last executing test programs: 2.755987487s ago: executing program 2 (id=122): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x5, 0x97, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x5, 0x0, 0x4, 0x28, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x80, 0x4}, 0xbd9d39f2527243eb, 0xc8, 0x8, 0x0, 0xfffffffffffffffa, 0x341, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa20006558"], 0xcfa4) 1.84057479s ago: executing program 1 (id=132): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680), 0x58}], 0x1}, 0x4008014) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x1) 1.794728151s ago: executing program 2 (id=133): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x4}], 0x10}, 0x0) 1.678642837s ago: executing program 2 (id=137): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001580)}, 0x48090) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x4, 0x8, 0x2c, 0xd9, 0x0, 0xfffffffffffffffd, 0x10404, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_config_ext={0x8, 0x9}, 0xc0, 0x9, 0x4, 0x9, 0x0, 0x0, 0x2, 0x0, 0x7ff, 0x0, 0x9}, 0xffffffffffffffff, 0x40002, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.496932867s ago: executing program 0 (id=139): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004840) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1.353324359s ago: executing program 0 (id=141): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x5, 0x97, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x5, 0x0, 0x4, 0x28, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x80, 0x4}, 0xbd9d39f2527243eb, 0xc8, 0x8, 0x0, 0xfffffffffffffffa, 0x341, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa20006558"], 0xcfa4) 1.352668849s ago: executing program 2 (id=142): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000040), 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 1.30427586s ago: executing program 3 (id=143): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x86, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.186225906s ago: executing program 3 (id=144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0x11, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94) 1.179835918s ago: executing program 0 (id=145): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x1e, 0x4, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000300), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.112615343s ago: executing program 3 (id=146): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000940)=""/4091, 0xffb}, {&(0x7f0000002c40)=""/4083, 0xff3}, {&(0x7f0000002a40)=""/235, 0xeb}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000002b40)=""/212, 0xd4}, {&(0x7f00000001c0)=""/146, 0x92}, {&(0x7f00000006c0)=""/190, 0xbe}], 0x7}, 0x40000000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 1.000305807s ago: executing program 0 (id=147): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000001c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 1.000055257s ago: executing program 3 (id=148): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 924.718214ms ago: executing program 1 (id=149): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1022b0, 0xca, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfbfffffe, 0x0, 0x4}, 0x0, 0x800003, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x40, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x800, 0x6}, 0x19ffa, 0x0, 0x98, 0x0, 0x6, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x9, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300"], 0xfe1b) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/uts\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 780.581316ms ago: executing program 1 (id=150): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 636.214458ms ago: executing program 1 (id=151): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001580)}, 0x48090) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 278.383278ms ago: executing program 1 (id=152): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="27050200340f14000600002fb96d", 0xe}], 0x1}, 0x20040000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0x1}, 0x114b87, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xe02a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xd}, 0x94) 248.358475ms ago: executing program 0 (id=153): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x5, 0x97, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x5, 0x0, 0x4, 0x28, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x80, 0x4}, 0xbd9d39f2527243eb, 0xc8, 0x8, 0x0, 0xfffffffffffffffa, 0x341, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa20006558"], 0xcfa4) 152.881406ms ago: executing program 2 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0x11, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94) 151.992016ms ago: executing program 3 (id=155): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="8f00000015006b05c84e21000ab16d8b230675f802000000440002005805530461bc24eeb556a705251e6182149a36c23d1b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298536c3aa6b230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a95fcfcda", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) 96.177699ms ago: executing program 1 (id=156): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x5, 