last executing test programs: 1.684193163s ago: executing program 2 (id=236): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@lld, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.469998554s ago: executing program 2 (id=240): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r3}) 1.196094785s ago: executing program 0 (id=245): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e7b", 0x3}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 1.159361425s ago: executing program 3 (id=246): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 1.129862135s ago: executing program 1 (id=247): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.024176556s ago: executing program 2 (id=248): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) 966.255206ms ago: executing program 0 (id=249): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/193, 0xc1}], 0x1, &(0x7f0000000b00)}, 0x1) 965.804066ms ago: executing program 1 (id=250): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x104204, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0||!') 902.575436ms ago: executing program 3 (id=251): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000240), &(0x7f0000000640)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 772.215857ms ago: executing program 1 (id=252): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x10, 0x10b}, {0x10, 0x110, 0xc}], 0x20}, 0x0) 748.039677ms ago: executing program 3 (id=253): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x80010141) 701.929477ms ago: executing program 0 (id=254): perf_event_open$cgroup(&(0x7f0000000840)={0x5, 0x80, 0x7d, 0x6, 0x84, 0xc8, 0x0, 0x7f, 0x20404, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4005, 0x4, @perf_bp={0x0, 0x8}, 0x8000, 0xffff, 0x6, 0x4, 0x9, 0x797, 0x48, 0x0, 0x0, 0x0, 0x7fe}, 0xffffffffffffffff, 0x100000000000001, 0xffffffffffffffff, 0x1) 576.219418ms ago: executing program 2 (id=255): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2f}, 0x28) 525.284718ms ago: executing program 1 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 503.524568ms ago: executing program 2 (id=257): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) 503.414818ms ago: executing program 3 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 420.227318ms ago: executing program 0 (id=259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 311.220649ms ago: executing program 1 (id=260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 297.491549ms ago: executing program 0 (id=261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x50) 240.242209ms ago: executing program 3 (id=262): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x20, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu|00\t&&') 165.195959ms ago: executing program 2 (id=263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x86}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 123.83333ms ago: executing program 0 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 176.5µs ago: executing program 1 (id=265): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 0s ago: executing program 3 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x7d}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. [ 338.420665][ T5820] cgroup: Unknown subsys name 'net' [ 338.563986][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 340.325273][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 341.979967][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.995717][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.004030][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.019760][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.028006][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.033303][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.036623][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.046341][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.049923][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.057891][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.064715][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.079392][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.089191][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.097340][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.105106][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.113064][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.115028][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.120458][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.134457][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.156740][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.166770][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.174496][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.176186][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.189432][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.721670][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 342.802764][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 342.901634][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 343.009831][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 343.063358][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.070997][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.079141][ T5832] bridge_slave_0: entered allmulticast mode [ 343.087021][ T5832] bridge_slave_0: entered promiscuous mode [ 343.097016][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.104297][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.111630][ T5832] bridge_slave_1: entered allmulticast mode [ 343.118871][ T5832] bridge_slave_1: entered promiscuous mode [ 343.127035][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.134191][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.141761][ T5835] bridge_slave_0: entered allmulticast mode [ 343.148931][ T5835] bridge_slave_0: entered promiscuous mode [ 343.157987][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.165231][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.172667][ T5835] bridge_slave_1: entered allmulticast mode [ 343.180250][ T5835] bridge_slave_1: entered promiscuous mode [ 343.299571][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.316705][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.326435][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.333655][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.342725][ T5829] bridge_slave_0: entered allmulticast mode [ 343.350232][ T5829] bridge_slave_0: entered promiscuous mode [ 343.359382][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.367026][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.374231][ T5829] bridge_slave_1: entered allmulticast mode [ 343.381500][ T5829] bridge_slave_1: entered promiscuous mode [ 343.391375][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.429261][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.510251][ T5835] team0: Port device team_slave_0 added [ 343.520153][ T5835] team0: Port device team_slave_1 added [ 343.541121][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.554041][ T5832] team0: Port device team_slave_0 added [ 343.560647][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.568058][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.576678][ T5830] bridge_slave_0: entered allmulticast mode [ 343.583807][ T5830] bridge_slave_0: entered promiscuous mode [ 343.605675][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.630074][ T5832] team0: Port device team_slave_1 added [ 343.649401][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.657374][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.665680][ T5830] bridge_slave_1: entered allmulticast mode [ 343.672704][ T5830] bridge_slave_1: entered promiscuous mode [ 343.740265][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.747546][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.774369][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.788173][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.795293][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.821296][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.836180][ T5829] team0: Port device team_slave_0 added [ 343.844215][ T5829] team0: Port device team_slave_1 added [ 343.850865][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.860852][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.887437][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.901391][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.911939][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.938091][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.002102][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.016300][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.068997][ T5835] hsr_slave_0: entered promiscuous mode [ 344.077571][ T5835] hsr_slave_1: entered promiscuous mode [ 344.085451][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.092465][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.120195][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.132874][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.139915][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.166005][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.215673][ T5105] Bluetooth: hci3: command tx timeout [ 344.215691][ T5845] Bluetooth: hci0: command tx timeout [ 344.215968][ T5845] Bluetooth: hci1: command tx timeout [ 344.221426][ T5105] Bluetooth: hci2: command tx timeout [ 344.245152][ T5830] team0: Port device team_slave_0 added [ 344.272795][ T5832] hsr_slave_0: entered promiscuous mode [ 344.279382][ T5832] hsr_slave_1: entered promiscuous mode [ 344.286054][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.294327][ T5832] Cannot create hsr debugfs directory [ 344.302611][ T5830] team0: Port device team_slave_1 added [ 344.343851][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.351273][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.379062][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.431981][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.439379][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.466715][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.504216][ T5829] hsr_slave_0: entered promiscuous mode [ 344.511414][ T5829] hsr_slave_1: entered promiscuous mode [ 344.518042][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.525805][ T5829] Cannot create hsr debugfs directory [ 344.648442][ T5830] hsr_slave_0: entered promiscuous mode [ 344.655460][ T5830] hsr_slave_1: entered promiscuous mode [ 344.661701][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.670242][ T5830] Cannot create hsr debugfs directory [ 344.977812][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.017799][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.029674][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.066100][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.151352][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.163171][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 345.174459][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 345.205254][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 345.273191][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 345.288085][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 345.319665][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 345.332415][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.422084][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.451729][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.463294][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.473614][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.577770][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.642551][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.660220][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.696887][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.704222][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.742578][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.761934][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.769178][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.800676][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.807881][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.818681][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.826489][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.892687][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.913704][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.978781][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.019731][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.027035][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.040356][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.047674][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.086495][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.150658][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.158043][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.190787][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.198062][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.300093][ T5105] Bluetooth: hci1: command tx timeout [ 346.300128][ T5839] Bluetooth: hci0: command tx timeout [ 346.307088][ T5105] Bluetooth: hci2: command tx timeout [ 346.313105][ T5845] Bluetooth: hci3: command tx timeout [ 346.350159][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.601485][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.719535][ T5832] veth0_vlan: entered promiscuous mode [ 346.754928][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.798900][ T5832] veth1_vlan: entered promiscuous mode [ 346.859652][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.909151][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.922441][ T5835] veth0_vlan: entered promiscuous mode [ 346.941313][ T5832] veth0_macvtap: entered promiscuous mode [ 346.956289][ T5832] veth1_macvtap: entered promiscuous mode [ 346.973253][ T5835] veth1_vlan: entered promiscuous mode [ 347.003107][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.044295][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.060834][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.070958][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.080057][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.089531][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.136150][ T5830] veth0_vlan: entered promiscuous mode [ 347.168941][ T5830] veth1_vlan: entered promiscuous mode [ 347.204306][ T5835] veth0_macvtap: entered promiscuous mode [ 347.218288][ T5835] veth1_macvtap: entered promiscuous mode [ 347.242517][ T5829] veth0_vlan: entered promiscuous mode [ 347.267580][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.279519][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.293678][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.316560][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.336082][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.347910][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.359518][ T5829] veth1_vlan: entered promiscuous mode [ 347.375929][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.384763][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.393517][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.402892][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.445535][ T5830] veth0_macvtap: entered promiscuous mode [ 347.492420][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.506369][ T5830] veth1_macvtap: entered promiscuous mode [ 347.520304][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.627260][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.639063][ T5829] veth0_macvtap: entered promiscuous mode [ 347.646064][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.658216][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.668917][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.681068][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.691672][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.703022][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.724924][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.728883][ T5829] veth1_macvtap: entered promiscuous mode [ 347.761844][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.772500][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.790090][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.802032][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.812820][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.826995][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.857942][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.872645][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.882399][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.891994][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.933532][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.944118][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.968097][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.988116][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.998963][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.009956][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.053052][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.074272][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.091726][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.107934][ T5924] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3'. [ 348.163048][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.181536][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.188246][ C1] hrtimer: interrupt took 65794 ns [ 348.192474][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.214043][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.230857][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.242580][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.256160][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.298507][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.318679][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.355048][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.363858][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.392016][ T5845] Bluetooth: hci3: command tx timeout [ 348.392040][ T5105] Bluetooth: hci0: command tx timeout [ 348.397762][ T5839] Bluetooth: hci2: command tx timeout [ 348.403179][ T5105] Bluetooth: hci1: command tx timeout [ 348.519657][ T5925] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 348.732977][ T5928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'. [ 348.958165][ T5925] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 349.083467][ T5928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'. [ 349.136403][ T5924] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'. [ 349.176765][ T5925] syz.2.3 (5925) used greatest stack depth: 20072 bytes left [ 349.192014][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.208821][ T5931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'. [ 349.216348][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.283213][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.302657][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.353047][ T5856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.382344][ T5856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.506462][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.532227][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.836182][ T5943] netlink: 'syz.2.10': attribute type 21 has an invalid length. [ 349.872106][ T5943] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10'. [ 350.341874][ T5945] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1'. [ 