last executing test programs: 14m5.697544727s ago: executing program 3 (id=340): socket$kcm(0xa, 0x922000000003, 0x11) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000140)=r0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000000000", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5841e6f2b566fa60}, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xd, 0x7fe6, 0xffffffff, 0x42}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c40)={r0, 0x20, &(0x7f0000000c00)={0x0, 0x0, 0x0, &(0x7f0000000b40)=""/162, 0xa2}}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x5, 0x0, &(0x7f00000009c0)='syzkaller\x00', 0x3, 0x5b, &(0x7f0000000a00)=""/91, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, 0x0, 0x3, &(0x7f0000000d00)=[r6, r4, r3, r3, r2], &(0x7f0000000d40)=[{0x2, 0x1, 0x5, 0x6}, {0x3, 0x3, 0x10}, {0x4, 0x5, 0x4, 0xb}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xa, 0x6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0xb, &(0x7f0000000000)=r8, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r9 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r9, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) sendmsg$tipc(r8, &(0x7f0000000940)={&(0x7f0000000600)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x4}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="5a1500c5aeca66473a6b5d17823be9f095cdf0175a482f4048055ff13e1628cd07074674de27b14abf93d91584418f013fb397d033c8884cd7949bf1e43f9c47f08569af061df965d8ff47a5fb098147303ee7d10fc5a7a28271ef58b42ecffbdaf3", 0x62}], 0x1, &(0x7f0000000700), 0x0, 0x10}, 0x4) 14m5.065466669s ago: executing program 3 (id=346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x29, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) 14m4.030263583s ago: executing program 3 (id=350): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x8, 0x0, 0x39}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, 0x0, 0x2000488c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0xb, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 14m3.456450999s ago: executing program 3 (id=353): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b0000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc561", 0xcb}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="d318f219788a5272c656a6c6f3ca47f7a1a73cfbe676ad5e5b3fb7381caaa0607fc4913cc5138e831493aa827a4dd06d0a6809afa21e23af72aa4885da388a07b576921cab669e6679fa50ae4b16619f88f2890e0f9722598c82b7b7e5916f6c4da37649225369b94767fbdc637442cd8e7eed3f52bd7d4e682b26b5da88724df70c4b2d21b23b", 0x87}, {&(0x7f0000000100)="d98c18", 0x3}, {&(0x7f0000000500)="177aed47e3bc2c17b4f134efb36a8194780803662e52cb2c05ea517a27cdead65aeeb6febc820e3e6a16a25bfd5d2c0dd83097e62acd6be4eb1baa833382db8530827b70b42cbe8c4c1fb88aa99d4a21cb5c29637eabf0efe223edaf7d7ee6cce122457cfdd4e1a8f5b12b65c7dd9969713efa67e4e5062d401db43ab00a2c92e6de35617af18219f2ca9528d251b3511c5b440bef61b9563c01d15ff5cd5850be90c82ee87c77ff95a47af4aa90ee2b62fc31493b3712277eea50b38e9ca772d91a58d76e5c9d9a9068d67d58fa0cb2c201d0883b20653eca91d0987c317f11", 0xe0}], 0x3, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc26}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x742e}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0xc7, 0x3, 0x9, [{@remote, 0xfffffe00}, {@empty, 0xe80bb836}, {@multicast2, 0xa}, {@empty, 0x4}, {@loopback, 0x2}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x3}, {@empty, 0xa}, {@broadcast, 0x2}]}, @ssrr={0x89, 0xf, 0xf9, [@rand_addr=0x64010101, @local, @broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x9f, 0x1, 0x3, [{@loopback, 0x9}, {@broadcast, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0xeb, 0x3, 0x6, [{@multicast2, 0x82}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x35}}, {@private=0xa010102, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0x3a, 0x3, 0x9, [{@multicast1, 0x7}, {@empty, 0x5d20}, {@rand_addr=0x64010100, 0x4}, {@rand_addr=0x64010101, 0x5}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xa92}, {@private=0xa010101, 0xaf}, {@local, 0x2}, {@broadcast, 0x395}]}, @ra={0x94, 0x4}, @generic={0x7, 0x4, 'c\b'}, @timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0xb, [{@local, 0x10000}]}, @timestamp_prespec={0x44, 0xc, 0xa5, 0x3, 0x6, [{@remote}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x1c8}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r5, 0x4) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'veth0_to_team\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 14m2.509493266s ago: executing program 3 (id=360): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffffe, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 14m1.422385264s ago: executing program 3 (id=364): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5841e6f2b566fa60}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) sendmsg$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x4}, 0x4000091) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) 13m46.345257079s ago: executing program 32 (id=364): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5841e6f2b566fa60}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) sendmsg$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x4}, 0x4000091) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.698165611s ago: executing program 5 (id=3785): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002b"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20) 9.949759672s ago: executing program 2 (id=3787): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) 9.915708365s ago: executing program 5 (id=3788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007910400000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=0x5, 0x12) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(r9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000005000000000018000000040000000000000001000084000000000100000004000000ad83000000615b00"], &(0x7f0000000380)=""/146, 0x34, 0x92, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c0000000400000004000000000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000403000000002000"/28], 0x48) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) 9.773946766s ago: executing program 0 (id=3789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 9.746028948s ago: executing program 1 (id=3790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 9.296554435s ago: executing program 1 (id=3791): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) 9.296297065s ago: executing program 2 (id=3793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 9.225667681s ago: executing program 2 (id=3794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 5.972481515s ago: executing program 0 (id=3796): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb92a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x80) 5.939132877s ago: executing program 1 (id=3797): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 5.934856028s ago: executing program 5 (id=3798): write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001", @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f40)='neigh_create\x00', r1}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x4010744d, 0x0) 5.695801697s ago: executing program 2 (id=3799): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002b"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20) 5.342672076s ago: executing program 1 (id=3800): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001140)={r1, &(0x7f0000001000), &(0x7f0000001040)=""/234, 0x4}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) 5.245534144s ago: executing program 5 (id=3801): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r1}, 0x38) 5.084420767s ago: executing program 2 (id=3802): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00'}, 0x10) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x100002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r7}, 0x10) write$cgroup_int(r6, &(0x7f0000000200), 0x43451) 4.972326586s ago: executing program 4 (id=3803): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x62a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xdeb9065d}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, &(0x7f0000000240), 0x0}, 0x20) 4.93026622s ago: executing program 0 (id=3804): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'bond_slave_0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 4.592898607s ago: executing program 5 (id=3805): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0xff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x200000000000007a, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 4.454465038s ago: executing program 1 (id=3806): bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a66505}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x1}, 0x18208, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb2, 0x2, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x2}, 0x842a, 0x200000000000000, 0x7, 0x5, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000015c0), 0xffffffffffffff9d}, {&(0x7f00000015c0)="ec", 0x1}, {0x0, 0x19}], 0x26d}, 0x24040800) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) 4.380580334s ago: executing program 2 (id=3807): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 3.926638491s ago: executing program 0 (id=3808): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e00000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.753166935s ago: executing program 4 (id=3809): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa, 0x20226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0x31, 0x8, 0x0, 0x2081}, 0x0, 0xb000000000000001, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 3.608581577s ago: executing program 0 (id=3810): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.340613649s ago: executing program 4 (id=3811): write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001", @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f40)='neigh_create\x00', r1}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 3.122217026s ago: executing program 4 (id=3812): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc02"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20) 2.988061447s ago: executing program 4 (id=3813): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0xac26}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x3, &(0x7f0000001480)=@framed, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 89.820803ms ago: executing program 4 (id=3814): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 18.326438ms ago: executing program 1 (id=3815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r1}, 0x38) 17.486408ms ago: executing program 0 (id=3816): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x80) 0s ago: executing program 5 (id=3817): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001140)={r1, &(0x7f0000001000), &(0x7f0000001040)=""/234, 0x4}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) kernel console output (not intermixed with test programs): 8.729678][ T5185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.573772][ T5202] netlink: 184 bytes leftover after parsing attributes in process `syz.0.280'. [ 150.405756][ T5209] netlink: 'syz.1.282': attribute type 10 has an invalid length. [ 150.449058][ T5209] device wlan1 entered promiscuous mode [ 150.463377][ T5209] team0: Port device wlan1 added [ 150.977125][ T5218] netlink: 'syz.4.274': attribute type 10 has an invalid length. [ 151.020604][ T5218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.274'. [ 151.331660][ T5231] netlink: 'syz.1.276': attribute type 10 has an invalid length. [ 151.447245][ T5231] device wlan1 left promiscuous mode [ 151.479413][ T5231] team0: Port device wlan1 removed [ 151.511852][ T5231] device wlan1 entered promiscuous mode [ 151.517938][ T5231] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.312515][ T5251] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 152.357628][ T5251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.291'. [ 153.218503][ T5262] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 153.274456][ T5262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.297'. [ 153.401494][ T5267] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 153.775696][ T5267] team0: Port device wlan1 added [ 154.083319][ T5284] netlink: 'syz.3.294': attribute type 10 has an invalid length. [ 154.222843][ T5284] team0: Port device wlan1 removed [ 154.235471][ T5284] device wlan1 entered promiscuous mode [ 154.241945][ T5284] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 154.713161][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 154.969144][ T5304] netlink: 52 bytes leftover after parsing attributes in process `syz.3.298'. [ 155.032278][ T5304] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 155.600936][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 155.688205][ T5306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.751231][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 156.640309][ T5326] netlink: 'syz.2.308': attribute type 10 has an invalid length. [ 156.786646][ T5326] bond0: (slave wlan1): Releasing backup interface [ 156.829705][ T5326] device wlan1 left promiscuous mode [ 156.888905][ T5326] team0: Port device wlan1 added [ 156.968716][ T5337] netlink: 'syz.4.313': attribute type 10 has an invalid length. [ 157.042638][ T5337] device wlan1 left promiscuous mode [ 157.075166][ T5337] team0: Port device wlan1 removed [ 157.105768][ T5337] device wlan1 entered promiscuous mode [ 157.180943][ T5337] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 157.684347][ T5346] netlink: 52 bytes leftover after parsing attributes in process `syz.1.316'. [ 157.789671][ T5346] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 159.338157][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 159.348343][ T5364] netlink: 'syz.3.323': attribute type 3 has an invalid length. [ 159.405285][ T5362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.436928][ T5364] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.323'. [ 163.607011][ T5425] netlink: 830 bytes leftover after parsing attributes in process `syz.1.339'. [ 163.763621][ T5432] netlink: 'syz.4.337': attribute type 10 has an invalid length. [ 163.860871][ T5432] netlink: 40 bytes leftover after parsing attributes in process `syz.4.337'. [ 164.252902][ T5442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.680343][ T5450] netlink: 'syz.1.348': attribute type 10 has an invalid length. [ 164.795561][ T5453] netlink: 'syz.1.348': attribute type 10 has an invalid length. [ 164.855804][ T5453] device netdevsim0 left promiscuous mode [ 164.936555][ T5457] netlink: 'syz.2.349': attribute type 2 has an invalid length. [ 165.002834][ T5453] team0: Port device netdevsim0 removed [ 165.191811][ T5457] netlink: 10 bytes leftover after parsing attributes in process `syz.2.349'. [ 165.316981][ T5453] device netdevsim0 entered promiscuous mode [ 165.354734][ T5453] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 165.370411][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 165.539092][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 165.579460][ T5465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.001064][ T5486] netlink: 'syz.0.357': attribute type 10 has an invalid length. [ 167.131530][ T5486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.357'. [ 