last executing test programs: 906.411305ms ago: executing program 0 (id=1): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r9}, 0x63) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r10, &(0x7f0000000300), 0x20000000}, 0x20) ioctl$TUNSETOFFLOAD(r3, 0x40047459, 0x20000006) r11 = syz_clone(0x40000300, &(0x7f0000000480)="b9c89492029d8cb22b9d43f520c729499ad14ce55acf8912c4befa4655e19d91", 0x20, &(0x7f00000004c0), &(0x7f0000000580), &(0x7f00000005c0)="5fcc89ca15b28dc54603c50ba79a86bdc8c9d67ec9e55974fedb20e4cac01043c938859686fc8f7acd2433705eeab1915b9da1989e12b0b71d33666530dbcf55348629b3d9902f56012fcaa3be125f547630815adab0a56308fb425909f92f10fccb52915847627925f31c008576d9181a94923c2c33b21a04822b90e161d8060b1d22e0a912c57cc4781d1b8213f26b4ff805025dce98e8e41248993dcb31a91e27898b6376da7086e6a68428c7bea03146abbb3307f35723e9a216f759e8d02549d91d86439ba1dca0e6f8de12899907e4dcebfc72") r12 = getpid() r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r13, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffff00, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r14}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x18, r15}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = getpid() sendmsg$unix(r4, &(0x7f0000000700)={&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000440), 0x0, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @rights={{0x30, 0x1, 0x1, [r4, r13, r6, r2, r5, r1, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r4, r15, r4, r0, r6, r16, r3, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xee01, 0xffffffffffffffff}}}], 0x118, 0x200048d4}, 0x40) 125.077246ms ago: executing program 0 (id=6): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c35000000e8fe55a1190015000600142603600e120900270000000401a80016000a00044044000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x8}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0189436, &(0x7f00000005c0)) recvmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)}], 0x1, &(0x7f00000002c0)=""/216, 0xd8}, 0x40012061) r4 = socket$kcm(0x25, 0x1, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r3, r1}, 0xc) sendmsg$sock(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x34000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150004000200142603600e12080005007a010401a800160020000340ffc60000035c046181d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbacee446fa8017cb643a5ee40800", 0x69}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'team_slave_0\x00', @local}) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, 0x0, 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000600030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000040000000000000001010000bf91000000000000b70200000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.033782ms ago: executing program 2 (id=3): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080c4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 4 (id=5): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r9}, 0x63) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r10, &(0x7f0000000300), 0x20000000}, 0x20) ioctl$TUNSETOFFLOAD(r3, 0x40047459, 0x20000006) r11 = syz_clone(0x40000300, &(0x7f0000000480)="b9c89492029d8cb22b9d43f520c729499ad14ce55acf8912c4befa4655e19d91", 0x20, &(0x7f00000004c0), &(0x7f0000000580), &(0x7f00000005c0)="5fcc89ca15b28dc54603c50ba79a86bdc8c9d67ec9e55974fedb20e4cac01043c938859686fc8f7acd2433705eeab1915b9da1989e12b0b71d33666530dbcf55348629b3d9902f56012fcaa3be125f547630815adab0a56308fb425909f92f10fccb52915847627925f31c008576d9181a94923c2c33b21a04822b90e161d8060b1d22e0a912c57cc4781d1b8213f26b4ff805025dce98e8e41248993dcb31a91e27898b6376da7086e6a68428c7bea03146abbb3307f35723e9a216f759e8d02549d91d86439ba1dca0e6f8de12899907e4dcebfc72") r12 = getpid() r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r13, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffff00, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r14}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x18, r15}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000700)={&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000440), 0x0, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @rights={{0x30, 0x1, 0x1, [r4, r13, r6, r2, r5, r1, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r4, r15, r4, r0, r6, r16, r3, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x118, 0x200048d4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8991, &(0x7f0000000140)={'veth1\x00', @local}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 56.787525][ T5833] cgroup: Unknown subsys name 'net' [ 56.887965][ T5833] cgroup: Unknown subsys name 'cpuset' [ 56.896271][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.151472][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.147131][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.174580][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.182886][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.201870][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.210097][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.211190][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.219210][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.225888][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.232757][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.240665][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.246585][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.261350][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.268770][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.269086][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.276684][ T5859] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.302709][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.305184][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.309924][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.325913][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.334510][ T5153] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.335602][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.344305][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.356666][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.359725][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.366013][ T5863] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.372759][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.381634][ T5863] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.385713][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.399152][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.400005][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.795622][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 60.856250][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 60.937280][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.944644][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.952047][ T5849] bridge_slave_0: entered allmulticast mode [ 60.960030][ T5849] bridge_slave_0: entered promiscuous mode [ 60.969507][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.976889][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.984039][ T5849] bridge_slave_1: entered allmulticast mode [ 60.990871][ T5849] bridge_slave_1: entered promiscuous mode [ 61.040287][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 61.056982][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 61.091921][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.107153][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.117027][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.124306][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.131462][ T5843] bridge_slave_0: entered allmulticast mode [ 61.138430][ T5843] bridge_slave_0: entered promiscuous mode [ 61.146130][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.153222][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.161235][ T5843] bridge_slave_1: entered allmulticast mode [ 61.168616][ T5843] bridge_slave_1: entered promiscuous mode [ 61.256205][ T5849] team0: Port device team_slave_0 added [ 61.263949][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.276371][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.320065][ T5849] team0: Port device team_slave_1 added [ 61.360736][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.367962][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.375619][ T5858] bridge_slave_0: entered allmulticast mode [ 61.382202][ T5858] bridge_slave_0: entered promiscuous mode [ 61.411370][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 61.426031][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.433140][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.440597][ T5858] bridge_slave_1: entered allmulticast mode [ 61.447597][ T5858] bridge_slave_1: entered promiscuous mode [ 61.462103][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.469225][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.495213][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.508923][ T5843] team0: Port device team_slave_0 added [ 61.517677][ T5843] team0: Port device team_slave_1 added [ 61.543196][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.550871][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.558306][ T5850] bridge_slave_0: entered allmulticast mode [ 61.565986][ T5850] bridge_slave_0: entered promiscuous mode [ 61.573070][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.580120][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.606349][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.635240][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.644716][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.651895][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.659273][ T5850] bridge_slave_1: entered allmulticast mode [ 61.666380][ T5850] bridge_slave_1: entered promiscuous mode [ 61.690645][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.728947][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.745879][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.752873][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.784451][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.843555][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.863840][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.870976][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.897053][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.928249][ T5858] team0: Port device team_slave_0 added [ 61.952338][ T5850] team0: Port device team_slave_0 added [ 61.961505][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.969975][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.977614][ T5846] bridge_slave_0: entered allmulticast mode [ 61.984955][ T5846] bridge_slave_0: entered promiscuous mode [ 61.993080][ T5858] team0: Port device team_slave_1 added [ 62.011121][ T5849] hsr_slave_0: entered promiscuous mode [ 62.018141][ T5849] hsr_slave_1: entered promiscuous mode [ 62.027764][ T5850] team0: Port device team_slave_1 added [ 62.045709][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.052886][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.060558][ T5846] bridge_slave_1: entered allmulticast mode [ 62.067510][ T5846] bridge_slave_1: entered promiscuous mode [ 62.123994][ T5843] hsr_slave_0: entered promiscuous mode [ 62.130732][ T5843] hsr_slave_1: entered promiscuous mode [ 62.137166][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.145490][ T5843] Cannot create hsr debugfs directory [ 62.159705][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.166786][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.193428][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.206983][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.214473][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.240780][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.260291][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.267660][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.294591][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.307136][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.314381][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.340754][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.358085][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.374520][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.435584][ T54] Bluetooth: hci1: command tx timeout [ 62.440162][ T5863] Bluetooth: hci0: command tx timeout [ 62.447127][ T5852] Bluetooth: hci4: command tx timeout [ 62.500074][ T5850] hsr_slave_0: entered promiscuous mode [ 62.505826][ T5863] Bluetooth: hci3: command tx timeout [ 62.506515][ T5852] Bluetooth: hci2: command tx timeout [ 62.512411][ T5850] hsr_slave_1: entered promiscuous mode [ 62.523469][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.531228][ T5850] Cannot create hsr debugfs directory [ 62.552142][ T5846] team0: Port device team_slave_0 added [ 62.563966][ T5858] hsr_slave_0: entered promiscuous mode [ 62.570494][ T5858] hsr_slave_1: entered promiscuous mode [ 62.577063][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.585067][ T5858] Cannot create hsr debugfs directory [ 62.613411][ T5846] team0: Port device team_slave_1 added [ 62.681247][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.688412][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.715590][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.743685][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.752116][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.778553][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.900737][ T5846] hsr_slave_0: entered promiscuous mode [ 62.912324][ T5846] hsr_slave_1: entered promiscuous mode [ 62.919138][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.926936][ T5846] Cannot create hsr debugfs directory [ 62.999835][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.026336][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.039793][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.064639][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.091449][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.124038][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.134884][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.150983][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.223969][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.244720][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.266631][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.276448][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.328070][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.338747][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.349308][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.359206][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.427070][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.439398][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.448548][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.459242][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.523172][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.580206][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.596315][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.616266][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.623508][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.657679][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.664812][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.696930][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.728090][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.757184][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.779017][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.786161][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.807606][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.817543][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.843657][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.850774][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.861303][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.868429][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.888457][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.895598][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.931911][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.939114][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.967301][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.985814][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.992947][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.079674][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.125995][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.133163][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.163185][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.170377][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.197905][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.505907][ T5852] Bluetooth: hci4: command tx timeout [ 64.510820][ T5863] Bluetooth: hci0: command tx timeout [ 64.511323][ T54] Bluetooth: hci1: command tx timeout [ 64.538566][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.568524][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.585857][ T54] Bluetooth: hci3: command tx timeout [ 64.591803][ T5852] Bluetooth: hci2: command tx timeout [ 64.677049][ T5850] veth0_vlan: entered promiscuous mode [ 64.689998][ T5850] veth1_vlan: entered promiscuous mode [ 64.753640][ T5850] veth0_macvtap: entered promiscuous mode [ 64.765503][ T5843] veth0_vlan: entered promiscuous mode [ 64.778581][ T5850] veth1_macvtap: entered promiscuous mode [ 64.798718][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.819747][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.833115][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.846639][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.870844][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.879965][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.889353][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.898386][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.915663][ T5849] veth0_vlan: entered promiscuous mode [ 64.922935][ T5843] veth1_vlan: entered promiscuous mode [ 64.967684][ T5849] veth1_vlan: entered promiscuous mode [ 64.985963][ T5846] veth0_vlan: entered promiscuous mode [ 