last executing test programs: 7.527315856s ago: executing program 2 (id=556): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000000800000000, 0x8}, 0x0, 0x0, 0x0, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x8000}, 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x8202) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) 5.243827715s ago: executing program 2 (id=565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000880)="6dc029d186242d046f5ecf5bc9", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.164474807s ago: executing program 1 (id=567): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r6 = socket$kcm(0x2, 0x3, 0x2) close(r6) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 5.095398979s ago: executing program 2 (id=568): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) 4.731954778s ago: executing program 3 (id=573): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000000800000000, 0x8}, 0x0, 0x0, 0x0, 0x3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x8000}, 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x8202) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) 4.718144608s ago: executing program 2 (id=574): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4.526883613s ago: executing program 2 (id=575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 4.401276986s ago: executing program 3 (id=577): openat$tun(0xffffffffffffff9c, 0x0, 0x224901, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x40, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0xb}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8000200, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x26}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x9, 0xff, 0x5, 0x0, 0x62, 0xd3751, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xffffffffffff15ed, 0x8}, 0x4, 0xfffffffffffffffd, 0x3, 0x0, 0x200000000081, 0x8005, 0x8, 0x0, 0x2cb, 0x0, 0x101}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x4, 0x0, 0x4, 0x0, 0x3, 0x41, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0xf3, 0x0, 0xffffffbd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 4.032148116s ago: executing program 3 (id=580): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) 3.792034622s ago: executing program 3 (id=582): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) 3.791129713s ago: executing program 1 (id=583): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 3.647354666s ago: executing program 0 (id=584): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0xfffff3b4}}, @enum64={0x3, 0x4, 0x0, 0x13, 0x1, 0x1, [{0x4, 0x7, 0x9}, {0xd, 0x45d, 0x680}, {0xb, 0x6, 0xfffff68b}, {0x2, 0x5, 0x4}]}]}}, 0x0, 0x6e, 0x0, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 3.451736411s ago: executing program 3 (id=585): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000000800000000, 0x8}, 0x0, 0x0, 0x0, 0x3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x8000}, 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x8202) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) 2.103578296s ago: executing program 3 (id=586): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x6, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x40012062) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.051362997s ago: executing program 0 (id=587): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.050649827s ago: executing program 1 (id=588): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x11c266, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.995103979s ago: executing program 2 (id=589): openat$tun(0xffffffffffffff9c, 0x0, 0x224901, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x40, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0xb}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8000200, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x26}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x9, 0xff, 0x5, 0x0, 0x62, 0xd3751, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xffffffffffff15ed, 0x8}, 0x4, 0xfffffffffffffffd, 0x3, 0x0, 0x200000000081, 0x8005, 0x8, 0x0, 0x2cb, 0x0, 0x101}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x4, 0x0, 0x4, 0x0, 0x3, 0x41, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0xf3, 0x0, 0xffffffbd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 1.867343762s ago: executing program 0 (id=590): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1, 0x4, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0xd120, 0x10000000000, 0xfffffffd, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 1.815397283s ago: executing program 1 (id=591): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) 1.740955875s ago: executing program 0 (id=592): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r6 = socket$kcm(0x2, 0x3, 0x2) close(r6) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 1.55936187s ago: executing program 1 (id=593): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$inet(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000140)="8e09", 0x2}], 0x1}, 0x4008080) sendmsg(r0, 0x0, 0x80) 1.485774722s ago: executing program 1 (id=594): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000000800000000, 0x8}, 0x0, 0x0, 0x0, 0x3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x8000}, 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x8202) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) 349.929371ms ago: executing program 0 (id=595): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) 0s ago: executing program 0 (id=596): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 72.165277][ T5758] cgroup: Unknown subsys name 'net' [ 