168.255560][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 168.297579][ T5510] netlink: 'syz.4.366': attribute type 2 has an invalid length. [ 168.378324][ T5510] netlink: 10 bytes leftover after parsing attributes in process `syz.4.366'. [ 169.951274][ T5520] delete_channel: no stack [ 170.287810][ T5535] netlink: 'syz.4.371': attribute type 10 has an invalid length. [ 170.654225][ T5535] bridge0: port 4(macsec0) entered disabled state [ 170.733148][ T5535] device macsec0 left promiscuous mode [ 170.755847][ T5535] bridge0: port 4(macsec0) entered disabled state [ 171.437387][ T5536] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 171.450288][ T5536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.373'. [ 172.693159][ T5571] netlink: 'syz.1.379': attribute type 2 has an invalid length. [ 172.740677][ T5571] netlink: 10 bytes leftover after parsing attributes in process `syz.1.379'. [ 172.864396][ T5549] device syzkaller0 entered promiscuous mode [ 177.845322][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 178.432440][ T5574] netlink: 'syz.2.381': attribute type 10 has an invalid length. [ 178.469487][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.483779][ T5574] team0: Port device batadv0 added [ 178.531947][ T5590] netlink: 830 bytes leftover after parsing attributes in process `syz.0.385'. [ 178.954877][ T5601] netlink: 'syz.4.388': attribute type 3 has an invalid length. [ 179.010753][ T5601] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.388'. [ 182.855438][ T5644] device syzkaller0 entered promiscuous mode [ 184.282051][ T4273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.412568][ T4273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.422910][ T4273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.465331][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.473701][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 184.481321][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.502629][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 188.583579][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 188.914283][ T5664] chnl_net:caif_netlink_parms(): no params data found [ 190.356479][ T5718] netlink: 'syz.1.421': attribute type 2 has an invalid length. [ 190.387444][ T5718] netlink: 10 bytes leftover after parsing attributes in process `syz.1.421'. [ 190.547091][ T5721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.559842][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.573792][ T5721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.582395][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.662501][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 190.889545][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.958325][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.993401][ T5664] device bridge_slave_0 entered promiscuous mode [ 191.220690][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.228681][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.249438][ T5664] device bridge_slave_1 entered promiscuous mode [ 191.262454][ T5723] netlink: 'syz.1.422': attribute type 10 has an invalid length. [ 191.280873][ T5723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.422'. [ 191.648926][ T33] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.725319][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.747389][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.775829][ T5733] netlink: 'syz.4.434': attribute type 10 has an invalid length. [ 191.786096][ T5733] netlink: 40 bytes leftover after parsing attributes in process `syz.4.434'. [ 191.956972][ T33] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.068566][ T5738] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 192.468207][ T5664] team0: Port device team_slave_0 added [ 192.501768][ T33] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.740120][ T4267] Bluetooth: hci5: command 0x0419 tx timeout [ 192.820731][ T5664] team0: Port device team_slave_1 added [ 192.849270][ T5761] netlink: 830 bytes leftover after parsing attributes in process `syz.2.431'. [ 192.883914][ T33] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.981071][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.988515][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.016720][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.079459][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.100090][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.138510][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.251072][ T5767] netlink: 'syz.4.432': attribute type 2 has an invalid length. [ 193.272172][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 193.393023][ T5767] netlink: 10 bytes leftover after parsing attributes in process `syz.4.432'. [ 194.098169][ T5664] device hsr_slave_0 entered promiscuous mode [ 194.118458][ T5664] device hsr_slave_1 entered promiscuous mode [ 194.180432][ T5664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.221460][ T5664] Cannot create hsr debugfs directory [ 194.391176][ T5778] netlink: 'syz.1.445': attribute type 2 has an invalid length. [ 194.398931][ T5778] netlink: 10 bytes leftover after parsing attributes in process `syz.1.445'. [ 194.945489][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.952247][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.694762][ T5791] netlink: 'syz.1.439': attribute type 10 has an invalid length. [ 195.733450][ T5791] netlink: 40 bytes leftover after parsing attributes in process `syz.1.439'. [ 196.819515][ T5808] netlink: 830 bytes leftover after parsing attributes in process `syz.1.443'. [ 197.847280][ T5664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.980904][ T5664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.032250][ T5664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.207856][ T5664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.247592][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.276017][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.309730][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.354010][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.533972][ T5835] team0: Port device batadv0 removed [ 199.006052][ T33] bond0: (slave wlan1): Releasing backup interface [ 199.213958][ T5844] netlink: 'syz.1.449': attribute type 2 has an invalid length. [ 199.234475][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 199.281908][ T5844] netlink: 10 bytes leftover after parsing attributes in process `syz.1.449'. [ 199.996506][ T33] device hsr_slave_0 left promiscuous mode [ 200.008922][ T33] device hsr_slave_1 left promiscuous mode [ 200.220800][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.229031][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.310697][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.318434][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.376992][ T33] device bridge_slave_1 left promiscuous mode [ 200.404538][ T5869] netlink: 'syz.0.463': attribute type 2 has an invalid length. [ 200.434651][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.453365][ T5869] netlink: 10 bytes leftover after parsing attributes in process `syz.0.463'. [ 200.480779][ T33] device bridge_slave_0 left promiscuous mode [ 200.487167][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.634680][ T33] device veth1_macvtap left promiscuous mode [ 200.652016][ T33] device veth0_macvtap left promiscuous mode [ 200.689897][ T33] device veth1_vlan left promiscuous mode [ 200.719925][ T33] device veth0_vlan left promiscuous mode [ 202.100207][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 202.109146][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 202.116681][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 202.116697][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 202.487378][ T33] team0 (unregistering): Port device team_slave_1 removed [ 202.579793][ T33] team0 (unregistering): Port device team_slave_0 removed [ 202.671720][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.738010][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.404134][ T33] bond0 (unregistering): Released all slaves [ 203.490191][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 204.014242][ T5890] netlink: 'syz.1.453': attribute type 10 has an invalid length. [ 204.022797][ T5890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.453'. [ 204.126035][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.236019][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.245114][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.263503][ T5898] netlink: 830 bytes leftover after parsing attributes in process `syz.0.456'. [ 204.289403][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.442692][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.491781][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.510131][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.517430][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.615988][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.636596][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.669088][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.727975][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.735456][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.877189][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.964152][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.170306][ T5917] netlink: 'syz.4.470': attribute type 10 has an invalid length. [ 206.202372][ T5917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.470'. [ 206.216782][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.238903][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.248239][ T5906] delete_channel: no stack [ 206.251388][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.317968][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.339192][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.355169][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.366452][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.396706][ T5664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.423155][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.445090][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.461106][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.356917][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 207.457062][ T5951] netlink: 'syz.2.467': attribute type 2 has an invalid length. [ 207.554180][ T5951] netlink: 10 bytes leftover after parsing attributes in process `syz.2.467'. [ 208.561732][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.593697][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.627001][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.854694][ T5966] netlink: 830 bytes leftover after parsing attributes in process `syz.2.471'. [ 209.067975][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 209.157430][ T5974] netlink: 'syz.4.480': attribute type 2 has an invalid length. [ 209.249075][ T5974] netlink: 10 bytes leftover after parsing attributes in process `syz.4.480'. [ 210.576480][ T5999] netlink: 'syz.1.477': attribute type 10 has an invalid length. [ 210.620691][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.477'. [ 210.900150][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.941069][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.070188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.104428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.156119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.204946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.288679][ T5664] device veth0_vlan entered promiscuous mode [ 211.342236][ T5664] device veth1_vlan entered promiscuous mode [ 211.538983][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.566023][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.630614][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.701217][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.714451][ T5664] device veth0_macvtap entered promiscuous mode [ 211.727467][ T6021] netlink: 830 bytes leftover after parsing attributes in process `syz.2.483'. [ 211.743953][ T5664] device veth1_macvtap entered promiscuous mode [ 211.856159][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.887811][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.907868][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.938699][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.962184][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.984943][ T6025] device syzkaller0 entered promiscuous mode [ 212.000216][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.023864][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.048845][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.082130][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.116221][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.129306][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.143926][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.156840][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.186191][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.264346][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.281448][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.319631][ T5664] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.353793][ T5664] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.369768][ T5664] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.402412][ T5664] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.539709][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.570122][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.596729][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.608497][ T4731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.622655][ T4731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.652841][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.603838][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 213.662354][ T6063] netlink: 'syz.4.486': attribute type 2 has an invalid length. [ 213.672200][ T6058] netlink: 'syz.2.488': attribute type 10 has an invalid length. [ 213.691018][ T6058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.488'. [ 213.714809][ T6063] netlink: 10 bytes leftover after parsing attributes in process `syz.4.486'. [ 213.758030][ T6058] device team0 entered promiscuous mode [ 213.805669][ T6058] device team_slave_0 entered promiscuous mode [ 213.843940][ T6058] device team_slave_1 entered promiscuous mode [ 213.880923][ T6058] device wlan1 entered promiscuous mode [ 214.045224][ T6058] bridge0: port 3(team0) entered blocking state [ 214.074300][ T6058] bridge0: port 3(team0) entered disabled state [ 214.249792][ T6058] bridge0: port 3(team0) entered blocking state [ 214.256587][ T6058] bridge0: port 3(team0) entered forwarding state [ 221.616985][ T6221] netlink: 830 bytes leftover after parsing attributes in process `syz.4.534'. [ 223.071808][ T6249] device syzkaller0 entered promiscuous mode [ 226.349100][ T6328] device syzkaller0 entered promiscuous mode [ 227.682556][ T6361] netlink: 830 bytes leftover after parsing attributes in process `syz.1.575'. [ 227.756746][ T6365] netlink: 830 bytes leftover after parsing attributes in process `syz.4.577'. [ 227.884062][ T6366] netlink: 'syz.0.576': attribute type 10 has an invalid length. [ 227.932341][ T6366] netlink: 