller0: entered allmulticast mode [ 175.658799][ T7157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.519'. [ 177.219711][ T7157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.519'. [ 177.229972][ T7161] netlink: 56 bytes leftover after parsing attributes in process `syz.0.519'. [ 177.929522][ T7196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.537'. [ 177.968753][ T7196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.537'. [ 178.043893][ T7199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.537'. [ 178.200220][ T7202] syzkaller0: entered promiscuous mode [ 178.206057][ T7202] syzkaller0: entered allmulticast mode [ 181.392794][ T7268] syzkaller0: entered promiscuous mode [ 181.398415][ T7268] syzkaller0: entered allmulticast mode [ 194.657566][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.667065][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.960777][ T7502] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 199.968387][ T7502] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 200.010302][ T7502] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 200.017674][ T7502] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 200.043430][ T7502] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 200.050639][ T7502] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 200.067201][ T7502] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 200.074429][ T7502] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 200.088405][ T7502] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 200.095516][ T7502] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.852927][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 201.853507][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 201.860534][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 201.865545][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 205.337398][ T7630] netlink: 'syz.0.724': attribute type 16 has an invalid length. [ 205.346509][ T7630] __nla_validate_parse: 1 callbacks suppressed [ 205.346546][ T7630] netlink: 152 bytes leftover after parsing attributes in process `syz.0.724'. [ 205.466317][ T7630] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 207.162480][ T7695] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.751'. [ 209.991858][ T7765] netlink: 'syz.3.782': attribute type 16 has an invalid length. [ 210.000161][ T7765] netlink: 152 bytes leftover after parsing attributes in process `syz.3.782'. [ 210.866520][ T7765] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 211.776599][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.810074][ T7799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.840722][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.874174][ T7799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.096566][ T7811] syzkaller0: entered promiscuous mode [ 212.102195][ T7811] syzkaller0: entered allmulticast mode [ 213.280439][ T7831] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 215.727914][ T7870] syzkaller0: entered promiscuous mode [ 215.733765][ T7870] syzkaller0: entered allmulticast mode [ 221.029258][ T7957] syzkaller0: entered promiscuous mode [ 221.058735][ T7957] syzkaller0: entered allmulticast mode [ 226.881973][ T7967] syzkaller0: entered promiscuous mode [ 226.887584][ T7967] syzkaller0: entered allmulticast mode [ 226.969665][ T7971] mac80211_hwsim hwsim4 ªªªªª@: renamed from wlan0 [ 232.566102][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.573888][ T8013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.582330][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.589753][ T8013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.740064][ T8018] syzkaller0: entered promiscuous mode [ 232.756231][ T8018] syzkaller0: entered allmulticast mode [ 237.934844][ T8149] netlink: 'syz.0.943': attribute type 29 has an invalid length. [ 239.020166][ T8149] netlink: 'syz.0.943': attribute type 29 has an invalid length. [ 244.631507][ T8312] netlink: 'syz.2.1015': attribute type 29 has an invalid length. [ 245.304848][ T8312] netlink: 'syz.2.1015': attribute type 29 has an invalid length. [ 245.425646][ T8313] netlink: 'syz.2.1015': attribute type 29 has an invalid length. [ 245.447170][ T8314] netlink: 'syz.2.1015': attribute type 29 has an invalid length. [ 246.154283][ T8345] syzkaller0: entered promiscuous mode [ 246.171485][ T8345] syzkaller0: entered allmulticast mode [ 246.266116][ T8352] netlink: 'syz.1.1029': attribute type 29 has an invalid length. [ 249.553681][ T8352] netlink: 'syz.1.1029': attribute type 29 has an invalid length. [ 253.444140][ T8441] syzkaller0: entered promiscuous mode [ 253.449645][ T8441] syzkaller0: entered allmulticast mode [ 256.112018][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.118454][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.795629][ T8480] netlink: 'syz.1.1081': attribute type 10 has an invalid length. [ 257.806762][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.815223][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.844980][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.852230][ T8480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.860434][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.867715][ T8480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.917560][ T8480] team0: Port device bridge0 added [ 260.851342][ T8539] netlink: 'syz.0.1106': attribute type 29 has an invalid length. [ 261.105491][ T8541] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1106'. [ 261.594271][ T8504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.602314][ T8504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.610846][ T8504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.620467][ T8504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.718942][ T8539] netlink: 'syz.0.1106': attribute type 29 has an invalid length. [ 262.424806][ T8568] syzkaller0: entered promiscuous mode [ 262.430544][ T8568] syzkaller0: entered allmulticast mode [ 264.653243][ T8574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.660772][ T8574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.669044][ T8574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.676567][ T8574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.852930][ T8596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1128'. [ 266.556585][ T8596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1128'. [ 267.168169][ T8637] netlink: 'syz.3.1145': attribute type 29 has an invalid length. [ 267.176617][ T8637] netlink: 'syz.3.1145': attribute type 29 has an invalid length. [ 267.187406][ T8637] netlink: 'syz.3.1145': attribute type 29 has an invalid length. [ 267.858708][ T8637] netlink: 184220 bytes leftover after parsing attributes in process `syz.3.1145'. [ 269.288524][ T5791] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 269.310485][ T8676] netlink: 'syz.3.1160': attribute type 29 has an invalid length. [ 269.351659][ T8676] netlink: 'syz.3.1160': attribute type 29 has an invalid length. [ 269.360057][ T8679] netlink: 'syz.3.1160': attribute type 29 has an invalid length. [ 273.427987][ T8766] netlink: 'syz.2.1199': attribute type 10 has an invalid length. [ 273.440400][ T8766] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1199'. [ 278.240615][ T8880] syzkaller0: entered promiscuous mode [ 278.252639][ T8880] syzkaller0: entered allmulticast mode [ 281.207515][ T8918] netlink: 'syz.3.1257': attribute type 10 has an invalid length. [ 281.221250][ T8918] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1257'. [ 281.587158][ T8926] syz.3.1261[8926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.587318][ T8926] syz.3.1261[8926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.506353][ T8956] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 283.540262][ T8956] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1272'. [ 284.562083][ T8958] syzkaller0: entered promiscuous mode [ 284.571025][ T8958] syzkaller0: entered allmulticast mode [ 288.497992][ T9037] -: renamed from syzkaller0 [ 289.147294][ T9040] syzkaller0: entered promiscuous mode [ 289.172443][ T9040] syzkaller0: entered allmulticast mode [ 290.709908][ T9067] syzkaller0: entered promiscuous mode [ 290.752343][ T9067] syzkaller0: entered allmulticast mode [ 293.509342][ T9088] syzkaller0: left promiscuous mode [ 293.514737][ T9088] syzkaller0: left allmulticast mode [ 295.022087][ T9123] syzkaller0: entered promiscuous mode [ 295.039042][ T9123] syzkaller0: entered allmulticast mode [ 297.803643][ T9167] syzkaller0: entered promiscuous mode [ 297.810275][ T9167] syzkaller0: entered allmulticast mode [ 301.275255][ T9204] syzkaller0: entered promiscuous mode [ 301.280900][ T9204] syzkaller0: entered allmulticast mode [ 303.090859][ T9232] syzkaller0: entered promiscuous mode [ 303.097451][ T9232] syzkaller0: entered allmulticast mode [ 305.056938][ T9254] syzkaller0: entered promiscuous mode [ 305.067944][ T9254] syzkaller0: entered allmulticast mode [ 305.793676][ T9281] syzkaller0: entered promiscuous mode [ 305.799353][ T9281] syzkaller0: entered allmulticast mode [ 309.007962][ T9334] syzkaller0: entered promiscuous mode [ 309.031802][ T9334] syzkaller0: entered allmulticast mode [ 312.075078][ T9385] syzkaller0: entered promiscuous mode [ 312.124008][ T9385] syzkaller0: entered allmulticast mode [ 314.085941][ T9376] veth0_vlan: entered allmulticast mode [ 314.124965][ T9395] ªªªªªª: renamed from vlan0 [ 314.254478][ T9404] syzkaller0: entered promiscuous mode [ 314.260020][ T9404] syzkaller0: entered allmulticast mode [ 316.302105][ T9436] syzkaller0: entered promiscuous mode [ 316.308400][ T9436] syzkaller0: entered allmulticast mode [ 317.535249][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.542094][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.592427][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.600990][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.635042][ T9465] bridge0: entered allmulticast mode [ 318.724712][ T9467] syzkaller0: entered promiscuous mode [ 318.730233][ T9467] syzkaller0: entered allmulticast mode [ 318.741223][ T9462] veth0_vlan: entered allmulticast mode [ 319.603986][ T9465] bridge_slave_1: left allmulticast mode [ 319.609858][ T9465] bridge_slave_1: left promiscuous mode [ 319.617352][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.630870][ T9465] bridge_slave_0: left allmulticast mode [ 319.636880][ T9465] bridge_slave_0: left promiscuous mode [ 319.643965][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.707475][ T9463] ªªªªªª: renamed from vlan0 [ 321.517238][ T9485] syzkaller0: entered promiscuous mode [ 321.525144][ T9485] syzkaller0: entered allmulticast mode [ 323.990896][ T9512] veth0_vlan: entered allmulticast mode [ 324.017858][ T9514] ªªªªªª: renamed from vlan0 [ 324.170551][ T9527] syzkaller0: entered promiscuous mode [ 324.176491][ T9527] syzkaller0: entered allmulticast mode [ 328.551183][ T9556] syzkaller0: entered promiscuous mode [ 328.556711][ T9556] syzkaller0: entered allmulticast mode [ 331.232050][ T9581] veth1_to_bond: entered allmulticast mode [ 331.337240][ T9585] syzkaller0: entered promiscuous mode [ 331.342795][ T9585] syzkaller0: entered allmulticast mode [ 333.609893][ T9592] syzkaller0: entered promiscuous mode [ 333.615513][ T9592] syzkaller0: entered allmulticast mode [ 335.462365][ T9608] syzkaller0: entered promiscuous mode [ 335.482054][ T9608] syzkaller0: entered allmulticast mode [ 337.973125][ T9632] syzkaller0: entered promiscuous mode [ 337.978756][ T9632] syzkaller0: entered allmulticast mode [ 339.005390][ T9637] syzkaller0: entered promiscuous mode [ 339.024556][ T9637] syzkaller0: entered allmulticast mode [ 344.949070][ T9681] syzkaller0: entered promiscuous mode [ 344.955127][ T9681] syzkaller0: entered allmulticast mode [ 348.547198][ T9689] syzkaller0: entered promiscuous mode [ 348.554907][ T9689] syzkaller0: entered allmulticast mode [ 350.297803][ T9719] sit0: entered allmulticast mode [ 350.308347][ T9720] sit0: entered promiscuous mode [ 351.575050][ T9745] syzkaller0: entered promiscuous mode [ 351.580611][ T9745] syzkaller0: entered allmulticast mode [ 353.518317][ T9756] sit0: entered promiscuous mode [ 353.523393][ T9756] sit0: entered allmulticast mode [ 354.732577][ T9785] Driver unsupported XDP return value 0 on prog (id 594) dev N/A, expect packet loss! [ 354.920707][ T9788] sit0: entered allmulticast mode [ 354.991152][ T9787] sit0: entered promiscuous mode [ 355.867589][ T9795] syzkaller0: entered promiscuous mode [ 355.891283][ T9795] syzkaller0: entered allmulticast mode [ 356.245144][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.254622][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.268133][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.277487][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.288174][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.300703][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.414782][ T5790] Bluetooth: hci4: command tx timeout [ 358.746197][ T9806] chnl_net:caif_netlink_parms(): no params data found [ 359.235634][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.356075][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.392324][ T9806] bridge_slave_0: entered allmulticast mode [ 359.493895][ T9806] bridge_slave_0: entered promiscuous mode [ 359.549021][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.565887][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.611988][ T9806] bridge_slave_1: entered allmulticast mode [ 359.644301][ T9806] bridge_slave_1: entered promiscuous mode [ 359.792187][ T9806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.824923][ T9806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.903208][ T9806] team0: Port device team_slave_0 added [ 359.942755][ T9806] team0: Port device team_slave_1 added [ 359.989144][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.009428][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.041290][ T9806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.059452][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.072825][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.115888][ T9806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.492564][ T5790] Bluetooth: hci4: command tx timeout [ 360.947305][ T9806] hsr_slave_0: entered promiscuous mode [ 360.964889][ T9806] hsr_slave_1: entered promiscuous mode [ 361.032156][ T9806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.039791][ T9806] Cannot create hsr debugfs directory [ 361.516257][ T9806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.565239][ T9806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.581895][ T9806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.593230][ T9806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.747083][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.830234][ T9806] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.899022][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.906272][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.967771][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.975023][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.158462][ T9806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.576592][ T5790] Bluetooth: hci4: command tx timeout [ 362.755107][ T9806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.389589][ T9806] veth0_vlan: entered promiscuous mode [ 364.466640][ T9806] veth1_vlan: entered promiscuous mode [ 364.639488][ T9806] veth0_macvtap: entered promiscuous mode [ 364.655917][ T5790] Bluetooth: hci4: command tx timeout [ 364.733213][ T9806] veth1_macvtap: entered promiscuous mode [ 364.904295][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.925928][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.965358][ T9806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.974522][ T9806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.983948][ T9806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.992909][ T9806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.811921][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.819785][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.149218][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.158360][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.345185][ T9962] syzkaller0: entered promiscuous mode [ 367.352309][ T9962] syzkaller0: entered allmulticast mode [ 367.420328][ T9964] syzkaller0: entered promiscuous mode [ 367.451999][ T9964] syzkaller0: entered allmulticast mode [ 372.089343][T10004] syzkaller0: entered promiscuous mode [ 372.094912][T10004] syzkaller0: entered allmulticast mode [ 373.875538][T10032] syzkaller0: entered promiscuous mode [ 373.890444][T10032] syzkaller0: entered allmulticast mode [ 376.414366][T10055] syzkaller0: entered promiscuous mode [ 376.419901][T10055] syzkaller0: entered allmulticast mode [ 376.479386][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.522699][T10069] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.529979][T10069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.188556][T10076] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.195842][T10076] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.203553][T10076] bridge0: entered allmulticast mode [ 378.221225][T10077] bridge_slave_1: left allmulticast mode [ 378.235805][T10077] bridge_slave_1: left promiscuous mode [ 378.245339][T10077] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.259752][T10077] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.326777][T10077] team0: Port device bridge0 removed [ 378.461990][T10083] syzkaller0: entered promiscuous mode [ 378.467531][T10083] syzkaller0: entered allmulticast mode [ 378.974956][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.995753][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.082686][T10101] syzkaller0: entered promiscuous mode [ 381.088192][T10101] syzkaller0: entered allmulticast mode [ 382.618418][T10121] syzkaller0: entered promiscuous mode [ 382.624045][T10121] syzkaller0: entered allmulticast mode [ 382.668467][T10129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.681169][T10129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.701226][T10129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.708680][T10129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.484806][T10157] syzkaller0: entered promiscuous mode [ 385.490362][T10157] syzkaller0: entered allmulticast mode [ 388.238502][T10189] syzkaller0: entered promiscuous mode [ 388.261486][T10189] syzkaller0: entered allmulticast mode [ 391.428312][T10223] tap0: tun_chr_ioctl cmd 1074025692 [ 391.658074][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.666002][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.754741][T10227] bridge0: entered allmulticast mode [ 391.822196][T10227] bridge_slave_1: left allmulticast mode [ 391.828176][T10227] bridge_slave_1: left promiscuous mode [ 391.871701][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.474821][T10227] bridge_slave_0: left allmulticast mode [ 392.481682][T10227] bridge_slave_0: left promiscuous mode [ 392.487647][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.603887][T10248] syzkaller0: entered promiscuous mode [ 392.609615][T10248] syzkaller0: entered allmulticast mode [ 397.788546][T10353] netlink: 'syz.4.1759': attribute type 39 has an invalid length. [ 400.685481][T10381] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.693910][T10381] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.725924][T10381] bridge0: entered allmulticast mode [ 400.789802][T10385] bridge_slave_1: left allmulticast mode [ 400.811438][T10385] bridge_slave_1: left promiscuous mode [ 400.831767][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.853591][T10385] bridge_slave_0: left allmulticast mode [ 400.859364][T10385] bridge_slave_0: left promiscuous mode [ 400.873066][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.467424][T10398] netlink: 'syz.1.1773': attribute type 39 has an invalid length. [ 404.544091][T10429] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 404.602909][T10429] netlink: 'syz.1.1783': attribute type 3 has an invalid length. [ 404.621268][T10429] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1783'. [ 406.373922][T10455] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 406.593677][T10455] netlink: 'syz.3.1792': attribute type 3 has an invalid length. [ 406.603744][T10455] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1792'. [ 410.251412][ T3523] wlan1: Trigger new scan to find an IBSS to join [ 412.450407][T10533] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1813'. [ 414.082970][T10555] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1822'. [ 415.221252][ T78] wlan1: Trigger new scan to find an IBSS to join [ 415.461854][T10570] netlink: 'syz.4.1823': attribute type 39 has an invalid length. [ 415.597258][T10572] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 415.625346][T10573] netlink: 'syz.0.1827': attribute type 3 has an invalid length. [ 