last executing test programs: 2.439404907s ago: executing program 0 (id=732): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x4008744b, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000001085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36511002b000c00040000000000000000007581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000009e79c7ad2600bb2b53e4", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x3, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x5f, 0x2e, 0x3e]}}, 0x0, 0x2e, 0x0, 0x1, 0x5, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000000000d0a400000000000000100000604"], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0xfffffffd}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ed}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e006007e32a27640abc819470800", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x9c) 1.660813118s ago: executing program 1 (id=746): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0xfffffffe, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x256}, 0x28) 1.578955396s ago: executing program 4 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x7, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x4af, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38) 1.531303479s ago: executing program 1 (id=748): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x18}, 0x0) 1.481761184s ago: executing program 4 (id=749): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32], 0x20) 1.335058147s ago: executing program 4 (id=750): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.251888825s ago: executing program 4 (id=752): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x105a00, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) sendmsg$inet(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(0x3) 1.109048339s ago: executing program 0 (id=754): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000017010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.013352497s ago: executing program 4 (id=756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010001000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.004622768s ago: executing program 0 (id=757): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4000000, [{0x0, 0x1, 0x1}]}, @enum={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 860.492871ms ago: executing program 0 (id=760): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 814.290725ms ago: executing program 0 (id=761): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811ffff", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 814.221995ms ago: executing program 2 (id=762): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0) 814.143655ms ago: executing program 3 (id=763): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x5888, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r2) 741.432192ms ago: executing program 2 (id=764): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 662.984789ms ago: executing program 4 (id=765): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x4008744b, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000001085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36511002b000c00040000000000000000007581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000009e79c7ad2600bb2b53e4", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x3, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x5f, 0x2e, 0x3e]}}, 0x0, 0x2e, 0x0, 0x1, 0x5, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000000000d0a400000000000000100000604"], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0xfffffffd}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ed}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e006007e32a27640abc819470800", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x9c) 662.320219ms ago: executing program 3 (id=766): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x105a00, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(0x3) 606.246525ms ago: executing program 1 (id=767): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x26e1, 0x0) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001600)="53278823f842b3eeb6b406d020d8e5c665e9c889c3cc106888c8786ffe5e871789a40f608408d8ee5f764437688832e5a5bca06120f0fa1d363367d816f8a601a7c24b002ccf8c4e4a0da47371a049293d73fa7a84e0f4052f9317572aadaf29b49792a0287ac0e57905a42044f2260b7a9bd78a254e6544c668e01293dbba693300670a12826c206da4020c84f12147bae6cbb05079dfd58c5ca52830d03d3de30f88abc636dcbab7c86595053525ac28963361d95d99630faa0dd2a37b2fb77864a6fcb12974437a8fd857a553ec9eb846e23ecda21cf8b8d591ef8f04a3b86b1da3434c024b4dccc21064f4", 0x7ffff000}, {0x0}], 0x2}, 0x7fe5) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="fd1b36bf", 0x4}], 0x1}, 0x8000) 523.881362ms ago: executing program 2 (id=768): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) 523.136082ms ago: executing program 0 (id=769): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000002177fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x70000000, 0x0, 0x3f00, 0x0, 0x0, 0x1000, 0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}, 0x3b) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 516.255582ms ago: executing program 3 (id=770): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) 330.232579ms ago: executing program 1 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x7, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x4af, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38) 330.113739ms ago: executing program 3 (id=772): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0xfffffffe, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x256}, 0x28) 236.170318ms ago: executing program 2 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020660800002ab91a00180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000100000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 190.327312ms ago: executing program 1 (id=774): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0) 102.619971ms ago: executing program 3 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 58.973084ms ago: executing program 2 (id=776): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x69, 0x11, 0x50}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 39.314596ms ago: executing program 1 (id=777): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x18}, 0x0) 391.13µs ago: executing program 2 (id=778): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 3 (id=779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. syzkaller login: [ 51.204528][ T3623] cgroup: Unknown subsys name 'net' [ 51.340524][ T3623] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.662638][ T3623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.792783][ T3642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.801187][ T3642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.805155][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.811866][ T3649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.816721][ T3648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.822820][ T3649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.831415][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.839718][ T3649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.845512][ T3648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.852302][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.859363][ T3648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.867666][ T3649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.874662][ T3648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.880674][ T3649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.887509][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.895525][ T3649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.902192][ T3648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.915484][ T3649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.915650][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.922904][ T3649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.930275][ T3648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.944630][ T3648] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.954147][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.957271][ T3648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.968907][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.990335][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.999222][ T3651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.005025][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.014385][ T3651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.014383][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.415737][ T3645] chnl_net:caif_netlink_parms(): no params data found [ 54.438404][ T3633] chnl_net:caif_netlink_parms(): no params data found [ 54.463004][ T3638] chnl_net:caif_netlink_parms(): no params data found [ 54.515176][ T3643] chnl_net:caif_netlink_parms(): no params data found [ 54.623928][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.631343][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.640044][ T3645] device bridge_slave_0 entered promiscuous mode [ 54.672097][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.679362][ T3645] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.687665][ T3645] device bridge_slave_1 entered promiscuous mode [ 54.719514][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.726740][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.735867][ T3638] device bridge_slave_0 entered promiscuous mode [ 54.753066][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.760741][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.768736][ T3633] device bridge_slave_0 entered promiscuous mode [ 54.776733][ T3637] chnl_net:caif_netlink_parms(): no params data found [ 54.794381][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.801482][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.809431][ T3638] device bridge_slave_1 entered promiscuous mode [ 54.825865][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.832991][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.841798][ T3633] device bridge_slave_1 entered promiscuous mode [ 54.872127][ T3645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.903072][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.910420][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.918397][ T3643] device bridge_slave_0 entered promiscuous mode [ 54.937094][ T3645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.954911][ T3633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.964284][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.971426][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.979656][ T3643] device bridge_slave_1 entered promiscuous mode [ 54.988569][ T3638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.000303][ T3638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.021208][ T3633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.060909][ T3645] team0: Port device team_slave_0 added [ 55.094216][ T3645] team0: Port device team_slave_1 added [ 55.111847][ T3643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.123509][ T3643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.134895][ T3638] team0: Port device team_slave_0 added [ 55.156590][ T3633] team0: Port device team_slave_0 added [ 55.179532][ T3638] team0: Port device team_slave_1 added [ 55.193260][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.200618][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.208866][ T3637] device bridge_slave_0 entered promiscuous mode [ 55.218032][ T3633] team0: Port device team_slave_1 added [ 55.225091][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.232292][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.240201][ T3637] device bridge_slave_1 entered promiscuous mode [ 55.264211][ T3645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.271375][ T3645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.297626][ T3645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.327163][ T3643] team0: Port device team_slave_0 added [ 55.348246][ T3645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.355524][ T3645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.381605][ T3645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.402896][ T3643] team0: Port device team_slave_1 added [ 55.410618][ T3637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.420418][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.427539][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.453773][ T3638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.466745][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.473734][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.499751][ T3638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.521774][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.529164][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.555897][ T3633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.577744][ T3637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.602017][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.609184][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.635682][ T3633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.683880][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.691015][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.717283][ T3643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.730506][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.737717][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.764088][ T3643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.794627][ T3645] device hsr_slave_0 entered promiscuous mode [ 55.801489][ T3645] device hsr_slave_1 entered promiscuous mode [ 55.824189][ T3637] team0: Port device team_slave_0 added [ 55.834552][ T3638] device hsr_slave_0 entered promiscuous mode [ 55.841327][ T3638] device hsr_slave_1 entered promiscuous mode [ 55.848807][ T3638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.856778][ T3638] Cannot create hsr debugfs directory [ 55.882604][ T3633] device hsr_slave_0 entered promiscuous