last executing test programs: 1m13.314171828s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1m13.049220534s ago: executing program 2 (id=311): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000004ab80000000000000018000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x3e, 0x0, 0x0, 0x0) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 1m7.379839873s ago: executing program 2 (id=331): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x15) 1m6.852170275s ago: executing program 2 (id=334): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map, 0x31, 0x0, 0x800, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r1, 0xffffffffffffffff, 0x7, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=0xffffffffffffffff, r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r5}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x44ac2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x1000c, 0x0, 0x0, 0x5, 0x0, 0xfffffffc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8922, &(0x7f0000000080)) 1m6.49403162s ago: executing program 2 (id=338): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) 1m6.054391544s ago: executing program 2 (id=341): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='tlb_flush\x00', r0}, 0x10) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001540)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m0.279543724s ago: executing program 0 (id=362): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0xc8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 59.880578833s ago: executing program 0 (id=363): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='(pu&\"&\t&&') ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @remote}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000300c7cc0000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000001040)=0xc6d) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0xfe3a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0x8, 0x1, 0x417, &(0x7f0000001000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x19) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xfffffffffffffcdb, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000440), &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000700), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000c8, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x40, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x12) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) 58.355309163s ago: executing program 0 (id=366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) 58.068698252s ago: executing program 0 (id=368): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 57.869142941s ago: executing program 0 (id=370): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x26}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x8ac, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="629ff7d394a2"}) 56.693923187s ago: executing program 0 (id=373): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FREEZING\x00', 0x9) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) 50.847807334s ago: executing program 32 (id=341): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='tlb_flush\x00', r0}, 0x10) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001540)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 41.224955254s ago: executing program 33 (id=373): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FREEZING\x00', 0x9) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.22233445s ago: executing program 1 (id=515): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 8.804499712s ago: executing program 1 (id=518): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x0, 0x120, 0x0, 0x0, 0x2100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r7}, 0x0, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000900000003000000090000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000003000000040000000c00"/25], 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='btrfs_find_cluster\x00', r1, 0x0, 0x7ff}, 0x18) 8.380160674s ago: executing program 1 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 7.792278212s ago: executing program 1 (id=526): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) 7.507394729s ago: executing program 1 (id=529): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x120, 0x0, 0x0, 0x2100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@o_path={&(0x7f0000000280)='./file0\x00', r0, 0x4000, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 6.08814702s ago: executing program 1 (id=534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x8, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a907c5"], 0xfdef) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) 5.236250794s ago: executing program 4 (id=541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486"], 0xfdef) 3.907062455s ago: executing program 3 (id=548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0xfdef) 2.416151412s ago: executing program 4 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x94, 0x0, 0xff}]}) 2.403372113s ago: executing program 5 (id=550): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() r2 = gettid() sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40}, 0x0) 2.380124775s ago: executing program 3 (id=551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 2.248086688s ago: executing program 3 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 2.22866019s ago: executing program 3 (id=553): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x180a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x9, 0x8000e, 0xda, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63003ffc00083300db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 2.168286206s ago: executing program 5 (id=554): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) 2.03607184s ago: executing program 4 (id=555): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000011000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000008000000080000000800000000000000", @ANYRES32, @ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.594876633s ago: executing program 3 (id=556): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.513450081s ago: executing program 3 (id=557): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x18) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 1.047999007s ago: executing program 4 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1821f4de09104a0d6e02"], 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = getpid() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xc, 0x8, 0x5, 0xb, 0x0, 0x8000000000000001, 0x1008, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xea2, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100, 0x56e, 0xfffff9ec, 0x4, 0x2, 0x1c0000, 0x9, 0x0, 0x3cb, 0x0, 0x3ff}, r3, 0x1, r1, 0x8) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6, 0x0, r0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, 0x0, &(0x7f00000003c0)=""/69}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="4b968372b01f004b18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="629ff7d394a2"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 982.966143ms ago: executing program 5 (id=559): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYRES16=r0], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 742.419067ms ago: executing program 5 (id=560): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 604.10863ms ago: executing program 5 (id=561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x103000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000140)) 193.595421ms ago: executing program 4 (id=562): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x88, 0x5, 0x0, 0x0, 0x0, 0x0, 0x303c6, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x17}, 0x4, 0x0, 0x100, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 47.797205ms ago: executing program 5 (id=563): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 4 (id=564): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x180a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x9, 0x8000e, 0xda, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63003ffc00083300db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 