40 bytes leftover after parsing attributes in process `syz.0.576'. [ 228.313775][ T6381] device syzkaller0 entered promiscuous mode [ 229.059369][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 229.203185][ T6393] netlink: 'syz.2.585': attribute type 2 has an invalid length. [ 229.254231][ T6393] netlink: 10 bytes leftover after parsing attributes in process `syz.2.585'. [ 230.396754][ T6433] device syzkaller0 entered promiscuous mode [ 234.497936][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.622'. [ 235.760980][ T6546] netlink: 830 bytes leftover after parsing attributes in process `syz.0.631'. [ 236.032391][ T6558] netlink: 830 bytes leftover after parsing attributes in process `syz.2.635'. [ 237.404603][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 237.457266][ T6588] netlink: 'syz.2.641': attribute type 2 has an invalid length. [ 237.482116][ T6588] netlink: 10 bytes leftover after parsing attributes in process `syz.2.641'. [ 237.647313][ T6593] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 237.672518][ T6593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.644'. [ 237.958479][ T6605] netlink: 830 bytes leftover after parsing attributes in process `syz.5.647'. [ 238.005893][ T6605] device bond_slave_0 entered promiscuous mode [ 238.014716][ T6605] device bond_slave_1 entered promiscuous mode [ 239.673577][ T6655] netlink: 'syz.0.660': attribute type 10 has an invalid length. [ 239.739552][ T6655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.660'. [ 239.825024][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 239.861320][ T6660] netlink: 'syz.1.659': attribute type 2 has an invalid length. [ 239.899317][ T6660] netlink: 10 bytes leftover after parsing attributes in process `syz.1.659'. [ 241.743553][ T6700] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 241.796564][ T6700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.673'. [ 243.743243][ T6767] netlink: 'syz.5.689': attribute type 2 has an invalid length. [ 243.760163][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.689'. [ 243.806713][ T6767] netlink: 10 bytes leftover after parsing attributes in process `syz.5.689'. [ 243.962700][ T6766] netlink: 'syz.0.702': attribute type 10 has an invalid length. [ 243.979420][ T6766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.702'. [ 245.914471][ T6817] netlink: 'syz.5.707': attribute type 10 has an invalid length. [ 245.940892][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.5.707'. [ 245.979885][ T6817] device team0 entered promiscuous mode [ 246.023304][ T6817] device team_slave_0 entered promiscuous mode [ 246.075031][ T6817] device team_slave_1 entered promiscuous mode [ 246.143008][ T6817] bridge0: port 3(team0) entered blocking state [ 246.207883][ T6817] bridge0: port 3(team0) entered disabled state [ 246.307433][ T6817] bridge0: port 3(team0) entered blocking state [ 246.314695][ T6817] bridge0: port 3(team0) entered forwarding state [ 246.508683][ T6838] netlink: 830 bytes leftover after parsing attributes in process `syz.1.713'. [ 247.088691][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 247.195207][ T6854] netlink: 'syz.1.719': attribute type 2 has an invalid length. [ 247.291539][ T6854] netlink: 10 bytes leftover after parsing attributes in process `syz.1.719'. [ 248.116136][ T6883] netlink: 'syz.5.727': attribute type 10 has an invalid length. [ 248.160222][ T6883] netlink: 40 bytes leftover after parsing attributes in process `syz.5.727'. [ 248.248905][ T6896] netlink: 'syz.1.739': attribute type 2 has an invalid length. [ 248.294650][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 248.337297][ T6896] netlink: 10 bytes leftover after parsing attributes in process `syz.1.739'. [ 248.454525][ T6898] netlink: 830 bytes leftover after parsing attributes in process `syz.2.730'. [ 249.919700][ T6927] netlink: 'syz.4.743': attribute type 10 has an invalid length. [ 250.006980][ T6927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.743'. [ 250.136846][ T6939] netlink: 830 bytes leftover after parsing attributes in process `syz.2.746'. [ 251.854750][ T6987] netlink: 'syz.4.761': attribute type 10 has an invalid length. [ 251.874302][ T6987] __nla_validate_parse: 1 callbacks suppressed [ 251.875243][ T6987] netlink: 40 bytes leftover after parsing attributes in process `syz.4.761'. [ 251.930408][ T6991] netlink: 830 bytes leftover after parsing attributes in process `syz.2.762'. [ 252.304141][ T6997] netlink: 830 bytes leftover after parsing attributes in process `syz.1.763'. [ 253.495699][ T7038] netlink: 'syz.2.776': attribute type 10 has an invalid length. [ 253.602425][ T7038] netlink: 40 bytes leftover after parsing attributes in process `syz.2.776'. [ 253.676169][ T7040] netlink: 830 bytes leftover after parsing attributes in process `syz.1.777'. [ 253.794040][ T7046] netlink: 830 bytes leftover after parsing attributes in process `syz.0.780'. [ 254.237045][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.783'. [ 254.319660][ T7066] netlink: 'syz.5.783': attribute type 2 has an invalid length. [ 254.336173][ T7066] netlink: 10 bytes leftover after parsing attributes in process `syz.5.783'. [ 255.624021][ T7094] netlink: 830 bytes leftover after parsing attributes in process `syz.4.794'. [ 255.696629][ T7089] netlink: 'syz.1.792': attribute type 10 has an invalid length. [ 255.798375][ T7089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.792'. [ 256.456120][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.463385][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.452449][ T7146] netlink: 830 bytes leftover after parsing attributes in process `syz.2.807'. [ 258.405085][ T7155] netlink: 'syz.1.810': attribute type 10 has an invalid length. [ 258.465777][ T7155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'. [ 259.669495][ T7187] netlink: 830 bytes leftover after parsing attributes in process `syz.5.817'. [ 260.198540][ T7213] netlink: 'syz.2.824': attribute type 10 has an invalid length. [ 260.242797][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.824'. [ 261.559062][ T7248] netlink: 830 bytes leftover after parsing attributes in process `syz.5.836'. [ 262.105717][ T7261] netlink: 'syz.0.839': attribute type 10 has an invalid length. [ 262.170287][ T7261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.839'. [ 263.082155][ T7293] netlink: 830 bytes leftover after parsing attributes in process `syz.0.851'. [ 263.357922][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 263.437438][ T7301] netlink: 'syz.4.853': attribute type 2 has an invalid length. [ 263.460841][ T7301] netlink: 10 bytes leftover after parsing attributes in process `syz.4.853'. [ 263.483157][ T7303] netlink: 'syz.5.854': attribute type 10 has an invalid length. [ 263.501425][ T7303] netlink: 40 bytes leftover after parsing attributes in process `syz.5.854'. [ 265.487698][ T7338] netlink: 830 bytes leftover after parsing attributes in process `syz.4.867'. [ 265.730951][ T7343] netlink: 'syz.0.868': attribute type 10 has an invalid length. [ 265.751295][ T7343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.868'. [ 266.118317][ T7357] netlink: 'syz.1.871': attribute type 2 has an invalid length. [ 266.217371][ T7357] netlink: 10 bytes leftover after parsing attributes in process `syz.1.871'. [ 268.577976][ T7404] netlink: 830 bytes leftover after parsing attributes in process `syz.4.890'. [ 270.217140][ T7438] netlink: 'syz.1.900': attribute type 10 has an invalid length. [ 270.304751][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.900'. [ 270.865045][ T7451] netlink: 830 bytes leftover after parsing attributes in process `syz.2.906'. [ 272.854009][ T7498] netlink: 830 bytes leftover after parsing attributes in process `syz.4.921'. [ 276.018378][ T7595] netlink: 830 bytes leftover after parsing attributes in process `syz.0.949'. [ 277.534426][ T7646] netlink: 830 bytes leftover after parsing attributes in process `syz.2.966'. [ 278.617023][ T7673] netlink: 'syz.5.975': attribute type 10 has an invalid length. [ 278.627680][ T7673] netlink: 40 bytes leftover after parsing attributes in process `syz.5.975'. [ 289.535278][ T7909] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1052'. [ 291.352584][ T7947] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1066'. [ 292.142638][ T7955] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1078'. [ 294.237445][ T8007] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1084'. [ 295.676277][ T8048] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1099'. [ 298.270260][ T8100] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1115'. [ 300.573318][ T8157] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1131'. [ 302.538855][ T8195] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1146'. [ 304.896354][ T8256] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1163'. [ 305.081106][ T8259] netlink: 'syz.4.1164': attribute type 10 has an invalid length. [ 305.100787][ T8259] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1164'. [ 305.315978][ T8265] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1177'. [ 309.620278][ T4267] Bluetooth: hci5: command 0x0406 tx timeout [ 312.171725][ T8412] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 312.202115][ T8412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1214'. [ 313.516315][ T8438] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1222'. [ 315.691653][ T8492] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1242'. [ 317.784972][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.791593][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.827479][ T8631] netlink: 'syz.2.1288': attribute type 10 has an invalid length. [ 320.839225][ T8631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1288'. [ 322.368223][ T8671] netlink: 'syz.5.1302': attribute type 10 has an invalid length. [ 322.396609][ T8671] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1302'. [ 322.491774][ T8678] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1303'. [ 334.123263][ T8933] netlink: 'syz.1.1390': attribute type 10 has an invalid length. [ 334.151970][ T8933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1390'. [ 379.297178][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.303694][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 430.459794][T10351] netlink: 'syz.0.1790': attribute type 10 has an invalid length. [ 430.512808][T10351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1790'. [ 435.478358][T10449] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 435.503897][T10449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1817'. [ 440.664029][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.670642][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 469.978790][T11062] netlink: 'syz.0.1998': attribute type 9 has an invalid length. [ 469.987186][T11062] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1998'. [ 475.854660][T11169] device syzkaller0 entered promiscuous mode [ 482.059282][T11268] device syzkaller0 entered promiscuous mode [ 486.655392][T11296] netlink: 'syz.2.2081': attribute type 9 has an invalid length. [ 486.664100][T11296] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2081'. [ 486.676153][T11305] netlink: 'syz.1.2085': attribute type 9 has an invalid length. [ 486.685114][T11305] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2085'. [ 486.720028][T11340] netlink: 'syz.0.2098': attribute type 9 has an invalid length. [ 486.728298][T11340] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2098'. [ 487.043223][T11347] device syzkaller0 entered promiscuous mode [ 490.646828][T11375] netlink: 'syz.4.2110': attribute type 9 has an invalid length. [ 490.658869][T11375] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2110'. [ 490.673129][T11377] netlink: 'syz.2.2123': attribute type 9 has an invalid length. [ 490.706594][T11377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2123'. [ 490.816644][T11381] device syzkaller0 entered promiscuous mode [ 493.599336][T11391] netlink: 'syz.4.2114': attribute type 9 has an invalid length. [ 493.607501][T11391] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2114'. [ 493.621517][T11404] netlink: 'syz.1.2118': attribute type 9 has an invalid length. [ 493.629690][T11404] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2118'. [ 493.639736][T11402] netlink: 'syz.2.2119': attribute type 9 has an invalid length. [ 493.655582][T11402] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2119'. [ 494.212210][T11413] device syzkaller0 entered promiscuous mode [ 497.598525][T11446] netlink: 'syz.4.2132': attribute type 9 has an invalid length. [ 497.606916][T11446] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2132'. [ 498.218698][T11457] device syzkaller0 entered promiscuous mode [ 501.848083][T11479] netlink: 'syz.5.2137': attribute type 9 has an invalid length. [ 501.855978][T11479] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2137'. [ 501.866425][T11492] netlink: 'syz.2.2144': attribute type 9 has an invalid length. [ 501.874716][T11492] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2144'. [ 502.103287][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.110021][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.303633][T11530] device syzkaller0 entered promiscuous mode [ 506.215005][T11547] netlink: 'syz.1.2158': attribute type 9 has an invalid length. [ 506.223197][T11547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2158'. [ 506.976339][T11556] device syzkaller0 entered promiscuous mode [ 509.540546][T11581] netlink: 'syz.0.2166': attribute type 9 has an invalid length. [ 509.549172][T11581] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2166'. [ 510.895171][T11616] device syzkaller0 entered promiscuous mode [ 513.882470][T11629] device syzkaller0 entered promiscuous mode [ 513.972779][T11625] device syzkaller0 entered promiscuous mode [ 521.247496][T11703] device syzkaller0 entered promiscuous mode [ 524.158752][T11723] netlink: 'syz.5.2199': attribute type 9 has an invalid length. [ 524.167112][T11723] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2199'. [ 524.624242][T11741] device syzkaller0 entered promiscuous mode [ 529.240760][T11792] netlink: 'syz.0.2212': attribute type 9 has an invalid length. [ 529.255876][T11792] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2212'. [ 530.449117][T11815] device syzkaller0 entered promiscuous mode [ 530.570156][T11811] netlink: 'syz.4.2219': attribute type 9 has an invalid length. [ 530.579810][T11811] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2219'. [ 534.445348][T11847] device syzkaller0 entered promiscuous mode [ 537.159709][T11853] netlink: 'syz.1.2228': attribute type 9 has an invalid length. [ 537.169799][T11853] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2228'. [ 537.787196][T11885] device syzkaller0 entered promiscuous mode [ 541.191386][T11889] netlink: 'syz.2.2239': attribute type 9 has an invalid length. [ 541.199624][T11889] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2239'. [ 541.532135][T11916] netlink: 'syz.2.2245': attribute type 9 has an invalid length. [ 541.564500][T11916] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2245'. [ 541.650956][T11919] netlink: 'syz.4.2257': attribute type 9 has an invalid length. [ 