last executing test programs: 5m53.779309698s ago: executing program 2 (id=64): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 5m53.289393198s ago: executing program 3 (id=67): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m53.233810929s ago: executing program 2 (id=68): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, 0x0, 0x0, 0x2}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge_slave_0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 5m53.070301702s ago: executing program 3 (id=71): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 5m52.954428614s ago: executing program 2 (id=72): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000240)=ANY=[], 0x8) 5m52.917845615s ago: executing program 1 (id=73): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0x0, &(0x7f0000000500)="3d25ab555b19c4cbd0017085080040fee5a990ec", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m52.807745287s ago: executing program 3 (id=74): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x8, 0x8, 0xd}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000001000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m52.762107948s ago: executing program 1 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 5m52.64709733s ago: executing program 2 (id=77): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000180)='mem_connect\x00', r1}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) 5m52.579699101s ago: executing program 3 (id=78): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 5m52.579379311s ago: executing program 1 (id=79): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0xc) 5m52.434078714s ago: executing program 1 (id=81): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x242f, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5m52.315723887s ago: executing program 3 (id=82): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073004100000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) 5m52.315133857s ago: executing program 2 (id=83): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6149, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x2, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7baf376a, 0x3, 0x0, 0x0, 0x2002}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 5m52.12419716s ago: executing program 1 (id=84): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000030000000000000000"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10005}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x101200, 0xc8, 0x0, 0x0, 0x0, 0x2000000, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={0xffffffffffffffff, 0x0, &(0x7f0000001400)=""/15}, 0x20) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x32060) write$cgroup_subtree(r8, &(0x7f00000008c0)=ANY=[@ANYRES64], 0xfdef) 5m51.919825344s ago: executing program 2 (id=86): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 5m51.512174782s ago: executing program 32 (id=86): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 5m51.490940912s ago: executing program 1 (id=89): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3, &(0x7f0000000040), 0x4) 5m51.289765026s ago: executing program 33 (id=89): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3, &(0x7f0000000040), 0x4) 5m51.247673977s ago: executing program 3 (id=90): sendmsg$sock(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000040)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000180)="7d2d0bc3b356172815b02130086127e7f9fc579a9546684813e5d56e7a975db349e697155321d906b52e48f710b1b004d6eb8948ee3b9f82ec229d54e557ff37a6bf1b4e92b2ba15c500d5ab1f41b394c298321ccb1c2c024ffafd1418c27bdde6cf", 0x62}, {0x0}, {&(0x7f0000001480)="47f45725c398c2088f106dbea0260dae65423658758b2bcd36299be9b47ebb23faa60ae0c4c3967a96ea95f7e0b62bce1f03aa0cd159a044c9439d23ed4ca54361eaeb5187cf40a78cf2e035a91fdb8ce065ad753c0a7a94a6b3", 0x5a}], 0x4, &(0x7f00000015c0)}, 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0xffffffb3}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x2000c9d0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x6, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x20c0d0d193e1c74f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5m51.247428127s ago: executing program 34 (id=90): sendmsg$sock(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000040)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000180)="7d2d0bc3b356172815b02130086127e7f9fc579a9546684813e5d56e7a975db349e697155321d906b52e48f710b1b004d6eb8948ee3b9f82ec229d54e557ff37a6bf1b4e92b2ba15c500d5ab1f41b394c298321ccb1c2c024ffafd1418c27bdde6cf", 0x62}, {0x0}, {&(0x7f0000001480)="47f45725c398c2088f106dbea0260dae65423658758b2bcd36299be9b47ebb23faa60ae0c4c3967a96ea95f7e0b62bce1f03aa0cd159a044c9439d23ed4ca54361eaeb5187cf40a78cf2e035a91fdb8ce065ad753c0a7a94a6b3", 0x5a}], 0x4, &(0x7f00000015c0)}, 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0xffffffb3}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x2000c9d0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x6, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x20c0d0d193e1c74f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4m43.568888464s ago: executing program 0 (id=421): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x400000000004, 0xffffffffffffffff, 0x9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m42.288575288s ago: executing program 0 (id=425): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m41.956762954s ago: executing program 0 (id=429): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000000000000711211000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m41.69550202s ago: executing program 0 (id=431): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r0}, 0x10) r2 = gettid() close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a}, 0x70) socketpair(0x2, 0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={r2, r1, 0x0, 0x2, 0xfffffffffffffffe}, 0x30) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000008, 0x80410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x8, 0x9, 0xfffffffffffffffa, 0x4, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xfffffffffffffdd5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x7, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x5, &(0x7f0000000080)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xffff, 0xffffffdd, 0xa}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) 4m41.263967578s ago: executing program 0 (id=433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fe0000000000000000040000850000002c000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="fea53898b8cf174215fbb62ae1a7", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4m41.087362861s ago: executing program 0 (id=434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r3, r2, 0x4, r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m26.030183412s ago: executing program 35 (id=434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r3, r2, 0x4, r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 37.243830304s ago: executing program 5 (id=2206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 37.093041057s ago: executing program 5 (id=2209): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000003"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r8], 0x12) 36.751741334s ago: executing program 5 (id=2212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff04"], 0x50) 36.540010238s ago: executing program 5 (id=2214): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 36.351776821s ago: executing program 5 (id=2216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000030b94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x6b, 0x60000000}, 0x2c) 36.267520053s ago: executing program 5 (id=2217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 8.768317654s ago: executing program 4 (id=2321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000240)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 8.628696517s ago: executing program 4 (id=2322): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 8.41702752s ago: executing program 4 (id=2324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xffbf) 8.015350498s ago: executing program 7 (id=2327): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 7.532954218s ago: executing program 7 (id=2328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0x66) 5.252614001s ago: executing program 4 (id=2331): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)='($', 0x2}], 0x1}, 0x0) 5.195638732s ago: executing program 7 (id=2333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\x05\x00\x00\x00\x00\x00\x00\x00g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x92D\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!MM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xa3\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq\x00\x00\x00\x00\x00\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x7, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r2}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x9a) 4.982997645s ago: executing program 4 (id=2335): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0x20a) 4.966584456s ago: executing program 7 (id=2336): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 4.75580851s ago: executing program 7 (id=2338): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) close(r0) 4.669736642s ago: executing program 7 (id=2340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xffbf) 2.399477615s ago: executing program 4 (id=2342): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.224667608s ago: executing program 6 (id=2344): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008002000b70300000000000085000000060000009500000000000000abf53132dac49b6815e9b09c76c57858cd5efd8ad83add775e7f7bb2ea7bbca7df8559986c29f3ffb0f712d351bdd7912d8c727138e97c0a8f45131dedaa783f641491b0806bb0a57471f8ee01817d926d03462084ffdb1ec106e7b6210a0f9c50670a7f85abc3c1226b78dfd8567d4fc95ef6e50890187a0a"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) 2.187440729s ago: executing program 6 (id=2345): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000841}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, &(0x7f00000032c0)=""/4096, 0x1000}, 0x0) sendmsg$tipc(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 1.266535946s ago: executing program 6 (id=2346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.141645869s ago: executing program 6 (id=2347): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) close(r0) 1.05823423s ago: executing program 6 (id=2348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, 0x0, 0x0) 0s ago: executing program 6 (id=2349): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 81.825400][ T5775] cgroup: Unknown subsys name 'net' [ 81.992624][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.690466][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.650912][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.660365][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.671810][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.685169][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.693087][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.701504][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.730426][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.754277][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.762572][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.775546][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.784333][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.791846][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.799204][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.801083][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.818442][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.826743][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.842553][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.850450][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.859629][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.867607][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.876835][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.884897][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.892467][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.892838][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.347808][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 