mode [ 55.890833][ T3633] device hsr_slave_1 entered promiscuous mode [ 55.897780][ T3633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.905496][ T3633] Cannot create hsr debugfs directory [ 55.922586][ T3637] team0: Port device team_slave_1 added [ 55.981748][ T3643] device hsr_slave_0 entered promiscuous mode [ 55.989402][ T3643] device hsr_slave_1 entered promiscuous mode [ 55.996709][ T3643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.004360][ T3643] Cannot create hsr debugfs directory [ 56.014289][ T3637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.021258][ T3637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.048840][ T3637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.049229][ T3651] Bluetooth: hci2: command tx timeout [ 56.069779][ T3637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.076972][ T3637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.104167][ T3651] Bluetooth: hci4: command tx timeout [ 56.104348][ T3651] Bluetooth: hci1: command tx timeout [ 56.104824][ T3642] Bluetooth: hci3: command tx timeout [ 56.104925][ T3642] Bluetooth: hci0: command tx timeout [ 56.114195][ T3637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.249485][ T3637] device hsr_slave_0 entered promiscuous mode [ 56.256764][ T3637] device hsr_slave_1 entered promiscuous mode [ 56.263578][ T3637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.271606][ T3637] Cannot create hsr debugfs directory [ 56.484863][ T3633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.497721][ T3633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.507684][ T3633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.522201][ T3633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.575411][ T3638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.585500][ T3638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.598307][ T3638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.619939][ T3638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.715679][ T3633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.723891][ T3645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.748736][ T3645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.760119][ T3645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.778542][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.789677][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.800761][ T3645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.822087][ T3633] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.850608][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.860350][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.870511][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.877790][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.887696][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.915044][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.927011][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.936837][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.944118][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.957331][ T3637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.968156][ T3637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.995673][ T3638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.010204][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.019923][ T3637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.032233][ T3637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.061481][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.108316][ T3638] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.125400][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.136082][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.146460][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.155444][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.164410][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.175308][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.183778][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.190923][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.198693][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.207096][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.215944][ T3643] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.229795][ T3643] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.246295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.255486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.274561][ T3643] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.285791][ T3643] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.297213][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.307803][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.317441][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.324753][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.349795][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.359472][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.368598][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.380005][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.407871][ T3633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.418472][ T3633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.431493][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.440290][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.451474][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.460801][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.470404][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.480894][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.491041][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.499669][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.531937][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.541826][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.554764][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.563132][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.575326][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.609716][ T3645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.629524][ T3637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.654550][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.663045][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.692814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.709806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.729543][ T3645] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.749736][ T3637] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.788666][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.800116][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.809189][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.816455][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.826939][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.856152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.875181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.894891][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.902125][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.926724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.951373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.961281][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.969705][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.981715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.990734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.999509][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.006681][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.015926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.026735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.037831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.067406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.078819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.089503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.099490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.104429][ T3642] Bluetooth: hci2: command tx timeout [ 58.119160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.128390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.139334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.150871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.160049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.168874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.178131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.187014][ T3642] Bluetooth: hci0: command tx timeout [ 58.192439][ T3642] Bluetooth: hci3: command tx timeout [ 58.197513][ T3638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.198176][ T3651] Bluetooth: hci1: command tx timeout [ 58.205246][ T3644] Bluetooth: hci4: command tx timeout [ 58.219464][ T3643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.251060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.259596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.268963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.278487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.286752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.295033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.303704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.312450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.320974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.329579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.338558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.357199][ T3633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.370542][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.382760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.392266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.413846][ T3643] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.439593][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.450293][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.460963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.534989][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.557257][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.583491][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.590704][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.608463][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.621318][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.632493][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.639719][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.654791][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.671944][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.682891][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.721308][ T3633] device veth0_vlan entered promiscuous mode [ 58.730285][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.760445][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.780878][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.809334][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.820151][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.828572][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.870952][ T3633] device veth1_vlan entered promiscuous mode [ 58.881375][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.890436][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.900082][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.909381][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.918422][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.927318][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.935844][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.959547][ T3643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.971966][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.983397][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.991860][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.001153][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.009900][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.019367][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.027262][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.036374][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.052759][ T3645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.093420][ T3637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.117103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.130989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.143161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.161755][ T3638] device veth0_vlan entered promiscuous mode [ 59.208368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.219970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.237371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.248898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.261718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.272939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.281910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.291137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.309837][ T3638] device veth1_vlan entered promiscuous mode [ 59.323566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.332332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.341262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.360338][ T3633] device veth0_macvtap entered promiscuous mode [ 59.380989][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.396017][ T3633] device veth1_macvtap entered promiscuous mode [ 59.416781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.425855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.433918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.443697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.453153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.462144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.472264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.481342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.490231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.499143][ T3645] device veth0_vlan entered promiscuous mode [ 