541.666449][T11919] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2257'. [ 541.759934][T11922] netlink: 'syz.0.2246': attribute type 9 has an invalid length. [ 541.770892][T11922] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2246'. [ 542.289732][T11928] device syzkaller0 entered promiscuous mode [ 544.927428][T11934] device syzkaller0 entered promiscuous mode [ 548.433205][T11964] device syzkaller0 entered promiscuous mode [ 551.621800][T11976] netlink: 'syz.1.2263': attribute type 9 has an invalid length. [ 551.630092][T11976] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2263'. [ 552.267540][T12006] netlink: 'syz.0.2283': attribute type 9 has an invalid length. [ 552.289649][T12006] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2283'. [ 553.844708][T12047] netlink: 'syz.5.2286': attribute type 9 has an invalid length. [ 553.954979][T12047] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2286'. [ 554.182660][T12048] device syzkaller0 entered promiscuous mode [ 559.251808][T12118] device syzkaller0 entered promiscuous mode [ 562.559555][T12150] device syzkaller0 entered promiscuous mode [ 563.550980][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.557404][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.009279][T12291] device syzkaller0 entered promiscuous mode [ 577.579709][T12371] device syzkaller0 entered promiscuous mode [ 585.458229][T12496] device syzkaller0 entered promiscuous mode [ 590.775694][T12566] device syzkaller0 entered promiscuous mode [ 594.288246][T12597] device syzkaller0 entered promiscuous mode [ 597.950177][T12627] device syzkaller0 entered promiscuous mode [ 601.505420][T12669] device syzkaller0 entered promiscuous mode [ 604.663620][T12689] device syzkaller0 entered promiscuous mode [ 604.759430][T12697] device syzkaller0 entered promiscuous mode [ 610.395299][T12726] netlink: 'syz.0.2453': attribute type 9 has an invalid length. [ 610.403512][T12726] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2453'. [ 610.990600][T12738] device syzkaller0 entered promiscuous mode [ 614.142092][T12747] netlink: 'syz.0.2459': attribute type 9 has an invalid length. [ 614.152774][T12747] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2459'. [ 614.440857][T12772] netlink: 'syz.4.2464': attribute type 9 has an invalid length. [ 614.540920][T12772] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2464'. [ 615.566996][T12793] device syzkaller0 entered promiscuous mode [ 618.477047][T12803] netlink: 'syz.5.2472': attribute type 9 has an invalid length. [ 618.485975][T12803] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2472'. [ 618.495828][T12810] netlink: 'syz.4.2474': attribute type 9 has an invalid length. [ 618.515246][T12810] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2474'. [ 618.923675][T12829] device syzkaller0 entered promiscuous mode [ 619.569017][T12820] device syzkaller0 entered promiscuous mode [ 622.295675][T12824] netlink: 'syz.2.2478': attribute type 9 has an invalid length. [ 622.305016][T12824] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2478'. [ 624.983820][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.990659][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.375825][T12865] device syzkaller0 entered promiscuous mode [ 628.605543][T12882] netlink: 'syz.1.2489': attribute type 9 has an invalid length. [ 628.614355][T12882] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2489'. [ 628.628855][T12900] netlink: 'syz.0.2493': attribute type 9 has an invalid length. [ 628.649982][T12900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2493'. [ 628.882696][T12909] netlink: 'syz.2.2505': attribute type 9 has an invalid length. [ 628.894235][T12909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2505'. [ 629.459331][T12913] device syzkaller0 entered promiscuous mode [ 632.346020][T12929] device syzkaller0 entered promiscuous mode [ 635.536044][T12942] netlink: 'syz.1.2512': attribute type 9 has an invalid length. [ 635.547060][T12942] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2512'. [ 635.662879][T12955] device syzkaller0 entered promiscuous mode [ 641.573933][T13016] netlink: 'syz.2.2519': attribute type 9 has an invalid length. [ 641.582466][T13016] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2519'. [ 643.063225][T13042] netlink: 'syz.4.2527': attribute type 9 has an invalid length. [ 643.095937][T13042] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2527'. [ 643.613054][T13057] netlink: 'syz.4.2531': attribute type 9 has an invalid length. [ 643.637767][T13057] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2531'. [ 644.246751][T13064] device syzkaller0 entered promiscuous mode [ 647.826957][T13104] netlink: 'syz.2.2542': attribute type 9 has an invalid length. [ 647.902306][T13104] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2542'. [ 648.571553][T13128] netlink: 'syz.5.2546': attribute type 9 has an invalid length. [ 648.584093][T13128] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2546'. [ 648.859064][T13130] device syzkaller0 entered promiscuous mode [ 659.977252][T13283] device syzkaller0 entered promiscuous mode [ 665.623213][T13349] device syzkaller0 entered promiscuous mode [ 670.167113][T13393] device syzkaller0 entered promiscuous mode [ 672.666782][T13411] device syzkaller0 entered promiscuous mode [ 678.068098][T13485] device syzkaller0 entered promiscuous mode [ 678.207027][T13487] device syzkaller0 entered promiscuous mode [ 686.564360][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.570899][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.362420][T13573] device syzkaller0 entered promiscuous mode [ 702.541249][T13690] device syzkaller0 entered promiscuous mode [ 713.835926][T13789] device syzkaller0 entered promiscuous mode [ 713.899661][T13791] netlink: 'syz.1.2718': attribute type 9 has an invalid length. [ 714.038304][T13791] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2718'. [ 717.914598][T13837] device syzkaller0 entered promiscuous mode [ 721.276200][T13854] netlink: 'syz.2.2732': attribute type 9 has an invalid length. [ 721.284978][T13854] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2732'. [ 723.258273][T13884] device syzkaller0 entered promiscuous mode [ 726.805607][T13910] device syzkaller0 entered promiscuous mode [ 726.947243][T13914] device syzkaller0 entered promiscuous mode [ 732.621533][T13940] netlink: 'syz.4.2751': attribute type 9 has an invalid length. [ 732.657876][T13940] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2751'. [ 736.335798][T14007] netlink: 'syz.0.2768': attribute type 9 has an invalid length. [ 736.358213][T14007] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2768'. [ 736.873133][T14021] netlink: 'syz.0.2784': attribute type 9 has an invalid length. [ 736.949213][T14021] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2784'. [ 737.948170][T14033] device syzkaller0 entered promiscuous mode [ 743.402442][T14085] netlink: 'syz.5.2787': attribute type 9 has an invalid length. [ 743.529729][T14085] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2787'. [ 744.428576][T14099] netlink: 'syz.4.2801': attribute type 9 has an invalid length. [ 744.481233][T14099] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2801'. [ 745.539575][T14115] netlink: 'syz.4.2805': attribute type 9 has an invalid length. [ 745.569137][T14115] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2805'. [ 746.066603][T14124] netlink: 'syz.2.2808': attribute type 9 has an invalid length. [ 746.134938][T14124] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2808'. [ 747.980565][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.987309][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.400370][T14169] device syzkaller0 entered promiscuous mode [ 750.991757][T14182] netlink: 'syz.2.2812': attribute type 9 has an invalid length. [ 751.000132][T14182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2812'. [ 751.278463][T14187] netlink: 'syz.0.2825': attribute type 9 has an invalid length. [ 751.401635][T14187] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2825'. [ 756.657875][T14268] netlink: 'syz.0.2831': attribute type 9 has an invalid length. [ 756.871345][T14268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2831'. [ 758.604351][T14286] device syzkaller0 entered promiscuous mode [ 758.763797][T14282] device syzkaller0 entered promiscuous mode [ 764.446013][T14318] netlink: 'syz.4.2843': attribute type 9 has an invalid length. [ 764.532812][T14318] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2843'. [ 765.226879][T14328] netlink: 'syz.5.2855': attribute type 9 has an invalid length. [ 765.277330][T14328] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2855'. [ 767.244721][T14368] device syzkaller0 entered promiscuous mode [ 770.664600][T14401] netlink: 'syz.2.2860': attribute type 9 has an invalid length. [ 770.738373][T14401] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2860'. [ 778.204319][T14460] device syzkaller0 entered promiscuous mode [ 783.448314][T14516] device syzkaller0 entered promiscuous mode [ 797.116927][T14684] device syzkaller0 entered promiscuous mode [ 800.234617][T14692] device syzkaller0 entered promiscuous mode [ 804.326217][T14749] device syzkaller0 entered promiscuous mode [ 809.365154][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.371685][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.909401][T14818] device syzkaller0 entered promiscuous mode [ 810.317111][T14824] device syzkaller0 entered promiscuous mode [ 816.179485][T14842] device syzkaller0 entered promiscuous mode [ 819.257162][T14871] device syzkaller0 entered promiscuous mode [ 827.982293][T14986] device syzkaller0 entered promiscuous mode [ 831.767774][T15022] netlink: 'syz.2.3021': attribute type 9 has an invalid length. [ 831.800498][T15022] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3021'. [ 834.409563][T15068] device syzkaller0 entered promiscuous mode [ 839.648559][T15108] device syzkaller0 entered promiscuous mode [ 844.972293][T15164] device veth0_vlan left promiscuous mode [ 845.176181][T15164] device veth0_vlan entered promiscuous mode [ 846.421490][T15189] device veth0_vlan left promiscuous mode [ 846.566575][T15189] device veth0_vlan entered promiscuous mode [ 846.894377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 846.912801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 846.942116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 848.205070][T15215] device syzkaller0 entered promiscuous mode [ 854.640276][T15249] device veth0_vlan left promiscuous mode [ 854.680659][T15249] device veth0_vlan entered promiscuous mode [ 854.848246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 854.887825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 854.928514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 860.550272][T15310] device veth0_vlan left promiscuous mode [ 860.558939][T15310] device veth0_vlan entered promiscuous mode [ 860.786856][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 860.882683][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 861.113002][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 863.976320][T15359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 863.987778][T15359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 864.021359][T15359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 864.050373][T15359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 864.059282][T15359] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 864.068097][T15359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 864.137483][ T4372] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.453879][ T4372] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.034718][T15364] device veth0_vlan left promiscuous mode [ 865.045930][T15364] device veth0_vlan entered promiscuous mode [ 865.112051][ T4372] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.213954][ T4372] bond0: (slave netdevsim0): Releasing backup interface [ 865.226101][ T4372] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.398980][T15358] chnl_net:caif_netlink_parms(): no params data found [ 866.013509][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.079355][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.115962][T15359] Bluetooth: hci0: command 0x0409 tx timeout [ 866.201319][T15358] device bridge_slave_0 entered promiscuous mode [ 866.497183][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.542636][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.571380][T15358] device bridge_slave_1 entered promiscuous mode [ 866.648626][T15358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.769655][T15358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.177102][T15358] team0: Port device team_slave_0 added [ 867.197526][T15358] team0: Port device team_slave_1 added [ 867.422597][T15358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.481429][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.715179][T15358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.795716][T15358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.814966][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.849463][T15358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.180176][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 868.271844][T15358] device hsr_slave_0 entered promiscuous mode [ 868.314769][T15358] device hsr_slave_1 entered promiscuous mode [ 868.394706][T15358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 868.420461][T15358] Cannot create hsr debugfs directory [ 868.831236][ T4372] bond0: (slave wlan1): Releasing backup interface [ 869.624973][ T4372] device hsr_slave_0 left promiscuous mode [ 869.694839][ T4372] device hsr_slave_1 left promiscuous mode [ 869.720553][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.730639][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.748141][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.766955][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.900436][ T4372] device macsec0 left promiscuous mode [ 869.906385][ T4372] bridge0: port 4(macsec0) entered disabled state [ 869.974393][ T4372] bridge0: port 3(team0) entered disabled state [ 870.026027][ T4372] device bridge_slave_1 left promiscuous mode [ 870.054509][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.097511][ T4372] device bridge_slave_0 left promiscuous mode [ 870.201690][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.260973][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 870.686730][ T4372] device veth1_macvtap left promiscuous mode [ 870.707228][ T4372] device veth0_macvtap left promiscuous mode [ 870.723859][ T4372] device veth1_vlan left promiscuous mode [ 870.742823][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.749422][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.763693][ T4372] device veth0_vlan left promiscuous mode [ 871.568257][ T4372] device team_slave_1 left promiscuous mode [ 871.578312][ T4372] team0 (unregistering): Port device team_slave_1 removed [ 871.632687][ T4372] device team_slave_0 left promiscuous mode [ 871.642022][ T4372] team0 (unregistering): Port device team_slave_0 removed [ 871.695610][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.748580][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.251667][ T4372] bond0 (unregistering): Released all