86.433810][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 86.532582][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 86.641380][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.648797][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.656784][ T5784] bridge_slave_0: entered allmulticast mode [ 86.665175][ T5784] bridge_slave_0: entered promiscuous mode [ 86.675103][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.682375][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.689646][ T5784] bridge_slave_1: entered allmulticast mode [ 86.697504][ T5784] bridge_slave_1: entered promiscuous mode [ 86.716366][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 86.779821][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.787361][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.795546][ T5793] bridge_slave_0: entered allmulticast mode [ 86.802676][ T5793] bridge_slave_0: entered promiscuous mode [ 86.839398][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.847181][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.855267][ T5788] bridge_slave_0: entered allmulticast mode [ 86.862774][ T5788] bridge_slave_0: entered promiscuous mode [ 86.879658][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.888331][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.895725][ T5793] bridge_slave_1: entered allmulticast mode [ 86.902916][ T5793] bridge_slave_1: entered promiscuous mode [ 86.925498][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.935525][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.942835][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.951390][ T5788] bridge_slave_1: entered allmulticast mode [ 86.958838][ T5788] bridge_slave_1: entered promiscuous mode [ 86.993298][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.035898][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.049344][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.105245][ T5784] team0: Port device team_slave_0 added [ 87.115429][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.144583][ T5784] team0: Port device team_slave_1 added [ 87.152642][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.216859][ T5793] team0: Port device team_slave_0 added [ 87.289847][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.300110][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.312535][ T5795] bridge_slave_0: entered allmulticast mode [ 87.321381][ T5795] bridge_slave_0: entered promiscuous mode [ 87.335614][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.342792][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.355572][ T5795] bridge_slave_1: entered allmulticast mode [ 87.363123][ T5795] bridge_slave_1: entered promiscuous mode [ 87.375677][ T5793] team0: Port device team_slave_1 added [ 87.421393][ T5788] team0: Port device team_slave_0 added [ 87.501798][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.518404][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.550521][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.565054][ T5788] team0: Port device team_slave_1 added [ 87.572560][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.580402][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.607203][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.619854][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.627842][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.654380][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.667868][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.675265][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.701428][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.764990][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.778616][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.789338][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.794519][ T5798] Bluetooth: hci0: command tx timeout [ 87.802127][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.828371][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.841418][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.848615][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.875387][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.886183][ T5798] Bluetooth: hci1: command tx timeout [ 87.953654][ T5798] Bluetooth: hci3: command tx timeout [ 87.953856][ T50] Bluetooth: hci2: command tx timeout [ 87.990295][ T5795] team0: Port device team_slave_0 added [ 88.001046][ T5795] team0: Port device team_slave_1 added [ 88.011353][ T5793] hsr_slave_0: entered promiscuous mode [ 88.019004][ T5793] hsr_slave_1: entered promiscuous mode [ 88.031054][ T5784] hsr_slave_0: entered promiscuous mode [ 88.039091][ T5784] hsr_slave_1: entered promiscuous mode [ 88.045645][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.054416][ T5784] Cannot create hsr debugfs directory [ 88.119010][ T5788] hsr_slave_0: entered promiscuous mode [ 88.125887][ T5788] hsr_slave_1: entered promiscuous mode [ 88.132586][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.140986][ T5788] Cannot create hsr debugfs directory [ 88.192551][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.200974][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.227447][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.245104][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.252230][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.278778][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.419870][ T5795] hsr_slave_0: entered promiscuous mode [ 88.426443][ T5795] hsr_slave_1: entered promiscuous mode [ 88.432673][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.440495][ T5795] Cannot create hsr debugfs directory [ 88.771736][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.787110][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.799282][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.813088][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.895937][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.909343][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.926297][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.938900][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.040195][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.052620][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.067083][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.078189][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.188058][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.202111][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.213038][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.228411][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.299414][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.352228][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.367759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.375228][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.405624][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.413098][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.472798][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.503942][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.538092][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.567739][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.574946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.602429][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.609746][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.650627][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.673000][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.680208][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.720883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.728313][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.767199][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.781804][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.873596][ T50] Bluetooth: hci0: command tx timeout [ 89.926459][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.953779][ T50] Bluetooth: hci1: command tx timeout [ 90.004548][ T743] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.011846][ T743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.032955][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.040244][ T743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.045752][ T50] Bluetooth: hci2: command tx timeout [ 90.052997][ T50] Bluetooth: hci3: command tx timeout [ 90.186908][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.338129][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.408247][ T5793] veth0_vlan: entered promiscuous mode [ 90.471761][ T5793] veth1_vlan: entered promiscuous mode [ 90.521124][ T5784] veth0_vlan: entered promiscuous mode [ 90.557757][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.569378][ T5784] veth1_vlan: entered promiscuous mode [ 90.611187][ T5793] veth0_macvtap: entered promiscuous mode [ 90.623243][ T5793] veth1_macvtap: entered promiscuous mode [ 90.665835][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.679827][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.704727][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.714472][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.723209][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.732012][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.750569][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.801082][ T5784] veth0_macvtap: entered promiscuous mode [ 90.832376][ T5784] veth1_macvtap: entered promiscuous mode [ 90.840783][ T5788] veth0_vlan: entered promiscuous mode [ 90.883076][ T5788] veth1_vlan: entered promiscuous mode [ 90.912618][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.924982][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.938993][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.952107][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.964713][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.976159][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.995845][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.005186][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.014585][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.023400][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.039396][ T5795] veth0_vlan: entered promiscuous mode [ 91.103171][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.112372][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.148121][ T5795] veth1_vlan: entered promiscuous mode [ 91.180795][ T5788] veth0_macvtap: entered promiscuous mode [ 91.221078][ T5788] veth1_macvtap: entered promiscuous mode [ 91.251587][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.259827][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.277784][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.282243][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.349561][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.363240][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.364241][ T5795] veth0_macvtap: entered promiscuous mode [ 91.387552][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.398771][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.411654][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.423109][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.436390][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.456551][ T5795] veth1_macvtap: entered promiscuous mode [ 91.483097][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.501880][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.514417][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.532889][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.550461][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.589693][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.599002][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.609325][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.619080][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.752782][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.776426][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.786791][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.798737][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.808759][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.819853][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.835838][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.892914][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.929166][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.954666][ T50] Bluetooth: hci0: command tx timeout [ 91.964481][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.988022][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.000016][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.011466][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.029639][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.040226][ T50] Bluetooth: hci1: command tx timeout [ 92.072672][ T5880] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.115041][ T50] Bluetooth: hci2: command tx timeout [ 92.115055][ T5798] Bluetooth: hci3: command tx timeout [ 92.151659][ T5795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.160963][ T5795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.170028][ T5795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.179160][ T5795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.227151][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.236797][ T5884] netlink: 'syz.2.4': attribute type 10 has an invalid length. [ 92.247812][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.293524][ T967] cfg80211: failed to load regulatory.db [ 92.406993][ T5886] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.470413][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.498265][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.668156][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.684691][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.790581][ C0] hrtimer: interrupt took 56688 ns [ 92.814647][ T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.823437][ T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.960686][ T5891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.971210][ T5891] IPv6: NLM_F_CREATE should be set when creating new route [ 92.992027][ T5891] IPv6: NLM_F_CREATE should be set when creating new route [ 93.000306][ T5891] IPv6: NLM_F_CREATE should be set when creating new route [ 93.225511][ T5897] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7'. [ 93.531111][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 94.038757][ T5798] Bluetooth: hci0: command tx timeout [ 94.114106][ T5798] Bluetooth: hci1: command tx timeout [ 94.194726][ T5798] Bluetooth: hci2: command tx timeout [ 94.200234][ T5798] Bluetooth: hci3: command tx timeout [ 97.001303][ T5975] syz.2.38[5975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.026741][ T6056] : renamed from bond_slave_0 (while UP) [ 100.712697][ T2979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.888170][ T2979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.085868][ T2979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.198504][ T2979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.081237][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.109404][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.123207][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.142353][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.154840][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 102.162388][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.394480][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.404043][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.412057][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.437017][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.445869][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.454597][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.611011][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.622205][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.630997][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.639281][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.648047][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 102.690880][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.603100][ T6086] chnl_net:caif_netlink_parms(): no params data found [ 103.839461][ T2979] hsr_slave_0: left promiscuous mode [ 103.848943][ T2979] hsr_slave_1: left promiscuous mode [ 103.858173][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.866698][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.877546][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.886254][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.894708][ T2979] bridge_slave_1: left allmulticast mode [ 103.900418][ T2979] bridge_slave_1: left promiscuous mode [ 103.900616][ T6132] syz.0.102[6132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.908017][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.936563][ T2979] bridge_slave_0: left allmulticast mode [ 103.942296][ T2979] bridge_slave_0: left promiscuous mode [ 103.956010][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.024901][ T2979] veth1_macvtap: left promiscuous mode [ 104.031060][ T2979] veth0_macvtap: left promiscuous mode [ 104.043802][ T2979] veth1_vlan: left promiscuous mode [ 104.056440][ T2979] veth0_vlan: left promiscuous mode [ 104.274518][ T5798] Bluetooth: hci1: command tx timeout [ 104.526730][ T5798] Bluetooth: hci2: command tx timeout [ 104.756178][ T5798] Bluetooth: hci3: command tx timeout [ 104.851947][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 104.897633][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 104.938633][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.983130][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.422162][ T2979] bond0 (unregistering): Released all slaves [ 105.581532][ T6093] chnl_net:caif_netlink_parms(): no params data found [ 105.698458][ T6099] chnl_net:caif_netlink_parms(): no params data found [ 105.780455][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.788345][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.796180][ T6086] bridge_slave_0: entered allmulticast mode [ 105.803684][ T6086] bridge_slave_0: entered promiscuous mode [ 105.812183][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.820859][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.828325][ T6086] bridge_slave_1: entered allmulticast mode [ 105.836090][ T6086] bridge_slave_1: entered promiscuous mode [ 105.968576][ T6086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.978470][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.990467][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.998389][ T6093] bridge_slave_0: entered allmulticast mode [ 106.015395][ T6093] bridge_slave_0: entered promiscuous mode [ 106.033253][ T6086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.063832][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.071280][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.079798][ T6093] bridge_slave_1: entered allmulticast mode [ 106.090434][ T6093] bridge_slave_1: entered promiscuous mode [ 106.237879][ T6086] team0: Port device team_slave_0 added [ 106.291510][ T6086] team0: Port device team_slave_1 added [ 106.329989][ T6093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.351783][ T6093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.364599][ T5798] Bluetooth: hci1: command tx timeout [ 106.389616][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.398166][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.405985][ T6099] bridge_slave_0: entered allmulticast mode [ 106.413877][ T6099] bridge_slave_0: entered promiscuous mode [ 106.460331][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.469351][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.477328][ T6099] bridge_slave_1: entered allmulticast mode [ 106.485504][ T6099] bridge_slave_1: entered promiscuous mode [ 106.542546][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.550065][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.582099][ T6086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.594203][ T5798] Bluetooth: hci2: command tx timeout [ 106.604990][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.611995][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.655484][ T6086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.689545][ T6093] team0: Port device team_slave_0 added [ 106.718979][ T6099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.743122][ T6093] team0: Port device team_slave_1 added [ 106.794533][ T6099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.833734][ T5798] Bluetooth: hci3: command tx timeout [ 106.840259][ T6093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.848236][ T6093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.875165][ T6093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.889186][ T6093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.896612][ T6093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.922817][ T6093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.959022][ T6099] team0: Port device team_slave_0 added [ 106.968774][ T6099] team0: Port device team_slave_1 added [ 107.065573][ T6093] hsr_slave_0: entered promiscuous mode [ 107.072692][ T6093] hsr_slave_1: entered promiscuous mode [ 107.098458][ T2979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.120239][ T6086] hsr_slave_0: entered promiscuous mode [ 107.127036][ T6086] hsr_slave_1: entered promiscuous mode [ 107.133838][ T6086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.141470][ T6086] Cannot create hsr debugfs directory [ 107.150534][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.158010][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.186250][ T6099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.200041][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.208431][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.235001][ T6099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.291584][ T2979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.382205][ T2979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.405668][ T6099] hsr_slave_0: entered promiscuous mode [ 107.412200][ T6099] hsr_slave_1: entered promiscuous mode [ 107.422901][ T6099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.430717][ T6099] Cannot create hsr debugfs directory [ 107.453102][ T2979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.971162][ T2979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.085916][ T2979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.101763][ T6093] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.115436][ T6093] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 108.131947][ T6093] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 108.186719][ T2979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.207000][ T6093] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 108.311477][ T2979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.381088][ T6086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.406349][ T6086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.433580][ T5798] Bluetooth: hci1: command tx timeout [ 108.445043][ T6086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.464027][ T6086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.615190][ T6099] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.631338][ T6099] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.673578][ T5798] Bluetooth: hci2: command tx timeout [ 108.677490][ T6099] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.708374][ T6099] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.913917][ T5798] Bluetooth: hci3: command tx timeout [ 108.976600][ T6093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.219543][ T6093] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.260565][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.267864][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.374856][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.382080][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.440984][ T6086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.522012][ T6099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.542249][ T6086] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.606645][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.613981][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.679525][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.686756][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.699719][ T6099] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.789872][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.797220][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.902090][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.909391][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.028281][ T6093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.513891][ T5798] Bluetooth: hci1: command tx timeout [ 110.753557][ T5798] Bluetooth: hci2: command tx timeout [ 110.995223][ T5798] Bluetooth: hci3: command tx timeout [ 111.014748][ T6093] veth0_vlan: entered promiscuous mode [ 111.040183][ T2979] hsr_slave_0: left promiscuous mode [ 111.058080][ T2979] hsr_slave_1: left promiscuous mode [ 111.071719][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.084872][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.093218][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.110994][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.120221][ T2979] bridge_slave_1: left allmulticast mode [ 111.133140][ T2979] bridge_slave_1: left promiscuous mode [ 111.139321][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.155811][ T2979] bridge_slave_0: left allmulticast mode [ 111.161928][ T2979] bridge_slave_0: left promiscuous mode [ 111.175016][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.189134][ T2979] hsr_slave_0: left promiscuous mode [ 111.196458][ T2979] hsr_slave_1: left promiscuous mode [ 111.202485][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.210599][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.219068][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.226761][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.235590][ T2979] bridge_slave_1: left allmulticast mode [ 111.241265][ T2979] bridge_slave_1: left promiscuous mode [ 111.247282][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.258236][ T2979] bridge_slave_0: left allmulticast mode [ 111.264450][ T2979] bridge_slave_0: left promiscuous mode [ 111.270497][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.312326][ T2979] veth1_macvtap: left promiscuous mode [ 111.318229][ T2979] veth0_macvtap: left promiscuous mode [ 111.326031][ T2979] veth1_vlan: left promiscuous mode [ 111.331455][ T2979] veth0_vlan: left promiscuous mode [ 111.339056][ T2979] veth1_macvtap: left promiscuous mode [ 111.344726][ T2979] veth0_macvtap: left promiscuous mode [ 111.350400][ T2979] veth1_vlan: left promiscuous mode [ 111.356144][ T2979] veth0_vlan: left promiscuous mode [ 112.042938][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 112.085947][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 112.132658][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.177398][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.659521][ T2979] bond0 (unregistering): Released all slaves [ 113.155835][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 113.203563][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 113.246761][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.292490][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.762743][ T2979] bond0 (unregistering): Released all slaves [ 113.842499][ T6086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.881102][ T6093] veth1_vlan: entered promiscuous mode [ 113.987822][ T6099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.026351][ T6093] veth0_macvtap: entered promiscuous mode [ 114.058807][ T6093] veth1_macvtap: entered promiscuous mode [ 114.197375][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.237333][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.275807][ T6093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.298042][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.321301][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.345872][ T6093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.392429][ T6093] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.423671][ T6093] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.432467][ T6093] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.456862][ T6093] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.774661][ T6086] veth0_vlan: entered promiscuous mode [ 114.803047][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.825965][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.832197][ T6086] veth1_vlan: entered promiscuous mode [ 114.953924][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.961834][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.987193][ T6086] veth0_macvtap: entered promiscuous mode [ 115.037560][ T6086] veth1_macvtap: entered promiscuous mode [ 115.126233][ T6099] veth0_vlan: entered promiscuous mode [ 115.151704][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.174023][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.188051][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.201155][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.214813][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.231500][ T6099] veth1_vlan: entered promiscuous mode [ 115.281038][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.298856][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.311421][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.329697][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.342178][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.408304][ T6086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.422431][ T6086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.444913][ T6086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.467064][ T6086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.563894][ T6099] veth0_macvtap: entered promiscuous mode [ 115.638530][ T6099] veth1_macvtap: entered promiscuous mode [ 115.816559][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.842001][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.863176][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.893241][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.939327][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.004588][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.056307][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.169304][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.212572][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.249267][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.286964][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.303676][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.325044][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.359755][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.369543][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.391385][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.427763][ T6099] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.443892][ T6099] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.452764][ T6099] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.462555][ T6099] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.493980][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.501986][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.939971][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.973632][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.050817][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.092035][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.991649][ T6314] syzkaller0: entered promiscuous mode [ 118.013498][ T6314] syzkaller0: entered allmulticast mode [ 118.431543][ T6332] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.532976][ T6379] syz.5.129[6379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.669158][ T6398] syzkaller0: entered promiscuous mode [ 122.691342][ T6398] syzkaller0: entered allmulticast mode [ 123.053125][ T6413] syz.6.140[6413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.782275][ T6483] syzkaller0: entered promiscuous mode [ 127.828790][ T6483] syzkaller0: entered allmulticast mode [ 127.882902][ T6495] sock: sock_set_timeout: `syz.0.165' (pid 6495) tries to set negative timeout [ 130.776512][ T6526] syz.5.174[6526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.253225][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.272021][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.340520][ T6720] syzkaller0: entered promiscuous mode [ 141.346364][ T6720] syzkaller0: entered allmulticast mode [ 143.637032][ T6742] lo: entered allmulticast mode [ 143.774257][ T6744] lo: entered promiscuous mode [ 143.779139][ T6744] lo: left allmulticast mode [ 144.124228][ T6754] syz.4.229[6754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.442195][ T6791] lo: entered allmulticast mode [ 145.527129][ T6779] sit0: entered allmulticast mode [ 145.638215][ T6787] sit0: entered promiscuous mode [ 145.737216][ T6793] lo: entered promiscuous mode [ 145.752745][ T6793] lo: left allmulticast mode [ 145.956706][ T6802] syz.6.241[6802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.004422][ T6832] lo: entered allmulticast mode [ 147.098445][ T6835] lo: entered promiscuous mode [ 147.114774][ T6835] lo: left allmulticast mode [ 147.399964][ T6840] syz.6.253[6840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.794157][ T6857] netlink: 'syz.6.259': attribute type 10 has an invalid length. [ 150.901225][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.913740][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.986653][ T6945] bridge0: entered allmulticast mode [ 151.068017][ T6951] bridge_slave_1: left allmulticast mode [ 151.102699][ T6951] bridge_slave_1: left promiscuous mode [ 151.175578][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.211651][ T6951] bridge_slave_0: left allmulticast mode [ 151.233531][ T6951] bridge_slave_0: left promiscuous mode [ 151.247456][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.676502][ T7051] Illegal XDP return value 668494135 on prog (id 165) dev N/A, expect packet loss! [ 163.523024][ T7191] syz.0.364[7191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.538472][ T7195] sock: sock_timestamping_bind_phc: sock not bind to device [ 164.455570][ T7214] pim6reg1: entered promiscuous mode [ 164.460964][ T7214] pim6reg1: entered allmulticast mode [ 165.314747][ T5798] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 171.038117][ T7416] syz.0.431[7416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.423860][ T7558] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 185.443675][ T7558] syzkaller0: linktype set to 769 [ 188.054631][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.069894][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.086572][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.131602][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.144686][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.152533][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.361489][ T3542] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.606540][ T3542] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.794631][ T3542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.071804][ T3542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.776919][ T7641] chnl_net:caif_netlink_parms(): no params data found [ 190.193578][ T50] Bluetooth: hci0: command tx timeout [ 190.301582][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.313490][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.339426][ T7641] bridge_slave_0: entered allmulticast mode [ 190.365736][ T7641] bridge_slave_0: entered promiscuous mode [ 190.388679][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.403724][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.411133][ T7641] bridge_slave_1: entered allmulticast mode [ 190.451704][ T7641] bridge_slave_1: entered promiscuous mode [ 190.744564][ T5798] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 190.832658][ T7641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.964542][ T5798] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 191.116378][ T7641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.401451][ T7738] syz.4.529[7738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.676187][ T7641] team0: Port device team_slave_0 added [ 191.801763][ T7641] team0: Port device team_slave_1 added [ 191.872236][ T5798] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 192.102350][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.143179][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.170284][ T7641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.273494][ T5798] Bluetooth: hci0: command tx timeout [ 192.282748][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.292307][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.319572][ T7641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.477991][ T7641] hsr_slave_0: entered promiscuous mode [ 192.498275][ T7641] hsr_slave_1: entered promiscuous mode [ 192.505050][ T5798] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 192.512599][ T5798] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 192.550897][ T7641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.559942][ T7641] Cannot create hsr debugfs directory [ 192.993754][ T5798] Bluetooth: hci1: command tx timeout [ 193.600501][ T3542] hsr_slave_0: left promiscuous mode [ 193.647045][ T3542] hsr_slave_1: left promiscuous mode [ 193.674868][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.682560][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.735796][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.771338][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.785211][ T3542] bridge_slave_1: left allmulticast mode [ 193.791059][ T3542] bridge_slave_1: left promiscuous mode [ 193.803679][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.841310][ T3542] bridge_slave_0: left allmulticast mode [ 193.860579][ T3542] bridge_slave_0: left promiscuous mode [ 193.894551][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.935229][ T5798] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 193.968253][ T3542] veth1_macvtap: left promiscuous mode [ 193.975151][ T3542] veth0_macvtap: left promiscuous mode [ 193.981077][ T3542] veth1_vlan: left promiscuous mode [ 193.986988][ T3542] veth0_vlan: left promiscuous mode [ 194.353844][ T5798] Bluetooth: hci0: command tx timeout [ 194.682732][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.689716][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.165937][ T3542] team0 (unregistering): Port device team_slave_1 removed [ 195.220671][ T3542] team0 (unregistering): Port device team_slave_0 removed [ 195.266840][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.319323][ T3542] bond0 (unregistering): (slave 30): Releasing backup interface [ 195.812972][ T3542] bond0 (unregistering): Released all slaves [ 195.953593][ T5798] Bluetooth: hci2: command tx timeout [ 195.994126][ T7816] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 196.427618][ T7641] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 196.443670][ T5798] Bluetooth: hci0: command tx timeout [ 196.459171][ T7641] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 196.512534][ T7641] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 196.542435][ T7641] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.700392][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.725989][ T7641] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.742294][ T743] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.750294][ T743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.779300][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.786552][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.182992][ T7641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.590866][ T7641] veth0_vlan: entered promiscuous mode [ 197.618277][ T7641] veth1_vlan: entered promiscuous mode [ 197.669837][ T7641] veth0_macvtap: entered promiscuous mode [ 197.681470][ T7641] veth1_macvtap: entered promiscuous mode [ 197.718829][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.730507][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.742345][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.753593][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.763947][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.775335][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.787748][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.812339][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.831987][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.844046][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.856615][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.870329][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.891756][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.904570][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.931041][ T7641] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.949700][ T7641] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.962085][ T7641] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.971383][ T7641] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.094923][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.102791][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.163056][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.174055][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.573718][ T5798] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 200.601606][ T5798] Bluetooth: hci0: command tx timeout [ 201.014783][ T7946] syz.4.575[7946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.152061][ T8004] syz.6.602[8004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.139819][ T8030] syz.6.614[8030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.310543][ T8061] syz.4.627[8061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.530756][ T5798] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 207.162597][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.491480][ T8113] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 208.511691][ T5798] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 211.846816][ T8200] syz.7.685[8200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.617765][ T8256] syz.6.709[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.764826][ T8259] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 214.184071][ T5798] Bluetooth: hci2: ISO packet for unknown connection handle 255 [ 214.558639][ T5798] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 215.071748][ T5798] Bluetooth: hci0: ISO packet for unknown connection handle 255 [ 215.310971][ T5790] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 215.593514][ T5790] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 216.070680][ T5790] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 216.273530][ T5790] Bluetooth: hci2: command 0x206a tx timeout [ 216.275868][ T50] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 216.349024][ T50] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 217.163707][ T5798] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 217.177435][ T50] Bluetooth: hci0: command 0x206a tx timeout [ 217.438542][ T50] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 217.475127][ T8371] syz.4.760[8371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.814895][ T50] Bluetooth: hci0: adv larger than maximum supported [ 217.832302][ T50] Bluetooth: hci0: Malformed LE Event: 0x0d [ 218.115626][ T5787] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 218.122235][ T5787] Bluetooth: hci1: command 0x206a tx timeout [ 218.246284][ T5787] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 218.481191][ T8398] syz.4.773[8398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.735946][ T5787] Bluetooth: hci3: adv larger than maximum supported [ 219.747464][ T5787] Bluetooth: hci3: Malformed LE Event: 0x0d [ 221.895259][ T5787] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 225.009367][ T5787] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 225.862019][ T5789] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 226.455375][ T8566] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 226.489117][ T8566] syzkaller0: entered promiscuous mode [ 226.495353][ T8566] syzkaller0: entered allmulticast mode [ 227.476786][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 227.476810][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 227.482862][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 227.562206][ T8600] syz.6.861[8600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.399142][ T8629] syz.6.873[8629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.902972][ T5798] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 231.077972][ T5798] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 231.440841][ T8661] syz.4.887[8661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.649623][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 231.737385][ T8674] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 232.468922][ T8694] syz.7.901[8694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.502871][ T5798] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 232.941405][ T5798] Bluetooth: hci3: Malformed LE Event: 0x0b [ 233.757317][ T5798] Bluetooth: hci3: Malformed LE Event: 0x0b [ 234.722465][ T5798] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 242.530698][ T8835] syz.4.962[8835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.611330][ T8860] syz.4.973[8860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.964084][ T5798] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 244.082141][ T8870] syz.5.985[8870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.621206][ T8883] bridge0: port 3(bond0) entered blocking state [ 244.645834][ T8883] bridge0: port 3(bond0) entered disabled state [ 244.660430][ T8883] bond0: entered allmulticast mode [ 244.680739][ T8883] bond_slave_0: entered allmulticast mode [ 244.697091][ T8883] bond_slave_1: entered allmulticast mode [ 244.745258][ T8883] bond0: entered promiscuous mode [ 244.754279][ T8883] bond_slave_0: entered promiscuous mode [ 244.774848][ T8883] bond_slave_1: entered promiscuous mode [ 244.808082][ T8883] bridge0: port 3(bond0) entered blocking state [ 244.815117][ T8883] bridge0: port 3(bond0) entered forwarding state [ 245.089831][ T5798] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 245.488896][ T8902] syz.5.991[8902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.830298][ T8908] pim6reg1: entered promiscuous mode [ 245.859971][ T8908] pim6reg1: entered allmulticast mode [ 246.429082][ T5798] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 247.899791][ T5798] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 249.529098][ T5798] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 250.276548][ T5798] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 250.851044][ T9016] syzkaller0: entered promiscuous mode [ 250.863472][ T9016] syzkaller0: entered allmulticast mode [ 252.270110][ T9034] syz.5.1049[9034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.476097][ T9040] cgroup: fork rejected by pids controller in /syz4 [ 252.702275][ T5798] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 253.768939][ T3542] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.058313][ T3542] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.236111][ T3542] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.536742][ T3542] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.764363][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.774564][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.786980][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.805080][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.817188][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 254.834548][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.018243][ T5798] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 256.124025][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.148510][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.678175][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 256.742553][ T5798] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 256.815700][ T5798] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 256.913490][ T5798] Bluetooth: hci1: command tx timeout [ 257.415148][ T3542] hsr_slave_0: left promiscuous mode [ 257.436940][ T3542] hsr_slave_1: left promiscuous mode [ 