415.681130][T10573] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1827'. [ 415.830436][T10577] syzkaller0: entered promiscuous mode [ 415.881112][T10577] syzkaller0: entered allmulticast mode [ 416.170230][ T78] wlan1: Creating new IBSS network, BSSID aa:67:61:1c:f1:5c [ 418.040501][T10587] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1832'. [ 419.591683][T10619] netlink: 'syz.1.1841': attribute type 39 has an invalid length. [ 419.609046][T10621] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 419.770702][T10623] syzkaller0: entered promiscuous mode [ 419.780155][T10623] syzkaller0: entered allmulticast mode [ 419.798055][T10621] netlink: 'syz.3.1842': attribute type 3 has an invalid length. [ 419.828480][T10621] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1842'. [ 422.255418][ T3480] wlan1: Trigger new scan to find an IBSS to join [ 423.467389][T10651] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1852'. [ 425.211462][ T78] wlan1: Trigger new scan to find an IBSS to join [ 425.374296][T10690] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1862'. [ 426.195525][T10703] syzkaller0: entered promiscuous mode [ 426.206480][T10703] syzkaller0: entered allmulticast mode [ 428.256834][ T49] wlan1: Trigger new scan to find an IBSS to join [ 429.186166][ T78] wlan1: Creating new IBSS network, BSSID 9e:9e:27:5f:c9:36 [ 430.121653][T10724] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1872'. [ 430.453206][T10732] syzkaller0: entered promiscuous mode [ 430.458714][T10732] syzkaller0: entered allmulticast mode [ 430.521825][T10735] netlink: 'syz.3.1873': attribute type 39 has an invalid length. [ 433.400179][T10756] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1881'. [ 435.054696][T10785] syzkaller0: entered promiscuous mode [ 435.060333][T10785] syzkaller0: entered allmulticast mode [ 437.366124][T10802] syzkaller0: entered promiscuous mode [ 437.375352][T10802] syzkaller0: entered allmulticast mode [ 437.422840][T10803] syzkaller0: entered promiscuous mode [ 437.434749][T10803] syzkaller0: entered allmulticast mode [ 440.426492][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.441447][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.749709][T10863] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 443.854222][T10863] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1913'. [ 443.965367][T10867] syzkaller0: entered promiscuous mode [ 443.970912][T10867] syzkaller0: entered allmulticast mode [ 446.263480][ T78] wlan1: Trigger new scan to find an IBSS to join [ 447.408225][T10890] syzkaller0: entered promiscuous mode [ 447.417134][T10890] syzkaller0: entered allmulticast mode [ 450.262721][ T3535] wlan1: Trigger new scan to find an IBSS to join [ 451.430777][ T3535] wlan1: Creating new IBSS network, BSSID d2:a4:a6:17:81:c2 [ 458.242886][T10956] syzkaller0: entered promiscuous mode [ 458.248613][T10956] syzkaller0: entered allmulticast mode [ 461.634557][T10972] netlink: 'syz.0.1941': attribute type 39 has an invalid length. [ 463.402837][T10998] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 463.697854][T10998] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1948'. [ 465.346198][T11009] syzkaller0: entered promiscuous mode [ 465.361092][T11009] syzkaller0: entered allmulticast mode [ 465.954359][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 465.969742][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 466.003033][ T5791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 466.018922][ T5791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 466.026747][ T5791] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 466.035177][ T5791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.207857][T11017] netlink: 'syz.1.1952': attribute type 39 has an invalid length. [ 467.727080][T11018] chnl_net:caif_netlink_parms(): no params data found [ 467.940441][T11031] syzkaller0: entered promiscuous mode [ 467.951319][T11031] syzkaller0: entered allmulticast mode [ 468.057659][T11029] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 468.093570][T11036] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1957'. [ 468.174680][ T5791] Bluetooth: hci5: command tx timeout [ 470.255573][ T5791] Bluetooth: hci5: command tx timeout [ 470.454534][T11018] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.464669][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.485982][T11018] bridge_slave_0: entered allmulticast mode [ 470.502886][T11018] bridge_slave_0: entered promiscuous mode [ 470.642817][T11018] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.650514][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.661815][T11018] bridge_slave_1: entered allmulticast mode [ 470.669359][T11018] bridge_slave_1: entered promiscuous mode [ 471.016546][T11018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.048481][T11018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.328832][T11018] team0: Port device team_slave_0 added [ 471.381934][T11018] team0: Port device team_slave_1 added [ 471.764698][T11065] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 471.844058][T11064] netlink: 'syz.1.1967': attribute type 39 has an invalid length. [ 471.892647][T11069] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1968'. [ 