297.648465][ T5820] cgroup: Unknown subsys name 'net' [ 297.813302][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 299.565442][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 301.542451][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.558837][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.575032][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.583754][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.613502][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 301.625806][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.703307][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.716243][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.725347][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.736338][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.745170][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 301.755094][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.771991][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.789737][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.799236][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.807638][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.816284][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 301.825022][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.854149][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.863128][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.879169][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.889782][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.925234][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 301.937224][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.158114][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 302.375344][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.383366][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.390978][ T5829] bridge_slave_0: entered allmulticast mode [ 302.398247][ T5829] bridge_slave_0: entered promiscuous mode [ 302.408271][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.415702][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.423072][ T5829] bridge_slave_1: entered allmulticast mode [ 302.431307][ T5829] bridge_slave_1: entered promiscuous mode [ 302.560086][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.588202][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 302.607725][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.678685][ T5829] team0: Port device team_slave_0 added [ 302.687215][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 302.730178][ T5829] team0: Port device team_slave_1 added [ 302.795330][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.802438][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.829224][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.874468][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 302.887001][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.893996][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.921883][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.939250][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.946852][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.954492][ T5833] bridge_slave_0: entered allmulticast mode [ 302.962316][ T5833] bridge_slave_0: entered promiscuous mode [ 302.996269][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.003796][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.011773][ T5833] bridge_slave_1: entered allmulticast mode [ 303.019385][ T5833] bridge_slave_1: entered promiscuous mode [ 303.122973][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.152174][ T5829] hsr_slave_0: entered promiscuous mode [ 303.158831][ T5829] hsr_slave_1: entered promiscuous mode [ 303.173639][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.181073][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.188641][ T5837] bridge_slave_0: entered allmulticast mode [ 303.196258][ T5837] bridge_slave_0: entered promiscuous mode [ 303.206298][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.237463][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.244957][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.252191][ T5837] bridge_slave_1: entered allmulticast mode [ 303.260750][ T5837] bridge_slave_1: entered promiscuous mode [ 303.327219][ T5833] team0: Port device team_slave_0 added [ 303.355538][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.362870][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.370472][ T5839] bridge_slave_0: entered allmulticast mode [ 303.378197][ T5839] bridge_slave_0: entered promiscuous mode [ 303.402330][ T5833] team0: Port device team_slave_1 added [ 303.434250][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.441743][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.449437][ T5839] bridge_slave_1: entered allmulticast mode [ 303.456961][ T5839] bridge_slave_1: entered promiscuous mode [ 303.466285][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.480620][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.551047][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.559149][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.585237][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.598584][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.606166][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.632983][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.672137][ T5837] team0: Port device team_slave_0 added [ 303.681856][ T5837] team0: Port device team_slave_1 added [ 303.701016][ T5834] Bluetooth: hci0: command tx timeout [ 303.732556][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.744140][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.751752][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.778886][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.793167][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.800282][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.827210][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.851182][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.860637][ T5834] Bluetooth: hci1: command tx timeout [ 303.866564][ T5836] Bluetooth: hci2: command tx timeout [ 303.971974][ T5839] team0: Port device team_slave_0 added [ 303.983495][ T5833] hsr_slave_0: entered promiscuous mode [ 303.990732][ T5833] hsr_slave_1: entered promiscuous mode [ 303.997717][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.005945][ T5833] Cannot create hsr debugfs directory [ 304.015570][ T5834] Bluetooth: hci3: command tx timeout [ 304.036426][ T5839] team0: Port device team_slave_1 added [ 304.081366][ T5837] hsr_slave_0: entered promiscuous mode [ 304.089123][ T5837] hsr_slave_1: entered promiscuous mode [ 304.096897][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.104499][ T5837] Cannot create hsr debugfs directory [ 304.129410][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.146254][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.173844][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.187627][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.194813][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.221507][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.371053][ T5839] hsr_slave_0: entered promiscuous mode [ 304.377947][ T5839] hsr_slave_1: entered promiscuous mode [ 304.384284][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.392512][ T5839] Cannot create hsr debugfs directory [ 304.527855][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 304.561115][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 304.600127][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 304.651483][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 304.797038][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.818546][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.846013][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.881034][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.922175][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 304.934425][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 304.967235][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 