65.025274][ T5846] veth1_vlan: entered promiscuous mode [ 65.047992][ T5858] veth0_vlan: entered promiscuous mode [ 65.065909][ T5849] veth0_macvtap: entered promiscuous mode [ 65.075660][ T5849] veth1_macvtap: entered promiscuous mode [ 65.121604][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.132739][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.145079][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.165315][ T5858] veth1_vlan: entered promiscuous mode [ 65.188436][ T5843] veth0_macvtap: entered promiscuous mode [ 65.199317][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.211287][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.223036][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.239965][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.241269][ T5843] veth1_macvtap: entered promiscuous mode [ 65.261851][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.263846][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.279277][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.288183][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.297084][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.343911][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.354467][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.377060][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.395300][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.405559][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.416424][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.430424][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.457440][ T5846] veth0_macvtap: entered promiscuous mode [ 65.472001][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.493721][ T5858] veth0_macvtap: entered promiscuous mode [ 65.504324][ T5858] veth1_macvtap: entered promiscuous mode [ 65.521068][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.532251][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.542657][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.555000][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.566344][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.582240][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.593085][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.603532][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.615023][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.625055][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.636452][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.647592][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.657051][ T5846] veth1_macvtap: entered promiscuous mode [ 65.685801][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.699630][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.708553][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.717421][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.743368][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.760213][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.770786][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.781699][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.792593][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.806706][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.818056][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.869267][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.881372][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.893131][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.904775][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.915348][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.926430][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.937009][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.950240][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.962747][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.000274][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.013239][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.024531][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.035880][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.046139][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.056791][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.067231][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.078456][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.090068][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.101279][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.112218][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.121271][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.130942][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.160846][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.169569][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.199267][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.211331][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.220823][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.229852][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.286098][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.305727][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.367404][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.375933][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.428857][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.459457][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.473366][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.488668][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.585309][ T54] Bluetooth: hci0: command tx timeout [ 66.590778][ T54] Bluetooth: hci1: command tx timeout [ 66.596710][ T5852] Bluetooth: hci4: command tx timeout [ 66.664835][ T54] Bluetooth: hci3: command tx timeout [ 66.670564][ T54] Bluetooth: hci2: command tx timeout [ 66.703159][ T5935] netlink: 'syz.0.6': attribute type 39 has an invalid length. [ 66.788469][ T5943] [ 66.790935][ T5943] ============================================ [ 66.797110][ T5943] WARNING: possible recursive locking detected [ 66.803290][ T5943] 6.12.0-rc6-syzkaller-g44d0469f79bd #0 Not tainted [ 66.809891][ T5943] -------------------------------------------- [ 66.816053][ T5943] syz.4.5/5943 is trying to acquire lock: [ 66.821785][ T5943] ffff88802422d200 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 66.830755][ T5943] [ 66.830755][ T5943] but task is already holding lock: [ 66.834550][ T5935] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 66.838205][ T5943] ffff88802933ea00 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 66.854664][ T5943] [ 66.854664][ T5943] other info that might help us debug this: [ 66.862736][ T5943] Possible unsafe locking scenario: [ 66.862736][ T5943] [ 66.870201][ T5943] CPU0 [ 66.873490][ T5943] ---- [ 66.876770][ T5943] lock(&trie->lock); [ 66.880838][ T5943] lock(&trie->lock); [ 66.884903][ T5943] [ 66.884903][ T5943] *** DEADLOCK *** [ 66.884903][ T5943] [ 66.893038][ T5943] May be due to missing lock nesting notation [ 66.893038][ T5943] [ 66.901434][ T5943] 3 locks held by syz.4.5/5943: [ 66.906278][ T5943] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540 [ 66.916215][ T5943] #1: ffff88802933ea00 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 66.925530][ T5943] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 66.934927][ T5943] [ 66.934927][ T5943] stack backtrace: [ 66.940913][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: syz.4.5 Not tainted 6.12.0-rc6-syzkaller-g44d0469f79bd #0 [ 66.950801][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 66.960853][ T5943] Call Trace: [ 66.964130][ T5943] [ 66.967062][ T5943] dump_stack_lvl+0x241/0x360 [ 66.971742][ T5943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.976936][ T5943] ? __pfx__printk+0x10/0x10 [ 66.981519][ T5943] ? lockdep_unlock+0x16a/0x300 [ 66.986383][ T5943] print_deadlock_bug+0x483/0x620 [ 66.991407][ T5943] validate_chain+0x15e2/0x5920 [ 66.996249][ T5943] ? __pfx_validate_chain+0x10/0x10 [ 67.001446][ T5943] ? __pfx_validate_chain+0x10/0x10 [ 67.006637][ T5943] ? __pfx_validate_chain+0x10/0x10 [ 67.011826][ T5943] ? 0xffffffffa0001f98 [ 67.015984][ T5943] ? is_bpf_text_address+0x285/0x2a0 [ 67.021267][ T5943] ? is_bpf_text_address+0x26/0x2a0 [ 67.026461][ T5943] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 67.032609][ T5943] ? kernel_text_address+0xa7/0xe0 [ 67.037717][ T5943] ? __pfx_validate_chain+0x10/0x10 [ 67.042910][ T5943] ? __pfx_validate_chain+0x10/0x10 [ 67.048100][ T5943] ? mark_lock+0x9a/0x360 [ 67.052420][ T5943] __lock_acquire+0x1384/0x2050 [ 67.057271][ T5943] lock_acquire+0x1ed/0x550 [ 67.061772][ T5943] ? trie_delete_elem+0x96/0x6a0 [ 67.066711][ T5943] ? __pfx_lock_acquire+0x10/0x10 [ 67.071730][ T5943] ? __lock_acquire+0x1384/0x2050 [ 67.076758][ T5943] _raw_spin_lock_irqsave+0xd5/0x120 [ 67.082036][ T5943] ? trie_delete_elem+0x96/0x6a0 [ 67.086973][ T5943] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 67.092882][ T5943] ? __pfx_lock_acquire+0x10/0x10 [ 67.097920][ T5943] trie_delete_elem+0x96/0x6a0 [ 67.102692][ T5943] ? __pfx___cant_migrate+0x10/0x10 [ 67.107893][ T5943] ? bpf_trace_run4+0x244/0x590 [ 67.112749][ T5943] bpf_prog_8c8ab8634bca3061+0x43/0x4d [ 67.118297][ T5943] bpf_trace_run4+0x334/0x590 [ 67.122973][ T5943] ? __pfx_bpf_trace_run4+0x10/0x10 [ 67.128169][ T5943] ? percpu_ref_get_many+0x19/0x140 [ 67.133367][ T5943] ? __memcg_kmem_charge_page+0xdb/0x1d0 [ 67.139008][ T5943] __alloc_pages_noprof+0x6dc/0x710 [ 67.144220][ T5943] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 67.149947][ T5943] ? bpf_map_get_memcg+0x4e/0x5c0 [ 67.154978][ T5943] ? do_raw_spin_lock+0x14f/0x370 [ 67.160004][ T5943] ? __pfx_lock_release+0x10/0x10 [ 67.165037][ T5943] ___kmalloc_large_node+0x8b/0x1d0 [ 67.170248][ T5943] __kmalloc_large_node_noprof+0x1a/0x80 [ 67.175888][ T5943] __kmalloc_node_noprof+0x2d2/0x440 [ 67.181173][ T5943] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 67.186468][ T5943] bpf_map_kmalloc_node+0xd3/0x1c0 [ 67.191577][ T5943] trie_update_elem+0x1cd/0xc00 [ 67.196430][ T5943] bpf_map_update_value+0x4d3/0x540 [ 67.201624][ T5943] map_update_elem+0x51a/0x6f0 [ 67.206386][ T5943] __sys_bpf+0x76f/0x810 [ 67.210628][ T5943] ? __pfx___sys_bpf+0x10/0x10 [ 67.215385][ T5943] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 67.221637][ T5943] __x64_sys_bpf+0x7c/0x90 [ 67.226046][ T5943] do_syscall_64+0xf3/0x230 [ 67.230547][ T5943] ? clear_bhb_loop+0x35/0x90 [ 67.235228][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.241123][ T5943] RIP: 0033:0x7f231f37e719 [ 67.245535][ T5943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.265137][ T5943] RSP: 002b:00007f23201f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.273547][ T5943] RAX: ffffffffffffffda RBX: 00007f231f536058 RCX: 00007f231f37e719 [ 67.281513][ T5943] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000002 [ 67.289482][ T5943] RBP: 00007f231f3f139e R08: 0000000000000000 R09: 0000000000000000 [ 67.297447][ T5943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.305412][ T5943] R13: 0000000000000000 R14: 00007f231f536058 R15: 00007ffcd4b40018 [ 67.313393][ T5943] [ 67.339105][ T5935] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6'. [ 67.401296][ T5935] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 67.438221][ T5939] team_slave_0: entered allmulticast mode [ 67.492008][ T5934] caif:caif_disconnect_client(): nothing to disconnect [ 67.507864][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.510348][ T5846] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 67.526996][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.529436][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.537423][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.603600][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.617426][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.667601][ T54] Bluetooth: hci1: command tx timeout [ 68.667886][ T5852] Bluetooth: hci4: command tx timeout [ 68.673011][ T54] Bluetooth: hci0: command tx timeout [ 68.746435][ T5863] Bluetooth: hci3: command tx timeout [ 68.751901][ T54] Bluetooth: hci2: command tx timeout [ 71.709692][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.716051][ T1302] ieee802154 phy1 wpan1: encryption failed: -22