59.537047][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.553694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.562733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.572436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.581721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.590728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.598857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.609003][ T3637] device veth0_vlan entered promiscuous mode [ 59.626286][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.637082][ T3638] device veth0_macvtap entered promiscuous mode [ 59.656212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.665298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.674354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.683004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.692193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.701337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.712665][ T3637] device veth1_vlan entered promiscuous mode [ 59.730645][ T3645] device veth1_vlan entered promiscuous mode [ 59.745299][ T3638] device veth1_macvtap entered promiscuous mode [ 59.757371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.765976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.774204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.782313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.791539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.800534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.809184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.817818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.828306][ T3633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.837458][ T3633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.846491][ T3633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.855679][ T3633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.905708][ T3643] device veth0_vlan entered promiscuous mode [ 59.918418][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.930138][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.947691][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.958562][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.969844][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.982604][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.999976][ T3645] device veth0_macvtap entered promiscuous mode [ 60.020909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.030539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.039626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.049848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.060236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.069530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.078675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.087672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.098883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.110378][ T3637] device veth0_macvtap entered promiscuous mode [ 60.129125][ T3637] device veth1_macvtap entered promiscuous mode [ 60.140785][ T3643] device veth1_vlan entered promiscuous mode [ 60.168154][ T3638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.178319][ T3638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.187854][ T3644] Bluetooth: hci2: command tx timeout [ 60.192107][ T3638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.205899][ T3638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.242675][ T3645] device veth1_macvtap entered promiscuous mode [ 60.262960][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.275400][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.280201][ T3644] Bluetooth: hci1: command tx timeout [ 60.285300][ T3642] Bluetooth: hci0: command tx timeout [ 60.290664][ T3635] Bluetooth: hci4: command tx timeout [ 60.296614][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.301955][ T3651] Bluetooth: hci3: command tx timeout [ 60.321048][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.332623][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.364598][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.372922][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.382528][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.391512][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.400520][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.425042][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.436990][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.445608][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.446454][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.468311][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.479187][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.491835][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.502914][ T3637] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.512687][ T3637] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.522102][ T3637] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.531436][ T3637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.553076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.561705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.570952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.591893][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.603718][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.614661][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.626777][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.636816][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.647865][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.659223][ T3645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.697737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.709718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.719581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.729335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.740564][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.752237][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.762254][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.772812][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.782955][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.793456][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.804960][ T3645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.833385][ T3643] device veth0_macvtap entered promiscuous mode [ 60.840432][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.846805][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.849883][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.858312][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.875826][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.885148][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.902613][ T3645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.912876][ T3645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.925594][ T3645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.934393][ T3645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.958071][ T3643] device veth1_macvtap entered promiscuous