last executing test programs: 3.311977645s ago: executing program 0 (id=995): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='console\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x4, 0x20}, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4004662b, &(0x7f00000005c0)=0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x80, 0xd4, 0x7, 0x3f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x38e0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x3f, 0x8, 0x2, 0x3f, 0x0, 0x0, 0x7, 0x0, 0x449e30d3}, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, r6, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x46, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x116058, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r7, &(0x7f0000000240)='syz0\x00', 0x1ff) 2.594770442s ago: executing program 0 (id=998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 2.280111444s ago: executing program 4 (id=1003): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000ef0000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000034f0e61000000000000000004000000bb7f1a007600feff000020009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 2.280006944s ago: executing program 0 (id=1004): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x0, 0xc}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.11809979s ago: executing program 0 (id=1005): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/170, 0xaa}], 0x1, 0x0, 0x28}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r1, &(0x7f0000001c80)}, 0x20) 1.763436383s ago: executing program 4 (id=1006): r0 = socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 1.650400838s ago: executing program 4 (id=1007): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/0\x00\xff\xff\xff\xd9_,\xae\xf4t\x00AE\xf44'}, 0x30) r0 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r2, 0x10) 1.552084592s ago: executing program 2 (id=1008): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='console\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x4, 0x20}, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4004662b, &(0x7f00000005c0)=0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x80, 0xd4, 0x7, 0x3f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x38e0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x3f, 0x8, 0x2, 0x3f, 0x0, 0x0, 0x7, 0x0, 0x449e30d3}, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, r6, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x46, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x116058, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r7, &(0x7f0000000240)='syz0\x00', 0x1ff) 1.191844265s ago: executing program 0 (id=1014): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43405) 1.120379968s ago: executing program 2 (id=1015): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.100047959s ago: executing program 1 (id=1016): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x4}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x80, 0x0}, 0x0) 1.012145302s ago: executing program 3 (id=1017): r0 = socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 1.000700623s ago: executing program 2 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETLINK(r0, 0x400454cd, 0xfffe) 932.009265ms ago: executing program 3 (id=1019): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 931.510475ms ago: executing program 1 (id=1020): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 831.309629ms ago: executing program 0 (id=1021): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x0, 0x3, 0xffffffff}, 0x48) 780.101811ms ago: executing program 3 (id=1022): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff35, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f97e24fc0a18020e000a740100051882c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) 765.002091ms ago: executing program 1 (id=1023): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 745.030213ms ago: executing program 2 (id=1024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg1\x00', 0x2}) 608.106957ms ago: executing program 4 (id=1025): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 602.785808ms ago: executing program 3 (id=1026): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0xd1}]}}}], 0x18}, 0x0) 585.632538ms ago: executing program 1 (id=1027): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000500)=r1, 0x4) 492.013062ms ago: executing program 2 (id=1028): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='console\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x4, 0x20}, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4004662b, &(0x7f00000005c0)=0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x80, 0xd4, 0x7, 0x3f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x38e0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x3f, 0x8, 0x2, 0x3f, 0x0, 0x0, 0x7, 0x0, 0x449e30d3}, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, r6, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x46, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x116058, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r7, &(0x7f0000000240)='syz0\x00', 0x1ff) 448.834044ms ago: executing program 4 (id=1029): r0 = socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 415.736004ms ago: executing program 3 (id=1030): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 368.153086ms ago: executing program 1 (id=1031): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x4}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x80, 0x0}, 0x0) 137.025875ms ago: executing program 4 (id=1032): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43405) 49.304449ms ago: executing program 2 (id=1033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r0, 0x800454e0, &(0x7f0000000140)) 42.849849ms ago: executing program 1 (id=1034): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000540)=0x4000) 0s ago: executing program 3 (id=1035): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/0\x00\xff\xff\xff\xd9_,\xae\xf4t\x00AE\xf44'}, 0x30) r0 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r2, 0x10) kernel console output (not intermixed with test programs): DUID 00:04:44:a1:cc:04:5c:3e:78:04:ca:db:ff:41:5b:7c:ae:03 forked to background, child pid 3215 [ 38.117248][ T3216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.130277][ T3216] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. syzkaller login: [ 55.091410][ T3538] cgroup: Unknown subsys name 'net' [ 55.207974][ T3538] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.684483][ T3538] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.130138][ T3548] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.138785][ T3548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.147038][ T3548] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.155106][ T3548] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.166771][ T3550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.175072][ T3550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.183170][ T3550] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.190251][ T3550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.198839][ T3550] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.211945][ T3552] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.219534][ T3552] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.226897][ T3552] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.242273][ T3554] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.250346][ T3554] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.257996][ T3554] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.265837][ T3554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.273548][ T3554] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.280886][ T3554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.339083][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.346969][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.354481][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.362324][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.369862][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.377503][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.386490][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.394562][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.402066][ T3548] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.410218][ T3548] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.418173][ T3550] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.428487][ T3550] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.713143][ T3551] chnl_net:caif_netlink_parms(): no params data found [ 57.750566][ T3555] chnl_net:caif_netlink_parms(): no params data found [ 57.869560][ T3547] chnl_net:caif_netlink_parms(): no params data found [ 57.943762][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.952191][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.960632][ T3551] device bridge_slave_0 entered promiscuous mode [ 57.986559][ T3558] chnl_net:caif_netlink_parms(): no params data found [ 58.008060][ T3560] chnl_net:caif_netlink_parms(): no params data found [ 58.017670][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.025235][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.033150][ T3551] device bridge_slave_1 entered promiscuous mode [ 58.045005][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.052199][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.060109][ T3555] device bridge_slave_0 entered promiscuous mode [ 58.095029][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.102359][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.110207][ T3555] device bridge_slave_1 entered promiscuous mode [ 58.142009][ T3551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.180285][ T3551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.238663][ T3555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.252410][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.259606][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.267829][ T3558] device bridge_slave_0 entered promiscuous mode [ 58.279866][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.287179][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.296243][ T3547] device bridge_slave_0 entered promiscuous mode [ 58.312725][ T3555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.337093][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.344520][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.352665][ T3558] device bridge_slave_1 entered promiscuous mode [ 58.359651][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.367027][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.375179][ T3547] device bridge_slave_1 entered promiscuous mode [ 58.385046][ T3551] team0: Port device team_slave_0 added [ 58.407404][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.415527][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.423520][ T3560] device bridge_slave_0 entered promiscuous mode [ 58.443290][ T3551] team0: Port device team_slave_1 added [ 58.472836][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.479956][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.489029][ T3560] device bridge_slave_1 entered promiscuous mode [ 58.507340][ T3558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.526976][ T3547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.538676][ T3555] team0: Port device team_slave_0 added [ 58.555710][ T3558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.565936][ T3551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.573006][ T3551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.598919][ T3551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.612365][ T3547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.622826][ T3555] team0: Port device team_slave_1 added [ 58.654666][ T3551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.661905][ T3551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.687923][ T3551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.717078][ T3547] team0: Port device team_slave_0 added [ 58.725148][ T3560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.763618][ T3547] team0: Port device team_slave_1 added [ 58.769761][ T3555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.777212][ T3555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.803518][ T3555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.817376][ T3560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.836606][ T3558] team0: Port device team_slave_0 added [ 58.860782][ T3555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.867957][ T3555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.894011][ T3555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.920640][ T3558] team0: Port device team_slave_1 added [ 58.952335][ T3560] team0: Port device team_slave_0 added [ 58.971391][ T3551] device hsr_slave_0 entered promiscuous mode [ 58.978286][ T3551] device hsr_slave_1 entered promiscuous mode [ 58.985934][ T3547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.993085][ T3547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.019155][ T3547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.032543][ T3560] team0: Port device team_slave_1 added [ 59.055697][ T3547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.063117][ T3547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.089413][ T3547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.126088][ T3558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.133188][ T3558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.159410][ T3558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.175781][ T3558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.182792][ T3558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.208728][ T3558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.230935][ T3555] device hsr_slave_0 entered promiscuous mode [ 59.238234][ T3555] device hsr_slave_1 entered promiscuous mode [ 59.245504][ T3555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.253592][ T3555] Cannot create hsr debugfs directory [ 59.277542][ T3560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.284746][ T3560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.302518][ T3550] Bluetooth: hci2: command tx timeout [ 59.310889][ T3552] Bluetooth: hci0: command tx timeout [ 59.316840][ T3550] Bluetooth: hci1: command tx timeout [ 59.323037][ T3560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.364166][ T3560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.371169][ T3560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.397569][ T3560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.432007][ T3547] device hsr_slave_0 entered promiscuous mode [ 59.439014][ T3547] device hsr_slave_1 entered promiscuous mode [ 59.446313][ T3547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.454153][ T3547] Cannot create hsr debugfs directory [ 59.461451][ T3552] Bluetooth: hci3: command tx timeout [ 59.461739][ T3550] Bluetooth: hci4: command tx timeout [ 59.513135][ T3558] device hsr_slave_0 entered promiscuous mode [ 59.520194][ T3558] device hsr_slave_1 entered promiscuous mode [ 59.526978][ T3558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.534817][ T3558] Cannot create hsr debugfs directory [ 59.557899][ T3560] device hsr_slave_0 entered promiscuous mode [ 59.564668][ T3560] device hsr_slave_1 entered promiscuous mode [ 59.571503][ T3560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.579072][ T3560] Cannot create hsr debugfs directory [ 59.893461][ T3551] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.905008][ T3551] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.917146][ T3551] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.926769][ T3551] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.997948][ T3555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.022391][ T3555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.033690][ T3555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.052121][ T3555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.084820][ T3547] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.134285][ T3547] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.173312][ T3547] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.197758][ T3547] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.213537][ T3558] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.236631][ T3558] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.247860][ T3558] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.263259][ T3551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.276320][ T3558] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.329442][ T3560] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.339441][ T3560] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.359697][ T3551] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.370902][ T3560] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.380422][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.389180][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.405112][ T3555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.419612][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.429314][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.438377][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.445722][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.454589][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.463860][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.472948][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.480055][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.489142][ T3560] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.514759][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.524589][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.540878][ T3555] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.570556][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.578722][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.586859][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.596189][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.605868][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.614928][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.622079][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.658899][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.667115][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.677049][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.685636][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.692857][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.700467][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.709397][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.718165][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.726907][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.735796][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.744758][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.754767][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.794994][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.804787][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.815265][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.824313][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.833370][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.842427][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.856042][ T3555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.867612][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.896176][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.905360][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.913906][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.922900][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.931565][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.956343][ T3551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.969157][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.991699][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.000187][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.013085][ T3547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.051510][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.059285][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.106728][ T3547] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.142436][ T3560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.158597][ T3558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.177014][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.189606][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.204391][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.211585][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.224735][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.264613][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.279900][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.289720][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.296984][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.305260][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.313222][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.320938][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.328806][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.336662][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.355163][ T3558] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.374412][ T3560] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.381504][ T3550] Bluetooth: hci1: command tx timeout [ 61.386947][ T3550] Bluetooth: hci0: command tx timeout [ 61.387320][ T3552] Bluetooth: hci2: command tx timeout [ 61.408954][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.418258][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.427481][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.436798][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.446265][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.477779][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.486096][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.495405][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.504118][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.511266][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.519905][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.528797][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.537306][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.543907][ T3554] Bluetooth: hci4: command tx timeout [ 61.544444][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.557244][ T3552] Bluetooth: hci3: command tx timeout [ 61.557688][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.571402][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.579728][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.588492][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.597763][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.623033][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.632854][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.641882][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.648964][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.656985][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.665881][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.674561][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.683118][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.690228][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.698420][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.707602][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.716960][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.732716][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.752856][ T3555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.761750][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.769237][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.782662][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.794564][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.804834][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.817013][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.851445][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.858948][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.896944][ T3551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.914565][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.924747][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.934935][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.944308][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.953744][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.963125][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.972387][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.980967][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.989709][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.999636][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.032097][ T3560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.043920][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.062448][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.071047][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.085753][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.095951][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.109222][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.126408][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.136103][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.165632][ T3558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.188657][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.200952][ T3555] device veth0_vlan entered promiscuous mode [ 62.214580][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.226712][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.234895][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.243947][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.296299][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.306937][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.316556][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.324527][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.339006][ T3551] device veth0_vlan entered promiscuous mode [ 62.358546][ T3547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.369670][ T3555] device veth1_vlan entered promiscuous mode [ 62.379145][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.388790][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.398129][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.435560][ T3551] device veth1_vlan entered promiscuous mode [ 62.443955][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.453570][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.464690][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.473474][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.519318][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.530547][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.540241][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.550414][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.560073][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.573104][ T3555] device veth0_macvtap entered promiscuous mode [ 62.591313][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.599535][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.615114][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.630636][ T3555] device veth1_macvtap entered promiscuous mode [ 62.662169][ T3551] device veth0_macvtap entered promiscuous mode [ 62.699520][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.708607][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.724159][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.732944][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.741506][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.749021][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.760711][ T3547] device veth0_vlan entered promiscuous mode [ 62.772518][ T3551] device veth1_macvtap entered promiscuous mode [ 62.785901][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.794696][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.804111][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.818310][ T3547] device veth1_vlan entered promiscuous mode [ 62.830681][ T3560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.842271][ T3555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.860413][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.878308][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.890817][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.915196][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.932342][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.945745][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.955066][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.970008][ T3555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.002602][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.013531][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.026357][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.039161][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.054914][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.069184][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.083851][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.094335][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.105996][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.119521][ T3555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.129873][ T3555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.139554][ T3555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.149190][ T3555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.167947][ T3558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.210819][ T3551] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.220932][ T3551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.235870][ T3551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.245480][ T3551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.262712][ T3547] device veth0_macvtap entered promiscuous mode [ 63.276634][ T3547] device veth1_macvtap entered promiscuous mode [ 63.289845][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.300469][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.330529][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.340218][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.388677][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.399453][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.410610][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.421442][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.433196][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.461888][ T3552] Bluetooth: hci0: command tx timeout [ 63.464647][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.467327][ T3552] Bluetooth: hci1: command tx timeout [ 63.483719][ T3554] Bluetooth: hci2: command tx timeout [ 63.498579][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.508073][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.517543][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.531342][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.543686][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.553727][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.566083][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.577545][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.590293][ T3547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.599644][ T3547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.609398][ T3547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.618315][ T3547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.627226][ T3550] Bluetooth: hci3: command tx timeout [ 63.627234][ T3554] Bluetooth: hci4: command tx timeout [ 63.640713][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.650388][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.663298][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.674986][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.740471][ T3558] device veth0_vlan entered promiscuous mode [ 63.759381][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.761600][ T3558] device veth1_vlan entered promiscuous mode [ 63.775322][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.779719][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.791919][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.800566][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.808983][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.827633][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.836448][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.857444][ T3560] device veth0_vlan entered promiscuous mode [ 63.889529][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.898913][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.917740][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.927241][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.956024][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.970464][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.992626][ T3560] device veth1_vlan entered promiscuous mode [ 64.023690][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.035662][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.044209][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.057815][ T3558] device veth0_macvtap entered promiscuous mode [ 