257.466301][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.485071][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.500395][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.510239][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.526334][ T3542] bridge_slave_1: left promiscuous mode [ 257.540010][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.564609][ T3542] bridge_slave_0: left allmulticast mode [ 257.570458][ T3542] bridge_slave_0: left promiscuous mode [ 257.580848][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.646784][ T3542] veth1_macvtap: left promiscuous mode [ 257.652550][ T3542] veth0_macvtap: left promiscuous mode [ 257.658865][ T3542] veth1_vlan: left promiscuous mode [ 257.664686][ T3542] veth0_vlan: left promiscuous mode [ 258.611098][ T3542] team0 (unregistering): Port device team_slave_1 removed [ 258.702996][ T3542] team0 (unregistering): Port device team_slave_0 removed [ 258.754153][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.830379][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.001447][ T5798] Bluetooth: hci1: command tx timeout [ 259.735045][ T3542] bond0 (unregistering): Released all slaves [ 261.076612][ T5798] Bluetooth: hci1: command tx timeout [ 262.042706][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.050172][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.058523][ T9075] bridge_slave_0: entered allmulticast mode [ 262.067555][ T9075] bridge_slave_0: entered promiscuous mode [ 262.122533][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.130466][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.138361][ T9075] bridge_slave_1: entered allmulticast mode [ 262.184909][ T9075] bridge_slave_1: entered promiscuous mode [ 262.331008][ T5798] Bluetooth: hci2: Malformed LE Event: 0x0b [ 262.377051][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.440037][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.634371][ T9075] team0: Port device team_slave_0 added [ 262.658715][ T9075] team0: Port device team_slave_1 added [ 262.744928][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.759257][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.788053][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.840959][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.860895][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.898077][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.082320][ T9075] hsr_slave_0: entered promiscuous mode [ 263.111689][ T9075] hsr_slave_1: entered promiscuous mode [ 263.121500][ T9075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.137363][ T9075] Cannot create hsr debugfs directory [ 263.162082][ T5798] Bluetooth: hci1: command tx timeout [ 263.249853][ T5798] Bluetooth: hci0: Malformed LE Event: 0x0b [ 263.503417][ T9226] netlink: 'syz.7.1129': attribute type 10 has an invalid length. [ 263.523871][ T9226] bridge0: port 3(bond0) entered disabled state [ 263.530629][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.539630][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.595105][ T9226] bridge0: port 3(bond0) entered blocking state [ 263.601552][ T9226] bridge0: port 3(bond0) entered forwarding state [ 263.608527][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.615786][ T9226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.623547][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.630945][ T9226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.660402][ T9226] bridge0: port 3(bond0) entered disabled state [ 263.667031][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.674368][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.701705][ T9227] delete_channel: no stack [ 263.707799][ T9225] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1129'. [ 264.085406][ T9235] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1133'. [ 264.305038][ T5798] Bluetooth: hci0: Malformed LE Event: 0x0b [ 264.529725][ T9075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.545417][ T9075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.568387][ T9075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.601405][ T9249] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1139'. [ 265.105333][ T9249] bond0 (unregistering): left allmulticast mode [ 265.112238][ T9249] bond_slave_0: left allmulticast mode [ 265.119103][ T9249] bond_slave_1: left allmulticast mode [ 265.126153][ T9249] bond0 (unregistering): left promiscuous mode [ 265.133037][ T9249] bond_slave_0: left promiscuous mode [ 265.152815][ T9249] bond_slave_1: left promiscuous mode [ 265.164414][ T9249] bridge0: port 3(bond0) entered disabled state [ 265.255128][ T9249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.320973][ T9249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.371776][ T9249] bond0 (unregistering): Released all slaves [ 265.393550][ T9075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.409643][ T9264] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1146'. [ 265.643414][ T5798] Bluetooth: hci0: Malformed LE Event: 0x0d [ 265.724395][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.815840][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.861209][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.868675][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.938419][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.945764][ T743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.607994][ T9304] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1156'. [ 266.688105][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.810995][ T5798] Bluetooth: hci2: Malformed LE Event: 0x0d [ 267.387055][ T9321] Zero length message leads to an empty skb [ 267.553203][ T9075] veth0_vlan: entered promiscuous mode [ 267.627367][ T9075] veth1_vlan: entered promiscuous mode [ 267.806618][ T9075] veth0_macvtap: entered promiscuous mode [ 267.856226][ T9075] veth1_macvtap: entered promiscuous mode [ 267.873008][ T5798] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 267.890296][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.909216][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.930165][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.953705][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.974582][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.985833][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.005717][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.044634][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.055452][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.077166][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.094039][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.120797][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.144664][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.175450][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.207966][ T9075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.233333][ T9075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.248776][ T9075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.261913][ T9075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.467684][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.507427][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.657870][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.670173][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.827036][ T9354] syz.5.1186[9354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.219090][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 269.345146][ T9371] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1184'. [ 269.688244][ T9381] syz.4.1190[9381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.758863][ T9378] delete_channel: no stack [ 270.126078][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 271.216833][ T9407] delete_channel: no stack [ 271.411399][ T9413] syz.4.1203[9413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.590424][ T5798] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 272.353595][ T9436] delete_channel: no stack [ 272.832148][ T9446] syz.5.1219[9446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.925520][ T5798] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 275.328421][ T9444] veth1_macvtap: left promiscuous mode [ 275.339217][ T9455] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 275.350971][ T9472] netlink: 'syz.5.1228': attribute type 10 has an invalid length. [ 275.400093][ T9472] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 276.780482][ T9513] netlink: 'syz.7.1244': attribute type 29 has an invalid length. [ 278.949926][ T9523] netlink: 'syz.5.1248': attribute type 25 has an invalid length. [ 279.059800][ T5798] Bluetooth: hci3: Malformed LE Event: 0x0d [ 279.441639][ T9552] netlink: 'syz.6.1260': attribute type 10 has an invalid length. [ 279.610996][ T9554] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 279.746901][ T5798] Bluetooth: hci2: Malformed LE Event: 0x0d [ 279.789932][ T9557] netlink: 'syz.5.1262': attribute type 29 has an invalid length. [ 280.439507][ T5798] Bluetooth: hci2: Malformed LE Event: 0x0d [ 280.449037][ T9583] netlink: 'syz.7.1273': attribute type 10 has an invalid length. [ 281.330233][ T5798] Bluetooth: hci3: Malformed LE Event: 0x0b [ 282.049001][ T9632] syz.4.1295 uses obsolete (PF_INET,SOCK_PACKET) [ 282.182788][ T9637] sit0: entered allmulticast mode [ 282.694254][ T9653] netlink: 'syz.5.1304': attribute type 21 has an invalid length. [ 282.729006][ T9653] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1304'. [ 282.904939][ T5798] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 283.148629][ T9670] netlink: 'syz.5.1313': attribute type 10 has an invalid length. [ 284.036121][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 284.726675][ T9706] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1330'. [ 284.766579][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 284.902003][ T9711] mac80211_hwsim hwsim16 »»»»»»: renamed from wlan0 [ 285.726067][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 285.768670][ T5798] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 286.119868][ T9742] delete_channel: no stack [ 286.424036][ T5798] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 286.554723][ T5798] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 287.294940][ T5798] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 287.341054][ T5798] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 287.520943][ T9794] sit0: entered allmulticast mode [ 287.709052][ T9794] sit0: entered promiscuous mode [ 287.783390][ T5798] Bluetooth: hci3: Malformed LE Event: 0x0b [ 288.316233][ T5798] Bluetooth: hci3: Malformed LE Event: 0x0b [ 288.709976][ T5798] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 289.118178][ T5798] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 290.023569][ T5798] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 290.340667][ T5798] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 290.637810][ T5798] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 290.818272][ T9884] netlink: 'syz.6.1406': attribute type 10 has an invalid length. [ 290.844333][ T9884] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1406'. [ 290.859420][ T9884] team0: entered promiscuous mode [ 290.867985][ T9884] team_slave_0: entered promiscuous mode [ 290.877647][ T9884] team_slave_1: entered promiscuous mode [ 291.142399][ T5798] Bluetooth: hci1: Malformed LE Event: 0x0b [ 291.344072][ T9903] sit0: entered allmulticast mode [ 291.520038][ T9903] sit0: entered promiscuous mode [ 292.310987][ T5798] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 292.616410][ T9942] netlink: 'syz.6.1433': attribute type 10 has an invalid length. [ 292.631762][ T9942] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1433'. [ 294.146807][ T5798] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 294.634556][ T5798] Bluetooth: hci0: Malformed LE Event: 0x0b [ 295.156406][ T5798] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 296.076308][ T5798] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 297.287934][T10053] delete_channel: no stack [ 297.431924][ T5798] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 298.881965][ T5798] Bluetooth: hci1: Malformed LE Event: 0x0b [ 299.631986][ T5798] Bluetooth: hci2: Malformed LE Event: 0x0b [ 