mode [ 60.989251][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.020372][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.059052][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.097325][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.119828][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.139718][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.144834][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.163213][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.176377][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.186863][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.198060][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.208319][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.219028][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.231645][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.255232][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.263480][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.278502][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.314647][ T3689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.323712][ T3689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.333373][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.350889][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.362618][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.374179][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.385050][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.395952][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.406913][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.417384][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.429870][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.451573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.460188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.471570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.507961][ T3643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.521510][ T3643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.521587][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.540643][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.551816][ T3643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.561488][ T3643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.602859][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.625850][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.663682][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.702302][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.750022][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.799063][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.814502][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.828602][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.829711][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.867458][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.003974][ C1] hrtimer: interrupt took 45908 ns [ 62.009479][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.018198][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.056690][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.266163][ T3644] Bluetooth: hci2: command tx timeout [ 62.344509][ T3651] Bluetooth: hci3: command tx timeout [ 62.344574][ T3644] Bluetooth: hci4: command tx timeout [ 62.350467][ T3651] Bluetooth: hci1: command tx timeout [ 62.356085][ T3635] Bluetooth: hci0: command tx timeout [ 65.245394][ T3744] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 65.299013][ T3745] device wlan1 entered promiscuous mode [ 67.498137][ T3796] device wlan1 entered promiscuous mode [ 67.945597][ T48] wlan1: Trigger new scan to find an IBSS to join [ 69.768107][ T3834] device wlan1 entered promiscuous mode [ 71.475158][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.481758][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.944169][ T3891] wlan1: Trigger new scan to find an IBSS to join [ 72.062621][ T3879] device wlan1 entered promiscuous mode [ 72.647785][ T3910] device syzkaller0 entered promiscuous mode [ 72.670626][ T3916] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 72.697680][ T3684] syzkaller0: tun_net_xmit 48 [ 72.719930][ T3910] syzkaller0: tun_net_xmit 1280 [ 72.869978][ T11] wlan1: Creating new IBSS network, BSSID a2:bd:c8:b9:06:4b [ 74.280081][ T3937] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 76.342901][ T3949] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 76.409807][ T3635] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 76.588209][ T1163] cfg80211: failed to load regulatory.db [ 77.207018][ T3635] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 77.207060][ T3635] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 78.698401][ T4047] netlink: 40 bytes leftover after parsing attributes in process `syz.1.130'. [ 78.778273][ T4047] netlink: 'syz.1.130': attribute type 4 has an invalid length. [ 78.827215][ T4047] netlink: 1 bytes leftover after parsing attributes in process `syz.1.130'. [ 81.969233][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.977751][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.508663][ T3635] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 82.666971][ T4093] device wlan1 left promiscuous mode [ 82.852779][ T4099] device pim6reg1 entered promiscuous mode [ 83.327564][ T3635] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 83.611800][ T4106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 83.630808][ T4106] netlink: 'syz.4.151': attribute type 4 has an invalid length. [ 83.638636][ T4106] netlink: 1 bytes leftover after parsing attributes in process `syz.4.151'. [ 83.952936][ T4126] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.960479][ T4126] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.143738][ T4120] device bridge_slave_1 left promiscuous mode [ 84.247327][ T3635] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 84.258497][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.662824][ T4120] device bridge_slave_0 left promiscuous mode [ 84.691717][ T4120] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.877709][ T4139] device sit0 entered promiscuous mode [ 86.054465][ T4164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.172'. [ 86.063692][ T4164] netlink: 'syz.1.172': attribute type 4 has an invalid length. [ 86.145974][ T4164] netlink: 1 bytes leftover after parsing attributes in process `syz.1.172'. [ 86.796985][ T3635] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 87.027487][ T4197] device sit0 entered promiscuous mode [ 87.226085][ T3635] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 87.234836][ T3635] Bluetooth: hci0: Injecting HCI hardware error event [ 87.243665][ T3644] Bluetooth: hci0: hardware error 0x00 [ 87.387326][ T3635] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 87.396585][ T3635] Bluetooth: hci1: Injecting HCI hardware error event [ 87.404778][ T3642] Bluetooth: hci1: hardware error 0x00 [ 88.054140][ T4216] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 [ 88.480112][ T4218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.193'. [ 88.491830][ T4218] netlink: 'syz.2.193': attribute type 4 has an invalid length. [ 88.503639][ T4218] netlink: 1 bytes leftover after parsing attributes in process `syz.2.193'. [ 88.650277][ T4232] syzkaller0: create flow: hash 1897131596 index 2 [ 88.791485][ T4231] device syzkaller0 entered promiscuous mode [ 88.844862][ T3684] syzkaller0: tun_net_xmit 48 [ 88.849826][ T4232] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 89.057918][ T4230] syzkaller0: delete flow: hash 1897131596 index 2 [ 89.305094][ T3644] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 89.464852][ T3642] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 90.760989][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.768620][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.793532][ T4248] device bridge_slave_1 left promiscuous mode [ 90.800281][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.808628][ T4248] device bridge_slave_0 left promiscuous mode [ 90.814999][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.908137][ T4255] device sit0 entered promiscuous mode [ 91.213854][ T3642] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 91.494156][ T4273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.210'. [ 91.567271][ T4273] netlink: 'syz.0.210': attribute type 4 has an invalid length. [ 91.592897][ T4273] netlink: 1 bytes leftover after parsing attributes in process `syz.0.210'. [ 92.520661][ T4294] device sit0 left promiscuous mode [ 92.703912][ T3642] Bluetooth: hci4: unexpected event 0x34 length: 15 > 6 [ 92.888921][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.933891][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.495361][ T4303] device bridge_slave_1 left promiscuous mode [ 93.502957][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.522790][ T4303] device bridge_slave_0 left promiscuous mode [ 93.534517][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.887114][ T4336] device sit0 left promiscuous mode [ 94.074610][ T4336] device sit0 entered promiscuous mode [ 95.075187][ T3642] Bluetooth: hci3: unexpected event 0x34 length: 15 > 6 [ 95.359714][ T4379] device sit0 entered promiscuous mode [ 95.626613][ T3642] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 95.985555][ T4398] : renamed from ipvlan1 [ 97.136944][ T4430] device syzkaller0 entered promiscuous mode [ 97.147284][ T4438] mac80211_hwsim hwsim5 »»»»»»: renamed from wlan0 [ 99.776899][ T4454] bridge0: port 3(team0) entered blocking state [ 99.783279][ T4454] bridge0: port 3(team0) entered disabled state [ 99.795574][ T4454] device team0 entered promiscuous mode [ 99.802655][ T4454] device team_slave_0 entered promiscuous mode [ 99.817581][ T4454] device team_slave_1 entered promiscuous mode [ 100.207145][ T4479] device syzkaller0 entered promiscuous mode [ 105.060795][ T4513] device syzkaller0 entered promiscuous mode [ 106.799401][ T4541] device syzkaller0 entered promiscuous mode [ 108.648705][ T4589] bond_slave_1: mtu less than device minimum [ 109.083876][ T4601] device syzkaller0 entered promiscuous mode [ 109.262517][ T4611] device syzkaller0 entered promiscuous mode [ 118.398810][ T4632] bond_slave_1: mtu less than device minimum [ 119.797729][ T4673] bond_slave_1: mtu less than device minimum [ 120.683121][ T4689] device syzkaller0 entered promiscuous mode [ 122.432060][ T4713] device sit0 left promiscuous mode [ 122.610773][ T4722] Zero length message leads to an empty skb [ 122.778556][ T4728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 122.866586][ T4733] netlink: 61959 bytes leftover after parsing attributes in process `syz.3.372'. [ 123.832032][ T4753] device ipvlan1 entered promiscuous mode [ 124.281647][ T3642] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 124.442570][ T4780] device sit0 left promiscuous mode [ 124.930499][ T4780] device sit0 entered promiscuous mode [ 126.330149][ T4807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.404'. [ 126.350954][ T4807] netlink: 'syz.2.404': attribute type 4 has an invalid length. [ 126.359138][ T4807] netlink: 1 bytes leftover after parsing attributes in process `syz.2.404'. [ 126.368279][ T4814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 126.701572][ T4827] netlink: 763 bytes leftover after parsing attributes in process `syz.4.413'. [ 126.992345][ T4846] netlink: 'syz.2.421': attribute type 3 has an invalid length. [ 127.001824][ T4846] netlink: 132 bytes leftover after parsing attributes in process `syz.2.421'. [ 127.020312][ T3642] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 127.405023][ T4856] netlink: 40 bytes leftover after parsing attributes in process `syz.2.424'. [ 127.494147][ T4856] netlink: 'syz.2.424': attribute type 4 has an invalid length. [ 127.532454][ T4856] netlink: 1 bytes leftover after parsing attributes in process `syz.2.424'. [ 128.252571][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 128.363573][ T4866] device sit0 left promiscuous mode [ 128.601514][ T4878] netlink: 763 bytes leftover after parsing attributes in process `syz.1.431'. [ 129.473459][ T4894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.436'. [ 129.482696][ T4894] netlink: 'syz.2.436': attribute type 4 has an invalid length. [ 129.491319][ T4894] netlink: 1 bytes leftover after parsing attributes in process `syz.2.436'. [ 129.554337][ T4905] device syzkaller0 entered promiscuous mode [ 131.489769][ T4947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.457'. [ 131.500896][ T4947] netlink: 'syz.2.457': attribute type 4 has an invalid length. [ 131.516658][ T4947] netlink: 1 bytes leftover after parsing attributes in process `syz.2.457'. [ 132.914431][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.920789][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.026275][ T4991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.474'. [ 133.082649][ T4991] netlink: 'syz.4.474': attribute type 4 has an invalid length. [ 133.094099][ T4991] netlink: 1 bytes leftover after parsing attributes in process `syz.4.474'. [ 133.103522][ T4994] device pim6reg1 entered promiscuous mode [ 134.264831][ T5038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.497'. [ 134.303331][ T5038] netlink: 'syz.1.497': attribute type 4 has an invalid length. [ 134.317155][ T5038] netlink: 1 bytes leftover after parsing attributes in process `syz.1.497'. [ 135.631879][ T5081] netlink: 'syz.2.513': attribute type 21 has an invalid length. [ 136.449848][ T5117] syz.1.528[5117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.449959][ T5117] syz.1.528[5117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.908498][ T5117] syz.1.528[5117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.924674][ T5117] syz.1.528[5117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.201247][ T5129] netlink: 'syz.0.533': attribute type 2 has an invalid length. [ 137.294038][ T5130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.531'. [ 137.406451][ T5130] netlink: 'syz.1.531': attribute type 4 has an invalid length. [ 137.440207][ T5130] netlink: 1 bytes