64.087244][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.096374][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.105522][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.115067][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.123154][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.133229][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.142640][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.152836][ T3558] device veth1_macvtap entered promiscuous mode [ 64.183868][ T3560] device veth0_macvtap entered promiscuous mode [ 64.191440][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.199623][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.210256][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.219870][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.228548][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.237582][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.254278][ T3560] device veth1_macvtap entered promiscuous mode [ 64.294617][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.306218][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.325424][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.329364][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.335715][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.354469][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.365137][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.375697][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.389239][ T3558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.415097][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.434501][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.446429][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.458244][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.472682][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.484621][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.501309][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.519564][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.529673][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.540696][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.552696][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.564830][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.577381][ T3560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.590139][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.602602][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.613052][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.623724][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.633981][ T3558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.644722][ T3558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.662305][ T3558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.673142][ C1] hrtimer: interrupt took 57525 ns [ 64.748371][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.757624][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.767523][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.778602][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.805965][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.824495][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.062133][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.082177][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.093245][ T3626] syz.3.4 (3626) used greatest stack depth: 19512 bytes left [ 65.121124][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.183666][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.216836][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.247760][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.267305][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.347730][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.375162][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.397204][ T3560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.419672][ T3558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.467039][ T3558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.494692][ T3558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.520196][ T3558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.542130][ T3554] Bluetooth: hci1: command tx timeout [ 65.542393][ T3552] Bluetooth: hci2: command tx timeout [ 65.547583][ T3554] Bluetooth: hci0: command tx timeout [ 65.578076][ T1805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.587123][ T1805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.613552][ T3560] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.652777][ T3560] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.686428][ T3560] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.701317][ T3554] Bluetooth: hci4: command tx timeout [ 65.706573][ T3560] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.706861][ T3554] Bluetooth: hci3: command tx timeout [ 65.950593][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.991486][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.999331][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.027466][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.055978][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.119062][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.156782][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.165219][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.201405][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.210784][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.232092][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.250523][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.835043][ T3659] device syzkaller0 entered promiscuous mode [ 69.340861][ T3688] netlink: 132 bytes leftover after parsing attributes in process `syz.2.25'. [ 71.466182][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.472952][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.973949][ T3762] syz.1.58 (3762) used greatest stack depth: 18104 bytes left [ 73.321057][ T3829] netlink: 830 bytes leftover after parsing attributes in process `syz.4.88'. [ 74.499272][ T3865] netlink: 830 bytes leftover after parsing attributes in process `syz.1.103'. [ 75.315614][ T3874] syz.2.107 (3874) used greatest stack depth: 16960 bytes left [ 75.672892][ T3889] device syzkaller0 entered promiscuous mode [ 78.265002][ T3904] netlink: 830 bytes leftover after parsing attributes in process `syz.2.119'. [ 78.562397][ T3941] device syzkaller0 entered promiscuous mode [ 79.320478][ T3969] netlink: 830 bytes leftover after parsing attributes in process `syz.4.144'. [ 79.911100][ T3986] device syzkaller0 entered promiscuous mode [ 80.008997][ T3988] syz.3.152[3988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.009103][ T3988] syz.3.152[3988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.465900][ T4005] netlink: 830 bytes leftover after parsing attributes in process `syz.3.158'. [ 81.032363][ T4022] netlink: 'syz.0.164': attribute type 29 has an invalid length. [ 81.112732][ T4022] netlink: 'syz.0.164': attribute type 29 has an invalid length. [ 81.182991][ T4028] netlink: 'syz.0.164': attribute type 29 has an invalid length. [ 81.232669][ T4022] netlink: 'syz.0.164': attribute type 29 has an invalid length. [ 81.276180][ T4025] netlink: 'syz.0.164': attribute type 29 has an invalid length. [ 81.323513][ T4030] device syzkaller0 entered promiscuous mode [ 81.786835][ T14] cfg80211: failed to load regulatory.db [ 81.824862][ T4050] device syzkaller0 entered promiscuous mode [ 83.472886][ T4087] device syzkaller0 entered promiscuous mode [ 83.498845][ T4089] device pim6reg1 entered promiscuous mode [ 84.407199][ T3552] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 84.509697][ T4125] netlink: 'syz.0.204': attribute type 10 has an invalid length. [ 84.617180][ T4125] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 85.146631][ T4152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.214'. [ 85.446987][ T4164] Illegal XDP return value 4294967274 on prog (id 103) dev N/A, expect packet loss! [ 86.163273][ T4184] device pim6reg1 entered promiscuous mode [ 86.203338][ T4183] device syzkaller0 entered promiscuous mode [ 86.834749][ T4200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.231'. [ 86.880563][ T4202] netlink: 'syz.1.233': attribute type 2 has an invalid length. [ 86.922737][ T4202] netlink: 'syz.1.233': attribute type 7 has an invalid length. [ 87.383728][ T4218] device pim6reg1 entered promiscuous mode [ 87.843695][ T4238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.248'. [ 88.700256][ T4262] device pim6reg1 entered promiscuous mode [ 89.410045][ T4289] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 89.447246][ T4289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.269'. [ 89.496305][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.505301][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.537920][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.545343][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.553640][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.560800][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.598514][ T4289] team0: Port device bridge0 added [ 90.236885][ T4310] device pim6reg1 entered promiscuous mode [ 90.643604][ T4319] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.283'. [ 91.698169][ T4332] netlink: 'syz.4.287': attribute type 10 has an invalid length. [ 91.725135][ T4332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.287'. [ 91.755672][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.763867][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.824357][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.831884][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.840178][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.847388][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.917345][ T4332] team0: Port device bridge0 added [ 94.080526][ T4370] netlink: 132 bytes leftover after parsing attributes in process `syz.3.300'. [ 94.425029][ T4383] netlink: 'syz.0.305': attribute type 10 has an invalid length. [ 94.467785][ T4383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.305'. [ 94.528062][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.535376][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.204359][ T4412] netlink: 132 bytes leftover after parsing attributes in process `syz.3.315'. [ 96.220752][ T4413] Zero length message leads to an empty skb [ 96.475389][ T4420] netlink: 'syz.4.319': attribute type 10 has an invalid length. [ 96.501383][ T4420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.319'. [ 96.581234][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.588615][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.593251][ T4446] netlink: 132 bytes leftover after parsing attributes in process `syz.4.327'. [ 99.787359][ T4470] netlink: 132 bytes leftover after parsing attributes in process `syz.4.339'. [ 100.180403][ T3554] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.195682][ T3554] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.205240][ T3554] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.207981][ T4486] netlink: 'syz.3.343': attribute type 10 has an invalid length. [ 100.232473][ T4486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.343'. [ 100.252875][ T3554] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.262226][ T3554] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 100.269615][ T3554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.404927][ T4486] team0: Port device team_slave_0 removed [ 100.445557][ T4486] bond0: (slave team_slave_0): Enslaving as an active interface with an up link [ 100.600469][ T4503] netlink: 132 bytes leftover after parsing attributes in process `syz.4.349'. [ 100.888504][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.629950][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.803607][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.899256][ T4483] chnl_net:caif_netlink_parms(): no params data found [ 101.962906][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.010646][ T4540] netlink: 132 bytes leftover after parsing attributes in process `syz.3.362'. [ 102.229691][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.251674][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.285334][ T4483] device bridge_slave_0 entered promiscuous mode [ 102.332464][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.339789][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.347362][ T3552] Bluetooth: hci5: command tx timeout [ 102.363365][ T4483] device bridge_slave_1 entered promiscuous mode [ 102.691897][ T4483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.825381][ T4483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.530026][ T4483] team0: Port device team_slave_0 added [ 103.653333][ T4483] team0: Port device team_slave_1 added [ 104.154171][ T4483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.171395][ T4483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.346889][ T4483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.421477][ T3554] Bluetooth: hci5: command tx timeout [ 104.519727][ T4483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.534647][ T4483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.566194][ T4483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.964565][ T4483] device hsr_slave_0 entered promiscuous mode [ 105.019363][ T4483] device hsr_slave_1 entered promiscuous mode [ 105.032036][ T4483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.061067][ T4483] Cannot create hsr debugfs directory [ 106.406917][ T11] device hsr_slave_0 left promiscuous mode [ 106.434259][ T11] device hsr_slave_1 left promiscuous mode [ 106.481327][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.488875][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.501314][ T3552] Bluetooth: hci5: command tx timeout [ 106.558871][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.580312][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.745842][ T11] device bridge_slave_1 left promiscuous mode [ 106.792682][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.885261][ T11] device bridge_slave_0 left promiscuous mode [ 106.913773][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.013734][ T11] device veth1_macvtap left promiscuous mode [ 107.033736][ T11] device veth0_macvtap left promiscuous mode [ 107.040088][ T11] device veth1_vlan left promiscuous mode [ 107.118355][ T11] device veth0_vlan left promiscuous mode [ 108.173153][ T11] team0 (unregistering): Port device team_slave_1 removed [ 108.217601][ T11] team0 (unregistering): Port device team_slave_0 removed [ 108.272828][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.319533][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.585375][ T3552] Bluetooth: hci5: command tx timeout [ 108.791722][ T11] bond0 (unregistering): Released all slaves [ 109.935176][ T4483] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.022003][ T4483] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.067917][ T4483] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.186805][ T4483] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.460368][ T4734] bridge0: port 3(bond0) entered blocking state [ 110.500938][ T4734] bridge0: port 3(bond0) entered disabled state [ 110.535454][ T4734] device bond0 entered promiscuous mode [ 110.554326][ T4734] device bond_slave_0 entered promiscuous mode [ 110.578658][ T4734] device bond_slave_1 entered promiscuous mode [ 110.621890][ T4734] bridge0: port 3(bond0) entered blocking state [ 110.628662][ T4734] bridge0: port 3(bond0) entered forwarding state [ 110.895336][ T4483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.159508][ T4483] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.191069][ T1805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.217023][ T1805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.283541][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.321301][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.344060][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.351978][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.365833][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.376100][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.394945][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.402251][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.440991][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.497147][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.508843][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.549369][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.587242][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.676519][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.712731][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.788930][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.832766][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.847581][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.872381][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.881069][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.898589][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.736496][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.754421][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.773917][ T4483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.907775][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.936496][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.057536][ T4483] device veth0_vlan entered promiscuous mode [ 113.092132][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.132136][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.145616][ T4483] device veth1_vlan entered promiscuous mode [ 113.198505][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.223068][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.268066][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.316574][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.396736][ T4483] device veth0_macvtap entered promiscuous mode [ 113.445324][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.472946][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.505531][ T4483] device veth1_macvtap entered promiscuous mode [ 113.531999][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.582331][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.614478][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.691605][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.727084][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.773682][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.810316][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.849535][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.897377][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.927408][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.969038][ T4483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.004928][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.042481][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.112938][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.183163][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.251513][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.267929][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.281078][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.350077][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.392684][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.406439][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.429737][ T4483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.493188][ T4861] bridge0: port 3(bond0) entered blocking state [ 114.504480][ T4861] bridge0: port 3(bond0) entered disabled state [ 114.550449][ T4861] device bond0 entered promiscuous mode [ 114.589027][ T4861] device bond_slave_0 entered promiscuous mode [ 114.618109][ T4861] device bond_slave_1 entered promiscuous mode [ 114.645709][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.654877][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.693083][ T4483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.709072][ T4483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.728347][ T4483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.765798][ T4483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.086937][ T3966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.121518][ T3966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.162315][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.309250][ T3966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.349675][ T3966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.408937][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.710119][ T5058] netlink: 830 bytes leftover after parsing attributes in process `syz.2.557'. [ 120.459630][ T5098] netlink: 'syz.2.575': attribute type 10 has an invalid length. [ 120.544694][ T5098] netlink: 55 bytes leftover after parsing attributes in process `syz.2.575'. [ 123.347859][ T5245] netlink: 'syz.3.650': attribute type 10 has an invalid length. [ 123.368676][ T5245] netlink: 55 bytes leftover after parsing attributes in process `syz.3.650'. [ 123.634197][ T5262] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 123.649963][ T5262] device ipvlan1 entered promiscuous mode [ 123.703145][ T5262] team0: Device ipvlan1 failed to register rx_handler [ 124.261425][ T5270] device syzkaller0 entered promiscuous mode [ 129.981054][ T5413] syzkaller0: refused to change device tx_queue_len [ 132.333598][ T5449] sctp: [Deprecated]: syz.4.736 (pid 5449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.333598][ T5449] Use struct sctp_sack_info instead [ 132.906567][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.912955][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.802168][ T5459] netlink: 'syz.4.741': attribute type 29 has an invalid length. [ 134.820824][ T5459] netlink: 'syz.4.741': attribute type 29 has an invalid length. [ 134.837604][ T5463] bond_slave_1: mtu less than device minimum [ 134.896733][ T5462] netlink: 'syz.0.740': attribute type 29 has an invalid length. [ 134.953973][ T5462] netlink: 'syz.0.740': attribute type 29 has an invalid length. [ 135.004005][ T5472] netlink: 'syz.0.740': attribute type 29 has an invalid length. [ 135.025881][ T5468] netlink: 'syz.4.744': attribute type 29 has an invalid length. [ 135.034116][ T5462] netlink: 'syz.0.740': attribute type 29 has an invalid length. [ 135.064818][ T5465] netlink: 'syz.0.740': attribute type 29 has an invalid length. [ 135.114143][ T5468] netlink: 'syz.4.744': attribute type 29 has an invalid length. [ 135.139101][ T5473] netlink: 'syz.4.744': attribute type 29 has an invalid length. [ 136.352861][ T5541] netlink: 56 bytes leftover after parsing attributes in process `syz.3.774'. [ 136.368423][ T5541] netlink: 56 bytes leftover after parsing attributes in process `syz.3.774'. [ 136.387857][ T5541] netlink: 56 bytes leftover after parsing attributes in process `syz.3.774'. [ 136.423206][ T5541] netlink: 56 bytes leftover after parsing attributes in process `syz.3.774'. [ 142.085178][ T5735] tap0: tun_chr_ioctl cmd 1074025677 [ 142.109041][ T5735] tap0: linktype set to 776 [ 142.706394][ T5754] device syzkaller0 entered promiscuous mode [ 143.911630][ T5790] syz.4.884[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.911736][ T5790] syz.4.884[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.705243][ T5788] tap0: tun_chr_ioctl cmd 1074025677 [ 144.734399][ T5788] tap0: linktype set to 776 [ 145.548327][ T5810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.893'. [ 146.245956][ T5826] tap0: tun_chr_ioctl cmd 1074025677 [ 146.256746][ T5826] tap0: linktype set to 776 [ 146.498147][ T5836] validate_nla: 5 callbacks suppressed [ 146.498169][ T5836] netlink: 'syz.3.904': attribute type 10 has an invalid length. [ 146.581951][ T5836] team0: Port device netdevsim0 added [ 146.594890][ T5838] netlink: 132 bytes leftover after parsing attributes in process `syz.0.906'. [ 147.799552][ T5862] tap0: tun_chr_ioctl cmd 1074025677 [ 147.819673][ T5862] tap0: linktype set to 776 [ 148.539426][ T5870] netlink: 132 bytes leftover after parsing attributes in process `syz.3.919'. [ 149.711456][ T5912] netlink: 132 bytes leftover after parsing attributes in process `syz.3.936'. [ 149.994989][ T5918] device syzkaller0 entered promiscuous mode [ 151.410065][ T5945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.951'. [ 152.488006][ T5982] netlink: 132 bytes leftover after parsing attributes in process `syz.3.967'. [ 153.147678][ T6012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.982'. [ 155.758708][ T6072] syz.3.1009 (6072) used obsolete PPPIOCDETACH ioctl [ 156.152890][ T6095] tap0: tun_chr_ioctl cmd 1074025677 [ 156.158788][ T6095] tap0: linktype set to 65534 [ 157.113915][ T6128] [ 157.117208][ T6128] ====================================================== [ 157.125149][ T6128] WARNING: possible circular locking dependency detected [ 157.134517][ T6128] 6.1.96-syzkaller #0 Not tainted [ 157.140572][ T6128] ------------------------------------------------------ [ 157.149641][ T6128] syz.1.1034/6128 is trying to acquire lock: [ 157.159312][ T6128] ffff88814be70170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b0/0x380 [ 157.171688][ T6128] [ 