0x3, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) close(r3) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x0, 0xa57b, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x10001, r1, 0x4}, 0x38) 95.913469ms ago: executing program 0 (id=157): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x8000) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000940)=""/4091, 0xffb}, {&(0x7f0000002c40)=""/4083, 0xff3}, {&(0x7f0000002a40)=""/235, 0xeb}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000002b40)=""/212, 0xd4}, {&(0x7f00000001c0)=""/146, 0x92}, {&(0x7f00000006c0)=""/190, 0xbe}], 0x7}, 0x40000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 46.06891ms ago: executing program 2 (id=158): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680), 0x58}], 0x1}, 0x4008014) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x1) 0s ago: executing program 3 (id=159): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x101, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, &(0x7f0000000000), &(0x7f00000002c0)=""/255}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 67.626784][ T5759] cgroup: Unknown subsys name 'net' [ 67.755203][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.138723][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.865399][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.876066][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.884185][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.892462][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.900257][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.909177][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.916834][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.923375][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.924120][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.940527][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.940545][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.948746][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.960891][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.962447][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.969745][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.977171][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.989238][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.997056][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.005676][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.013360][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.023079][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.031018][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.038679][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.050162][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.429059][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 71.481820][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 71.538098][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.544742][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.554460][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 71.574286][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 71.681628][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.689326][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.696673][ T5772] bridge_slave_0: entered allmulticast mode [ 71.703979][ T5772] bridge_slave_0: entered promiscuous mode [ 71.744620][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.752210][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.759816][ T5772] bridge_slave_1: entered allmulticast mode [ 71.766513][ T5772] bridge_slave_1: entered promiscuous mode [ 71.773868][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.781454][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.788637][ T5771] bridge_slave_0: entered allmulticast mode [ 71.795602][ T5771] bridge_slave_0: entered promiscuous mode [ 71.838232][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.845414][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.852918][ T5771] bridge_slave_1: entered allmulticast mode [ 71.860145][ T5771] bridge_slave_1: entered promiscuous mode [ 71.912268][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.921742][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.928882][ T5774] bridge_slave_0: entered allmulticast mode [ 71.935932][ T5774] bridge_slave_0: entered promiscuous mode [ 71.945140][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.952427][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.959984][ T5774] bridge_slave_1: entered allmulticast mode [ 71.966714][ T5774] bridge_slave_1: entered promiscuous mode [ 71.973547][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.980828][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.988227][ T5773] bridge_slave_0: entered allmulticast mode [ 71.995806][ T5773] bridge_slave_0: entered promiscuous mode [ 72.006550][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.023192][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.050409][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.057617][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.065256][ T5773] bridge_slave_1: entered allmulticast mode [ 72.072088][ T5773] bridge_slave_1: entered