last executing test programs: 7m27.472717324s ago: executing program 3 (id=2326): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x1, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r0, 0x4) 7m27.279170957s ago: executing program 3 (id=2464): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 7m27.154852429s ago: executing program 3 (id=2465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 7m27.039503291s ago: executing program 3 (id=2466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7m26.739289605s ago: executing program 3 (id=2467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x13, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x2c}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7m26.597426337s ago: executing program 3 (id=2468): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) 7m11.502804426s ago: executing program 32 (id=2468): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) 13.800426389s ago: executing program 1 (id=4816): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x14044, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x400, 0xc8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 12.821913224s ago: executing program 1 (id=4823): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 12.621220547s ago: executing program 1 (id=4828): r0 = syz_clone(0x40280000, &(0x7f0000000200)="730fc3c99c6a3a22eed974f9406e3969bd93ac831d6fe1c8efa20b7bf138bf246f746593cb6664af8d164db8", 0x2c, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="f0b83bf273bf8a04d7ff99b0ac7ef949b1e7090b77eba74bd24ac1b9") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1208, 0x0, 0x0, 0x0, 0x28000000}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000800300388904df0100050000000017fffa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x23, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ffffffff000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000ed54090100000000009500000000000000852000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000be5000008500000006000000184a0000ffffffff0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x3, 0xc2, &(0x7f00000006c0)=""/194, 0x41100, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x9, 0x9, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r1], 0x0, 0x10, 0x9, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000007900c001000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ENABLE_STATS(0x20, &(0x7f0000000a80), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, &(0x7f0000000280), &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f0000000640)='syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0xff, 0x8, 0x6, 0x30, 0x0, 0x9, 0x2000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0x1}, 0x108, 0x5, 0x40, 0x2, 0x572, 0xc2, 0x2, 0x0, 0x4, 0x0, 0x100000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x498dde7bc5ee1ac3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x100000000, 0x12) r8 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080), 0x12) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 11.15405867s ago: executing program 1 (id=4836): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 10.47886327s ago: executing program 1 (id=4839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) 10.006667157s ago: executing program 1 (id=4843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0xc8, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000"], 0xfdef) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4ae"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.504768156s ago: executing program 2 (id=4869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) 3.28828242s ago: executing program 2 (id=4871): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009b0"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x81, 0x4, 0x0, 0x10008, 0xffffffffffffffff, 0x3a4e, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x0, @void, @value, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) close(r1) 3.088389752s ago: executing program 0 (id=4872): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0x600c01, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r3}, 0x18) 2.239038555s ago: executing program 0 (id=4873): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 2.238422285s ago: executing program 4 (id=4874): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, @perf_config_ext={0x1ffffffd}, 0x0, 0x0, 0x40, 0x6, 0x4, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc8}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 2.189446606s ago: executing program 2 (id=4875): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x14044, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x400, 0xc8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 1.608765635s ago: executing program 2 (id=4876): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) 1.606359565s ago: executing program 4 (id=4883): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0x7, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.153927172s ago: executing program 0 (id=4877): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) 966.227285ms ago: executing program 4 (id=4878): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x14044, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x400, 0xc8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 748.653938ms ago: executing program 0 (id=4879): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) 747.988308ms ago: executing program 2 (id=4880): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0x600c01, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r3}, 0x18) 573.856341ms ago: executing program 4 (id=4881): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000001000850000000f000000180100002020702500000000002020207b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00'], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x84a46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x1, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x1b36, 0x0, 0xc18b}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 403.020343ms ago: executing program 0 (id=4882): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 278.518355ms ago: executing program 2 (id=4884): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}], 0x20}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 277.766985ms ago: executing program 4 (id=4885): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) 90.695458ms ago: executing program 4 (id=4886): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0xc0}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0x7, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 0s ago: executing program 0 (id=4887): r0 = syz_clone(0x40280000, &(0x7f0000000200)="730fc3c99c6a3a22eed974f9406e3969bd93ac831d6fe1c8efa20b7bf138bf246f746593cb6664af8d164db8", 0x2c, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="f0b83bf273bf8a04d7ff99b0ac7ef949b1e7090b77eba74bd24ac1b9") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1208, 0x0, 0x0, 0x0, 0x28000000}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000800300388904df0100050000000017fffa", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x23, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ffffffff000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000ed54090100000000009500000000000000852000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000be5000008500000006000000184a0000ffffffff0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x3, 0xc2, &(0x7f00000006c0)=""/194, 0x41100, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x9, 0x9, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r1], 0x0, 0x10, 0x9, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000007900c001000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ENABLE_STATS(0x20, &(0x7f0000000a80), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, &(0x7f0000000280), &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f0000000640)='syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0xff, 0x8, 0x6, 0x30, 0x0, 0x9, 0x2000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0x1}, 0x108, 0x5, 0x40, 0x2, 0x572, 0xc2, 0x2, 0x0, 0x4, 0x0, 0x100000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x498dde7bc5ee1ac3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x100000000, 0x12) r8 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080), 0x12) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. [ 86.320782][ T5758] cgroup: Unknown subsys name 'net' [ 86.493220][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.478257][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.556600][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.567084][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.575730][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.584591][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.599462][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.612881][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.628956][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.638344][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.646444][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.658468][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.660273][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.668234][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.676318][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.683199][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.693633][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.698686][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.705163][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.718037][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.728176][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.729292][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.736164][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.754322][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.762688][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.770729][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.312872][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 91.450981][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 91.480468][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 91.593775][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.601084][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.609148][ T5773] bridge_slave_0: entered allmulticast mode [ 91.616688][ T5773] bridge_slave_0: entered promiscuous mode [ 91.627363][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.634765][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.642075][ T5773] bridge_slave_1: entered allmulticast mode [ 91.649183][ T5773] bridge_slave_1: entered promiscuous mode [ 91.668037][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 91.796700][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.804263][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.811619][ T5768] bridge_slave_0: entered allmulticast mode [ 91.819534][ T5768] bridge_slave_0: entered promiscuous mode [ 91.844235][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.859729][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.868945][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.876376][ T5768] bridge_slave_1: entered allmulticast mode [ 91.884253][ T5768] bridge_slave_1: entered promiscuous mode [ 91.891108][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.898476][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.906112][ T5772] bridge_slave_0: entered allmulticast mode [ 91.913837][ T5772] bridge_slave_0: entered promiscuous mode [ 91.924536][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.967486][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.975141][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.982507][ T5772] bridge_slave_1: entered allmulticast mode [ 91.989713][ T5772] bridge_slave_1: entered promiscuous mode [ 92.070773][ T5773] team0: Port device team_slave_0 added [ 92.078420][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.086009][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.094675][ T5774] bridge_slave_0: entered allmulticast mode [ 92.104019][ T5774] bridge_slave_0: entered promiscuous mode [ 92.116365][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.141173][ T5773] team0: Port device team_slave_1 added [ 92.159232][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.167459][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.175336][ T5774] bridge_slave_1: entered allmulticast mode [ 92.182905][ T5774] bridge_slave_1: entered promiscuous mode [ 92.192086][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.204346][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.282087][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.293139][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.300153][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.327259][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.356434][ T5768] team0: Port device team_slave_0 added [ 92.378489][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.385809][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.412875][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.433528][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.445066][ T5768] team0: Port device team_slave_1 added [ 92.453711][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.511697][ T5772] team0: Port device team_slave_0 added [ 92.563229][ T5772] team0: Port device team_slave_1 added [ 92.573649][ T5774] team0: Port device team_slave_0 added [ 92.596309][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.603589][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.629709][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.670400][ T5774] team0: Port device team_slave_1 added [ 92.693907][ T5773] hsr_slave_0: entered promiscuous mode [ 92.701434][ T5773] hsr_slave_1: entered promiscuous mode [ 92.709986][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.717124][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.733756][ T5085] Bluetooth: hci0: command tx timeout [ 92.745086][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.760995][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.768827][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.795071][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.812029][ T5777] Bluetooth: hci3: command tx timeout [ 92.812201][ T5771] Bluetooth: hci1: command tx timeout [ 92.817889][ T5085] Bluetooth: hci2: command tx timeout [ 92.835394][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.842746][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.869751][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.882645][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.889659][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.915956][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.949566][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.956783][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.983905][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.066933][ T5768] hsr_slave_0: entered promiscuous mode [ 93.076445][ T5768] hsr_slave_1: entered promiscuous mode [ 93.083538][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.091704][ T5768] Cannot create hsr debugfs directory [ 93.140833][ T5772] hsr_slave_0: entered promiscuous mode [ 93.148299][ T5772] hsr_slave_1: entered promiscuous mode [ 93.155735][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.164044][ T5772] Cannot create hsr debugfs directory [ 93.209729][ T5774] hsr_slave_0: entered promiscuous mode [ 93.216592][ T5774] hsr_slave_1: entered promiscuous mode [ 93.224417][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.232889][ T5774] Cannot create hsr debugfs directory [ 93.692368][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.713416][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.725576][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.737369][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.827150][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.848254][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.864289][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.888231][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.965535][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.977392][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.987903][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.014230][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.114629][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.143692][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.156515][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.174096][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.259230][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.338618][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.357932][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.395479][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.423225][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.430588][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.458448][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.465688][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.508454][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.527346][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.541517][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.568887][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.576125][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.616206][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.623510][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.636191][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.643824][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.654416][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.661881][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.765762][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.808488][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.815946][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.824652][ T5085] Bluetooth: hci0: command tx timeout [ 94.876484][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.896054][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.902354][ T5085] Bluetooth: hci1: command tx timeout [ 94.903349][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.909279][ T5085] Bluetooth: hci2: command tx timeout [ 94.917668][ T5771] Bluetooth: hci3: command tx timeout [ 95.586658][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.615303][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.643646][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.660262][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.771027][ T5773] veth0_vlan: entered promiscuous mode [ 95.799394][ T5774] veth0_vlan: entered promiscuous mode [ 95.809675][ T5768] veth0_vlan: entered promiscuous mode [ 95.826657][ T5768] veth1_vlan: entered promiscuous mode [ 95.858008][ T5774] veth1_vlan: entered promiscuous mode [ 95.874314][ T5773] veth1_vlan: entered promiscuous mode [ 95.995888][ T5772] veth0_vlan: entered promiscuous mode [ 96.008390][ T5768] veth0_macvtap: entered promiscuous mode [ 96.033724][ T5774] veth0_macvtap: entered promiscuous mode [ 96.046215][ T5768] veth1_macvtap: entered promiscuous mode [ 96.069159][ T5772] veth1_vlan: entered promiscuous mode [ 96.083344][ T5774] veth1_macvtap: entered promiscuous mode [ 96.113055][ T5773] veth0_macvtap: entered promiscuous mode [ 96.139437][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.151226][ T5773] veth1_macvtap: entered promiscuous mode [ 96.164588][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.180787][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.196262][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.214974][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.235491][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.246475][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.258811][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.287408][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.297476][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.309250][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.319861][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.338225][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.348290][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.357901][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.366880][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.389020][ T5772] veth0_macvtap: entered promiscuous mode [ 96.402832][ T5772] veth1_macvtap: entered promiscuous mode [ 96.438276][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.449212][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.459297][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.472825][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.484839][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.555826][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.569339][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.580708][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.591791][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.604526][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.649673][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.660808][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.671120][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.680274][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.756971][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.770762][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.817513][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.836452][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.847842][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.858691][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.870515][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.881391][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.894821][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.903286][ T5771] Bluetooth: hci0: command tx timeout [ 96.947716][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.959361][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.962471][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.979905][ T5771] Bluetooth: hci3: command tx timeout [ 96.980903][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.985717][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.985737][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.985749][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.985764][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.986131][ T5771] Bluetooth: hci2: command tx timeout [ 96.986169][ T5771] Bluetooth: hci1: command tx timeout [ 96.988212][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.059906][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.069256][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.078922][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.088612][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.148648][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.164020][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.222398][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.230312][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.340897][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.373003][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.465203][ T54] cfg80211: failed to load regulatory.db [ 97.549177][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.573544][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.651829][ C0] hrtimer: interrupt took 68892 ns [ 97.672462][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.680372][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.776106][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.789870][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.827789][ T5841] bridge0: entered allmulticast mode [ 97.906229][ T5845] bridge_slave_1: left allmulticast mode [ 97.913500][ T5845] bridge_slave_1: left promiscuous mode [ 97.920995][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.937175][ T5845] bridge_slave_0: left allmulticast mode [ 97.944055][ T5845] bridge_slave_0: left promiscuous mode [ 97.949982][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.028747][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.051297][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.973126][ T5085] Bluetooth: hci0: command tx timeout [ 99.052290][ T5085] Bluetooth: hci1: command tx timeout [ 99.057850][ T5085] Bluetooth: hci2: command tx timeout [ 99.063571][ T5085] Bluetooth: hci3: command tx timeout [ 100.257081][ T5886] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 100.308393][ T5886] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 102.664854][ T5920] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 102.732734][ T5920] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 103.265589][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.281842][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.364668][ T5934] bridge0: entered allmulticast mode [ 103.544117][ T5937] bridge_slave_1: left allmulticast mode [ 103.554741][ T5937] bridge_slave_1: left promiscuous mode [ 103.564183][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.587085][ T5937] bridge_slave_0: left allmulticast mode [ 103.600952][ T5937] bridge_slave_0: left promiscuous mode [ 103.624256][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.406652][ T5980] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 105.435845][ T5980] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 109.239266][ T6071] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 109.255499][ T6071] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 109.472395][ T6077] warning: `syz.3.