471.917467][T11018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.935134][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.061069][T11018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.125941][T11018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.161406][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.221080][T11018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.332298][ T5791] Bluetooth: hci5: command tx timeout [ 472.456501][T11018] hsr_slave_0: entered promiscuous mode [ 472.481610][T11018] hsr_slave_1: entered promiscuous mode [ 472.493353][T11018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.506811][T11018] Cannot create hsr debugfs directory [ 472.634184][T11078] syzkaller0: entered promiscuous mode [ 472.651340][T11078] syzkaller0: entered allmulticast mode [ 474.261397][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 474.412607][ T5791] Bluetooth: hci5: command tx timeout [ 475.478230][ T78] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.639497][ T78] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.716641][T11108] syzkaller0: entered promiscuous mode [ 475.722298][T11108] syzkaller0: entered allmulticast mode [ 475.754487][ T78] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.230798][ T78] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.283244][T11018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.305371][T11018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.320007][T11018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 477.330276][T11018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.505707][T11018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.535314][T11018] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.557488][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.564680][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.628690][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.635888][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.080445][T11018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.518314][T11018] veth0_vlan: entered promiscuous mode [ 478.544207][T11018] veth1_vlan: entered promiscuous mode [ 478.633946][T11018] veth0_macvtap: entered promiscuous mode [ 478.648205][T11018] veth1_macvtap: entered promiscuous mode [ 478.697872][ T78] bond0: left allmulticast mode [ 478.703288][ T78] bond_slave_0: left allmulticast mode [ 478.708835][ T78] bond_slave_1: left allmulticast mode [ 478.716645][ T78] bond0: left promiscuous mode [ 478.722205][ T78] bond_slave_0: left promiscuous mode [ 478.727811][ T78] bond_slave_1: left promiscuous mode [ 478.736650][ T78] ¥: port 1(bond0) entered disabled state [ 478.758533][ T78] hsr_slave_0: left promiscuous mode [ 478.764885][ T78] hsr_slave_1: left promiscuous mode [ 478.796458][ T78] veth1_macvtap: left allmulticast mode [ 478.802363][ T78] veth1_macvtap: left promiscuous mode [ 478.808534][ T78] veth0_macvtap: left promiscuous mode [ 478.816958][ T78] veth1_vlan: left promiscuous mode [ 479.214827][ T3535] wlan1: Trigger new scan to find an IBSS to join [ 479.429115][ T78] team0 (unregistering): Port device team_slave_1 removed [ 479.469254][ T78] team0 (unregistering): Port device team_slave_0 removed [ 479.509858][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.555107][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.815291][ T78] bond0 (unregistering): Released all slaves [ 479.904343][T11018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.928728][T11018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.953346][T11018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.962733][T11018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.972008][T11018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.980827][T11018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.112969][ T3480] wlan1: Creating new IBSS network, BSSID 36:33:5d:a7:b3:e8 [ 480.122619][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.130489][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.187877][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.200719][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.638495][T11162] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.238453][T11164] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.289486][T11169] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1991'. [ 481.299748][T11162] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1989'. [ 481.823062][T11184] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.973720][T11177] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.1981'. [ 482.624041][T11208] netlink: 'syz.5.1994': attribute type 39 has an invalid length. [ 483.453979][ T5790] Bluetooth: hci4: command 0x0406 tx timeout [ 483.629018][T11222] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 483.781869][T11231] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1995'. [ 483.804618][T11220] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 483.846680][T11234] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1996'. [ 484.252987][ T49] wlan1: Trigger new scan to find an IBSS to join [ 484.670474][T11248] syzkaller0: entered promiscuous mode [ 484.710336][T11248] syzkaller0: entered allmulticast mode [ 486.254714][ T3535] wlan1: Trigger new scan to find an IBSS to join [ 487.291623][ T78] wlan1: Trigger