300.281077][ T5798] Bluetooth: hci0: Malformed LE Event: 0x0b [ 301.014534][ T5798] Bluetooth: hci3: Malformed LE Event: 0x0b [ 301.355652][T10179] wg2: entered promiscuous mode [ 301.367808][T10179] wg2: entered allmulticast mode [ 302.886957][ T5798] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 303.102330][T10205] syz.5.1554[10205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.445522][ T5798] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 305.229916][T10225] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 305.248882][T10225] pim6reg1: entered promiscuous mode [ 305.255930][T10225] pim6reg1: entered allmulticast mode [ 305.488257][T10234] syz.7.1566[10234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.272754][ T5798] Bluetooth: hci3: Malformed LE Event: 0x0b [ 308.152601][T10266] syz.5.1577[10266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.178890][ T5798] Bluetooth: hci3: Malformed LE Event: 0x0b [ 311.376517][T10306] syz.7.1590[10306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.641597][ T5798] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 312.442148][T10334] syz.5.1600[10334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.666333][ T50] Bluetooth: hci2: Malformed LE Event: 0x0b [ 314.385378][T10378] syz.4.1614[10378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.514966][ T50] Bluetooth: hci0: command 0x206a tx timeout [ 314.664010][ T5798] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 314.975974][T10390] syz.5.1619[10390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.976239][T10390] syz.5.1619[10390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.066801][T10390] syz.5.1619[10390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.224764][T10390] syz.5.1619[10390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.064790][T10405] syz.4.1626[10405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.344528][ T5798] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 317.566538][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.573044][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.597852][T10438] syz.4.1638[10438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.611858][ T5798] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 318.715158][ T5798] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 319.106228][T10480] syz.6.1654[10480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.556989][ T5798] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 322.496478][ T5798] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 323.867474][ T5798] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 324.136568][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 325.776944][ T5798] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 327.293001][ T5798] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 328.859500][ T5798] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 331.463930][T10676] syzkaller0: entered promiscuous mode [ 331.490422][T10676] syzkaller0: entered allmulticast mode [ 335.995474][ T5798] Bluetooth: hci1: ISO packet for unknown connection handle 19 [ 343.625501][ T5798] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 343.825018][ T5798] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 344.358049][ T5798] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 346.523517][ T5798] Bluetooth: hci1: Malformed LE Event: 0x0b [ 346.656308][ T5798] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 348.514559][ T5798] Bluetooth: hci3: Malformed LE Event: 0x0b [ 348.788505][ T5798] Bluetooth: hci0: Malformed LE Event: 0x0b [ 352.159185][T10964] pim6reg1: entered promiscuous mode [ 352.184875][T10964] pim6reg1: entered allmulticast mode [ 352.949389][T10990] syzkaller0: entered promiscuous mode [ 352.964779][T10990] syzkaller0: entered allmulticast mode [ 359.172871][T11060] syz.6.1858[11060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.173027][T11060] syz.6.1858[11060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.315066][ T5798] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 360.892620][T11113] syzkaller0: entered promiscuous mode [ 360.952172][T11113] syzkaller0: entered allmulticast mode [ 361.096080][ T5798] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 363.897762][T11146] pim6reg1: entered promiscuous mode [ 363.925604][T11146] pim6reg1: entered allmulticast mode [ 364.042759][ T5798] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 364.239219][ T5798] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 364.741466][T11170] syzkaller0: entered promiscuous mode [ 364.786592][T11170] syzkaller0: entered allmulticast mode [ 364.850070][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 367.973838][ T5798] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 368.512078][ T5798] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 369.344321][ T5798] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 369.930481][ T5798] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 370.406498][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 370.496378][T11267] syzkaller0: entered promiscuous mode [ 370.540696][T11267] syzkaller0: entered allmulticast mode [ 374.458516][ T5798] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 376.255516][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 379.017363][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.044946][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.127987][ T50] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 381.076297][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 381.897667][ T5798] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 384.142546][T11419] syzkaller0: entered promiscuous mode [ 384.177817][T11419] syzkaller0: entered allmulticast mode [ 384.414198][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 388.507361][ T5798] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 389.881557][T11481] syzkaller0: entered promiscuous mode [ 389.900073][T11481] syzkaller0: entered allmulticast mode [ 393.273501][ T5798] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 393.650068][T11515] syzkaller0: entered promiscuous mode [ 393.667288][T11515] syzkaller0: entered allmulticast mode [ 394.145828][ T5798] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 395.298199][ T5798] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 397.804485][ T5798] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 398.232672][T11597] syzkaller0: entered promiscuous mode [ 398.250823][T11597] syzkaller0: entered allmulticast mode [ 398.703794][T11611] syz.6.2058[11611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.657530][T11631] netlink: 'syz.5.2066': attribute type 21 has an invalid length. [ 401.703429][T11631] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2066'. [ 401.720384][T11635] syz.4.2067[11635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.743491][T11631] netlink: 'syz.5.2066': attribute type 5 has an invalid length. [ 401.820463][T11631] netlink: 'syz.5.2066': attribute type 6 has an invalid length. [ 401.850336][T11631] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2066'. [ 403.051060][T11678] netlink: 'syz.4.2087': attribute type 10 has an invalid length. [ 403.062870][T11678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2087'. [ 403.079885][T11678] dummy0: entered promiscuous mode [ 403.131511][T11678] bridge0: port 3(dummy0) entered blocking state [ 403.154831][T11678] bridge0: port 3(dummy0) entered disabled state [ 403.204835][T11678] dummy0: entered allmulticast mode [ 403.303318][T11678] bridge0: port 3(dummy0) entered blocking state [ 403.312949][T11678] bridge0: port 3(dummy0) entered forwarding state [ 404.013954][T11698] caif0: entered promiscuous mode [ 404.031337][T11698] caif0: entered allmulticast mode [ 404.202038][T11704] syz.5.2098[11704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 404.866224][T11731] syz.4.2111[11731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.212998][T11742] IPv6: Can't replace route, no match found [ 405.710392][T11763] syz.4.2125[11763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.324710][T11787] netlink: 'syz.4.2137': attribute type 10 has an invalid length. [ 406.418858][T11787] team0: Device hsr_slave_0 failed to register rx_handler [ 406.559359][T11793] syz.7.2140[11793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.674912][T11795] bridge_slave_0: entered promiscuous mode [ 406.704741][T11795] bridge_slave_0: entered allmulticast mode [ 407.082757][T11814] syz.5.2150[11814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.082899][T11814] syz.5.2150[11814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.325453][T11811] netlink: 'syz.7.2149': attribute type 10 has an invalid length. [ 409.345164][T11811] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2149'. [ 409.354244][T11811] dummy0: entered promiscuous mode [ 409.359984][T11811] bridge0: port 3(dummy0) entered blocking state [ 409.367999][T11811] bridge0: port 3(dummy0) entered disabled state [ 409.374899][T11811] dummy0: entered allmulticast mode [ 410.132086][T11848] netlink: 'syz.5.2166': attribute type 10 has an invalid length. [ 410.141953][T11848] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2166'. [ 410.157180][T11848] dummy0: entered promiscuous mode [ 410.249471][T11848] bridge0: port 3(dummy0) entered blocking state [ 410.258628][T11848] bridge0: port 3(dummy0) entered disabled state [ 410.287733][T11848] dummy0: entered allmulticast mode [ 410.559552][T11848] bridge0: port 3(dummy0) entered blocking state [ 410.573924][T11848] bridge0: port 3(dummy0) entered listening state [ 410.962925][T11866] syz.7.2179[11866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 413.682564][T11891] syz.7.2181[11891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 413.714145][ T5798] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 413.970080][ T5798] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 414.315629][T11910] syzkaller0: entered promiscuous mode [ 414.354209][T11910] syzkaller0: entered allmulticast mode [ 414.894980][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 415.082090][T11937] syz.6.2202[11937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.089567][T11937] syz.6.2202[11937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.187320][T11941] syz.6.2204[11941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.201039][T11941] syz.6.2204[11941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.220848][T11941] syz.6.2204[11941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.233273][T11941] syz.6.2204[11941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.730873][ T5798] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 419.085226][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.112208][T11997] syzkaller0: entered promiscuous mode [ 419.118387][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.125641][T11997] syzkaller0: entered allmulticast mode [ 419.135540][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.149999][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.163663][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 419.172080][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.236288][ T5798] Bluetooth: hci3: command tx timeout [ 422.196157][ T2999] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.374593][ T2999] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.539413][ T2999] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.706022][ T2999] bond0: (slave netdevsim0): Releasing backup interface [ 422.732272][ T2999] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.800446][T12054] veth1_macvtap: left promiscuous mode [ 422.814490][T12054] macsec0: entered promiscuous mode [ 423.314784][ T5798] Bluetooth: hci3: command tx timeout [ 423.479960][T12001] chnl_net:caif_netlink_parms(): no params data found [ 423.747668][T12075] syzkaller0: entered promiscuous mode [ 423.756490][T12075] syzkaller0: entered allmulticast mode [ 423.802437][T12075] syzkaller0: create flow: hash 2656587402 index 1 [ 423.815378][ T743] syzkaller0: tun_net_xmit 48 [ 423.992137][T12074] syzkaller0: delete flow: hash 2656587402 index 1 [ 425.398949][ T5798] Bluetooth: hci3: command tx timeout [ 425.725496][ C0] bridge0: port 3(dummy0) entered learning