157.171688][ T6128] but task is already holding lock: [ 157.179730][ T6128] ffff88814be6eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 157.194594][ T6128] [ 157.194594][ T6128] which lock already depends on the new lock. [ 157.194594][ T6128] [ 157.207812][ T6128] [ 157.207812][ T6128] the existing dependency chain (in reverse order) is: [ 157.219234][ T6128] [ 157.219234][ T6128] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 157.228651][ T6128] lock_acquire+0x1f8/0x5a0 [ 157.236456][ T6128] percpu_down_read+0x44/0x1a0 [ 157.242057][ T6128] ext4_writepages+0x1e5/0x3de0 [ 157.248264][ T6128] do_writepages+0x3a2/0x670 [ 157.255182][ T6128] filemap_fdatawrite_wbc+0x121/0x180 [ 157.262011][ T6128] filemap_write_and_wait_range+0x1a4/0x290 [ 157.271825][ T6128] __iomap_dio_rw+0xb4e/0x2130 [ 157.278547][ T6128] iomap_dio_rw+0x42/0xa0 [ 157.286189][ T6128] ext4_file_write_iter+0x1464/0x1880 [ 157.292997][ T6128] vfs_write+0x7ae/0xba0 [ 157.299022][ T6128] ksys_write+0x19c/0x2c0 [ 157.304617][ T6128] do_syscall_64+0x3b/0xb0 [ 157.310913][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.319516][ T6128] [ 157.319516][ T6128] -> #2 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 157.329228][ T6128] lock_acquire+0x1f8/0x5a0 [ 157.336096][ T6128] down_read+0xad/0xa30 [ 157.341415][ T6128] ext4_bmap+0x4b/0x410 [ 157.346422][ T6128] bmap+0xa1/0xd0 [ 157.350699][ T6128] jbd2_journal_flush+0x5b5/0xc40 [ 157.356453][ T6128] ext4_ioctl+0x3986/0x5f60 [ 157.361839][ T6128] __se_sys_ioctl+0xf1/0x160 [ 157.367729][ T6128] do_syscall_64+0x3b/0xb0 [ 157.372819][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.381537][ T6128] [ 157.381537][ T6128] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 157.394354][ T6128] lock_acquire+0x1f8/0x5a0 [ 157.400252][ T6128] mutex_lock_io_nested+0x134/0xab0 [ 157.408296][ T6128] jbd2_journal_flush+0x29b/0xc40 [ 157.415044][ T6128] ext4_ioctl+0x2f95/0x5f60 [ 157.420916][ T6128] __se_sys_ioctl+0xf1/0x160 [ 157.426512][ T6128] do_syscall_64+0x3b/0xb0 [ 157.435716][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.443460][ T6128] [ 157.443460][ T6128] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 157.456339][ T6128] validate_chain+0x1661/0x5950 [ 157.463799][ T6128] __lock_acquire+0x125b/0x1f80 [ 157.470708][ T6128] lock_acquire+0x1f8/0x5a0 [ 157.477187][ T6128] __mutex_lock+0x132/0xd80 [ 157.484574][ T6128] jbd2_journal_lock_updates+0x2b0/0x380 [ 157.491961][ T6128] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 157.500206][ T6128] ext4_fileattr_set+0xe04/0x1770 [ 157.506424][ T6128] vfs_fileattr_set+0x8f3/0xd30 [ 157.513515][ T6128] do_vfs_ioctl+0x1cd1/0x2a90 [ 157.519562][ T6128] __se_sys_ioctl+0x81/0x160 [ 157.525472][ T6128] do_syscall_64+0x3b/0xb0 [ 157.530641][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.539148][ T6128] [ 157.539148][ T6128] other info that might help us debug this: [ 157.539148][ T6128] [ 157.551245][ T6128] Chain exists of: [ 157.551245][ T6128] &journal->j_barrier --> &sb->s_type->i_mutex_key#8 --> &sbi->s_writepages_rwsem [ 157.551245][ T6128] [ 157.570111][ T6128] Possible unsafe locking scenario: [ 157.570111][ T6128] [ 157.579430][ T6128] CPU0 CPU1 [ 157.587530][ T6128] ---- ---- [ 157.596947][ T6128] lock(&sbi->s_writepages_rwsem); [ 157.603762][ T6128] lock(&sb->s_type->i_mutex_key#8); [ 157.614848][ T6128] lock(&sbi->s_writepages_rwsem); [ 157.624623][ T6128] lock(&journal->j_barrier); [ 157.629879][ T6128] [ 157.629879][ T6128] *** DEADLOCK *** [ 157.629879][ T6128] [ 157.639646][ T6128] 4 locks held by syz.1.1034/6128: [ 157.645939][ T6128] #0: ffff88814be6c460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 157.659574][ T6128] #1: ffff88803671c030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_fileattr_set+0x135/0xd30 [ 157.674753][ T6128] #2: ffff88803671c1d0 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x115/0x6e0 [ 157.689795][ T6128] #3: ffff88814be6eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 157.704826][ T6128] [ 157.704826][ T6128] stack backtrace: [ 157.711140][ T6128] CPU: 0 PID: 6128 Comm: syz.1.1034 Not tainted 6.1.96-syzkaller #0 [ 157.721162][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 157.733418][ T6128] Call Trace: [ 157.738407][ T6128] [ 157.744442][ T6128] dump_stack_lvl+0x1e3/0x2cb [ 157.750040][ T6128] ? nf_tcp_handle_invalid+0x642/0x642 [ 157.757064][ T6128] ? print_circular_bug+0x12b/0x1a0 [ 157.763733][ T6128] check_noncircular+0x2fa/0x3b0 [ 157.771728][ T6128] ? lockdep_lock+0x2a0/0x2a0 [ 157.777773][ T6128] ? add_chain_block+0x850/0x850 [ 157.783668][ T6128] ? lockdep_lock+0x11f/0x2a0 [ 157.789384][ T6128] ? validate_chain+0x112/0x5950 [ 157.797211][ T6128] ? _find_first_zero_bit+0xd0/0x100 [ 157.803248][ T6128] validate_chain+0x1661/0x5950 [ 157.810178][ T6128] ? lockdep_unlock+0x165/0x300 [ 157.817118][ T6128] ? reacquire_held_locks+0x660/0x660 [ 157.822557][ T6128] ? validate_chain+0x13ce/0x5950 [ 157.828097][ T6128] ? mark_lock+0x9a/0x340 [ 157.832686][ T6128] ? __lock_acquire+0x125b/0x1f80 [ 157.838043][ T6128] ? mark_lock+0x9a/0x340 [ 157.842621][ T6128] __lock_acquire+0x125b/0x1f80 [ 157.847639][ T6128] lock_acquire+0x1f8/0x5a0 [ 157.852765][ T6128] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 157.859406][ T6128] ? read_lock_is_recursive+0x10/0x10 [ 157.865880][ T6128] ? __might_sleep+0xb0/0xb0 [ 157.871779][ T6128] ? do_raw_spin_unlock+0x137/0x8a0 [ 157.877023][ T6128] ? lockdep_hardirqs_on+0x94/0x130 [ 157.882278][ T6128] __mutex_lock+0x132/0xd80 [ 157.886840][ T6128] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 157.897669][ T6128] ? jbd2_journal_lock_updates+0x29f/0x380 [ 157.904277][ T6128] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 157.912058][ T6128] ? __lock_acquire+0x1f80/0x1f80 [ 157.919121][ T6128] ? mutex_lock_nested+0x10/0x10 [ 157.924101][ T6128] ? do_raw_read_unlock+0x70/0x70 [ 157.929518][ T6128] ? rcu_sync_enter+0xd5/0x340 [ 157.934780][ T6128] jbd2_journal_lock_updates+0x2b0/0x380 [ 157.941889][ T6128] ? jbd2_journal_wait_updates+0x2d0/0x2d0 [ 157.949443][ T6128] ? rcu_is_watching+0x11/0xb0 [ 157.956794][ T6128] ? _find_next_bit+0x11b/0x120 [ 157.961882][ T6128] ? percpu_down_write+0x2b7/0x2f0 [ 157.969388][ T6128] ? rcu_is_watching+0x11/0xb0 [ 157.975301][ T6128] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 157.982990][ T6128] ext4_fileattr_set+0xe04/0x1770 [ 157.990487][ T6128] ? ext4_fileattr_get+0x200/0x200 [ 157.996460][ T6128] ? rwsem_write_trylock+0x166/0x210 [ 158.003452][ T6128] ? clear_nonspinnable+0x60/0x60 [ 158.009763][ T6128] ? memset+0x1f/0x40 [ 158.015736][ T6128] ? fileattr_fill_flags+0x1d0/0x300 [ 158.021259][ T6128] ? fscrypt_prepare_setflags+0x5d/0x220 [ 158.027523][ T6128] vfs_fileattr_set+0x8f3/0xd30 [ 158.033507][ T6128] ? copy_fsxattr_to_user+0x3a0/0x3a0 [ 158.040818][ T6128] do_vfs_ioctl+0x1cd1/0x2a90 [ 158.046611][ T6128] ? __x64_compat_sys_ioctl+0x80/0x80 [ 158.052602][ T6128] ? __lock_acquire+0x1f80/0x1f80 [ 158.058132][ T6128] ? lockdep_hardirqs_on+0x94/0x130 [ 158.063669][ T6128] ? __kmem_cache_free+0x25c/0x3c0 [ 158.070925][ T6128] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 158.079207][ T6128] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 158.086772][ T6128] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 158.095530][ T6128] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 158.101727][ T6128] ? __fget_files+0x28/0x4a0 [ 158.106661][ T6128] ? __fget_files+0x435/0x4a0 [ 158.112870][ T6128] ? __fget_files+0x28/0x4a0 [ 158.117948][ T6128] ? bpf_lsm_file_ioctl+0x5/0x10 [ 158.122971][ T6128] ? security_file_ioctl+0x7d/0xa0 [ 158.128477][ T6128] __se_sys_ioctl+0x81/0x160 [ 158.133306][ T6128] do_syscall_64+0x3b/0xb0 [ 158.138041][ T6128] ? clear_bhb_loop+0x45/0xa0 [ 158.142990][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.149114][ T6128] RIP: 0033:0x7f5b90775b99 [ 158.155958][ T6128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.179666][ T6128] RSP: 002b:00007f5b9162a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.189873][ T6128] RAX: ffffffffffffffda RBX: 00007f5b90903fa0 RCX: 00007f5b90775b99 [ 158.200630][ T6128] RDX: 0000000020000540 RSI: 0000000040086602 RDI: 0000000000000004 [ 158.210473][ T6128] RBP: 00007f5b907f677e R08: 0000000000000000 R09: 0000000000000000 [ 158.224866][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.235782][ T6128] R13: 000000000000000b R14: 00007f5b90903fa0 R15: 00007ffd0e8b6c88 [ 158.245878][ T6128]