promiscuous mode [ 72.080638][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.102702][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.116311][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.127623][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.187954][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.210176][ T5772] team0: Port device team_slave_0 added [ 72.218537][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.240138][ T5774] team0: Port device team_slave_0 added [ 72.248174][ T5772] team0: Port device team_slave_1 added [ 72.265277][ T5771] team0: Port device team_slave_0 added [ 72.274607][ T5771] team0: Port device team_slave_1 added [ 72.282084][ T5774] team0: Port device team_slave_1 added [ 72.346097][ T5773] team0: Port device team_slave_0 added [ 72.370834][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.377823][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.406302][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.418687][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.425808][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.451924][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.466918][ T5773] team0: Port device team_slave_1 added [ 72.473593][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.483002][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.512686][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.524527][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.533911][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.560395][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.579148][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.586097][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.612601][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.634751][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.641844][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.667956][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.717372][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.724517][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.751491][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.767791][ T5774] hsr_slave_0: entered promiscuous mode [ 72.775055][ T5774] hsr_slave_1: entered promiscuous mode [ 72.793899][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.801107][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.829104][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.865221][ T5771] hsr_slave_0: entered promiscuous mode [ 72.871887][ T5771] hsr_slave_1: entered promiscuous mode [ 72.878035][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.886230][ T5771] Cannot create hsr debugfs directory [ 72.921470][ T5772] hsr_slave_0: entered promiscuous mode [ 72.927692][ T5772] hsr_slave_1: entered promiscuous mode [ 72.934393][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.942123][ T5772] Cannot create hsr debugfs directory [ 72.977564][ T5773] hsr_slave_0: entered promiscuous mode [ 72.985508][ T5773] hsr_slave_1: entered promiscuous mode [ 72.992005][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.999883][ T5773] Cannot create hsr debugfs directory [ 73.054380][ T5783] Bluetooth: hci1: command tx timeout [ 73.129296][ T5783] Bluetooth: hci2: command tx timeout [ 73.129477][ T5778] Bluetooth: hci3: command tx timeout [ 73.135024][ T5783] Bluetooth: hci0: command tx timeout [ 73.393094][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.406522][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.416613][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.436894][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.477872][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.499492][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.508869][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.520933][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.581846][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.624057][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.634390][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.646456][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.731991][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.759989][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.771787][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.783613][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.871945][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.886998][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.924581][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.958264][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.969233][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.976591][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.996892][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.017421][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.024628][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.054198][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.061339][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.101852][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.108984][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.161893][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.183041][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.190229][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.205893][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.242961][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.250102][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.282128][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.343309][ T2894] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.350527][ T2894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.361428][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.368589][ T2894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.631258][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.760723][ T5771] veth0_vlan: entered promiscuous mode [ 74.785566][ T5771] veth1_vlan: entered promiscuous mode [ 74.840680][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.852727][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.908864][ T5771] veth0_macvtap: entered promiscuous mode [ 74.943753][ T5771] veth1_macvtap: entered promiscuous mode [ 74.968769][ T5773] veth0_vlan: entered promiscuous mode [ 74.996152][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.016944][ T5773] veth1_vlan: entered promiscuous mode [ 75.034815][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.050131][ T5774] veth0_vlan: entered promiscuous mode [ 75.061363][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.072609][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.081963][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.092913][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.102351][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.130662][ T5783] Bluetooth: hci1: command tx timeout [ 75.142655][ T5774] veth1_vlan: entered promiscuous mode [ 75.205474][ T5773] veth0_macvtap: entered promiscuous mode [ 75.219625][ T5778] Bluetooth: hci2: command tx timeout [ 75.225080][ T5778] Bluetooth: hci0: command tx timeout [ 75.229136][ T5783] Bluetooth: hci3: command tx timeout [ 75.267206][ T5774] veth0_macvtap: entered promiscuous mode [ 75.277526][ T5773] veth1_macvtap: entered promiscuous mode [ 75.302757][ T5774] veth1_macvtap: entered promiscuous mode [ 75.334796][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.346158][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.385415][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.396911][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.412771][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.423696][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.436264][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.447581][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.465625][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.484511][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.486235][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.504603][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.513601][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.522769][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.551657][ T5772] veth0_vlan: entered promiscuous mode [ 75.597713][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.614833][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.625250][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.635966][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.647691][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.661637][ T5772] veth1_vlan: entered promiscuous mode [ 75.675942][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.687755][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.706490][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.717283][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.733924][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.779500][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.788560][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.803393][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.812210][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.911387][ T5772] veth0_macvtap: entered promiscuous mode [ 75.927796][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.940390][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.954189][ T5772] veth1_macvtap: entered promiscuous mode [ 76.004523][ T5835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5'. [ 76.019164][ T5835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5'. [ 76.034289][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.043172][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.061413][ T5835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5'. [ 76.076926][ T5835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5'. [ 