slaves [ 872.339982][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 874.105244][T15358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 874.162279][T15358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 874.219239][T15358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 874.263645][T15358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 874.742011][T15358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.802621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 874.817066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 874.848885][T15358] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.875256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 874.888569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 874.905015][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.912343][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.964708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 875.002175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 875.075882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 875.112529][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.119868][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.147285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 875.192692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 875.262291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 875.305179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 875.361313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 875.403338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 875.442473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 875.482966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 875.521590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 875.552459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 875.573169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 875.653252][T15358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 875.994530][T15554] netlink: 'syz.0.3139': attribute type 21 has an invalid length. [ 876.344895][T15558] device veth0_vlan left promiscuous mode [ 876.697264][T15558] device veth0_vlan entered promiscuous mode [ 876.884028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 876.915524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 876.938810][T15358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.058810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 877.083211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 877.286213][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 877.318522][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 877.397695][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 877.427189][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 877.488443][T15358] device veth0_vlan entered promiscuous mode [ 877.592271][T15358] device veth1_vlan entered promiscuous mode [ 877.623891][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 877.664315][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 877.675549][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 877.695598][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 877.762091][T15358] device veth0_macvtap entered promiscuous mode [ 877.822103][T15358] device veth1_macvtap entered promiscuous mode [ 877.882222][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 877.926165][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 878.000108][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.026721][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.046574][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.057935][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.080124][T15358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.097232][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 878.130846][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 878.186134][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.203772][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.221815][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.255247][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.311480][T15358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.322053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 878.370763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 878.479529][T15358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.520151][T15358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.539208][T15358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.567822][T15358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.652200][T15608] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3144'. [ 878.734896][T15619] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3145'. [ 879.009963][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.018134][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.095795][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 879.133253][T15629] netlink: 'syz.2.3148': attribute type 21 has an invalid length. [ 879.224775][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.265486][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.312370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 879.363876][T15638] netlink: 'syz.5.3151': attribute type 39 has an invalid length. [ 880.228925][T15654] device syzkaller0 entered promiscuous mode [ 880.356523][T15668] netlink: 'syz.2.3160': attribute type 1 has an invalid length. [ 880.420670][T15668] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3160'. [ 881.037240][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 881.047761][ T4267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 881.058114][ T4267] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 881.068073][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 881.085423][ T4267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 881.093286][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 881.957645][T15697] netlink: 'syz.2.3167': attribute type 1 has an invalid length. [ 881.970025][T15697] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3167'. [ 883.140070][T15359] Bluetooth: hci1: command 0x0409 tx timeout [ 884.886013][ T4352] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.027425][ T4352] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.249454][T15359] Bluetooth: hci1: command 0x041b tx timeout [ 885.293035][ T4352] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.512089][T15728] netlink: 'syz.5.3168': attribute type 10 has an invalid length. [ 885.557690][T15728] bridge0: port 3(team0) entered disabled state [ 885.564765][T15728] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.572348][T15728] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.686827][T15728] bridge0: port 3(team0) entered blocking state [ 885.693616][T15728] bridge0: port 3(team0) entered forwarding state [ 885.700388][T15728] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.707672][T15728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.715548][T15728] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.723073][T15728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.823473][T15728] device bridge0 entered promiscuous mode [ 885.857484][T15728] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 885.879168][T15739] netlink: 'syz.2.3172': attribute type 3 has an invalid length. [ 885.910528][T15739] netlink: 'syz.2.3172': attribute type 1 has an invalid length. [ 885.921284][T15739] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3172'. [ 885.954267][ T4352] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.118936][T15729] device syzkaller0 entered promiscuous mode [ 886.377742][T15745] netlink: 'syz.2.3174': attribute type 3 has an invalid length. [ 886.442902][T15745] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3174'. [ 887.309937][T15359] Bluetooth: hci1: command 0x040f tx timeout [ 889.380037][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 890.851034][T15776] netlink: 'syz.2.3180': attribute type 10 has an invalid length. [ 890.967294][T15776] device hsr_slave_0 left promiscuous mode [ 891.088474][T15805] netlink: 'syz.5.3187': attribute type 3 has an invalid length. [ 891.165716][T15805] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3187'. [ 892.084286][T15675] chnl_net:caif_netlink_parms(): no params data found [ 892.203631][T15820] netlink: 'syz.1.3200': attribute type 10 has an invalid length. [ 892.369655][T15820] device hsr_slave_0 left promiscuous mode [ 892.525734][T15832] netlink: 'syz.5.3192': attribute type 10 has an invalid length. [ 892.646822][T15832] batman_adv: batadv0: Adding interface: netdevsim0 [ 892.678719][T15832] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.717989][T15832] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 893.209568][T15858] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 893.221473][T15858] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 893.256728][T15854] netlink: 'syz.1.3195': attribute type 10 has an invalid length. [ 893.334023][T15854] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.342349][T15854] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.460314][T15854] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.467556][T15854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.475038][T15854] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.482410][T15854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.599248][T15854] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 893.699953][T15675] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.707423][T15675] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.725058][T15675] device bridge_slave_0 entered promiscuous mode [ 893.740539][T15675] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.748101][T15675] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.757207][T15675] device bridge_slave_1 entered promiscuous mode [ 893.952086][T15675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.962647][T15868] netlink: 'syz.0.3203': attribute type 3 has an invalid length. [ 894.023691][T15868] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3203'. [ 894.066074][T15675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.088761][T15871] netlink: 'syz.5.3213': attribute type 11 has an invalid length. [ 894.098973][T15871] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3213'. [ 894.355357][T15675] team0: Port device team_slave_0 added [ 894.675200][ T4352] bond0: (slave wlan1): Releasing backup interface [ 894.955122][T15877] device syzkaller0 entered promiscuous mode [ 894.968881][T15675] team0: Port device team_slave_1 added [ 894.994276][T15886] netlink: 'syz.5.3206': attribute type 10 has an invalid length. [ 895.132320][T15886] device hsr_slave_0 left promiscuous mode [ 895.249430][T15888] netlink: 'syz.0.3207': attribute type 19 has an invalid length. [ 898.343669][T15910] netlink: 'syz.2.3209': attribute type 10 has an invalid length. [ 898.467793][T15675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.539846][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.633963][T15675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.719933][ T4352] device hsr_slave_0 left promiscuous mode [ 898.739364][ T4352] device hsr_slave_1 left promiscuous mode [ 898.746917][ T4352] bridge0: port 3(team0) entered disabled state [ 898.756924][ T4352] device bridge_slave_1 left promiscuous mode [ 898.763378][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.774377][ T4352] device bridge_slave_0 left promiscuous mode [ 898.780793][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.874086][ T4352] device veth1_vlan left promiscuous mode [ 898.890464][ T4352] device veth0_vlan left promiscuous mode [ 899.118175][T15933] netlink: 'syz.1.3218': attribute type 3 has an invalid length. [ 899.148757][T15933] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3218'. [ 899.507729][T15920] delete_channel: no stack [ 899.890845][T15930] delete_channel: no stack [ 899.954268][ T4352] device team_slave_1 left promiscuous mode [ 899.966660][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 900.051570][ T4352] device team_slave_0 left promiscuous mode [ 900.067081][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 900.147700][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.236130][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.513502][T15937] delete_channel: no stack [ 900.798578][ T4352] bond0 (unregistering): Released all slaves [ 900.876816][T15675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.883997][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.910301][T15675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.062056][T15675] device hsr_slave_0 entered promiscuous mode [ 901.110522][T15675] device hsr_slave_1 entered promiscuous mode [ 901.122813][T15675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 901.147814][T15675] Cannot create hsr debugfs directory [ 902.050912][T15966] netlink: 'syz.2.3226': attribute type 19 has an invalid length. [ 902.123894][T15959] netlink: 'syz.1.3225': attribute type 10 has an invalid length. [ 902.319307][T15959] batman_adv: batadv0: Adding interface: netdevsim0 [ 902.343135][T15959] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.436517][T15959] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 902.615567][T15982] netlink: 'syz.0.3231': attribute type 3 has an invalid length. [ 902.823464][T15989] sctp: [Deprecated]: syz.5.3232 (pid 15989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 902.823464][T15989] Use struct sctp_sack_info instead [ 903.064586][T15983] delete_channel: no stack [ 903.283491][T15995] delete_channel: no stack [ 903.504897][T15675] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 903.552791][T15675] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 903.586397][T15675] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 903.650624][T15675] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 904.171327][T16024] netlink: 'syz.1.3243': attribute type 10 has an invalid length. [ 904.341956][T15675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.530958][T15675] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.539184][T16029] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3255'. [ 904.574967][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 904.594185][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 904.644457][T16029] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3255'. [ 904.684357][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 904.714847][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 904.772518][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.780220][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.821417][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 904.840610][T16035] sctp: [Deprecated]: syz.1.3247 (pid 16035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 904.840610][T16035] Use struct sctp_sack_info instead [ 904.900644][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 904.951336][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.958976][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.984858][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 905.002388][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 905.026536][T16030] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3255'. [ 