350.438780][ T5945] netlink: 'syz.0.1': attribute type 39 has an invalid length. [ 350.455578][ T5105] Bluetooth: hci1: command tx timeout [ 350.465085][ T5105] Bluetooth: hci2: command tx timeout [ 350.466079][ T5839] Bluetooth: hci3: command tx timeout [ 350.470644][ T5105] Bluetooth: hci0: command tx timeout [ 351.263560][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.276195][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.310230][ T5957] bridge0: entered allmulticast mode [ 351.340642][ T5964] Zero length message leads to an empty skb [ 351.422811][ T5963] bridge_slave_1: left allmulticast mode [ 351.440862][ T5963] bridge_slave_1: left promiscuous mode [ 351.457423][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.507171][ T5963] bridge_slave_0: left allmulticast mode [ 351.523132][ T5963] bridge_slave_0: left promiscuous mode [ 351.540936][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.000605][ T5973] syzkaller0: entered promiscuous mode [ 352.025901][ T5973] syzkaller0: entered allmulticast mode [ 354.957008][ T6024] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 355.062028][ T6026] netlink: 'syz.0.40': attribute type 21 has an invalid length. [ 355.479556][ T6036] netlink: 176 bytes leftover after parsing attributes in process `syz.2.44'. [ 355.498153][ T6039] netlink: 'syz.3.46': attribute type 10 has an invalid length. [ 355.508242][ T6039] macvlan1: entered allmulticast mode [ 355.514698][ T6039] veth1_vlan: entered allmulticast mode [ 355.534910][ T6039] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 360.044275][ T6175] macvtap0: refused to change device tx_queue_len [ 360.160185][ T6181] netlink: 'syz.2.111': attribute type 7 has an invalid length. [ 360.313748][ T6186] pim6reg1: entered promiscuous mode [ 360.352094][ T6186] pim6reg1: entered allmulticast mode [ 360.517218][ T6193] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 360.564385][ T6193] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 361.846516][ T6242] netlink: 'syz.3.140': attribute type 39 has an invalid length. [ 361.925825][ T6242] veth0_macvtap: left promiscuous mode [ 362.221855][ T6246] IPv6: Can't replace route, no match found [ 363.453136][ T6279] pim6reg1: entered promiscuous mode [ 363.459132][ T6279] pim6reg1: entered allmulticast mode [ 363.847714][ T6294] netlink: 'syz.1.164': attribute type 21 has an invalid length. [ 363.882201][ T6294] netlink: 128 bytes leftover after parsing attributes in process `syz.1.164'. [ 363.905289][ T6294] netlink: 'syz.1.164': attribute type 4 has an invalid length. [ 363.924132][ T6294] netlink: 'syz.1.164': attribute type 3 has an invalid length. [ 363.940249][ T6294] netlink: 3 bytes leftover after parsing attributes in process `syz.1.164'. [ 364.822203][ T6324] wg2: entered promiscuous mode [ 364.827293][ T6324] wg2: entered allmulticast mode [ 365.696472][ T6352] IPv6: Can't replace route, no match found [ 365.961905][ T6366] IPv6: Can't replace route, no match found [ 367.705586][ T6424] macvtap0: refused to change device tx_queue_len [ 368.595431][ T6454] macvtap0: refused to change device tx_queue_len [ 369.766601][ T6500] IPv6: Can't replace route, no match found [ 369.892556][ T6504] [ 369.895582][ T6504] ============================= [ 369.900489][ T6504] WARNING: suspicious RCU usage [ 369.905711][ T6504] syzkaller #0 Not tainted [ 369.910177][ T6504] ----------------------------- [ 369.915166][ T6504] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 369.923722][ T6504] [ 369.923722][ T6504] other info that might help us debug this: [ 369.923722][ T6504] [ 369.934203][ T6504] [ 369.934203][ T6504] rcu_scheduler_active = 2, debug_locks = 1 [ 369.942436][ T6504] 1 lock held by syz.0.264/6504: [ 369.947550][ T6504] #0: ffffffff8cd300c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 369.959780][ T6504] [ 369.959780][ T6504] stack backtrace: [ 369.966073][ T6504] CPU: 0 PID: 6504 Comm: syz.0.264 Not tainted syzkaller #0 [ 369.973422][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.983550][ T6504] Call Trace: [ 369.986887][ T6504] [ 369.989974][ T6504] dump_stack_lvl+0x16c/0x230 [ 369.994732][ T6504] ? show_regs_print_info+0x20/0x20 [ 370.000007][ T6504] ? load_image+0x3b0/0x3b0 [ 370.004671][ T6504] ? __lock_acquire+0x1260/0x7c80 [ 370.009770][ T6504] lockdep_rcu_suspicious+0x1e1/0x300 [ 370.015213][ T6504] get_callchain_entry+0x2a9/0x3c0 [ 370.020391][ T6504] get_perf_callchain+0xbc/0x4d0 [ 370.025390][ T6504] ? verify_lock_unused+0x140/0x140 [ 370.030651][ T6504] ? put_callchain_entry+0xb0/0xb0 [ 370.035818][ T6504] ? preempt_schedule_common+0x82/0xc0 [ 370.041358][ T6504] ? preempt_schedule+0xab/0xc0 [ 370.046272][ T6504] ? schedule_preempt_disabled+0x20/0x20 [ 370.051966][ T6504] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 370.057940][ T6504] __bpf_get_stack+0x2d7/0x510 [ 370.062784][ T6504] ? stack_map_get_build_id_offset+0x720/0x720 [ 370.069014][ T6504] ? __cant_sleep+0x210/0x210 [ 370.073761][ T6504] ? bpf_prog_d43750871481577d+0x45/0x49 [ 370.079467][ T6504] bpf_get_stack_raw_tp+0x1a9/0x210 [ 370.084738][ T6504] bpf_prog_d43750871481577d+0x45/0x49 [ 370.090259][ T6504] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 370.095706][ T6504] bpf_prog_test_run_syscall+0x311/0x490 [ 370.101503][ T6504] ? sock_gen_cookie+0x60/0x60 [ 370.106345][ T6504] ? sock_gen_cookie+0x60/0x60 [ 370.111412][ T6504] bpf_prog_test_run+0x321/0x390 [ 370.116424][ T6504] __sys_bpf+0x440/0x800 [ 370.120744][ T6504] ? bpf_link_show_fdinfo+0x350/0x350 [ 370.126233][ T6504] ? lock_chain_count+0x20/0x20 [ 370.131171][ T6504] __x64_sys_bpf+0x7c/0x90 [ 370.135657][ T6504] do_syscall_64+0x55/0xb0 [ 370.140161][ T6504] ? clear_bhb_loop+0x40/0x90 [ 370.144920][ T6504] ? clear_bhb_loop+0x40/0x90 [ 370.149665][ T6504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.155622][ T6504] RIP: 0033:0x7fb3a178f6c9 [ 370.160093][ T6504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.179762][ T6504] RSP: 002b:00007fb3a268e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.188249][ T6504] RAX: ffffffffffffffda RBX: 00007fb3a19e5fa0 RCX: 00007fb3a178f6c9 [ 370.196278][ T6504] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 370.204306][ T6504] RBP: 00007fb3a1811f91 R08: 0000000000000000 R09: 0000000000000000 [ 370.212330][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.220362][ T6504] R13: 00007fb3a19e6038 R14: 00007fb3a19e5fa0 R15: 00007fffdc9259c8 [ 370.228413][ T6504] [ 378.939290][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.947746][ T1290] ieee802154 phy1 wpan1: encryption failed: -22