76.098813][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.114566][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.125665][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.137514][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.147667][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.162561][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.174491][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.183347][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.209676][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.255390][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.266586][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.276607][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.287934][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.298679][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.309462][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.321552][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.333356][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.353772][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.361998][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.389132][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.398557][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.418728][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.601796][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.625234][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.758201][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.783638][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.993503][ T5857] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10'. [ 77.209537][ T5783] Bluetooth: hci1: command tx timeout [ 77.289540][ C1] hrtimer: interrupt took 76417 ns [ 77.289845][ T5783] Bluetooth: hci3: command tx timeout [ 77.298370][ T5777] Bluetooth: hci2: command tx timeout [ 77.307917][ T5778] Bluetooth: hci0: command tx timeout [ 77.384744][ T5862] warning: `syz.1.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.661814][ T5867] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14'. [ 77.695301][ T5874] sit0: entered allmulticast mode [ 77.764127][ T5862] sit0: entered promiscuous mode [ 77.888544][ T5883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19'. [ 78.207270][ T5883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19'. [ 78.283682][ T5888] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19'. [ 78.297257][ T5889] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19'. [ 79.289318][ T5778] Bluetooth: hci1: command tx timeout [ 79.375072][ T5777] Bluetooth: hci0: command tx timeout [ 79.375191][ T5783] Bluetooth: hci2: command tx timeout [ 79.381032][ T5778] Bluetooth: hci3: command tx timeout [ 79.463608][ T5923] sit0: entered allmulticast mode [ 79.554032][ T5923] sit0: entered promiscuous mode [ 80.873736][ T5977] sit0: entered allmulticast mode [ 80.948584][ T5985] sit0: entered promiscuous mode [ 82.279586][ T6010] __nla_validate_parse: 16 callbacks suppressed [ 82.279604][ T6010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'. [ 84.288692][ T6010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'. [ 84.804148][ T6030] sit0: entered allmulticast mode [ 84.860675][ T6035] sit0: entered promiscuous mode [ 86.898979][ T789] cfg80211: failed to load regulatory.db [ 87.324430][ T6103] syzkaller0: entered promiscuous mode [ 87.344024][ T6103] syzkaller0: entered allmulticast mode [ 88.718004][ T6118] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 88.724175][ T6118] syzkaller0: linktype set to 270 [ 89.684474][ T6165] Zero length message leads to an empty skb [ 90.301898][ T5778] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 90.771998][ T5778] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 91.507779][ T6220] netlink: 'syz.3.155': attribute type 2 has an invalid length. [ 91.532288][ T6220] netlink: 51 bytes leftover after parsing attributes in process `syz.3.155'. [ 91.646324][ T6230] [ 91.648708][ T6230] ====================================================== [ 91.655735][ T6230] WARNING: possible circular locking dependency detected [ 91.662778][ T6230] syzkaller #0 Not tainted [ 91.667212][ T6230] ------------------------------------------------------ [ 91.674597][ T6230] syz.3.159/6230 is trying to acquire lock: [ 91.680516][ T6230] ffff88813fffacd8 (&zone->lock){-.-.}-{2:2}, at: get_page_from_freelist+0x892/0x22a0 [ 91.690131][ T6230] [ 91.690131][ T6230] but task is already holding lock: [ 91.698308][ T6230] ffff88807dabe238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xd60 [ 91.707428][ T6230] [ 91.707428][ T6230] which lock already depends on the new lock. [ 91.707428][ T6230] [ 91.718089][ T6230] [ 91.718089][ T6230] the existing dependency chain (in reverse order) is: [ 91.727189][ T6230] [ 91.727189][ T6230] -> #1 (&trie->lock){-.-.}-{2:2}: [ 91.734767][ T6230] _raw_spin_lock_irqsave+0xb4/0x100 [ 91.740596][ T6230] trie_delete_elem+0x94/0x630 [ 91.745881][ T6230] 0xffffffffa0000a5a [ 91.750495][ T6230] trace_call_bpf+0x333/0x6c0 [ 91.755707][ T6230] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 91.761781][ T6230] perf_trace_lock_acquire+0x342/0x400 [ 91.767776][ T6230] lock_acquire+0x3ef/0x420 [ 91.772798][ T6230] seqcount_lockdep_reader_access+0xbc/0x190 [ 91.779313][ T6230] bad_range+0x61/0x280 [ 91.784000][ T6230] expand+0x76/0x2b0 [ 91.788412][ T6230] __rmqueue_pcplist+0xf27/0x1580 [ 91.793972][ T6230] get_page_from_freelist+0x670/0x22a0 [ 91.799981][ T6230] __alloc_pages+0x1f0/0x460 [ 91.805093][ T6230] alloc_slab_page+0x5d/0x180 [ 91.810314][ T6230] new_slab+0x87/0x2d0 [ 91.814934][ T6230] ___slab_alloc+0xc5c/0x12f0 [ 91.820131][ T6230] __kmem_cache_alloc_node+0x11f/0x250 [ 91.826200][ T6230] __kmalloc_node_track_caller+0xa4/0x230 [ 91.832449][ T6230] kmalloc_reserve+0x116/0x240 [ 91.837731][ T6230] __alloc_skb+0x138/0x2c0 [ 91.842669][ T6230] nsim_dev_trap_report_work+0x253/0xa90 [ 91.848831][ T6230] process_scheduled_works+0xa60/0x1600 [ 91.854899][ T6230] worker_thread+0xa5e/0xfe0 [ 91.860029][ T6230] kthread+0x2fa/0x390 [ 91.864617][ T6230] ret_from_fork+0x48/0x80 [ 91.869551][ T6230] ret_from_fork_asm+0x11/0x20 [ 91.874833][ T6230] [ 91.874833][ T6230] -> #0 (&zone->lock){-.