905.050939][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 905.078725][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 905.117074][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 905.157906][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 905.200916][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 905.213097][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 905.289286][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 905.315378][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 905.353661][T16048] netlink: 'syz.5.3248': attribute type 3 has an invalid length. [ 905.374892][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 905.402031][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 905.494882][T15675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 905.865179][T16057] netlink: 'syz.1.3251': attribute type 28 has an invalid length. [ 905.977298][T16065] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3253'. [ 906.597889][T16082] netlink: 'syz.1.3257': attribute type 39 has an invalid length. [ 906.851481][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 906.859317][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 906.913040][T15675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.407314][T16107] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 907.585743][T16107] netlink: 'syz.5.3266': attribute type 10 has an invalid length. [ 908.161833][T16123] netlink: 'syz.1.3271': attribute type 10 has an invalid length. [ 908.669548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 908.714382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 908.826412][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 908.858358][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 908.942104][T15675] device veth0_vlan entered promiscuous mode [ 908.988332][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 909.006722][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 909.048366][T15675] device veth1_vlan entered promiscuous mode [ 909.205029][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 909.226797][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 909.298395][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 909.335984][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 909.438955][T15675] device veth0_macvtap entered promiscuous mode [ 909.494619][T15675] device veth1_macvtap entered promiscuous mode [ 909.550744][T16148] netlink: 'syz.1.3276': attribute type 10 has an invalid length. [ 909.612241][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.701727][T16149] netlink: 'syz.1.3276': attribute type 2 has an invalid length. [ 909.720027][T16149] netlink: 'syz.1.3276': attribute type 1 has an invalid length. [ 909.727178][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.746045][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.759891][T16149] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3276'. [ 909.779838][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.808070][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.843038][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.872743][T15675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.889438][T16148] netlink: 'syz.1.3276': attribute type 15 has an invalid length. [ 909.903476][T16148] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3276'. [ 909.933122][T16145] netlink: 'syz.5.3275': attribute type 28 has an invalid length. [ 909.981569][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 910.016918][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 910.043974][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 910.076412][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 910.196681][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.282107][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.327310][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.348406][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.389523][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.421723][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.445588][T15675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.464315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 910.474346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 910.491818][T15675] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.501609][T15675] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.530142][T15675] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.538983][T15675] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.725020][T16169] netlink: 'syz.0.3289': attribute type 10 has an invalid length. [ 910.988353][T16171] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3280'. [ 911.024084][T16169] device hsr_slave_0 left promiscuous mode [ 911.224041][T16181] netlink: 'syz.5.3282': attribute type 39 has an invalid length. [ 911.994359][T16178] delete_channel: no stack [ 912.211333][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.251615][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.400663][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 912.470619][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.495436][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.554015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 912.838172][T16202] netlink: 'syz.5.3285': attribute type 10 has an invalid length. [ 913.490858][T16202] device dummy0 entered promiscuous mode [ 913.497444][T16202] team0: Port device dummy0 added [ 913.560142][T16215] netlink: 'syz.2.3286': attribute type 10 has an invalid length. [ 913.811247][T16224] netlink: 'syz.4.3291': attribute type 25 has an invalid length. [ 913.942425][T16226] device team_slave_0 left promiscuous mode [ 914.068320][T16226] team0: Port device team_slave_0 removed [ 914.091820][T16226] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 914.350219][T16233] delete_channel: no stack [ 914.547616][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 914.558502][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 914.570215][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 914.602144][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 914.613228][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 914.621426][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 914.925521][T16245] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.3298'. [ 915.033898][T16243] delete_channel: no stack [ 915.059636][T16250] validate_nla: 1 callbacks suppressed [ 915.092024][T16250] netlink: 'syz.2.3297': attribute type 39 has an invalid length. [ 915.645898][ T4356] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.209545][ T4356] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.416217][T16279] netlink: 'syz.1.3305': attribute type 25 has an invalid length. [ 916.514453][ T4356] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.663565][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 916.777061][ T4356] device netdevsim0 left promiscuous mode [ 916.905047][ T4356] team0: Port device netdevsim0 removed [ 916.976222][ T4356] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.088543][T16287] netlink: 'syz.1.3307': attribute type 10 has an invalid length. [ 917.417304][T16287] team0: Port device dummy0 added [ 917.434022][T16296] netlink: 'syz.4.3310': attribute type 10 has an invalid length. [ 917.653154][T16296] device hsr_slave_0 left promiscuous mode [ 917.728261][T16239] chnl_net:caif_netlink_parms(): no params data found [ 917.991741][T16300] delete_channel: no stack [ 918.441474][T16299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3311'. [ 918.467680][T16313] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.3314'. [ 918.679065][T16299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3311'. [ 918.740428][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 918.893719][T16239] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.901971][T16239] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.911047][T16239] device bridge_slave_0 entered promiscuous mode [ 918.924609][T16318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 918.978967][T16310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3311'. [ 919.011700][T16239] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.039337][T16239] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.058109][T16239] device bridge_slave_1 entered promiscuous mode [ 919.516057][T16239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.566170][T16239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.820484][T15359] Bluetooth: hci2: command 0x040f tx timeout [ 920.962302][T16239] team0: Port device team_slave_0 added [ 921.037143][T16239] team0: Port device team_slave_1 added [ 921.070188][T16350] delete_channel: no stack [ 921.250791][T16358] netlink: 'syz.5.3327': attribute type 10 has an invalid length. [ 921.420567][T16239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.428079][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.596965][T16367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3328'. [ 921.648405][T16239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.900313][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 924.368699][T16367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3328'. [ 924.395851][T16239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.417213][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.451997][T16239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.964658][ T4356] bond0: (slave wlan1): Releasing backup interface [ 925.133900][T16239] device hsr_slave_0 entered promiscuous mode [ 925.148731][T16239] device hsr_slave_1 entered promiscuous mode [ 925.176171][T16239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 925.221301][T16239] Cannot create hsr debugfs directory [ 925.227352][T16392] netlink: 'syz.1.3333': attribute type 39 has an invalid length. [ 925.696836][T16402] delete_channel: no stack [ 925.984639][T16410] netlink: 'syz.2.3339': attribute type 10 has an invalid length. [ 926.155687][ T4356] device hsr_slave_1 left promiscuous mode [ 926.205220][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.265362][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.336730][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.354486][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.381104][ T4356] bridge0: port 3(team0) entered disabled state [ 926.395024][ T4356] device bridge_slave_1 left promiscuous mode [ 926.415722][ T4356] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.467046][ T4356] device bridge_slave_0 left promiscuous mode [ 926.504317][ T4356] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.671512][ T4356] device veth1_macvtap left promiscuous mode [ 926.679426][ T4356] device veth0_macvtap left promiscuous mode [ 926.701556][ T4356] device veth1_vlan left promiscuous mode [ 926.725741][ T4356] device veth0_vlan left promiscuous mode [ 927.034917][T16440] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3343'. [ 927.770951][ T4356] device team_slave_1 left promiscuous mode [ 927.800265][ T4356] team0 (unregistering): Port device team_slave_1 removed [ 927.892209][ T4356] device team_slave_0 left promiscuous mode [ 927.899632][ T4356] team0 (unregistering): Port device team_slave_0 removed [ 927.955822][ T4356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 928.015694][ T4356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.576037][ T4356] bond0 (unregistering): Released all slaves [ 928.688037][T16440] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3343'. [ 929.132559][T16450] device syzkaller0 entered promiscuous mode [ 930.078410][T16482] netlink: 'syz.5.3354': attribute type 7 has an invalid length. [ 930.091902][T16482] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3354'. [ 930.278914][T16460] delete_channel: no stack [ 932.190036][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.196746][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.316155][T16463] netlink: 'syz.1.3352': attribute type 10 has an invalid length. [ 932.913976][T16502] netlink: 'syz.1.3359': attribute type 10 has an invalid length. [ 932.935599][T16502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3359'. [ 933.430899][T16239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 933.500783][T16239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 933.544463][T16239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 933.596412][T16239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 933.868776][T16531] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.3367'. [ 933.950052][T16530] device wlan0 entered promiscuous mode [ 934.044401][T16239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.236555][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 934.296352][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 934.498175][T16239] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.683872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 934.702771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 934.715285][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.722512][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.761527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 934.802959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 934.845868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 934.885214][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.892547][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.924390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 934.944218][T16537] delete_channel: no stack [ 934.992806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 935.119128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 935.234523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 935.330983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 935.430330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 935.530350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 935.608729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 935.660425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 935.726447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 935.783214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 935.833296][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 935.893027][T16556] delete_channel: no stack [ 937.056799][T16593] device wlan0 entered promiscuous mode [ 937.230739][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 937.252160][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 937.304329][T16239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.472843][T16610] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3382'. [ 937.550131][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 937.564844][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 937.755665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 937.783528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 937.909201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 937.942317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 938.037103][T16613] device syzkaller0 entered promiscuous mode [ 938.058149][T16239] device veth0_vlan entered promiscuous mode [ 938.084178][T16239] device veth1_vlan entered promiscuous mode [ 940.725677][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 