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.208259][ T5777] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 112.253858][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 112.436272][ T5777] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 112.712898][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.730463][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.766091][ T6161] bridge0: entered allmulticast mode [ 112.822309][ T6166] bridge_slave_1: left allmulticast mode [ 112.832083][ T6166] bridge_slave_1: left promiscuous mode [ 112.848806][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.862448][ T6166] bridge_slave_0: left allmulticast mode [ 112.868270][ T6166] bridge_slave_0: left promiscuous mode [ 112.874696][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.049678][ T5777] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 113.862145][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.881140][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.903165][ T6195] bridge0: entered allmulticast mode [ 113.968915][ T6196] bridge_slave_1: left allmulticast mode [ 113.997490][ T6196] bridge_slave_1: left promiscuous mode [ 114.018620][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.032705][ T6196] bridge_slave_0: left allmulticast mode [ 114.039560][ T6196] bridge_slave_0: left promiscuous mode [ 114.048976][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.053672][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 124.287185][ T5085] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 126.073234][ T5085] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 127.880592][ T5085] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 130.403996][ T5085] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 131.435875][ T5085] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 131.443404][ T5085] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 132.452335][ T5085] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 133.298776][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.315548][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.822381][ T6625] netlink: 'syz.2.310': attribute type 11 has an invalid length. [ 137.087043][ T5085] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 137.455597][ T6682] netlink: 'syz.1.337': attribute type 11 has an invalid length. [ 137.603506][ T6686] lo: entered allmulticast mode [ 137.701160][ T6686] lo: entered promiscuous mode [ 137.717294][ T6686] lo: left allmulticast mode [ 137.882275][ T5085] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 138.761679][ T5085] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 138.791048][ T6719] lo: entered allmulticast mode [ 138.907877][ T6719] lo: entered promiscuous mode [ 138.931491][ T6719] lo: left allmulticast mode [ 139.519406][ T6731] lo: entered allmulticast mode [ 139.566086][ T6731] Q±6ã`Ò˜: renamed from lo [ 140.465729][ T6750] lo: entered allmulticast mode [ 140.510213][ T6751] lo: entered promiscuous mode [ 140.532371][ T6751] lo: left allmulticast mode [ 142.876639][ T6801] Zero length message leads to an empty skb [ 146.722379][ T6885] 7’ç÷ï: renamed from syzkaller0 [ 148.157427][ T6916] lo: left promiscuous mode [ 148.185938][ T6916] lo: entered allmulticast mode [ 151.543671][ T6973] Q±6ã`Ò˜: renamed from lo (while UP) [ 152.270085][ T6985] 7’ç÷ï: renamed from syzkaller0 [ 153.202321][ T7014] Q±6ã`Ò˜: renamed from lo [ 157.005873][ T7130] 7’ç÷ï: renamed from syzkaller0 [ 158.694874][ T7189] Q±6ã`Ò˜: renamed from lo (while UP) [ 174.692357][ T7644] wg2: entered promiscuous mode [ 174.697602][ T7644] wg2: entered allmulticast mode [ 185.925033][ T5085] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 191.935600][ T5085] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 191.943619][ T5085] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 192.892862][ T5085] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 192.892906][ T5085] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 194.737879][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.751019][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.684943][ T5085] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 233.324923][ T9064] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 241.671657][ T5085] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 241.673017][ T5085] Bluetooth: hci1: hardware error 0x00 [ 243.127557][ T5777] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 243.128690][ T5777] Bluetooth: hci0: hardware error 0x00 [ 243.772762][ T5085] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 244.629796][ T5085] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 244.630776][ T5085] Bluetooth: hci3: hardware error 0x00 [ 245.374864][ T5777] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 246.811848][ T5085] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 249.098463][ T9383] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 249.939259][ T9402] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 250.435654][ T9413] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.526000][ T5085] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 256.176549][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.201865][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.120891][ T9601] bridge_slave_1: mtu less than device minimum [ 261.093029][ T9665] bridge_slave_1: mtu less than device minimum [ 264.135471][ T9747] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 265.195385][ T9771] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 265.994897][ T9804] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 266.249668][ T9807] syzkaller0: entered promiscuous mode [ 266.292656][ T9807] syzkaller0: entered allmulticast mode [ 266.332118][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 268.905628][ T9842] syzkaller0: entered promiscuous mode [ 268.911375][ T9842] syzkaller0: entered allmulticast mode [ 269.372033][ T42] wlan1: Trigger new scan to find an IBSS to join [ 271.246183][ T9860] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 272.341077][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 273.200356][ T9918] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 273.345195][ T3475] wlan1: Creating new IBSS network, BSSID ee:62:38:93:4b:45 [ 274.446899][ T9946] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 276.581355][T10019] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 278.336402][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 281.307906][T10141] syzkaller0: entered