-.}-{2:2}: [ 91.882151][ T6230] __lock_acquire+0x37ef/0x7d80 [ 91.888156][ T6230] lock_acquire+0x19e/0x420 [ 91.893205][ T6230] _raw_spin_lock_irqsave+0xb4/0x100 [ 91.899308][ T6230] get_page_from_freelist+0x892/0x22a0 [ 91.905373][ T6230] __alloc_pages+0x1f0/0x460 [ 91.910521][ T6230] __kmalloc_large_node+0x8c/0x1f0 [ 91.916166][ T6230] __kmalloc_node+0x112/0x240 [ 91.921385][ T6230] bpf_map_kmalloc_node+0xbc/0x1b0 [ 91.927019][ T6230] trie_update_elem+0x172/0xd60 [ 91.932460][ T6230] bpf_map_update_value+0x64b/0x710 [ 91.938259][ T6230] map_update_elem+0x586/0x710 [ 91.943540][ T6230] __sys_bpf+0x6b5/0x890 [ 91.948739][ T6230] __x64_sys_bpf+0x7c/0x90 [ 91.953683][ T6230] do_syscall_64+0x55/0xb0 [ 91.958708][ T6230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.965125][ T6230] [ 91.965125][ T6230] other info that might help us debug this: [ 91.965125][ T6230] [ 91.975344][ T6230] Possible unsafe locking scenario: [ 91.975344][ T6230] [ 91.982780][ T6230] CPU0 CPU1 [ 91.988135][ T6230] ---- ---- [ 91.993483][ T6230] lock(&trie->lock); [ 91.997544][ T6230] lock(&zone->lock); [ 92.004130][ T6230] lock(&trie->lock); [ 92.010718][ T6230] lock(&zone->lock); [ 92.014780][ T6230] [ 92.014780][ T6230] *** DEADLOCK *** [ 92.014780][ T6230] [ 92.023694][ T6230] 2 locks held by syz.3.159/6230: [ 92.028705][ T6230] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x408/0x710 [ 92.039095][ T6230] #1: ffff88807dabe238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xd60 [ 92.049896][ T6230] [ 92.049896][ T6230] stack backtrace: [ 92.055791][ T6230] CPU: 0 PID: 6230 Comm: syz.3.159 Not tainted syzkaller #0 [ 92.063072][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.073131][ T6230] Call Trace: [ 92.076493][ T6230] [ 92.079417][ T6230] dump_stack_lvl+0x18c/0x250 [ 92.084107][ T6230] ? load_image+0x420/0x420 [ 92.088619][ T6230] ? show_regs_print_info+0x20/0x20 [ 92.093838][ T6230] ? print_circular_bug+0x12b/0x1a0 [ 92.099040][ T6230] check_noncircular+0x2fc/0x400 [ 92.103982][ T6230] ? print_deadlock_bug+0x5d0/0x5d0 [ 92.110607][ T6230] ? lockdep_lock+0xf5/0x230 [ 92.116625][ T6230] ? _find_first_zero_bit+0xd6/0x100 [ 92.121925][ T6230] __lock_acquire+0x37ef/0x7d80 [ 92.126807][ T6230] ? verify_lock_unused+0x140/0x140 [ 92.132032][ T6230] ? verify_lock_unused+0x140/0x140 [ 92.137240][ T6230] ? verify_lock_unused+0x140/0x140 [ 92.142440][ T6230] ? verify_lock_unused+0x140/0x140 [ 92.147636][ T6230] lock_acquire+0x19e/0x420 [ 92.152138][ T6230] ? get_page_from_freelist+0x892/0x22a0 [ 92.157773][ T6230] ? cgroup_rstat_updated+0xd5/0x360 [ 92.163058][ T6230] ? read_lock_is_recursive+0x20/0x20 [ 92.168458][ T6230] ? mark_lock+0x94/0x320 [ 92.172802][ T6230] _raw_spin_lock_irqsave+0xb4/0x100 [ 92.178114][ T6230] ? get_page_from_freelist+0x892/0x22a0 [ 92.183767][ T6230] ? _raw_spin_lock+0x40/0x40 [ 92.188624][ T6230] ? zone_watermark_fast+0x162/0x230 [ 92.193914][ T6230] get_page_from_freelist+0x892/0x22a0 [ 92.199389][ T6230] __alloc_pages+0x1f0/0x460 [ 92.203988][ T6230] ? zone_statistics+0x170/0x170 [ 92.208922][ T6230] ? bpf_map_get_memcg+0x4e/0x4e0 [ 92.213951][ T6230] ? __lock_acquire+0x7d80/0x7d80 [ 92.218975][ T6230] ? __rwlock_init+0x150/0x150 [ 92.223752][ T6230] __kmalloc_large_node+0x8c/0x1f0 [ 92.228870][ T6230] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 92.234157][ T6230] __kmalloc_node+0x112/0x240 [ 92.238835][ T6230] ? _raw_spin_lock+0x40/0x40 [ 92.243520][ T6230] bpf_map_kmalloc_node+0xbc/0x1b0 [ 92.248663][ T6230] trie_update_elem+0x172/0xd60 [ 92.253539][ T6230] ? exc_page_fault+0x8c/0x100 [ 92.258312][ T6230] ? asm_exc_page_fault+0x26/0x30 [ 92.263341][ T6230] bpf_map_update_value+0x64b/0x710 [ 92.268543][ T6230] map_update_elem+0x586/0x710 [ 92.273314][ T6230] __sys_bpf+0x6b5/0x890 [ 92.277597][ T6230] ? bpf_link_show_fdinfo+0x560/0x560 [ 92.282963][ T6230] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 92.288859][ T6230] ? lock_chain_count+0x20/0x20 [ 92.293737][ T6230] __x64_sys_bpf+0x7c/0x90 [ 92.298148][ T6230] do_syscall_64+0x55/0xb0 [ 92.302579][ T6230] ? clear_bhb_loop+0x40/0x90 [ 92.307259][ T6230] ? clear_bhb_loop+0x40/0x90 [ 92.312024][ T6230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.317954][ T6230] RIP: 0033:0x7f26f939e159 [ 92.322448][ T6230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.342143][ T6230] RSP: 002b:00007f26fa211028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.350578][ T6230] RAX: ffffffffffffffda RBX: 00007f26f9625fa0 RCX: 00007f26f939e159 [ 92.358679][ T6230] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000002 [ 92.366671][ T6230] RBP: 00007f26f943506b R08: 0000000000000000 R09: 0000000000000000 [ 92.374645][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.382614][ T6230] R13: 00007f26f9626038 R14: 00007f26f9625fa0 R15: 00007ffca5786f28 [ 92.390586][ T6230]