940.736279][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 940.755857][T16239] device veth0_macvtap entered promiscuous mode [ 940.783586][T16239] device veth1_macvtap entered promiscuous mode [ 940.854517][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.898791][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.922065][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.940758][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.959438][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.977645][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.009049][T16239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.033981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 941.082400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 941.098646][T16634] delete_channel: no stack [ 941.119332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 941.166926][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.209317][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.251432][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.293573][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.330433][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.365358][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.532536][T16239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.617154][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 941.653129][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 941.786896][T16239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.839212][T16239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.964520][T16239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.015025][T16239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.305095][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.339915][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.394176][T12310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 942.465637][ T4731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.513099][ T4731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.549445][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 943.083306][T16675] device syzkaller0 entered promiscuous mode [ 944.028426][T16707] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3403'. [ 944.472737][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 944.491581][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 944.550117][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 944.569700][T16698] delete_channel: no stack [ 944.575824][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 944.591264][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 944.599881][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 946.663106][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 947.427374][T12310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.825348][T12310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.090141][T12310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.385187][T12310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.740074][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 949.361671][T16711] chnl_net:caif_netlink_parms(): no params data found [ 950.026513][T16711] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.044654][T16711] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.070305][T16711] device bridge_slave_0 entered promiscuous mode [ 950.249044][T16711] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.277211][T16711] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.306065][T16711] device bridge_slave_1 entered promiscuous mode [ 950.468400][T16711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.647966][T16711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.820413][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 950.914720][T16711] team0: Port device team_slave_0 added [ 950.964342][T16820] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3435'. [ 951.294965][T16820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.318656][T16820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.338021][T16820] bond0 (unregistering): Released all slaves [ 951.362460][T16711] team0: Port device team_slave_1 added [ 951.388633][T16826] netlink: 'syz.4.3438': attribute type 10 has an invalid length. [ 951.498481][T16711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.516799][T16711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.566748][T16711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.693081][T12310] device wlan1 left promiscuous mode [ 951.713563][T12310] team0: Port device wlan1 removed [ 951.754713][T16711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.769743][T16711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.829864][T16711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.822423][T16711] device hsr_slave_0 entered promiscuous mode [ 952.840251][T16711] device hsr_slave_1 entered promiscuous mode [ 952.855676][T16711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 952.867429][T16711] Cannot create hsr debugfs directory [ 952.906067][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 952.938414][T12310] device hsr_slave_1 left promiscuous mode [ 952.956743][T12310] bridge0: port 3(team0) entered disabled state [ 953.044911][T12310] device bridge_slave_1 left promiscuous mode [ 953.068201][T12310] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.097521][T12310] device bridge_slave_0 left promiscuous mode [ 953.119419][T12310] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.205147][T12310] device veth1_vlan left promiscuous mode [ 953.218860][T12310] device veth0_vlan left promiscuous mode [ 954.016394][T12310] device team_slave_1 left promiscuous mode [ 954.027648][T12310] team0 (unregistering): Port device team_slave_1 removed [ 954.085264][T12310] device team_slave_0 left promiscuous mode [ 954.093070][T12310] team0 (unregistering): Port device team_slave_0 removed [ 954.156676][T12310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.218056][T12310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.660648][T16881] delete_channel: no stack [ 954.833729][T12310] bond0 (unregistering): Released all slaves [ 954.934065][T16866] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3458'. [ 955.129826][T16866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.146791][T16866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.166513][T16866] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 955.176045][T16866] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.183632][T16866] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.199931][T16866] bond0 (unregistering): Released all slaves [ 955.222985][T16868] netlink: 'syz.5.3450': attribute type 10 has an invalid length. [ 955.237810][T16870] netlink: 'syz.5.3450': attribute type 10 has an invalid length. [ 955.247049][T16870] device dummy0 left promiscuous mode [ 955.254058][T16870] team0: Port device dummy0 removed [ 955.264092][T16870] device dummy0 entered promiscuous mode [ 955.271616][T16870] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 955.284701][T16872] netlink: 'syz.4.3451': attribute type 10 has an invalid length. [ 956.247143][T16911] netlink: 'syz.1.3464': attribute type 10 has an invalid length. [ 956.267118][T16911] batman_adv: batadv0: Removing interface: netdevsim0 [ 956.428414][T16916] netlink: 'syz.0.3465': attribute type 10 has an invalid length. [ 956.509224][T16916] team0: Port device dummy0 added [ 956.550735][T16924] netlink: 'syz.1.3468': attribute type 10 has an invalid length. [ 956.554616][T16919] delete_channel: no stack [ 956.622228][T16928] netlink: 'syz.1.3468': attribute type 10 has an invalid length. [ 956.671692][T16928] team0: Port device dummy0 removed [ 957.092582][T16711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 957.146155][T16711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 957.179243][T16945] netlink: 'syz.4.3474': attribute type 10 has an invalid length. [ 957.225191][T16711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 957.268759][T16711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 957.650785][T16711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.692944][T16963] netlink: 'syz.5.3479': attribute type 10 has an invalid length. [ 957.762820][T16963] bond0: (slave dummy0): Releasing backup interface [ 957.784169][T16963] device dummy0 left promiscuous mode [ 957.822286][T16963] device dummy0 entered promiscuous mode [ 957.828899][T16963] team0: Port device dummy0 added [ 957.849312][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 957.881069][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 957.904189][T16711] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.988325][T16967] delete_channel: no stack [ 958.013751][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 958.024983][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 958.048158][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.055410][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.124443][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 958.141960][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 958.157752][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.165274][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.176428][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 958.210418][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 958.283562][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 958.311395][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 958.364370][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 958.377380][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 958.410232][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 958.426183][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 958.455162][T16711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 958.475882][T16711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.510335][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 958.535373][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 958.554600][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 958.579501][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 958.637013][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 958.847624][T16997] IPv6: Can't replace route, no match found [ 958.932774][T16996] device wg2 entered promiscuous mode [ 958.944369][T17002] device wg2 entered promiscuous mode [ 959.592647][T17025] IPv6: Can't replace route, no match found [ 959.656883][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 959.695777][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 959.738309][T16711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.809889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 959.829496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 959.917239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 959.932638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 959.979054][T16711] device veth0_vlan entered promiscuous mode [ 960.001573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 960.028228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 960.068131][T17040] netlink: 'syz.1.3507': attribute type 10 has an invalid length. [ 960.095823][T16711] device veth1_vlan entered promiscuous mode [ 960.174504][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 960.194244][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 960.238110][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 960.268269][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 960.314359][T16711] device veth0_macvtap entered promiscuous mode [ 960.382049][T16711] device veth1_macvtap entered promiscuous mode [ 960.481460][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.520148][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.540422][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.569739][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.589745][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.641237][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.709558][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.775507][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.850542][T16711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.862388][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 960.905740][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 960.914944][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 960.924964][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 960.967323][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.999025][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.011655][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.043258][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.061986][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.083507][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.104196][T16711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.126616][T16711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.143417][T16711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.162160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 961.191156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 961.214646][T16711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.242224][T16711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.274744][T16711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.292231][T16711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.401511][T17079] netlink: 'syz.1.3522': attribute type 10 has an invalid length. [ 961.604340][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.647810][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.701450][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 961.734918][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.745012][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.822210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 962.694804][T17116] netlink: 'syz.4.3536': attribute type 10 has an invalid length. [ 963.711477][T15359] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 963.740032][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 963.750343][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 963.758776][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 963.793222][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 963.801884][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 963.940536][ T1188] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.025072][T17148] device syzkaller0 entered promiscuous mode [ 964.250413][ T1188] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.662415][ T1188] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.759339][ T1188] batman_adv: batadv0: Removing interface: netdevsim0 [ 964.843354][ T1188] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.513696][T17140] chnl_net:caif_netlink_parms(): no params data found [ 965.860050][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 966.616879][T17140] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.629256][T17140] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.654161][T17140] device bridge_slave_0 entered promiscuous mode [ 966.687264][T17210] device pim6reg1 entered promiscuous mode [ 966.770977][T17140] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.785783][T17140] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.809302][T17140] device