promiscuous mode [ 281.325413][T10141] syzkaller0: entered allmulticast mode [ 281.372962][ T59] wlan1: Trigger new scan to find an IBSS to join [ 282.367539][ T3475] wlan1: Creating new IBSS network, BSSID 8e:bd:95:14:92:ad [ 289.887013][ T5085] Bluetooth: hci2: Malformed LE Event: 0x0d [ 297.266057][ T5085] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 297.267118][ T5777] Bluetooth: hci2: hardware error 0x00 [ 297.835400][ T5085] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5 [ 298.263093][ T5085] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 299.385357][ T5777] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 299.399029][ T5777] Bluetooth: hci2: hardware error 0x00 [ 301.456543][ T5777] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 302.487053][T10623] wg2: left promiscuous mode [ 302.521827][T10623] wg2: left allmulticast mode [ 304.309136][T10666] syzkaller0: entered promiscuous mode [ 304.318758][T10666] syzkaller0: entered allmulticast mode [ 312.383612][ T3475] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.617846][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.624574][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.457769][T11077] sit0: entered allmulticast mode [ 325.634409][T11083] syz.0.2087 uses obsolete (PF_INET,SOCK_PACKET) [ 332.145508][T11256] syzkaller0: entered promiscuous mode [ 332.151420][T11256] syzkaller0: entered allmulticast mode [ 346.998091][T11492] Ÿë: port 1(ip6gretap0) entered blocking state [ 347.015169][T11492] Ÿë: port 1(ip6gretap0) entered disabled state [ 347.037657][T11492] ip6gretap0: entered allmulticast mode [ 347.069806][T11492] ip6gretap0: entered promiscuous mode [ 347.836576][T11517] bridge_slave_0: entered promiscuous mode [ 351.933247][T11550] syzkaller0: entered promiscuous mode [ 351.938804][T11550] syzkaller0: entered allmulticast mode [ 357.776289][T11660] can: request_module (can-proto-0) failed. [ 361.865924][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.875318][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.883560][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.895011][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.912306][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 361.919795][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.171164][ T3475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.290034][ T3475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.507595][ T3475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.685804][ T3475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.942556][T11725] chnl_net:caif_netlink_parms(): no params data found [ 363.458864][T11725] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.532226][T11725] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.539567][T11725] bridge_slave_0: entered allmulticast mode [ 363.584123][T11725] bridge_slave_0: entered promiscuous mode [ 363.615597][T11725] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.652017][T11725] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.659339][T11725] bridge_slave_1: entered allmulticast mode [ 363.709097][T11725] bridge_slave_1: entered promiscuous mode [ 364.027437][ T5777] Bluetooth: hci3: command tx timeout [ 364.075269][T11725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.118547][T11725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.509083][T11800] syzkaller0: entered promiscuous mode [ 364.527162][T11800] syzkaller0: entered allmulticast mode [ 366.105657][ T5777] Bluetooth: hci3: command tx timeout [ 366.946459][T11725] team0: Port device team_slave_0 added [ 366.967675][T11725] team0: Port device team_slave_1 added [ 366.991972][T11828] ip6erspan0: tun_chr_ioctl cmd 1074025677 [ 366.997973][T11828] ip6erspan0: linktype set to 1 [ 367.122039][T11725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.129158][T11725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.164120][T11725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.178158][T11725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.185602][T11725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.211910][T11725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.514789][T11725] hsr_slave_0: entered promiscuous mode [ 367.539233][T11725] hsr_slave_1: entered promiscuous mode [ 367.557420][T11725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.572817][T11725] Cannot create hsr debugfs directory [ 368.172475][ T5777] Bluetooth: hci3: command tx timeout [ 369.213882][ T3475] hsr_slave_0: left promiscuous mode [ 369.220973][ T3475] hsr_slave_1: left promiscuous mode [ 369.235884][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.245660][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.264614][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.287079][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.341921][ T3475] veth1_macvtap: left promiscuous mode [ 369.348030][ T3475] veth0_macvtap: left promiscuous mode [ 369.355694][ T3475] veth1_vlan: left promiscuous mode [ 369.361355][ T3475] veth0_vlan: left promiscuous mode [ 370.251886][ T5777] Bluetooth: hci3: command tx timeout [ 370.649414][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 371.138371][ T3475] team0 (unregistering): Port device team_slave_1 removed [ 371.207520][ T3475] team0 (unregistering): Port device team_slave_0 removed [ 371.306710][ T3475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.384168][ T3475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.092589][ T3475] bond0 (unregistering): Released all slaves [ 375.375225][T11725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.460771][T11725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.501372][T11725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.531958][T11725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.046025][T11725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.186531][T11725] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.272020][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.279862][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.425426][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.432805][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.670309][T11725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.978974][T11725] veth0_vlan: entered promiscuous mode [ 378.057965][T11725] veth1_vlan: entered promiscuous mode [ 378.098339][T11725] veth0_macvtap: entered promiscuous mode [ 378.133137][T11725] veth1_macvtap: entered promiscuous mode [ 