72.299846][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.868039][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.292030][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.303335][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.312744][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.320939][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.332922][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.352403][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.362717][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.371956][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.371992][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.384868][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.387726][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.401863][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.403347][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.410118][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.417887][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.425288][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.431629][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.438729][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.444589][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.452544][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.459771][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.467639][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.480427][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.490301][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.928408][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 75.988854][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 76.087261][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 76.097314][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.132975][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.141164][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.149410][ T5779] bridge_slave_0: entered allmulticast mode [ 76.157263][ T5779] bridge_slave_0: entered promiscuous mode [ 76.167313][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.174784][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.182717][ T5779] bridge_slave_1: entered allmulticast mode [ 76.189472][ T5779] bridge_slave_1: entered promiscuous mode [ 76.304029][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.316628][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.340038][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.347351][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.354828][ T5769] bridge_slave_0: entered allmulticast mode [ 76.361683][ T5769] bridge_slave_0: entered promiscuous mode [ 76.395995][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.403477][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.410845][ T5769] bridge_slave_1: entered allmulticast mode [ 76.418219][ T5769] bridge_slave_1: entered promiscuous mode [ 76.450250][ T5779] team0: Port device team_slave_0 added [ 76.465846][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.473381][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.480807][ T5773] bridge_slave_0: entered allmulticast mode [ 76.487956][ T5773] bridge_slave_0: entered promiscuous mode [ 76.510162][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.521434][ T5779] team0: Port device team_slave_1 added [ 76.537195][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.545652][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.553153][ T5770] bridge_slave_0: entered allmulticast mode [ 76.560222][ T5770] bridge_slave_0: entered promiscuous mode [ 76.567657][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.575025][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.582989][ T5773] bridge_slave_1: entered allmulticast mode [ 76.589939][ T5773] bridge_slave_1: entered promiscuous mode [ 76.598874][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.618678][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.626463][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.636555][ T5770] bridge_slave_1: entered allmulticast mode [ 76.644359][ T5770] bridge_slave_1: entered promiscuous mode [ 76.706005][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.713359][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.740886][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.754359][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.761972][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.788883][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.811509][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.824591][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.837191][ T5769] team0: Port device team_slave_0 added [ 76.847541][ T5769] team0: Port device team_slave_1 added [ 76.872690][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.917735][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.937403][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.944846][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.973863][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.989594][ T5773] team0: Port device team_slave_0 added [ 76.998723][ T5773] team0: Port device team_slave_1 added [ 77.020685][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.028099][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.054729][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.106429][ T5770] team0: Port device team_slave_0 added [ 77.120990][ T5770] team0: Port device team_slave_1 added [ 77.143062][ T5779] hsr_slave_0: entered promiscuous mode [ 77.149605][ T5779] hsr_slave_1: entered promiscuous mode [ 