leftover after parsing attributes in process `syz.1.531'. [ 137.850901][ T5153] syz.3.542[5153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.850999][ T5153] syz.3.542[5153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.111034][ T5178] device pim6reg1 entered promiscuous mode [ 139.194919][ T5182] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.223435][ T5182] device syzkaller0 entered promiscuous mode [ 140.973179][ T5204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.557'. [ 141.007093][ T5204] netlink: 'syz.3.557': attribute type 4 has an invalid length. [ 141.020573][ T5204] netlink: 1 bytes leftover after parsing attributes in process `syz.3.557'. [ 141.650854][ T5239] IPv6: Can't replace route, no match found [ 141.704642][ T3642] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 141.713490][ T3642] Bluetooth: hci4: Injecting HCI hardware error event [ 141.723198][ T3644] Bluetooth: hci4: hardware error 0x00 [ 142.646291][ T5261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.579'. [ 142.663603][ T5261] netlink: 'syz.4.579': attribute type 4 has an invalid length. [ 142.718459][ T5261] netlink: 1 bytes leftover after parsing attributes in process `syz.4.579'. [ 143.867078][ T3644] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 144.795257][ T5321] netlink: 40 bytes leftover after parsing attributes in process `syz.1.603'. [ 144.806507][ T5321] netlink: 'syz.1.603': attribute type 4 has an invalid length. [ 144.816388][ T5321] netlink: 1 bytes leftover after parsing attributes in process `syz.1.603'. [ 145.064212][ T3644] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 145.075034][ T3644] Bluetooth: hci3: Injecting HCI hardware error event [ 145.082735][ T3642] Bluetooth: hci3: hardware error 0x00 [ 145.286790][ T5346] device sit0 entered promiscuous mode [ 146.055677][ T5363] IPv6: Can't replace route, no match found [ 146.913625][ T5421] netlink: 'syz.0.649': attribute type 21 has an invalid length. [ 147.150997][ T3642] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 147.260016][ T5435] device sit0 entered promiscuous mode [ 147.669346][ T5445] syz.2.660[5445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.669459][ T5445] syz.2.660[5445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.083441][ T5452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.662'. [ 148.118909][ T5452] netlink: 'syz.1.662': attribute type 4 has an invalid length. [ 148.129546][ T5452] netlink: 1 bytes leftover after parsing attributes in process `syz.1.662'. [ 148.340068][ T5460] device pim6reg1 entered promiscuous mode [ 149.078895][ T5476] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 149.111255][ T5476] team0: Device veth0_macvtap failed to register rx_handler [ 149.534507][ T5506] device sit0 left promiscuous mode [ 150.330595][ T5516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.686'. [ 150.351774][ T5516] netlink: 'syz.2.686': attribute type 4 has an invalid length. [ 150.364717][ T5516] netlink: 1 bytes leftover after parsing attributes in process `syz.2.686'. [ 151.280962][ T5555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.712'. [ 151.290751][ T5555] netlink: 'syz.4.712': attribute type 4 has an invalid length. [ 151.298798][ T5555] netlink: 1 bytes leftover after parsing attributes in process `syz.4.712'. [ 151.776729][ T5580] netlink: 'syz.2.717': attribute type 10 has an invalid length. [ 152.115774][ T5580] team0: Device veth0_macvtap failed to register rx_handler [ 153.294309][ T5627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.732'. [ 153.303460][ T5627] netlink: 'syz.0.732': attribute type 4 has an invalid length. [ 153.312310][ T5627] netlink: 1 bytes leftover after parsing attributes in process `syz.0.732'. [ 154.919651][ T5698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.765'. [ 154.934958][ T5698] netlink: 'syz.4.765': attribute type 4 has an invalid length. [ 154.979335][ T5698] netlink: 1 bytes leftover after parsing attributes in process `syz.4.765'. [ 155.055083][ T5722] [ 155.057830][ T5722] ============================= [ 155.062781][ T5722] WARNING: suspicious RCU usage [ 155.067870][ T5722] 6.1.111-syzkaller #0 Not tainted [ 155.073098][ T5722] ----------------------------- [ 155.078046][ T5722] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 155.086613][ T5722] [ 155.086613][ T5722] other info that might help us debug this: [ 155.086613][ T5722] [ 155.096997][ T5722] [ 155.096997][ T5722] rcu_scheduler_active = 2, debug_locks = 1 [ 155.105146][ T5722] 1 lock held by syz.2.778/5722: [ 155.110259][ T5722] #0: ffffffff8d32b8c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 155.120654][ T5722] [ 155.120654][ T5722] stack backtrace: [ 155.126691][ T5722] CPU: 0 PID: 5722 Comm: syz.2.778 Not tainted 6.1.111-syzkaller #0 [ 155.134972][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 155.145080][ T5722] Call Trace: [ 155.148477][ T5722] [ 155.151411][ T5722] dump_stack_lvl+0x1e3/0x2cb [ 155.156115][ T5722] ? nf_tcp_handle_invalid+0x642/0x642 [ 155.161603][ T5722] ? panic+0x764/0x764 [ 155.165728][ T5722] lockdep_rcu_suspicious+0x21c/0x330 [ 155.171134][ T5722] get_callchain_entry+0x2ac/0x3c0 [ 155.176282][ T5722] get_perf_callchain+0xe6/0x810 [ 155.181235][ T5722] ? put_callchain_entry+0xb0/0xb0 [ 155.186340][ T5722] ? __lock_acquire+0x125b/0x1f80 [ 155.191386][ T5722] __bpf_get_stack+0x378/0x570 [ 155.196151][ T5722] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 155.202304][ T5722] ? __cant_sleep+0x270/0x270 [ 155.206979][ T5722] bpf_get_stack_raw_tp+0x1b2/0x220 [ 155.212181][ T5722] bpf_prog_0f38b8827da495ce+0x3a/0x3e [ 155.217649][ T5722] bpf_prog_run_pin_on_cpu+0x62/0x130 [ 155.223029][ T5722] bpf_prog_test_run_syscall+0x312/0x4d0 [ 155.229454][ T5722] ? sock_gen_cookie+0x60/0x60 [ 155.234236][ T5722] ? sock_gen_cookie+0x60/0x60 [ 155.239180][ T5722] bpf_prog_test_run+0x32f/0x3a0 [ 155.244474][ T5722] __sys_bpf+0x3eb/0x6c0 [ 155.248745][ T5722] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 155.254246][ T5722] ? print_irqtrace_events+0x210/0x210 [ 155.259710][ T5722] ? print_irqtrace_events+0x210/0x210 [ 155.265172][ T5722] ? syscall_enter_from_user_mode+0x2e/0x230 [ 155.271145][ T5722] ? lockdep_hardirqs_on+0x94/0x130 [ 155.276337][ T5722] __x64_sys_bpf+0x78/0x90 [ 155.280755][ T5722] do_syscall_64+0x3b/0xb0 [ 155.285167][ T5722] ? clear_bhb_loop+0x45/0xa0 [ 155.289838][ T5722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.295722][ T5722] RIP: 0033:0x7f7cc437df39 [ 155.300127][ T5722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.319868][ T5722] RSP: 002b:00007f7cc51e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.328282][ T5722] RAX: ffffffffffffffda RBX: 00007f7cc4535f80 RCX: 00007f7cc437df39 [ 155.336274][ T5722] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a [ 155.344382][ T5722] RBP: 00007f7cc43f0216 R08: 0000000000000000 R09: 0000000000000000 [ 155.352480][ T5722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.360476][ T5722] R13: 0000000000000000 R14: 00007f7cc4535f80 R15: 00007fff330341c8 [ 155.368481][ T5722]