bridge_slave_1 entered promiscuous mode [ 967.078743][T17140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.192475][T17140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.325655][T17140] team0: Port device team_slave_0 added [ 967.361362][T17140] team0: Port device team_slave_1 added [ 967.666124][T17140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.694895][T17140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.769101][T17140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.805683][T17249] netlink: 'syz.0.3576': attribute type 10 has an invalid length. [ 967.926208][T17249] device hsr_slave_0 left promiscuous mode [ 967.940135][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 968.017177][T17140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.043672][T17140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.082817][T17140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.449257][ T1188] device hsr_slave_1 left promiscuous mode [ 968.466452][ T1188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.480805][ T1188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.532114][ T1188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.565368][ T1188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.588502][ T1188] bridge0: port 3(team0) entered disabled state [ 968.611038][ T1188] device bridge_slave_1 left promiscuous mode [ 968.632934][ T1188] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.647840][ T1188] device bridge_slave_0 left promiscuous mode [ 968.665016][ T1188] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.750311][ T1188] device veth1_macvtap left promiscuous mode [ 968.756673][ T1188] device veth0_macvtap left promiscuous mode [ 968.780541][ T1188] device veth1_vlan left promiscuous mode [ 968.792145][ T1188] device veth0_vlan left promiscuous mode [ 968.807950][ T1188] device bridge0 left promiscuous mode [ 969.510213][ T1188] device team_slave_1 left promiscuous mode [ 969.524675][ T1188] team0 (unregistering): Port device team_slave_1 removed [ 969.637836][ T1188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.696931][ T1188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.994019][ T1188] device dummy0 left promiscuous mode [ 970.002839][ T1188] team0 (unregistering): Port device dummy0 removed [ 970.024859][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 970.377968][ T1188] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 970.387389][ T1188] bond0 (unregistering): Released all slaves [ 970.503517][T17291] device sit0 entered promiscuous mode [ 970.512980][T17295] netlink: 'syz.1.3591': attribute type 10 has an invalid length. [ 970.544996][T17140] device hsr_slave_0 entered promiscuous mode [ 970.600334][T17140] device hsr_slave_1 entered promiscuous mode [ 972.099994][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 972.206239][T17331] device bridge_slave_1 left promiscuous mode [ 972.242692][T17331] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.283916][T17331] device bridge_slave_0 left promiscuous mode [ 972.300415][T17331] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.439387][T17333] netlink: 'syz.4.3603': attribute type 10 has an invalid length. [ 972.613890][T17140] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 972.673451][T17140] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 972.717467][T17140] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 972.754476][T17140] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 973.618080][T17373] netlink: 'syz.2.3618': attribute type 10 has an invalid length. [ 973.793872][T17373] device hsr_slave_0 left promiscuous mode [ 973.923410][T17140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.944978][T17384] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.952670][T17384] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.977849][T17387] device bridge_slave_1 left promiscuous mode [ 974.005370][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.072027][T17387] device bridge_slave_0 left promiscuous mode [ 974.113070][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.295250][T12310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 974.315545][T12310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 974.366753][T17140] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.491886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 974.544265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 974.566091][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.573903][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.602502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 974.611946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 974.631089][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.638884][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.710170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 974.743395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 974.802006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 974.821719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 974.837049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 974.847450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 974.877304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 974.891973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 974.908462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 974.954696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 975.005962][T12310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 975.034101][T12310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 975.073768][T17140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 975.890528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 975.898279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 975.936263][T17140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.331983][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 977.346980][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 977.385400][T17140] device veth0_vlan entered promiscuous mode [ 977.408495][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 977.443826][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 977.465556][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 977.501282][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 977.547185][T17140] device veth1_vlan entered promiscuous mode [ 977.750708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 977.761908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 977.811944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 977.851756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 977.878050][T17140] device veth0_macvtap entered promiscuous mode [ 977.916997][T17140] device veth1_macvtap entered promiscuous mode [ 977.970453][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.030390][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.067750][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.118243][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.148686][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.206042][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.272073][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.321086][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.403224][T17140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.422770][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 978.441633][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 978.471597][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 978.496941][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 978.525895][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.559816][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.579866][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.607045][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.627708][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.638895][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.651011][T17140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.663812][T17140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.693432][T17140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.785282][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 978.808010][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 978.867046][T17140] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.897249][T17140] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.918189][T17140] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.939867][T17140] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.197673][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.243457][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.287356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 979.336829][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.356002][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.424155][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 982.759593][T17642] device syzkaller0 entered promiscuous mode [ 990.446121][T17685] netlink: 'syz.1.3742': attribute type 10 has an invalid length. [ 990.542057][T17687] Ÿë: port 1(erspan0) entered blocking state [ 990.559844][T17687] Ÿë: port 1(erspan0) entered disabled state [ 990.567402][T17687] device erspan0 entered promiscuous mode [ 990.580341][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 990.603259][T17687] Ÿë: port 1(erspan0) entered blocking state [ 990.609984][T17687] Ÿë: port 1(erspan0) entered forwarding state [ 991.777112][T17743] device syzkaller0 entered promiscuous mode [ 993.637837][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.644316][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.853269][T17756] Ÿë: port 1(erspan0) entered blocking state [ 995.861054][T17756] Ÿë: port 1(erspan0) entered disabled state [ 995.872028][T17756] device erspan0 entered promiscuous mode [ 995.881016][T17756] Ÿë: port 1(erspan0) entered blocking state [ 995.887327][T17756] Ÿë: port 1(erspan0) entered forwarding state [ 998.974430][T17817] device syzkaller0 entered promiscuous mode [ 999.428504][T17843] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1005.327926][T17897] device syzkaller0 entered promiscuous mode [ 1006.032207][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 1009.232496][T17924] [ 1009.234896][T17924] ============================================ [ 1009.241073][T17924] WARNING: possible recursive locking detected [ 1009.247330][T17924] 6.1.147-syzkaller #0 Not tainted [ 1009.252461][T17924] -------------------------------------------- [ 1009.258707][T17924] syz.1.3815/17924 is trying to acquire lock: [ 1009.264818][T17924] ffff88807ba9fa38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 1009.273942][T17924] [ 1009.273942][T17924] but task is already holding lock: [ 1009.281338][T17924] ffff88805a27ba38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc4/0xe90 [ 1009.290433][T17924] [ 1009.290433][T17924] other info that might help us debug this: [ 1009.298595][T17924] Possible unsafe locking scenario: [ 1009.298595][T17924] [ 1009.306225][T17924] CPU0 [ 1009.309506][T17924] ---- [ 1009.312801][T17924] lock(&trie->lock); [ 1009.316970][T17924] lock(&trie->lock); [ 1009.321129][T17924] [ 1009.321129][T17924] *** DEADLOCK *** [ 1009.321129][T17924] [ 1009.329364][T17924] May be due to missing lock nesting notation [ 1009.329364][T17924] [ 1009.337709][T17924] 3 locks held by syz.1.3815/17924: [ 1009.343087][T17924] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x375/0x670 [ 1009.353490][T17924] #1: ffff88805a27ba38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc4/0xe90 [ 1009.363036][T17924] #2: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xf9/0x420 [ 1009.372528][T17924] [ 1009.372528][T17924] stack backtrace: [ 1009.378747][T17924] CPU: 1 PID: 17924 Comm: syz.1.3815 Not tainted 6.1.147-syzkaller #0 [ 1009.387699][T17924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1009.397802][T17924] Call Trace: [ 1009.401198][T17924] [ 1009.404148][T17924] dump_stack_lvl+0x168/0x22e [ 1009.408848][T17924] ? show_regs_print_info+0x12/0x12 [ 1009.414501][T17924] ? load_image+0x3b0/0x3b0 [ 1009.419027][T17924] __lock_acquire+0x122f/0x7c50 [ 1009.424605][T17924] ? mark_lock+0x94/0x320 [ 1009.429040][T17924] ? verify_lock_unused+0x140/0x140 [ 1009.434560][T17924] ? __lock_acquire+0x12e5/0x7c50 [ 1009.439816][T17924] ? mark_lock+0x94/0x320 [ 1009.444754][T17924] lock_acquire+0x1b4/0x490 [ 1009.449326][T17924] ? trie_delete_elem+0x90/0x690 [ 1009.454309][T17924] ? propagate_protected_usage+0xc4/0x210 [ 1009.460080][T17924] ? read_lock_is_recursive+0x10/0x10 [ 1009.465732][T17924] ? verify_lock_unused+0x140/0x140 [ 1009.471324][T17924] ? page_counter_try_charge+0x28f/0x2b0 [ 1009.477075][T17924] _raw_spin_lock_irqsave+0xa4/0xf0 [ 1009.482318][T17924] ? trie_delete_elem+0x90/0x690 [ 1009.487358][T17924] ? _raw_spin_lock+0x40/0x40 [ 1009.492233][T17924] trie_delete_elem+0x90/0x690 [ 1009.497014][T17924] ? __cant_sleep+0x210/0x210 [ 1009.501804][T17924] bpf_prog_8c8ab8634bca3061+0x3a/0x44 [ 1009.507479][T17924] bpf_trace_run4+0x1f5/0x420 [ 1009.512612][T17924] ? bpf_trace_run4+0xf9/0x420 [ 1009.517578][T17924] ? bpf_trace_run3+0x400/0x400 [ 1009.522660][T17924] ? percpu_ref_put+0x19/0x180 [ 1009.527488][T17924] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 1009.533260][T17924] __alloc_pages+0x49c/0x4e0 [ 1009.537920][T17924] ? zone_statistics+0x170/0x170 [ 1009.543130][T17924] ? bpf_map_get_memcg+0x4e/0x4e0 [ 1009.548471][T17924] ? __lock_acquire+0x7c50/0x7c50 [ 1009.553547][T17924] __kmalloc_large_node+0x8c/0x1e0 [ 1009.558702][T17924] ? bpf_map_kmalloc_node+0xb8/0x1a0 [ 1009.564872][T17924] __kmalloc_node+0x10e/0x240 [ 1009.570429][T17924] bpf_map_kmalloc_node+0xb8/0x1a0 [ 1009.575639][T17924] trie_update_elem+0x160/0xe90 [ 1009.581144][T17924] ? exc_page_fault+0x88/0x100 [ 1009.585949][T17924] ? read_lock_is_recursive+0x10/0x10 [ 1009.593749][T17924] bpf_map_update_value+0x59e/0x670 [ 1009.599656][T17924] generic_map_update_batch+0x569/0x850 [ 1009.605249][T17924] ? rcu_read_unlock+0xa0/0xa0 [ 1009.610398][T17924] ? __fdget+0x17c/0x200 [ 1009.615444][T17924] ? rcu_read_unlock+0xa0/0xa0 [ 1009.620378][T17924] bpf_map_do_batch+0x466/0x600 [ 1009.625545][T17924] __sys_bpf+0x65f/0x6d0 [ 1009.629897][T17924] ? bpf_link_show_fdinfo+0x340/0x340 [ 1009.635554][T17924] ? lock_chain_count+0x20/0x20 [ 1009.640755][T17924] __x64_sys_bpf+0x78/0x90 [ 1009.645562][T17924] do_syscall_64+0x4c/0xa0 [ 1009.650318][T17924] ? clear_bhb_loop+0x60/0xb0 [ 1009.655349][T17924] ? clear_bhb_loop+0x60/0xb0 [ 1009.660702][T17924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1009.666760][T17924] RIP: 0033:0x7f1739f8eb69 [ 1009.671501][T17924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.691882][T17924] RSP: 002b:00007f1739dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1009.700522][T17924] RAX: ffffffffffffffda RBX: 00007f173a1b5fa0 RCX: 00007f1739f8eb69 [ 1009.709089][T17924] RDX: 0000000000000038 RSI: 0000200000000680 RDI: 000000000000001a [ 1009.717196][T17924] RBP: 00007f173a011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1009.725361][T17924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.733975][T17924] R13: 0000000000000000 R14: 00007f173a1b5fa0 R15: 00007fffe4c88118 [ 1009.742407][T17924]