77.177033][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.186776][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.216030][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.228843][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.236290][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.262496][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.275405][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.282937][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.309927][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.366638][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.376423][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.403407][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.447317][ T5773] hsr_slave_0: entered promiscuous mode [ 77.453816][ T5773] hsr_slave_1: entered promiscuous mode [ 77.460460][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.468568][ T5773] Cannot create hsr debugfs directory [ 77.486988][ T5769] hsr_slave_0: entered promiscuous mode [ 77.493998][ T5769] hsr_slave_1: entered promiscuous mode [ 77.500350][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.508671][ T5769] Cannot create hsr debugfs directory [ 77.533315][ T51] Bluetooth: hci3: command tx timeout [ 77.533327][ T5781] Bluetooth: hci1: command tx timeout [ 77.533564][ T5781] Bluetooth: hci0: command tx timeout [ 77.539589][ T51] Bluetooth: hci2: command tx timeout [ 77.606156][ T5770] hsr_slave_0: entered promiscuous mode [ 77.614213][ T5770] hsr_slave_1: entered promiscuous mode [ 77.620792][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.628843][ T5770] Cannot create hsr debugfs directory [ 77.996278][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.010794][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.021952][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.032572][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.085783][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.096918][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.113073][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.126819][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.240948][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.254081][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.274331][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.287466][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.359033][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.369907][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.384792][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.395222][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.445207][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.468649][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.491127][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.518565][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.525973][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.560803][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.579830][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.587037][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.616074][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.623372][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.636704][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.643938][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.726870][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.818793][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.883103][ T257] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.891727][ T257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.909936][ T257] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.920299][ T257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.964859][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.027426][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.065662][ T257] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.072871][ T257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.117049][ T257] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.124818][ T257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.173850][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.231332][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.272609][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.289459][ T5769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.301816][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.432165][ T5773] veth0_vlan: entered promiscuous mode [ 79.459314][ T5779] veth0_vlan: entered promiscuous mode [ 79.475082][ T5773] veth1_vlan: entered promiscuous mode [ 79.509563][ T5779] veth1_vlan: entered promiscuous mode [ 79.578372][ T5773] veth0_macvtap: entered promiscuous mode [ 79.599478][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.612350][ T51] Bluetooth: hci0: command tx timeout [ 79.612484][ T5774] Bluetooth: hci3: command tx timeout [ 79.617888][ T51] Bluetooth: hci1: command tx timeout [ 79.629809][ T5781] Bluetooth: hci2: command tx timeout [ 79.639510][ T5779] veth0_macvtap: entered promiscuous mode [ 79.658964][ T5779] veth1_macvtap: entered promiscuous mode [ 79.673557][ T5773] veth1_macvtap: entered promiscuous mode [ 79.711826][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.747835][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.761501][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.778626][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.791821][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.801541][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.812227][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.826073][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.838405][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.850480][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.879485][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.890173][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.906432][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.917738][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.929245][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.939078][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.949164][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.989262][ T5770] veth0_vlan: entered promiscuous mode [ 80.051845][ T5770] veth1_vlan: entered promiscuous mode [ 80.104968][ T5769] veth0_vlan: entered promiscuous mode [ 80.153236][ T5769] veth1_vlan: entered promiscuous mode [ 80.166302][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.177980][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.248236][ T5770] veth0_macvtap: entered promiscuous mode [ 80.266006][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.271965][ T5769] veth0_macvtap: entered promiscuous mode [ 80.281168][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.308444][ T5770] veth1_macvtap: entered promiscuous mode [ 80.325913][ T257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.343786][ T5769] veth1_macvtap: entered promiscuous mode [ 80.363462][ T257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.391464][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.401295][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.415806][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.423255][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.433799][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.444644][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.456506][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.473102][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.491070][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.504207][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.514843][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.525110][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.537291][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.549544][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.566712][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.581591][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.592444][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.603170][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.614136][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.630149][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.642817][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.658975][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.671586][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.698096][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.719029][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.733986][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.809508][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.826012][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.836593][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.859428][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.996030][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.014780][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.025352][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.036103][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.289322][ T5837] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.342486][ T2877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.350523][ T2877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.441736][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.461273][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.496309][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.509445][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.550341][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.580466][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.695439][ T5781] Bluetooth: hci2: command tx timeout [ 81.700914][ T5781] Bluetooth: hci1: command tx timeout [ 81.707198][ T5774] Bluetooth: hci3: command tx timeout [ 81.710098][ T51] Bluetooth: hci0: command tx timeout [ 82.228896][ T51] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 82.311798][ C0] hrtimer: interrupt took 102118 ns [ 83.772972][ T5781] Bluetooth: hci3: command tx timeout [ 83.779331][ T5781] Bluetooth: hci0: command tx timeout [ 83.779650][ T5774] Bluetooth: hci2: command tx timeout [ 83.791472][ T51] Bluetooth: hci1: command tx timeout [ 85.936912][ T5942] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.42'. [ 87.618035][ T5950] netlink: 'syz.3.42': attribute type 39 has an invalid length. [ 90.232412][ T5990] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.58'. [ 91.359513][ T6001] netlink: 'syz.0.58': attribute type 39 has an invalid length. [ 91.639088][ T51] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 92.373542][ T6036] Zero length message leads to an empty skb [ 92.827196][ T790] cfg80211: failed to load regulatory.db [ 94.588552][ T6053] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.80'. [ 94.941721][ T6067] netlink: 'syz.2.80': attribute type 39 has an invalid length. [ 95.175945][ T51] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 98.350582][ T51] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 98.558451][ T6120] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.105'. [ 100.258741][ T6132] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.118'. [ 101.898997][ T6168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.125'. [ 101.939206][ T6168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.125'. [ 101.961494][ T6168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.125'. [ 101.985394][ T6170] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.126'. [ 