state [ 426.583899][T12001] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.591215][T12001] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.612546][T12001] bridge_slave_0: entered allmulticast mode [ 426.639877][T12001] bridge_slave_0: entered promiscuous mode [ 426.724573][T12001] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.742177][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.765528][T12001] bridge_slave_1: entered allmulticast mode [ 426.790439][T12001] bridge_slave_1: entered promiscuous mode [ 426.931106][T12001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.946723][T12001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.176466][T12001] team0: Port device team_slave_0 added [ 427.209681][T12001] team0: Port device team_slave_1 added [ 427.406617][T12001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.429527][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.473363][ T5798] Bluetooth: hci3: command tx timeout [ 427.477943][T12001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.590897][T12001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.607007][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.656605][T12001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.244291][T12001] hsr_slave_0: entered promiscuous mode [ 428.271217][T12001] hsr_slave_1: entered promiscuous mode [ 428.284736][T12001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.292479][T12001] Cannot create hsr debugfs directory [ 428.407722][ T2999] hsr_slave_0: left promiscuous mode [ 428.418593][ T2999] hsr_slave_1: left promiscuous mode [ 428.435203][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.453678][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.473434][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.481298][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.510023][ T2999] dummy0: left allmulticast mode [ 428.523465][ T2999] bridge0: port 3(dummy0) entered disabled state [ 428.534082][ T2999] bridge_slave_1: left allmulticast mode [ 428.539815][ T2999] bridge_slave_1: left promiscuous mode [ 428.548534][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.564031][ T2999] bridge_slave_0: left allmulticast mode [ 428.569904][ T2999] bridge_slave_0: left promiscuous mode [ 428.575796][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.637519][ T2999] veth1_macvtap: left promiscuous mode [ 428.652090][ T2999] veth0_macvtap: left promiscuous mode [ 428.659726][ T2999] veth1_vlan: left promiscuous mode [ 428.671395][ T2999] veth0_vlan: left promiscuous mode [ 429.502998][ T2999] team0 (unregistering): Port device team_slave_1 removed [ 429.562383][ T2999] team0 (unregistering): Port device team_slave_0 removed [ 429.625390][ T2999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.681633][ T2999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.257948][ T2999] bond0 (unregistering): Released all slaves [ 430.351770][T12140] veth0_vlan: entered allmulticast mode [ 430.392199][T12145] ÿÿÿÿÿÿ: renamed from vlan1 [ 430.786007][T12166] syz.6.2296[12166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.357917][T12175] syzkaller0: entered promiscuous mode [ 433.375145][T12175] syzkaller0: entered allmulticast mode [ 433.450463][T12180] syzkaller0: entered promiscuous mode [ 433.456167][T12180] syzkaller0: entered allmulticast mode [ 437.950143][T12187] veth1_macvtap: left promiscuous mode [ 437.958059][T12187] macsec0: entered promiscuous mode [ 437.964113][T12187] macsec0: entered allmulticast mode [ 440.448930][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.456512][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.473488][T12001] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 441.522247][T12001] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 441.549528][T12001] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 441.589481][T12001] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 441.616927][T12238] syz.4.2319[12238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.815061][T12001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.898978][T12001] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.914910][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.922087][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.970983][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.978186][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.090900][T12001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.228706][T12001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.475480][T12288] macsec0: entered allmulticast mode [ 452.678078][ T7836] [ 452.680617][ T7836] ====================================================== [ 452.687754][ T7836] WARNING: possible circular locking dependency detected [ 452.694787][ T7836] syzkaller #0 Not tainted [ 452.699207][ T7836] ------------------------------------------------------ [ 452.706227][ T7836] napi/wg1-0/7836 is trying to acquire lock: [ 452.712214][ T7836] ffff8880b8f29370 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 452.720855][ T7836] [ 452.720855][ T7836] but task is already holding lock: [ 452.728229][ T7836] ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 452.737121][ T7836] [ 452.737121][ T7836] which lock already depends on the new lock. [ 452.737121][ T7836] [ 452.747794][ T7836] [ 452.747794][ T7836] the existing dependency chain (in reverse order) is: [ 452.757254][ T7836] [ 452.757254][ T7836] -> #1 (&base->lock){-.-.}-{2:2}: [ 452.764672][ T7836] _raw_spin_lock_irqsave+0xa8/0xf0 [ 452.770411][ T7836] lock_timer_base+0x123/0x270 [ 452.775719][ T7836] __mod_timer+0xf9/0xdb0 [ 452.780713][ T7836] queue_delayed_work_on+0x12a/0x1e0 [ 452.786626][ T7836] kvfree_call_rcu+0x541/0x780 [ 452.792427][ T7836] rtnl_register_internal+0x486/0x590 [ 452.798385][ T7836] rtnl_register+0x32/0x70 [ 452.803608][ T7836] ip_rt_init+0x2ec/0x390 [ 452.808549][ T7836] ip_init+0xe/0x20 [ 452.812899][ T7836] inet_init+0x2c1/0x3e0 [ 452.817714][ T7836] do_one_initcall+0x1fd/0x750 [ 452.823035][ T7836] do_initcall_level+0x137/0x1f0 [ 452.828596][ T7836] do_initcalls+0x69/0xd0 [ 452.833457][ T7836] kernel_init_freeable+0x3d2/0x570 [ 452.839283][ T7836] kernel_init+0x1d/0x1c0 [ 452.844141][ T7836] ret_from_fork+0x48/0x80 [ 452.849121][ T7836] ret_from_fork_asm+0x11/0x20 [ 452.854463][ T7836] [ 452.854463][ T7836] -> #0 (krc.lock){..-.}-{2:2}: [ 452.861522][ T7836] __lock_acquire+0x2ddb/0x7c80 [ 452.866918][ T7836] lock_acquire+0x197/0x410 [ 452.871970][ T7836] _raw_spin_lock+0x2e/0x40 [ 452.877156][ T7836] kvfree_call_rcu+0x15a/0x780 [ 452.882633][ T7836] trie_delete_elem+0x535/0x6a0 [ 452.888029][ T7836] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 452.894133][ T7836] bpf_trace_run3+0x1e7/0x400 [ 452.899351][ T7836] __bpf_trace_timer_start+0x14a/0x1b0 [ 452.905442][ T7836] enqueue_timer+0x398/0x530 [ 452.910567][ T7836] __mod_timer+0x91e/0xdb0 [ 452.915522][ T7836] mod_peer_timer+0x17a/0x250 [ 452.920729][ T7836] wg_packet_rx_poll+0xdaa/0x2270 [ 452.926286][ T7836] __napi_poll+0xc0/0x460 [ 452.931156][ T7836] napi_threaded_poll+0x41d/0x870 [ 452.936743][ T7836] kthread+0x2fa/0x390 [ 452.941437][ T7836] ret_from_fork+0x48/0x80 [ 452.946385][ T7836] ret_from_fork_asm+0x11/0x20 [ 452.951691][ T7836] [ 452.951691][ T7836] other info that might help us debug this: [ 452.951691][ T7836] [ 452.962030][ T7836] Possible unsafe locking scenario: [ 452.962030][ T7836] [ 452.969602][ T7836] CPU0 CPU1 [ 452.974986][ T7836] ---- ---- [ 452.980359][ T7836] lock(&base->lock); [ 452.984447][ T7836] lock(krc.lock); [ 452.990812][ T7836] lock(&base->lock); [ 452.997473][ T7836] lock(krc.lock); [ 453.001307][ T7836] [ 453.001307][ T7836] *** DEADLOCK *** [ 453.001307][ T7836] [ 453.009479][ T7836] 3 locks held by napi/wg1-0/7836: [ 453.014774][ T7836] #0: ffffffff8cd2fe80 (rcu_read_lock_bh){....}-{1:2}, at: mod_peer_timer+0x1f/0x250 [ 453.024375][ T7836] #1: ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 453.033731][ T7836] #2: ffffffff8cd2fe20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 453.043062][ T7836] [ 453.043062][ T7836] stack backtrace: [ 453.048972][ T7836] CPU: 1 PID: 7836 Comm: napi/wg1-0 Not tainted syzkaller #0 [ 453.056444][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 453.066634][ T7836] Call Trace: [ 453.069973][ T7836] [ 453.072950][ T7836] dump_stack_lvl+0x16c/0x230 [ 453.077661][ T7836] ? load_image+0x3b0/0x3b0 [ 453.082197][ T7836] ? show_regs_print_info+0x20/0x20 [ 453.087557][ T7836] ? print_circular_bug+0x12b/0x1a0 [ 453.092776][ T7836] check_noncircular+0x2bd/0x3c0 [ 453.097734][ T7836] ? print_deadlock_bug+0x5d0/0x5d0 [ 453.102946][ T7836] ? lockdep_lock+0xe0/0x220 [ 453.107635][ T7836] ? _find_first_zero_bit+0xd3/0x100 [ 453.112938][ T7836] __lock_acquire+0x2ddb/0x7c80 [ 453.117814][ T7836] ? stack_trace_snprint+0xf0/0xf0 [ 453.122942][ T7836] ? __stack_depot_save+0x560/0x630 [ 453.128253][ T7836] ? verify_lock_unused+0x140/0x140 [ 453.133490][ T7836] ? kasan_save_stack+0x4d/0x60 [ 453.138372][ T7836] ? kasan_save_stack+0x3e/0x60 [ 453.143246][ T7836] ? __kasan_record_aux_stack+0xaf/0xc0 [ 453.148801][ T7836] ? kvfree_call_rcu+0xee/0x780 [ 453.153717][ T7836] ? trie_delete_elem+0x535/0x6a0 [ 453.158785][ T7836] ? bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 453.164620][ T7836] ? bpf_trace_run3+0x1e7/0x400 [ 453.169524][ T7836] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 453.175178][ T7836] ? enqueue_timer+0x398/0x530 [ 453.179955][ T7836] ? __mod_timer+0x91e/0xdb0 [ 453.184656][ T7836] ? mod_peer_timer+0x17a/0x250 [ 453.189610][ T7836] ? wg_packet_rx_poll+0xdaa/0x2270 [ 453.194927][ T7836] ? __napi_poll+0xc0/0x460 [ 453.199447][ T7836] ? napi_threaded_poll+0x41d/0x870 [ 453.204758][ T7836] ? kthread+0x2fa/0x390 [ 453.209007][ T7836] ? ret_from_fork+0x48/0x80 [ 453.213634][ T7836] ? ret_from_fork_asm+0x11/0x20 [ 453.218765][ T7836] lock_acquire+0x197/0x410 [ 453.223285][ T7836] ? kvfree_call_rcu+0x15a/0x780 [ 453.228250][ T7836] ? read_lock_is_recursive+0x20/0x20 [ 453.233812][ T7836] ? __phys_addr+0xba/0x170 [ 453.238339][ T7836] _raw_spin_lock+0x2e/0x40 [ 453.243032][ T7836] ? kvfree_call_rcu+0x15a/0x780 [ 453.248077][ T7836] kvfree_call_rcu+0x15a/0x780 [ 453.252904][ T7836] ? call_rcu+0x930/0x930 [ 453.257336][ T7836] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 453.263466][ T7836] ? _raw_spin_unlock+0x40/0x40 [ 453.268424][ T7836] trie_delete_elem+0x535/0x6a0 [ 453.273343][ T7836] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 453.278822][ T7836] bpf_trace_run3+0x1e7/0x400 [ 453.283606][ T7836] ? bpf_trace_run3+0xf4/0x400 [ 453.288486][ T7836] ? bpf_trace_run2+0x3c0/0x3c0 [ 453.293859][ T7836] ? __bpf_trace_timer_start+0x133/0x1b0 [ 453.299706][ T7836] __bpf_trace_timer_start+0x14a/0x1b0 [ 453.305219][ T7836] ? __bpf_trace_timer_class+0x100/0x100 [ 453.310975][ T7836] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 453.316881][ T7836] ? _raw_spin_unlock+0x40/0x40 [ 453.321868][ T7836] enqueue_timer+0x398/0x530 [ 453.326486][ T7836] __mod_timer+0x91e/0xdb0 [ 453.330930][ T7836] ? mod_peer_timer+0x1f/0x250 [ 453.335720][ T7836] ? mod_peer_timer+0x1f/0x250 [ 453.340527][ T7836] mod_peer_timer+0x17a/0x250 [ 453.345214][ T7836] ? wg_packet_rx_poll+0xaa3/0x2270 [ 453.350424][ T7836] wg_packet_rx_poll+0xdaa/0x2270 [ 453.355555][ T7836] ? wg_packet_rx_poll+0xaa3/0x2270 [ 453.360778][ T7836] ? wg_packet_handshake_receive_worker+0xf80/0xf80 [ 453.367383][ T7836] ? lockdep_softirqs_on+0x570/0x570 [ 453.372690][ T7836] ? asan.module_dtor+0x20/0x20 [ 453.377567][ T7836] ? __bpf_trace_tasklet+0x140/0x140 [ 453.382860][ T7836] ? _local_bh_enable+0xa0/0xa0 [ 453.387727][ T7836] __napi_poll+0xc0/0x460 [ 453.392079][ T7836] ? napi_threaded_poll+0x8b/0x870 [ 453.397216][ T7836] napi_threaded_poll+0x41d/0x870 [ 453.402267][ T7836] ? lockdep_hardirqs_on+0x98/0x150 [ 453.407490][ T7836] ? napi_threaded_poll+0x8b/0x870 [ 453.412646][ T7836] ? __netif_receive_skb+0x290/0x290 [ 453.417955][ T7836] ? __kthread_parkme+0x7a/0x1c0 [ 453.422930][ T7836] kthread+0x2fa/0x390 [ 453.427007][ T7836] ? __netif_receive_skb+0x290/0x290 [ 453.432400][ T7836] ? kthread_blkcg+0xd0/0xd0 [ 453.437088][ T7836] ret_from_fork+0x48/0x80 [ 453.441610][ T7836] ? kthread_blkcg+0xd0/0xd0 [ 453.446232][ T7836] ret_from_fork_asm+0x11/0x20 [ 453.451196][ T7836]