new scan to find an IBSS to join [ 487.513652][T11292] netlink: 'syz.1.2015': attribute type 39 has an invalid length. [ 488.552921][T11322] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 488.714356][T11322] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2019'. [ 489.211364][ T49] wlan1: Trigger new scan to find an IBSS to join [ 490.252051][ T3523] wlan1: Trigger new scan to find an IBSS to join [ 491.860709][ T49] wlan1: Creating new IBSS network, BSSID a2:0c:e2:bf:62:63 [ 491.873078][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.881559][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.901947][T11404] bridge0: entered allmulticast mode [ 491.952030][T11409] bridge_slave_1: left allmulticast mode [ 491.991298][T11409] bridge_slave_1: left promiscuous mode [ 491.997506][T11409] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.078314][T11409] bridge_slave_0: left allmulticast mode [ 492.091365][T11409] bridge_slave_0: left promiscuous mode [ 492.107364][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.260024][ T3535] wlan1: Trigger new scan to find an IBSS to join [ 493.185582][ T3523] wlan1: Creating new IBSS network, BSSID ea:e4:2b:f3:d5:14 [ 499.249679][T11532] netlink: 'syz.1.2064': attribute type 39 has an invalid length. [ 499.263347][T11534] netlink: 'syz.4.2065': attribute type 3 has an invalid length. [ 499.285339][T11534] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.2065'. [ 501.269245][T11579] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 501.356002][T11579] netlink: 'syz.4.2078': attribute type 3 has an invalid length. [ 501.401556][T11579] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.2078'. [ 501.970057][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.976491][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.049534][T11602] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 502.124765][T11602] netlink: 'syz.1.2085': attribute type 3 has an invalid length. [ 502.153407][T11602] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.2085'. [ 504.422526][ T28] INFO: task syz.2.1522:9647 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 504.465032][ T28] Not tainted syzkaller #0 [ 504.512152][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.561277][ T28] task:syz.2.1522 state:D stack:23784 pid:9647 ppid:5779 flags:0x00004006 [ 504.616800][ T28] Call Trace: [ 504.646923][ T28] [ 504.713779][T11665] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 504.721092][ T28] __schedule+0x15ae/0x4660 [ 504.733984][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 504.761116][ T28] ? asan.module_dtor+0x20/0x20 [ 504.785245][ T28] ? trace_contention_end+0x39/0xe0 [ 504.864519][ T28] ? perf_event_ctx_lock_nested+0x490/0x490 [ 504.870550][ T28] ? task_work_cancel+0xa5/0x220 [ 504.902797][ T28] ? task_work_cancel_func+0x210/0x210 [ 504.911428][ T28] schedule+0xbd/0x170 [ 504.915565][ T28] ? _free_event+0x10d/0xfb0 [ 504.942061][ T28] _free_event+0x176/0xfb0 [ 504.946579][ T28] perf_event_release_kernel+0x7c8/0x850 [ 504.961052][ T28] ? __might_sleep+0xe0/0xe0 [ 504.965913][ T28] ? calc_timer_values+0x400/0x400 [ 505.001054][ T28] ? perf_mmap+0x15e0/0x15e0 [ 505.005736][ T28] perf_release+0x3b/0x40 [ 505.010103][ T28] __fput+0x221/0x940 [ 505.031068][ T28] task_work_run+0x1d4/0x260 [ 505.035751][ T28] ? task_work_cancel+0x220/0x220 [ 505.040842][ T28] get_signal+0x11da/0x1390 [ 505.052823][ T28] ? create_io_thread+0x190/0x190 [ 505.057943][ T28] arch_do_signal_or_restart+0xc2/0x7b0 [ 505.084822][ T28] ? __x64_sys_clone+0x1b7/0x230 [ 505.089839][ T28] ? get_sigframe_size+0x20/0x20 [ 505.109309][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 505.121062][ T28] exit_to_user_mode_loop+0x70/0x110 [ 505.126429][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 505.151076][ T28] syscall_exit_to_user_mode+0x1a/0x50 [ 505.156720][ T28] do_syscall_64+0x61/0xb0 [ 505.171557][ T28] ? clear_bhb_loop+0x40/0x90 [ 505.176411][ T28] ? clear_bhb_loop+0x40/0x90 [ 505.192215][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.198187][ T28] RIP: 0033:0x7f156899e159 [ 505.212893][ T11] wlan1: Trigger new scan to find an IBSS to join [ 505.229832][ T28] RSP: 002b:00007f1569852fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 505.240111][ T28] RAX: fffffffffffffff4 RBX: 00007f1568c25fa0 RCX: 00007f156899e159 [ 505.256466][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000 [ 505.270231][ T28] RBP: 00007f1568a3506b R08: 0000000000000000 R09: 0000000000000000 [ 505.278614][ T28] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 505.288445][ T28] R13: 00007f1568c26038 R14: 00007f1568c25fa0 R15: 00007ffc1f35cee8 [ 505.297046][ T28] [ 505.300453][ T28] [ 505.300453][ T28] Showing all locks held in the system: [ 505.376350][ T28] 1 lock held by khungtaskd/28: [ 505.392573][ T28] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 505.428275][ T28] 2 locks held by getty/5533: [ 505.439131][ T28] #0: ffff88802d6110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 505.462576][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 505.511067][ T28] 2 locks held by kworker/0:5/5843: [ 505.516333][ T28] #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 505.561044][ T28] #1: ffffc900048ffd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 