378.185573][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.226968][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.261713][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.303859][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.336528][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.356738][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.384309][T11725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.419454][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.440470][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.452120][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.463807][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.474387][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.485304][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.508874][T11725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.565185][T11725] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.612077][T11725] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.624884][T11725] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.640496][T11725] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.873239][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.884383][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.024491][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.044481][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.065939][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.072542][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.134685][T12115] syz.3.2467[12115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.134962][T12115] syz.3.2467[12115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.284757][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.306567][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.332855][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.352317][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.375778][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 382.384379][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.036569][T12127] chnl_net:caif_netlink_parms(): no params data found [ 383.360671][T12127] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.369680][T12127] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.380458][T12127] bridge_slave_0: entered allmulticast mode [ 383.393314][T12127] bridge_slave_0: entered promiscuous mode [ 383.414282][T12127] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.431835][T12127] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.439124][T12127] bridge_slave_1: entered allmulticast mode [ 383.453287][T12127] bridge_slave_1: entered promiscuous mode [ 383.527957][T12127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.561152][T12127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.594681][T12167] syz.0.2485[12167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.594936][T12167] syz.0.2485[12167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.686423][T12127] team0: Port device team_slave_0 added [ 383.725445][T12127] team0: Port device team_slave_1 added [ 383.784847][T12127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.802439][T12127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.848001][T12127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.879387][T12127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.892768][T12127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.924718][T12127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.067336][T12127] hsr_slave_0: entered promiscuous mode [ 384.077278][T12127] hsr_slave_1: entered promiscuous mode [ 384.085838][T12127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.094029][T12127] Cannot create hsr debugfs directory [ 384.148712][T11907] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.398553][T11907] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.412884][ T5777] Bluetooth: hci4: command tx timeout [ 384.633736][T11907] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.726746][T11907] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.667436][T12187] pim6reg1: entered promiscuous mode [ 385.676470][T12187] pim6reg1: entered allmulticast mode [ 386.259576][T12127] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 386.305811][T12127] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 386.394878][T12127] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.434897][T12127] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.492666][ T5777] Bluetooth: hci4: command tx timeout [ 386.802850][T11907] hsr_slave_0: left promiscuous mode [ 386.814768][T11907] hsr_slave_1: left promiscuous mode [ 386.827613][T11907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.838869][T11907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.847929][T11907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.858148][T11907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.922422][T11907] veth1_macvtap: left promiscuous mode [ 386.932659][T11907] veth0_macvtap: left promiscuous mode [ 386.948663][T11907] veth1_vlan: left promiscuous mode [ 386.958695][T11907] veth0_vlan: left promiscuous mode [ 387.765366][T11907] team0 (unregistering): Port device team_slave_1 removed [ 387.823757][T11907] team0 (unregistering): Port device team_slave_0 removed [ 387.894030][T11907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.955521][T11907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.438621][T11907] bond0 (unregistering): Released all slaves [ 388.477678][T12210] pim6reg1: entered promiscuous mode [ 388.483338][T12210] pim6reg1: entered allmulticast mode [ 388.572049][ T5777] Bluetooth: hci4: command tx timeout [ 388.593304][T12127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.681316][T12127] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.753989][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.761267][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.824410][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.831771][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.866768][T12219] pim6reg1: entered promiscuous mode [ 388.877752][T12219] pim6reg1: entered allmulticast mode [ 389.303399][T12127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.403158][T12229] pim6reg1: entered promiscuous mode [ 389.408557][T12229] pim6reg1: entered allmulticast mode [ 389.503953][T12127] veth0_vlan: entered promiscuous mode [ 389.525894][T12127] veth1_vlan: entered promiscuous mode [ 389.612151][T12127] veth0_macvtap: entered promiscuous