304.982555][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 305.089766][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.102855][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.113474][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.135192][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.162014][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.218108][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.270579][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.278257][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.310952][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.329408][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.336812][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.408735][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.449020][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.456316][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.485555][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.492913][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.521166][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.568674][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.612469][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.619734][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.658190][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.665477][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.690894][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.711099][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.722601][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.774869][ T5834] Bluetooth: hci0: command tx timeout [ 305.839918][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.907629][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.914912][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.936643][ T5834] Bluetooth: hci2: command tx timeout [ 305.937134][ T5836] Bluetooth: hci1: command tx timeout [ 305.979095][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.996990][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.004198][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.095208][ T5836] Bluetooth: hci3: command tx timeout [ 306.192836][ T5829] veth0_vlan: entered promiscuous mode [ 306.209192][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.271434][ T5829] veth1_vlan: entered promiscuous mode [ 306.409133][ T5833] veth0_vlan: entered promiscuous mode [ 306.440636][ T5829] veth0_macvtap: entered promiscuous mode [ 306.463130][ T5833] veth1_vlan: entered promiscuous mode [ 306.500307][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.523728][ T5829] veth1_macvtap: entered promiscuous mode [ 306.590188][ T5833] veth0_macvtap: entered promiscuous mode [ 306.628155][ T5833] veth1_macvtap: entered promiscuous mode [ 306.649508][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.680178][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.694147][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.704107][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.713933][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.723198][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.753420][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.768002][ T5837] veth0_vlan: entered promiscuous mode [ 306.781425][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.792610][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.806989][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.821670][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.832988][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.845957][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.875585][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.884499][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.893839][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.905847][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.920685][ T5837] veth1_vlan: entered promiscuous mode [ 307.081202][ T5837] veth0_macvtap: entered promiscuous mode [ 307.113519][ T5839] veth0_vlan: entered promiscuous mode [ 307.138469][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.140781][ T5837] veth1_macvtap: entered promiscuous mode [ 307.174354][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.182284][ T5839] veth1_vlan: entered promiscuous mode [ 307.197565][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.209041][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.221851][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.232726][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.244169][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.281051][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.286201][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.292464][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.312897][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.323757][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.335612][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.347311][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.361354][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.370299][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.379895][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.388776][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.433052][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.445495][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.461630][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.477747][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.493538][ T5839] veth0_macvtap: entered promiscuous mode [ 307.537728][ T5839] veth1_macvtap: entered promiscuous mode [ 307.689600][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.712907][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.724858][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.738695][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.750235][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.776097][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.803651][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.839331][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.859923][ T5836] Bluetooth: hci0: command tx timeout [ 307.860764][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.883970][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.901251][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.913134][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.933927][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.959435][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.016977][ T5834] Bluetooth: hci2: command tx timeout [ 308.025287][ T5836] Bluetooth: hci1: command tx timeout [ 308.033815][ T5917] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1'. [ 308.052750][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.075204][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.103920][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.123612][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.124622][ C0] hrtimer: interrupt took 64697 ns [ 308.176539][ T5836] Bluetooth: hci3: command tx timeout [ 308.250865][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.274133][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.496796][ T5919] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5'. [ 308.573497][ T5919] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 308.898640][ T5921] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6'. [ 308.906230][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.934249][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.973217][ T5921] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 308.992648][ T5921] CPU: 0 PID: 5921 Comm: syz.0.6 Not tainted syzkaller #0 [ 308.999856][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.010125][ T5921] Call Trace: [ 309.013601][ T5921] [ 309.016590][ T5921] dump_stack_lvl+0x16c/0x230 [ 309.021414][ T5921] ? show_regs_print_info+0x20/0x20 [ 309.026739][ T5921] ? load_image+0x3b0/0x3b0 [ 309.031323][ T5921] sysfs_warn_dup+0x8e/0xa0 [ 309.035971][ T5921] sysfs_do_create_link_sd+0xc0/0x110 [ 309.041485][ T5921] device_add_class_symlinks+0x1cf/0x240 [ 309.047343][ T5921] device_add+0x507/0xc20 [ 309.051704][ T5921] wiphy_register+0x1e74/0x2c00 [ 309.056608][ T5921] ? cfg80211_event_work+0x40/0x40 [ 309.061769][ T5921] ? minstrel_ht_alloc+0x88a/0x990 [ 309.066914][ T5921] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 309.073190][ T5921] ieee80211_register_hw+0x2de8/0x3b10 [ 309.078697][ T5921] ? ieee80211_register_hw+0xf81/0x3b10 [ 309.084442][ T5921] ? ieee80211_tasklet_handler+0x20/0x20 [ 309.090279][ T5921] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 309.096202][ T5921] ? __debug_object_init+0xe8/0x430 [ 309.101460][ T5921] ? __asan_memset+0x22/0x40 [ 309.106163][ T5921] ? __hrtimer_init+0x186/0x270 [ 309.111084][ T5921] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 309.116977][ T5921] ? mac80211_hwsim_free+0x220/0x220 [ 309.122291][ T5921] ? rcu_is_watching+0x15/0xb0 [ 309.127122][ T5921] ? kstrndup+0xbd/0x140 [ 309.131847][ T5921] hwsim_new_radio_nl+0xd78/0x19d0 [ 309.137073][ T5921] ? __nla_validate+0x50/0x50 [ 309.141788][ T5921] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 309.148162][ T5921] ? __nla_parse+0x40/0x50 [ 309.152986][ T5921] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 309.159441][ T5921] genl_family_rcv_msg_doit+0x209/0x2f0 [ 309.165094][ T5921] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 309.171112][ T5921] ? bpf_lsm_capable+0x9/0x10 [ 309.175819][ T5921] ? security_capable+0x89/0xb0 [ 309.180706][ T5921] genl_rcv_msg+0x60b/0x790 [ 309.185249][ T5921] ? genl_bind+0x360/0x360 [ 309.189715][ T5921] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 309.196145][ T5921] netlink_rcv_skb+0x216/0x480 [ 309.201020][ T5921] ? genl_bind+0x360/0x360 [ 309.205737][ T5921] ? netlink_ack+0x1110/0x1110 [ 309.210624][ T5921] ? __lock_acquire+0x7c80/0x7c80 [ 309.215869][ T5921] ? down_read+0x1ac/0x2e0 [ 309.220328][ T5921] genl_rcv+0x28/0x40 [ 309.224336][ T5921] netlink_unicast+0x751/0x8d0 [ 309.229527][ T5921] netlink_sendmsg+0x8c1/0xbe0 [ 309.234956][ T5921] ? netlink_getsockopt+0x580/0x580 [ 309.240382][ T5921] ? aa_sock_msg_perm+0x94/0x150 [ 309.245346][ T5921] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 309.250657][ T5921] ? security_socket_sendmsg+0x80/0xa0 [ 309.256148][ T5921] ? netlink_getsockopt+0x580/0x580 [ 309.261793][ T5921] ____sys_sendmsg+0x5bf/0x950 [ 309.266795][ T5921] ? __asan_memset+0x22/0x40 [ 309.271452][ T5921] ? __sys_sendmsg_sock+0x30/0x30 [ 309.276691][ T5921] ? __import_iovec+0x5f2/0x860 [ 309.281776][ T5921] ? import_iovec+0x73/0xa0 [ 309.286334][ T5921] ___sys_sendmsg+0x220/0x290 [ 309.291134][ T5921] ? __sys_sendmsg+0x270/0x270 [ 309.296109][ T5921] __se_sys_sendmsg+0x1a5/0x270 [ 309.301182][ T5921] ? __x64_sys_sendmsg+0x80/0x80 [ 309.306165][ T5921] ? syscall_enter_from_user_mode+0x2e/0x80 [ 309.312281][ T5921] do_syscall_64+0x55/0xb0 [ 309.316724][ T5921] ? clear_bhb_loop+0x40/0x90 [ 309.321679][ T5921] ? clear_bhb_loop+0x40/0x90 [ 309.326398][ T5921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.332423][ T5921] RIP: 0033:0x7fd90458eec9 [ 309.336933][ T5921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.357101][ T5921] RSP: 002b:00007fd90540c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.365564][ T5921] RAX: ffffffffffffffda RBX: 00007fd9047e5fa0 RCX: 00007fd90458eec9 [ 309.373830][ T5921] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 309.381869][ T5921] RBP: 00007fd904611f91 R08: 0000000000000000 R09: 0000000000000000 [ 309.390760][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.398749][ T5921] R13: 00007fd9047e6038 R14: 00007fd9047e5fa0 R15: 00007ffd2e156c08 [ 309.406775][ T5921] [ 309.654103][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.685521][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.888600][ T5928] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 309.889012][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.898729][ T5928] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3'. [ 309.942396][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.950918][ T5836] Bluetooth: hci0: command tx timeout [ 310.104916][ T5836] Bluetooth: hci1: command tx timeout [ 310.110412][ T5836] Bluetooth: hci2: command tx timeout [ 310.265149][ T5836] Bluetooth: hci3: command tx timeout [ 310.312602][ T5934] warning: `syz.2.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 310.509220][ T5938] FAULT_INJECTION: forcing a failure. [ 310.509220][ T5938] name failslab, interval 1, probability 0, space 0, times 1 [ 310.554892][ T5938] CPU: 0 PID: 5938 Comm: syz.3.9 Not tainted syzkaller #0 [ 310.562102][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.572394][ T5938] Call Trace: [ 310.575735][ T5938] [ 310.578776][ T5938] dump_stack_lvl+0x16c/0x230 [ 310.583535][ T5938] ? show_regs_print_info+0x20/0x20 [ 310.588897][ T5938] ? load_image+0x3b0/0x3b0 [ 310.593672][ T5938] ? __might_sleep+0xe0/0xe0 [ 310.598385][ T5938] ? __lock_acquire+0x7c80/0x7c80 [ 310.603549][ T5938] ? mark_lock+0x94/0x320 [ 310.607955][ T5938] should_fail_ex+0x39d/0x4d0 [ 310.612709][ T5938] should_failslab+0x9/0x20 [ 310.617356][ T5938] slab_pre_alloc_hook+0x59/0x310 [ 310.622632][ T5938] ? __local_bh_enable_ip+0x12e/0x1c0 [ 310.628070][ T5938] ? pneigh_lookup+0x221/0x4e0 [ 310.632909][ T5938] ? pneigh_lookup+0x221/0x4e0 [ 310.637755][ T5938] __kmem_cache_alloc_node+0x53/0x260 [ 310.643210][ T5938] ? __local_bh_enable_ip+0x12e/0x1c0 [ 310.648743][ T5938] ? pneigh_lookup+0x221/0x4e0 [ 310.653577][ T5938] __kmalloc+0xa4/0x240 [ 310.657818][ T5938] pneigh_lookup+0x221/0x4e0 [ 310.662523][ T5938] neigh_add+0x61c/0xdb0 [ 310.667063][ T5938] ? do_raw_spin_unlock+0x121/0x230 [ 310.672829][ T5938] ? neigh_proc_dointvec_unres_qlen+0x270/0x270 [ 310.679346][ T5938] ? __mutex_lock+0x4e8/0xcc0 [ 310.684169][ T5938] ? neigh_proc_dointvec_unres_qlen+0x270/0x270 [ 310.690757][ T5938] rtnetlink_rcv_msg+0x7c7/0xf10 [ 310.695967][ T5938] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 310.701344][ T5938] ? lockdep_hardirqs_on+0x98/0x150 [ 310.706627][ T5938] ? rtnetlink_bind+0x80/0x80 [ 310.711476][ T5938] ? perf_trace_preemptirq_template+0xa4/0x340 [ 310.717736][ T5938] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 310.723931][ T5938] ? lock_chain_count+0x20/0x20 [ 310.728879][ T5938] ? __local_bh_enable_ip+0x12e/0x1c0 [ 310.734409][ T5938] ? lockdep_hardirqs_on+0x98/0x150 [ 310.739801][ T5938] ? __local_bh_enable_ip+0x12e/0x1c0 [ 310.745428][ T5938] ? _local_bh_enable+0xa0/0xa0 [ 310.750470][ T5938] ? __dev_queue_xmit+0x245/0x35a0 [ 310.755852][ T5938] ? __dev_queue_xmit+0x1449/0x35a0 [ 310.761200][ T5938] ? __dev_queue_xmit+0x245/0x35a0 [ 310.766576][ T5938] ? ref_tracker_free+0x634/0x7d0 [ 310.771653][ T5938] ? __copy_skb_header+0xa7/0x550 [ 310.776750][ T5938] netlink_rcv_skb+0x216/0x480 [ 310.781563][ T5938] ? rtnetlink_bind+0x80/0x80 [ 310.786349][ T5938] ? netlink_ack+0x1110/0x1110 [ 310.791484][ T5938] ? __lock_acquire+0x7c80/0x7c80 [ 310.796652][ T5938] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.802116][ T5938] netlink_unicast+0x751/0x8d0 [ 310.807179][ T5938] netlink_sendmsg+0x8c1/0xbe0 [ 310.812371][ T5938] ? netlink_getsockopt+0x580/0x580 [ 310.817740][ T5938] ? aa_sock_msg_perm+0x94/0x150 [ 310.822808][ T5938] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 310.828129][ T5938] ? security_socket_sendmsg+0x80/0xa0 [ 310.833797][ T5938] ? netlink_getsockopt+0x580/0x580 [ 310.839045][ T5938] ____sys_sendmsg+0x5bf/0x950 [ 310.843876][ T5938] ? __asan_memset+0x22/0x40 [ 310.848674][ T5938] ? __sys_sendmsg_sock+0x30/0x30 [ 310.853818][ T5938] ? __import_iovec+0x5f2/0x860 [ 310.858982][ T5938] ? import_iovec+0x73/0xa0 [ 310.863567][ T5938] ___sys_sendmsg+0x220/0x290 [ 310.868295][ T5938] ? __sys_sendmsg+0x270/0x270 [ 310.873155][ T5938] ? __lock_acquire+0x7c80/0x7c80 [ 310.878362][ T5938] __se_sys_sendmsg+0x1a5/0x270 [ 310.883381][ T5938] ? __x64_sys_sendmsg+0x80/0x80 [ 310.888414][ T5938] ? lockdep_hardirqs_on+0x98/0x150 [ 310.893856][ T5938] do_syscall_64+0x55/0xb0 [ 310.898532][ T5938] ? clear_bhb_loop+0x40/0x90 [ 310.903288][ T5938] ? clear_bhb_loop+0x40/0x90 [ 310.908118][ T5938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.914194][ T5938] RIP: 0033:0x7f0fc718eec9 [ 310.918684][ T5938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.938344][ T5938] RSP: 002b:00007f0fc7f44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.946966][ T5938] RAX: ffffffffffffffda RBX: 00007f0fc73e5fa0 RCX: 00007f0fc718eec9 [ 310.955055][ T5938] RDX: 0000000000008040 RSI: 0000200000000600 RDI: 0000000000000004 [ 310.963141][ T5938] RBP: 00007f0fc7f44090 R08: 0000000000000000 R09: 0000000000000000 [ 310.971247][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.979429][ T5938] R13: 00007f0fc73e6038 R14: 00007f0fc73e5fa0 R15: 00007ffc8d7f3e68 [ 310.987553][ T5938] [ 311.440942][ T5950] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11'. [ 311.472121][ T5948] netlink: 'syz.3.12': attribute type 10 has an invalid length. [ 311.573912][ T5948] team0: Port device netdevsim0 added [ 311.625483][ T5950] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 311.782092][ T5953] veth1_to_bond: entered allmulticast mode [ 312.268886][ T5964] netlink: 'syz.0.17': attribute type 21 has an invalid length. [ 312.302833][ T5958] veth1_to_bond: entered allmulticast mode [ 312.973980][ T5977] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.22'. [ 313.014735][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.027165][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.092178][ T5979] bridge0: entered allmulticast mode [ 313.219104][ T5981] netlink: 'syz.1.25': attribute type 12 has an invalid length. [ 313.262873][ T5981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.25'. [ 313.708495][ T5986] bridge_slave_1: left allmulticast mode [ 313.741550][ T5986] bridge_slave_1: left promiscuous mode [ 313.759979][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.788323][ T5986] bridge_slave_0: left allmulticast mode [ 313.807962][ T5986] bridge_slave_0: left promiscuous mode [ 313.814005][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.931407][ T5977] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 313.941851][ T5977] CPU: 1 PID: 5977 Comm: syz.0.22 Not tainted syzkaller #0 [ 313.949130][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 313.959586][ T5977] Call Trace: [ 313.962941][ T5977] [ 313.965919][ T5977] dump_stack_lvl+0x16c/0x230 [ 313.971198][ T5977] ? show_regs_print_info+0x20/0x20 [ 313.976561][ T5977] ? load_image+0x3b0/0x3b0 [ 313.981229][ T5977] sysfs_warn_dup+0x8e/0xa0 [ 313.985797][ T5977] sysfs_do_create_link_sd+0xc0/0x110 [ 313.991325][ T5977] device_add_class_symlinks+0x1cf/0x240 [ 313.997036][ T5977] device_add+0x507/0xc20 [ 314.001511][ T5977] wiphy_register+0x1e74/0x2c00 [ 314.006514][ T5977] ? cfg80211_event_work+0x40/0x40 [ 314.012018][ T5977] ? minstrel_ht_alloc+0x88a/0x990 [ 314.017160][ T5977] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 314.023287][ T5977] ieee80211_register_hw+0x2de8/0x3b10 [ 314.028790][ T5977] ? ieee80211_register_hw+0xf81/0x3b10 [ 314.034372][ T5977] ? ieee80211_tasklet_handler+0x20/0x20 [ 314.040111][ T5977] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 314.046035][ T5977] ? __debug_object_init+0xe8/0x430 [ 314.051263][ T5977] ? __asan_memset+0x22/0x40 [ 314.055883][ T5977] ? __hrtimer_init+0x186/0x270 [ 314.060965][ T5977] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 314.066842][ T5977] ? mac80211_hwsim_free+0x220/0x220 [ 314.072153][ T5977] ? rcu_is_watching+0x15/0xb0 [ 314.076957][ T5977] ? kstrndup+0xbd/0x140 [ 314.081264][ T5977] hwsim_new_radio_nl+0xd78/0x19d0 [ 314.086436][ T5977] ? __nla_validate+0x50/0x50 [ 314.091150][ T5977] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 314.097536][ T5977] ? __nla_parse+0x40/0x50 [ 314.102098][ T5977] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 314.108476][ T5977] genl_family_rcv_msg_doit+0x209/0x2f0 [ 314.114070][ T5977] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 314.120080][ T5977] ? lockdep_hardirqs_on+0x98/0x150 [ 314.125323][ T5977] ? genl_rcv_msg+0x5e8/0x790 [ 314.130037][ T5977] genl_rcv_msg+0x60b/0x790 [ 314.134643][ T5977] ? genl_bind+0x360/0x360 [ 314.139186][ T5977] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 314.145588][ T5977] ? netlink_rcv_skb+0x1f5/0x480 [ 314.150664][ T5977] netlink_rcv_skb+0x216/0x480 [ 314.155480][ T5977] ? genl_bind+0x360/0x360 [ 314.159931][ T5977] ? netlink_ack+0x1110/0x1110 [ 314.164990][ T5977] ? __lock_acquire+0x7c80/0x7c80 [ 314.170137][ T5977] ? down_read+0x1ac/0x2e0 [ 314.174595][ T5977] genl_rcv+0x28/0x40 [ 314.178643][ T5977] netlink_unicast+0x751/0x8d0 [ 314.183454][ T5977] netlink_sendmsg+0x8c1/0xbe0 [ 314.188246][ T5977] ? lockdep_hardirqs_on+0x98/0x150 [ 314.193494][ T5977] ? netlink_getsockopt+0x580/0x580 [ 314.198924][ T5977] ? security_socket_sendmsg+0x45/0xa0 [ 314.204529][ T5977] ? security_socket_sendmsg+0x80/0xa0 [ 314.210038][ T5977] ? netlink_getsockopt+0x580/0x580 [ 314.215265][ T5977] ____sys_sendmsg+0x5bf/0x950 [ 314.220098][ T5977] ? __asan_memset+0x22/0x40 [ 314.224711][ T5977] ? __sys_sendmsg_sock+0x30/0x30 [ 314.229892][ T5977] ? __import_iovec+0x5f2/0x860 [ 314.234867][ T5977] ? import_iovec+0x73/0xa0 [ 314.239402][ T5977] ___sys_sendmsg+0x220/0x290 [ 314.244234][ T5977] ? __sys_sendmsg+0x270/0x270 [ 314.249038][ T5977] ? perf_trace_preemptirq_template+0xa4/0x340 [ 314.255481][ T5977] ? irqentry_enter+0x3b/0x50 [ 314.260230][ T5977] __se_sys_sendmsg+0x1a5/0x270 [ 314.265307][ T5977] ? __x64_sys_sendmsg+0x80/0x80 [ 314.270322][ T5977] ? lockdep_hardirqs_on+0x98/0x150 [ 314.275827][ T5977] do_syscall_64+0x55/0xb0 [ 314.280269][ T5977] ? clear_bhb_loop+0x40/0x90 [ 314.284965][ T5977] ? clear_bhb_loop+0x40/0x90 [ 314.289677][ T5977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.295596][ T5977] RIP: 0033:0x7fd90458eec9 [ 314.300089][ T5977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.320275][ T5977] RSP: 002b:00007fd90540c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.328722][ T5977] RAX: ffffffffffffffda RBX: 00007fd9047e5fa0 RCX: 00007fd90458eec9 [ 314.336919][ T5977] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 314.345104][ T5977] RBP: 00007fd904611f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.353297][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.361380][ T5977] R13: 00007fd9047e6038 R14: 00007fd9047e5fa0 R15: 00007ffd2e156c08 [ 314.369475][ T5977] [ 316.719149][ T6051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.383187][ T6073] netlink: 'syz.0.66': attribute type 27 has an invalid length. [ 317.412764][ T6073] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 317.424148][ T6073] netlink: 152 bytes leftover after parsing attributes in process `syz.0.66'. [ 317.707838][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.724753][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.057657][ T6093] netlink: 'syz.1.72': attribute type 10 has an invalid length. [ 318.419333][ T6110] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 318.752411][ T6118] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.84'. [ 319.378364][ T6138] netlink: 'syz.2.95': attribute type 29 has an invalid length. [ 319.395378][ T6138] netlink: 'syz.2.95': attribute type 29 has an invalid length. [ 319.427002][ T6138] netlink: 'syz.2.95': attribute type 29 has an invalid length. [ 320.209734][ T6165] syzkaller0: entered promiscuous mode [ 320.266629][ T6165] syzkaller0: entered allmulticast mode [ 321.193729][ T6204] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.125'. [ 321.533363][ T6216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.600673][ T6334] bond_slave_1: mtu less than device minimum [ 331.772657][ T6362] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 332.486208][ T6370] wg2: entered promiscuous mode [ 332.503708][ T6370] wg2: entered allmulticast mode [ 334.629608][ T6400] veth1_macvtap: left promiscuous mode [ 334.654676][ T6400] macsec0: entered allmulticast mode [ 335.105723][ T6409] veth0_vlan: entered allmulticast mode [ 348.347045][ T6637] bond_slave_1: mtu less than device minimum [ 357.289429][ T6752] syzkaller0: entered promiscuous mode [ 357.305025][ T6752] syzkaller0: entered allmulticast mode [ 364.398402][ T6829] sit0: entered allmulticast mode [ 366.308067][ T6849] veth1_macvtap: left promiscuous mode [ 366.315427][ T6849] macsec0: entered promiscuous mode [ 366.320758][ T6849] macsec0: entered allmulticast mode [ 371.427788][ T6871] syz.3.379[6871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.427948][ T6871] syz.3.379[6871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.447361][ T6871] syz.3.379[6871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.518603][ T6871] syz.3.379[6871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.833918][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.855487][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.866402][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.877044][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.885745][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 373.893914][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.679077][ T6875] chnl_net:caif_netlink_parms(): no params data found [ 375.936252][ T5836] Bluetooth: hci4: command tx timeout [ 377.146016][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.154457][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.162635][ T6875] bridge_slave_0: entered allmulticast mode [ 377.171493][ T6875] bridge_slave_0: entered promiscuous mode [ 377.181257][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.189799][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.198468][ T6875] bridge_slave_1: entered allmulticast mode [ 377.212563][ T6875] bridge_slave_1: entered promiscuous mode [ 377.399537][ T6875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.453165][ T6875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.711906][ T6875] team0: Port device team_slave_0 added [ 378.024836][ T5836] Bluetooth: hci4: command tx timeout [ 379.139194][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.149858][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.551588][ T6875] team0: Port device team_slave_1 added [ 379.558443][ T6915] pim6reg1: entered promiscuous mode [ 379.563801][ T6915] pim6reg1: entered allmulticast mode [ 379.869370][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.884516][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.914402][ T6875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.998142][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.024840][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.051805][ T6875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.095767][ T5836] Bluetooth: hci4: command tx timeout [ 382.175326][ T5836] Bluetooth: hci4: command tx timeout [ 382.353534][ T6875] hsr_slave_0: entered promiscuous mode [ 382.391973][ T6875] hsr_slave_1: entered promiscuous mode [ 382.429218][ T6875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.443858][ T6875] Cannot create hsr debugfs directory [ 383.186261][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.196940][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.206764][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.216425][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.225748][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 383.245233][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.525199][ T6875] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.592407][ T6875] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.683574][ T6875] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.700253][ T6875] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.828882][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.026829][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.187964][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.346771][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.476335][ T6875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.640490][ T6875] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.737853][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.745122][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.952945][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.960993][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.175723][ T6946] chnl_net:caif_netlink_parms(): no params data found [ 385.295022][ T5834] Bluetooth: hci0: command tx timeout [ 385.681091][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.688811][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.697431][ T6946] bridge_slave_0: entered allmulticast mode [ 385.706004][ T6946] bridge_slave_0: entered promiscuous mode [ 385.795533][ T6946] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.805131][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.833078][ T6946] bridge_slave_1: entered allmulticast mode [ 385.842306][ T6946] bridge_slave_1: entered promiscuous mode [ 386.109605][ T6946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.133138][ T6946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.399569][ T6946] team0: Port device team_slave_0 added [ 386.433660][ T7013] bond_slave_1: mtu greater than device maximum [ 386.474404][ T6946] team0: Port device team_slave_1 added [ 386.679411][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.713212][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.740760][ T6946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.834134][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.863149][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.903074][ T6946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.292760][ T6946] hsr_slave_0: entered promiscuous mode [ 387.311929][ T6946] hsr_slave_1: entered promiscuous mode [ 387.319300][ T6946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.337589][ T6946] Cannot create hsr debugfs directory [ 387.374984][ T5834] Bluetooth: hci0: command tx timeout [ 387.517264][ T7040] ªªªªªª: renamed from vlan0 (while UP) [ 387.691158][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.901088][ T48] hsr_slave_0: left promiscuous mode [ 387.911514][ T48] hsr_slave_1: left promiscuous mode [ 387.921216][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.929349][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.939107][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.948001][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.956745][ T48] bridge_slave_1: left allmulticast mode [ 387.962736][ T48] bridge_slave_1: left promiscuous mode [ 387.973006][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.989034][ T48] bridge_slave_0: left allmulticast mode [ 387.995182][ T48] bridge_slave_0: left promiscuous mode [ 388.001182][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.058743][ T48] veth0_macvtap: left promiscuous mode [ 388.067493][ T48] veth1_vlan: left promiscuous mode [ 388.075915][ T48] veth0_vlan: left promiscuous mode [ 388.976935][ T48] team0 (unregistering): Port device team_slave_1 removed [ 389.025999][ T48] team0 (unregistering): Port device team_slave_0 removed [ 389.070303][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.117725][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.454897][ T5834] Bluetooth: hci0: command tx timeout [ 389.637305][ T48] bond0 (unregistering): Released all slaves [ 391.534857][ T5834] Bluetooth: hci0: command tx timeout [ 392.605831][ T6875] veth0_vlan: entered promiscuous mode [ 392.743133][ T6946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 392.773845][ T6946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 392.807949][ T6875] veth1_vlan: entered promiscuous mode [ 392.856297][ T6946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.888623][ T6946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 393.153604][ T6875] veth0_macvtap: entered promiscuous mode [ 393.193412][ T6875] veth1_macvtap: entered promiscuous mode [ 393.398126][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.434468][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.460885][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.472194][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.514611][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.561286][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.586564][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.627671][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.684826][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.705179][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.734901][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.753975][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.764946][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.777650][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.862416][ T6875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.872178][ T6875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.882702][ T6875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.892222][ T6875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.069997][ T6946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.240798][ T6946] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.318369][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.325798][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.415209][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.423277][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.431447][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.438747][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.948868][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.993798][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.521165][ T6946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.695704][ T6946] veth0_vlan: entered promiscuous mode [ 398.792145][ T6946] veth1_vlan: entered promiscuous mode [ 399.152773][ T6946] veth0_macvtap: entered promiscuous mode [ 399.219909][ T6946] veth1_macvtap: entered promiscuous mode [ 399.252682][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.273624][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.320957][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.339346][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.351578][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.365725][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.376659][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.388085][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.404215][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.446299][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.480102][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.550571][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.583586][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.600787][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.612820][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.631683][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.643074][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.668566][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.151026][ T6946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.162654][ T6946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.174004][ T6946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.203082][ T6946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.605120][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.623302][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.700811][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.727288][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.656453][ T7231] syzkaller0: entered promiscuous mode [ 402.662273][ T7231] syzkaller0: entered allmulticast mode [ 405.396515][ T7259] wg2: entered promiscuous mode [ 405.401471][ T7259] wg2: entered allmulticast mode [ 406.025813][ T7276] pim6reg1: entered promiscuous mode [ 406.031440][ T7276] pim6reg1: entered allmulticast mode [ 406.184500][ T7269] bridge0: port 3(team0) entered blocking state [ 406.230041][ T7269] bridge0: port 3(team0) entered disabled state [ 406.260435][ T7269] team0: entered allmulticast mode [ 406.290073][ T7269] team_slave_0: entered allmulticast mode [ 406.315803][ T7269] team_slave_1: entered allmulticast mode [ 406.478705][ T7269] team0: entered promiscuous mode [ 406.493662][ T7269] team_slave_0: entered promiscuous mode [ 406.520787][ T7269] team_slave_1: entered promiscuous mode [ 406.585017][ T7269] bridge0: port 3(team0) entered blocking state [ 406.594550][ T7269] bridge0: port 3(team0) entered forwarding state [ 409.271654][ T7294] sit0: entered allmulticast mode [ 409.290598][ T7295] sit0: entered promiscuous mode [ 410.269694][ T7312] syzkaller0: entered promiscuous mode [ 410.278286][ T7322] veth0_vlan: entered allmulticast mode [ 415.535534][ T7374] pim6reg1: entered promiscuous mode [ 415.541098][ T7374] pim6reg1: entered allmulticast mode [ 415.878174][ T7382] cgroup: fork rejected by pids controller in /syz1 [ 416.249351][ T7391] syz.3.530[7391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.249499][ T7391] syz.3.530[7391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.257924][ T7388] GPL: port 1(erspan0) entered blocking state [ 417.281678][ T7388] GPL: port 1(erspan0) entered disabled state [ 417.289320][ T7388] erspan0: entered allmulticast mode [ 417.316242][ T7388] erspan0: entered promiscuous mode [ 417.344770][ T7393] GPL: port 1(erspan0) entered blocking state [ 417.351187][ T7393] GPL: port 1(erspan0) entered forwarding state [ 417.509990][ T7407] pim6reg1: entered promiscuous mode [ 417.535683][ T7407] pim6reg1: entered allmulticast mode [ 417.907775][ T7417] syz.3.538[7417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.908063][ T7417] syz.3.538[7417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.933715][ T7417] pim6reg1: entered promiscuous mode [ 417.995022][ T7417] pim6reg1: entered allmulticast mode [ 418.487089][ T7424] syzkaller0: entered promiscuous mode [ 418.492946][ T7424] syzkaller0: entered allmulticast mode [ 418.493547][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.520826][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.532658][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.549459][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.558667][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 418.572670][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.630378][ T7435] syz.3.544 uses obsolete (PF_INET,SOCK_PACKET) [ 420.656233][ T5836] Bluetooth: hci2: command tx timeout [ 421.657250][ T2930] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.866500][ T2930] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.569400][ T2930] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.739743][ T2930] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.750676][ T5836] Bluetooth: hci2: command tx timeout [ 422.803314][ T7478] veth1_macvtap: left promiscuous mode [ 422.819559][ T7478] macsec0: entered promiscuous mode [ 422.891770][ T7478] macsec0: entered allmulticast mode [ 423.244645][ T7482] veth1_macvtap: entered promiscuous mode [ 423.250584][ T7482] veth1_macvtap: entered allmulticast mode [ 423.315708][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 423.489399][ T7493] [ 423.492251][ T7493] ============================= [ 423.497249][ T7493] WARNING: suspicious RCU usage [ 423.502150][ T7493] syzkaller #0 Not tainted [ 423.506780][ T7493] ----------------------------- [ 423.511665][ T7493] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 423.520339][ T7493] [ 423.520339][ T7493] other info that might help us debug this: [ 423.520339][ T7493] [ 423.531544][ T7493] [ 423.531544][ T7493] rcu_scheduler_active = 2, debug_locks = 1 [ 423.540232][ T7493] 1 lock held by syz.5.563/7493: [ 423.545420][ T7493] #0: ffffffff8cd30100 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 423.556154][ T7493] [ 423.556154][ T7493] stack backtrace: [ 423.562097][ T7493] CPU: 0 PID: 7493 Comm: syz.5.563 Not tainted syzkaller #0 [ 423.569529][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 423.579677][ T7493] Call Trace: [ 423.583149][ T7493] [ 423.586138][ T7493] dump_stack_lvl+0x16c/0x230 [ 423.590895][ T7493] ? show_regs_print_info+0x20/0x20 [ 423.596263][ T7493] ? load_image+0x3b0/0x3b0 [ 423.600843][ T7493] lockdep_rcu_suspicious+0x1e1/0x300 [ 423.606390][ T7493] get_callchain_entry+0x2a9/0x3c0 [ 423.612042][ T7493] get_perf_callchain+0xa3/0x4b0 [ 423.617052][ T7493] ? put_callchain_entry+0xb0/0xb0 [ 423.622314][ T7493] ? plist_add+0x3d8/0x490 [ 423.626798][ T7493] __bpf_get_stack+0x2d7/0x510 [ 423.631621][ T7493] ? stack_map_get_build_id_offset+0x720/0x720 [ 423.637930][ T7493] ? __cant_sleep+0x210/0x210 [ 423.642651][ T7493] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 423.648434][ T7493] bpf_get_stack_raw_tp+0x1a9/0x210 [ 423.653696][ T7493] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 423.659195][ T7493] bpf_prog_run_pin_on_cpu+0xa8/0x140 [ 423.664636][ T7493] bpf_prog_test_run_syscall+0x311/0x490 [ 423.670486][ T7493] ? sock_gen_cookie+0x60/0x60 [ 423.675380][ T7493] ? sock_gen_cookie+0x60/0x60 [ 423.680180][ T7493] bpf_prog_test_run+0x321/0x390 [ 423.685556][ T7493] __sys_bpf+0x440/0x800 [ 423.689844][ T7493] ? bpf_link_show_fdinfo+0x350/0x350 [ 423.695263][ T7493] ? lock_chain_count+0x20/0x20 [ 423.700148][ T7493] __x64_sys_bpf+0x7c/0x90 [ 423.705049][ T7493] do_syscall_64+0x55/0xb0 [ 423.709511][ T7493] ? clear_bhb_loop+0x40/0x90 [ 423.714244][ T7493] ? clear_bhb_loop+0x40/0x90 [ 423.718953][ T7493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.724869][ T7493] RIP: 0033:0x7f05fe18eec9 [ 423.729392][ T7493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.749120][ T7493] RSP: 002b:00007f05ff095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.757823][ T7493] RAX: ffffffffffffffda RBX: 00007f05fe3e5fa0 RCX: 00007f05fe18eec9 [ 423.766040][ T7493] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 423.774043][ T7493] RBP: 00007f05fe211f91 R08: 0000000000000000 R09: 0000000000000000 [ 423.782139][ T7493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.790569][ T7493] R13: 00007f05fe3e6038 R14: 00007f05fe3e5fa0 R15: 00007ffe7a27f908 [ 423.798691][ T7493] [ 424.033185][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.049713][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.060112][ T7428] bridge_slave_0: entered allmulticast mode [ 424.070679][ T7428] bridge_slave_0: entered promiscuous mode [ 424.111855][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.119444][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.135344][ T7428] bridge_slave_1: entered allmulticast mode [ 424.161626][ T7428] bridge_slave_1: entered promiscuous mode [ 424.548856][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.567576][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.663306][ T7428] team0: Port device team_slave_0 added [ 424.672875][ T7428] team0: Port device team_slave_1 added [ 424.734236][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.741491][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.772281][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.801318][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.808902][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.815088][ T5836] Bluetooth: hci2: command tx timeout [ 424.842501][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.943621][ T7428] hsr_slave_0: entered promiscuous mode [ 424.952722][ T7428] hsr_slave_1: entered promiscuous mode [ 425.391343][ T2930] hsr_slave_0: left promiscuous mode [ 425.397672][ T2930] hsr_slave_1: left promiscuous mode [ 425.403879][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.412868][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.424276][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.432025][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.440096][ T2930] team0: left allmulticast mode [ 425.445358][ T2930] team_slave_0: left allmulticast mode [ 425.451269][ T2930] team_slave_1: left allmulticast mode [ 425.457239][ T2930] team0: left promiscuous mode [ 425.462058][ T2930] team_slave_0: left promiscuous mode [ 425.468211][ T2930] team_slave_1: left promiscuous mode [ 425.477106][ T2930] bridge0: port 3(team0) entered disabled state [ 425.486063][ T2930] bridge_slave_1: left allmulticast mode [ 425.491848][ T2930] bridge_slave_1: left promiscuous mode [ 425.497875][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.509103][ T2930] bridge_slave_0: left allmulticast mode [ 425.515017][ T2930] bridge_slave_0: left promiscuous mode [ 425.520851][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.549525][ T2930] veth1_macvtap: left promiscuous mode [ 425.555718][ T2930] veth0_macvtap: left promiscuous mode [ 425.561528][ T2930] veth1_vlan: left promiscuous mode [ 426.145448][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 426.199278][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 426.249990][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.305077][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.833384][ T2930] bond0 (unregistering): Released all slaves [ 426.898985][ T5834] Bluetooth: hci2: command tx timeout [ 427.143675][ T7428] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 427.154872][ T7428] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 427.168678][ T7428] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 427.193674][ T7428] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 427.298027][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 427.320554][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.353667][ T2930] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.386538][ T7428] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.401141][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.408366][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.430435][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.437746][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.477431][ T2930] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.552037][ T2930] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.630888][ T2930] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.811576][ T7428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.949573][ T7428] veth0_vlan: entered promiscuous mode [ 427.982295][ T7428] veth1_vlan: entered promiscuous mode [ 428.040317][ T7428] veth0_macvtap: entered promiscuous mode [ 428.051817][ T7428] veth1_macvtap: entered promiscuous mode [ 428.071502][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.082839][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.093401][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.107130][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.117300][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.128020][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.139588][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.150578][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.163514][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.195726][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.207285][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.218826][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.230033][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.240693][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.251575][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.262349][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.276023][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.287860][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.300151][ T7428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.309883][ T7428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.319246][ T7428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.328540][ T7428] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.473670][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.488402][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.536537][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.545683][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.913155][ T2930] hsr_slave_0: left promiscuous mode [ 428.921069][ T2930] hsr_slave_1: left promiscuous mode [ 428.931305][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.939130][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.948448][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.957654][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.984298][ T2930] veth1_macvtap: left promiscuous mode [ 428.990084][ T2930] veth0_macvtap: left promiscuous mode [ 428.996964][ T2930] veth1_vlan: left promiscuous mode [ 429.002609][ T2930] veth0_vlan: left promiscuous mode [ 429.607901][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 429.660570][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 429.712481][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.764732][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.302092][ T2930] bond0 (unregistering): Released all slaves