102.005566][ T6168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.125'. [ 103.687941][ T6219] syzkaller0: entered promiscuous mode [ 103.703393][ T6219] syzkaller0: entered allmulticast mode [ 108.835160][ T6294] syz.2.171 uses obsolete (PF_INET,SOCK_PACKET) [ 110.312645][ T6330] netlink: 'syz.3.188': attribute type 29 has an invalid length. [ 110.362439][ T6330] netlink: 'syz.3.188': attribute type 29 has an invalid length. [ 110.382219][ T6334] netlink: 'syz.3.188': attribute type 29 has an invalid length. [ 110.414706][ T6330] netlink: 'syz.3.188': attribute type 29 has an invalid length. [ 110.732009][ T6337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.191'. [ 110.761029][ T6337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.191'. [ 110.794134][ T6340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.191'. [ 110.812715][ T6339] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.192'. [ 111.176482][ T6346] netlink: 'syz.2.192': attribute type 39 has an invalid length. [ 114.551492][ T6416] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.221'. [ 114.909765][ T6434] netlink: 'syz.3.221': attribute type 39 has an invalid length. [ 116.270609][ T6472] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.245'. [ 116.788249][ T6488] netlink: 'syz.0.245': attribute type 39 has an invalid length. [ 118.142968][ T6518] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.264'. [ 119.257045][ T6522] netlink: 'syz.0.264': attribute type 39 has an invalid length. [ 120.266366][ T6553] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.278'. [ 122.050989][ T6567] netlink: 'syz.1.278': attribute type 39 has an invalid length. [ 123.001782][ T6601] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.298'. [ 124.681568][ T6610] netlink: 'syz.1.298': attribute type 39 has an invalid length. [ 125.539566][ T6641] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.312'. [ 125.802404][ T6651] netlink: 'syz.2.312': attribute type 39 has an invalid length. [ 128.151860][ T6681] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.477592][ T6693] netlink: 'syz.2.327': attribute type 39 has an invalid length. [ 131.227324][ T6736] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.348'. [ 131.703510][ T6751] netlink: 'syz.0.348': attribute type 39 has an invalid length. [ 133.005259][ T6788] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.368'. [ 133.777232][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.791137][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.370671][ T6792] netlink: 'syz.1.368': attribute type 39 has an invalid length. [ 135.520878][ T6821] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.381'. [ 135.900767][ T6840] netlink: 'syz.1.381': attribute type 39 has an invalid length. [ 137.053827][ T6879] netlink: 'syz.0.408': attribute type 7 has an invalid length. [ 137.267641][ T6887] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.412'. [ 137.691602][ T6906] netlink: 'syz.0.412': attribute type 39 has an invalid length. [ 140.013097][ T6942] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.434'. [ 140.402537][ T6956] netlink: 'syz.2.434': attribute type 39 has an invalid length. [ 143.408930][ T7000] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.456'. [ 143.765464][ T7022] netlink: 'syz.2.456': attribute type 39 has an invalid length. [ 146.188834][ T7065] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.481'. [ 146.487040][ T7078] netlink: 'syz.1.481': attribute type 39 has an invalid length. [ 147.983446][ T7136] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.506'. [ 151.764262][ T7194] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.522'. [ 153.002194][ T7236] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 153.030268][ T7236] team0: Port device netdevsim0 added [ 154.439294][ T7240] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 154.460596][ T7240] team0: Port device netdevsim0 removed [ 154.477033][ T7240] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 154.489419][ T7232] netlink: 'syz.0.536': attribute type 1 has an invalid length. [ 154.542394][ T7232] netlink: 'syz.0.536': attribute type 4 has an invalid length. [ 154.550693][ T7232] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.536'. [ 154.960409][ T7259] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.546'. [ 154.979401][ T7261] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.547'. [ 154.989570][ T7261] bridge: RTM_NEWNEIGH with invalid state 0x800 [ 158.263460][ T7312] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.567'. [ 158.658553][ T7330] netlink: 'syz.1.567': attribute type 39 has an invalid length. [ 161.632646][ T7374] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.592'. [ 161.931422][ T7382] netlink: 'syz.0.592': attribute type 39 has an invalid length. [ 163.379947][ T7390] [ 163.382503][ T7390] ====================================================== [ 163.389615][ T7390] WARNING: possible circular locking dependency detected [ 163.397252][ T7390] syzkaller #0 Not tainted [ 163.401755][ T7390] ------------------------------------------------------ [ 163.409986][ T7390] syz.0.596/7390 is trying to acquire lock: [ 163.416139][ T7390] ffff8880b8f37de8 (stock_lock){..-.}-{2:2}, at: obj_cgroup_charge+0xed/0x630 [ 163.425233][ T7390] [ 163.425233][ T7390] but task is already holding lock: [ 163.432789][ T7390] ffff88807e69da38 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xd60 [ 163.442081][ T7390] [ 163.442081][ T7390] which lock already depends on the new lock. [ 163.442081][ T7390] [ 163.453021][ T7390] [ 163.453021][ T7390] the existing dependency chain (in reverse order) is: [ 163.462209][ T7390] [ 163.462209][ T7390] -> #1 (&trie->lock){-.