505.601038][ T28] 1 lock held by syz-executor/11018: [ 505.606378][ T28] 1 lock held by syz.1.2096/11647: [ 505.635983][ T28] #0: ffffffff8e3c3950 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x347/0x530 [ 505.651460][ T28] 1 lock held by syz.4.2100/11658: [ 505.656634][ T28] #0: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 505.691192][ T28] 2 locks held by syz.0.2101/11662: [ 505.696459][ T28] #0: ffffffff8d1883c8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 505.721068][ T28] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 505.741042][ T28] 1 lock held by rm/11678: [ 505.751505][ T28] [ 505.753878][ T28] ============================================= [ 505.753878][ T28] [ 505.798756][ T28] NMI backtrace for cpu 0 [ 505.803155][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 505.810387][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.820490][ T28] Call Trace: [ 505.823801][ T28] [ 505.826762][ T28] dump_stack_lvl+0x18c/0x250 [ 505.831487][ T28] ? __wake_up_klogd+0xd9/0x100 [ 505.836384][ T28] ? show_regs_print_info+0x20/0x20 [ 505.841623][ T28] ? load_image+0x420/0x420 [ 505.846183][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 505.851176][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 505.857347][ T28] ? load_image+0x420/0x420 [ 505.861857][ T28] ? wq_watchdog_touch+0xef/0x170 [ 505.866898][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 505.873003][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 505.879005][ T28] watchdog+0xf59/0xfa0 [ 505.883177][ T28] ? watchdog+0x1e1/0xfa0 [ 505.887522][ T28] kthread+0x2fa/0x390 [ 505.891598][ T28] ? hungtask_pm_notify+0x50/0x50 [ 505.896639][ T28] ? kthread_blkcg+0xd0/0xd0 [ 505.901242][ T28] ret_from_fork+0x48/0x80 [ 505.905668][ T28] ? kthread_blkcg+0xd0/0xd0 [ 505.910268][ T28] ret_from_fork_asm+0x11/0x20 [ 505.915071][ T28] [ 505.918854][ T28] Sending NMI from CPU 0 to CPUs 1: [ 505.924206][ C1] NMI backtrace for cpu 1 [ 505.924216][ C1] CPU: 1 PID: 3535 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 505.924231][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.924239][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 505.924302][ C1] RIP: 0010:kmem_cache_alloc_node+0x285/0x310 [ 505.924328][ C1] Code: f9 45 89 f0 41 89 e9 e8 e9 02 e6 ff 65 ff 0d 3a 75 24 7e 0f 85 46 ff ff ff e8 57 5a 21 ff e9 3c ff ff ff 83 3d 7b a6 43 0b 00 <0f> 85 e8 fd ff ff 4c 89 e7 4c 89 ee 44 89 f2 e8 67 f4 00 00 48 89 [ 505.924385][ C1] RSP: 0018:ffffc9000d1b7a58 EFLAGS: 00000202 [ 505.924398][ C1] RAX: ffff888142275640 RBX: 0000000000000000 RCX: 0000000000000000 [ 505.924408][ C1] RDX: 0000000000000000 RSI: 00000000000000f0 RDI: ffffffff8d230520 [ 505.924418][ C1] RBP: 00000000ffffffff R08: 0000000000000820 R09: 1ffffffff223d6bd [ 505.924428][ C1] R10: dffffc0000000000 R11: fffffbfff223d6be R12: ffff888142275640 [ 505.924438][ C1] R13: 00000000000000f0 R14: 0000000000000820 R15: ffff888142275640 [ 505.924448][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 505.924461][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.924472][ C1] CR2: 00007f1225c4efe8 CR3: 00000000755d7000 CR4: 00000000003506e0 [ 505.924487][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 505.924496][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 505.924505][ C1] Call Trace: [ 505.924511][ C1] [ 505.924516][ C1] ? __alloc_skb+0x103/0x2c0 [ 505.924538][ C1] __alloc_skb+0x103/0x2c0 [ 505.924557][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 505.924579][ C1] ? process_scheduled_works+0x975/0x1600 [ 505.924599][ C1] process_scheduled_works+0xa60/0x1600 [ 505.924630][ C1] ? worker_attach_to_pool+0x370/0x370 [ 505.924651][ C1] ? assign_work+0x3cc/0x5d0 [ 505.924671][ C1] worker_thread+0xa5e/0xfe0 [ 505.924694][ C1] ? _raw_spin_unlock+0x40/0x40 [ 505.924735][ C1] ? __kthread_parkme+0x71/0x1c0 [ 505.924755][ C1] kthread+0x2fa/0x390 [ 505.924769][ C1] ? pr_cont_work+0x550/0x550 [ 505.924786][ C1] ? kthread_blkcg+0xd0/0xd0 [ 505.924801][ C1] ret_from_fork+0x48/0x80 [ 505.924817][ C1] ? kthread_blkcg+0xd0/0xd0 [ 505.924832][ C1] ret_from_fork_asm+0x11/0x20 [ 505.924858][ C1] [ 506.188262][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 506.195197][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 506.202428][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.212517][ T28] Call Trace: [ 506.215818][ T28] [ 506.218769][ T28] dump_stack_lvl+0x18c/0x250 [ 506.223577][ T28] ? show_regs_print_info+0x20/0x20 [ 506.228819][ T28] ? load_image+0x420/0x420 [ 506.233367][ T28] panic+0x2ca/0x720 [ 506.237282][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 506.241817][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 506.247381][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 506.252768][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 506.258939][ T28] watchdog+0xf98/0xfa0 [ 506.263115][ T28] ? watchdog+0x1e1/0xfa0 [ 506.267459][ T28] kthread+0x2fa/0x390 [ 506.271539][ T28] ? hungtask_pm_notify+0x50/0x50 [ 506.276574][ T28] ? kthread_blkcg+0xd0/0xd0 [ 506.281170][ T28] ret_from_fork+0x48/0x80 [ 506.285592][ T28] ? kthread_blkcg+0xd0/0xd0 [ 506.290187][ T28] ret_from_fork_asm+0x11/0x20 [ 506.294987][ T28] [ 506.298138][ T28] Kernel Offset: disabled [ 506.302463][ T28] Rebooting in 86400 seconds..