-.}-{2:2}: [ 163.469533][ T7390] _raw_spin_lock_irqsave+0xb4/0x100 [ 163.475370][ T7390] trie_delete_elem+0x94/0x630 [ 163.480775][ T7390] 0xffffffffa000098e [ 163.485803][ T7390] trace_call_bpf+0x333/0x6c0 [ 163.491528][ T7390] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 163.497704][ T7390] perf_trace_lock_acquire+0x342/0x400 [ 163.503885][ T7390] lock_acquire+0x3ef/0x420 [ 163.509018][ T7390] mod_objcg_mlstate+0xad/0x320 [ 163.514797][ T7390] mod_objcg_state+0x44b/0x8c0 [ 163.520192][ T7390] memcg_slab_free_hook+0x167/0x200 [ 163.528022][ T7390] __kmem_cache_free+0xa3/0x1f0 [ 163.535601][ T7390] rcu_core+0x9c1/0x17f0 [ 163.541102][ T7390] handle_softirqs+0x27d/0x820 [ 163.546597][ T7390] run_ksoftirqd+0xa8/0x100 [ 163.551653][ T7390] smpboot_thread_fn+0x651/0x9f0 [ 163.557223][ T7390] kthread+0x2fa/0x390 [ 163.562092][ T7390] ret_from_fork+0x48/0x80 [ 163.568188][ T7390] ret_from_fork_asm+0x11/0x20 [ 163.573758][ T7390] [ 163.573758][ T7390] -> #0 (stock_lock){..-.}-{2:2}: [ 163.581057][ T7390] __lock_acquire+0x37ef/0x7d80 [ 163.586947][ T7390] lock_acquire+0x19e/0x420 [ 163.592156][ T7390] obj_cgroup_charge+0x10a/0x630 [ 163.598150][ T7390] slab_pre_alloc_hook+0x2e2/0x300 [ 163.603815][ T7390] __kmem_cache_alloc_node+0x53/0x250 [ 163.609754][ T7390] __kmalloc_node+0xa6/0x240 [ 163.614891][ T7390] bpf_map_kmalloc_node+0xbc/0x1b0 [ 163.620556][ T7390] trie_update_elem+0x172/0xd60 [ 163.625936][ T7390] bpf_map_update_value+0x64b/0x710 [ 163.631777][ T7390] map_update_elem+0x586/0x710 [ 163.637312][ T7390] __sys_bpf+0x6b5/0x890 [ 163.642114][ T7390] __x64_sys_bpf+0x7c/0x90 [ 163.647886][ T7390] do_syscall_64+0x55/0xb0 [ 163.652917][ T7390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.659612][ T7390] [ 163.659612][ T7390] other info that might help us debug this: [ 163.659612][ T7390] [ 163.670151][ T7390] Possible unsafe locking scenario: [ 163.670151][ T7390] [ 163.677604][ T7390] CPU0 CPU1 [ 163.682991][ T7390] ---- ---- [ 163.688603][ T7390] lock(&trie->lock); [ 163.692780][ T7390] lock(stock_lock); [ 163.699503][ T7390] lock(&trie->lock); [ 163.706240][ T7390] lock(stock_lock); [ 163.710240][ T7390] [ 163.710240][ T7390] *** DEADLOCK *** [ 163.710240][ T7390] [ 163.718846][ T7390] 2 locks held by syz.0.596/7390: [ 163.723869][ T7390] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x408/0x710 [ 163.734049][ T7390] #1: ffff88807e69da38 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xd60 [ 163.743566][ T7390] [ 163.743566][ T7390] stack backtrace: [ 163.749842][ T7390] CPU: 1 PID: 7390 Comm: syz.0.596 Not tainted syzkaller #0 [ 163.757818][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.769357][ T7390] Call Trace: [ 163.772759][ T7390] [ 163.775945][ T7390] dump_stack_lvl+0x18c/0x250 [ 163.781193][ T7390] ? load_image+0x420/0x420 [ 163.785805][ T7390] ? show_regs_print_info+0x20/0x20 [ 163.791241][ T7390] ? print_circular_bug+0x12b/0x1a0 [ 163.796447][ T7390] check_noncircular+0x2fc/0x400 [ 163.801566][ T7390] ? print_deadlock_bug+0x5d0/0x5d0 [ 163.807511][ T7390] ? lockdep_lock+0xf5/0x230 [ 163.812843][ T7390] ? _find_first_zero_bit+0xd6/0x100 [ 163.818866][ T7390] __lock_acquire+0x37ef/0x7d80 [ 163.823950][ T7390] ? verify_lock_unused+0x140/0x140 [ 163.829445][ T7390] ? verify_lock_unused+0x140/0x140 [ 163.834680][ T7390] ? verify_lock_unused+0x140/0x140 [ 163.839887][ T7390] lock_acquire+0x19e/0x420 [ 163.845110][ T7390] ? obj_cgroup_charge+0xed/0x630 [ 163.850412][ T7390] ? read_lock_is_recursive+0x20/0x20 [ 163.855801][ T7390] obj_cgroup_charge+0x10a/0x630 [ 163.860736][ T7390] ? obj_cgroup_charge+0xed/0x630 [ 163.865965][ T7390] ? get_obj_cgroup_from_current+0xd4/0x280 [ 163.871858][ T7390] ? __lock_acquire+0x7d80/0x7d80 [ 163.877144][ T7390] ? obj_cgroup_charge+0xed/0x630 [ 163.882617][ T7390] ? mod_objcg_mlstate+0x320/0x320 [ 163.888304][ T7390] ? percpu_ref_tryget+0x15/0x180 [ 163.893514][ T7390] ? percpu_ref_tryget+0x15/0x180 [ 163.898562][ T7390] ? get_obj_cgroup_from_current+0xd4/0x280 [ 163.905541][ T7390] slab_pre_alloc_hook+0x2e2/0x300 [ 163.911487][ T7390] ? __rwlock_init+0x150/0x150 [ 163.916372][ T7390] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 163.922305][ T7390] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 163.928097][ T7390] __kmem_cache_alloc_node+0x53/0x250 [ 163.933507][ T7390] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 163.939602][ T7390] __kmalloc_node+0xa6/0x240 [ 163.945156][ T7390] bpf_map_kmalloc_node+0xbc/0x1b0 [ 163.950422][ T7390] trie_update_elem+0x172/0xd60 [ 163.955475][ T7390] ? __lock_acquire+0x7d80/0x7d80 [ 163.960633][ T7390] bpf_map_update_value+0x64b/0x710 [ 163.965870][ T7390] map_update_elem+0x586/0x710 [ 163.970847][ T7390] __sys_bpf+0x6b5/0x890 [ 163.975275][ T7390] ? bpf_link_show_fdinfo+0x390/0x390 [ 163.980660][ T7390] ? lock_chain_count+0x20/0x20 [ 163.985783][ T7390] __x64_sys_bpf+0x7c/0x90 [ 163.990285][ T7390] do_syscall_64+0x55/0xb0 [ 163.994873][ T7390] ? clear_bhb_loop+0x40/0x90 [ 163.999544][ T7390] ? clear_bhb_loop+0x40/0x90 [ 164.004527][ T7390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.010553][ T7390] RIP: 0033:0x7fdee919e0d9 [ 164.014983][ T7390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.034762][ T7390] RSP: 002b:00007fdeea0f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.043462][ T7390] RAX: ffffffffffffffda RBX: 00007fdee9425fa0 RCX: 00007fdee919e0d9 [ 164.051635][ T7390] RDX: 0000000000000020 RSI: 00002000000004c0 RDI: 0000000000000002 [ 164.059612][ T7390] RBP: 00007fdee9235024 R08: 0000000000000000 R09: 0000000000000000 [ 164.068120][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.076353][ T7390] R13: 00007fdee9426038 R14: 00007fdee9425fa0 R15: 00007fff17cc76d8 [ 164.084357][ T7390]