mode [ 389.633500][T12127] veth1_macvtap: entered promiscuous mode [ 389.717502][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.732120][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.742659][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.753674][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.764612][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.775563][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.787943][T12127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.824383][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.852024][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.871733][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.886613][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.904198][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.919286][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.931379][T12127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.976301][T12127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.988978][T12127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.998335][T12127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.008153][T12127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.250058][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.258190][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.405487][T11907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.419580][T11907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.652863][ T5777] Bluetooth: hci4: command tx timeout [ 391.276366][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.290099][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.300641][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.309807][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.342021][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 391.349962][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 391.698927][T12282] pim6reg1: entered promiscuous mode [ 391.706322][T12282] pim6reg1: entered allmulticast mode [ 391.844538][ T5773] syz-executor (5773) used greatest stack depth: 20584 bytes left [ 392.206577][T12271] chnl_net:caif_netlink_parms(): no params data found [ 392.358742][T12301] syz.0.2532[12301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.358891][T12301] syz.0.2532[12301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.393732][T12301] syz.0.2532[12301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.421159][T12301] syz.0.2532[12301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.440934][T12271] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.460864][T12271] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.489090][T12271] bridge_slave_0: entered allmulticast mode [ 392.506912][T12271] bridge_slave_0: entered promiscuous mode [ 392.540030][T12271] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.553053][T12271] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.560855][T12271] bridge_slave_1: entered allmulticast mode [ 392.587843][T12271] bridge_slave_1: entered promiscuous mode [ 392.694822][T12271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.770160][T12271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.834247][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.936290][T12271] team0: Port device team_slave_0 added [ 392.947380][T12271] team0: Port device team_slave_1 added [ 392.976055][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.094263][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.127080][T12271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.147555][T12271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.200749][T12271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.243027][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.267700][T12271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.281701][T12271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.341696][T12271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.451872][ T5777] Bluetooth: hci0: command tx timeout [ 393.464260][T12271] hsr_slave_0: entered promiscuous mode [ 393.473026][T12271] hsr_slave_1: entered promiscuous mode [ 393.491580][T12271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.501081][T12271] Cannot create hsr debugfs directory [ 395.348392][T12271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.488788][T12271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.531827][ T5777] Bluetooth: hci0: command tx timeout [ 395.752731][T12271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.883029][T12271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.951307][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.960839][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.973941][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.997277][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.007514][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 396.019018][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.340130][ T42] hsr_slave_0: left promiscuous mode [ 396.352892][ T42] hsr_slave_1: left promiscuous mode [ 396.378216][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.397681][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.442847][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.450332][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.510658][ T42] veth1_macvtap: left promiscuous mode [ 396.522109][ T42] veth0_macvtap: left promiscuous mode [ 396.532322][ T42] veth1_vlan: left promiscuous mode [ 396.537694][ T42] veth0_vlan: left promiscuous mode [ 397.341036][ T42] team0 (unregistering): Port device team_slave_1 removed [ 397.395281][ T42] team0 (unregistering): Port device team_slave_0 removed [ 397.431954][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.481619][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.622145][ T5777] Bluetooth: hci0: command tx timeout [ 397.873483][ T42] bond0 (unregistering): Released all slaves [ 398.099666][ T5777] Bluetooth: hci2: command tx timeout [ 398.182820][T12271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.225286][T12351] chnl_net:caif_netlink_parms(): no params data found [ 398.291022][T12271] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.346142][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.353658][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.433032][T12351] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.440227][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.452834][T12351] bridge_slave_0: entered allmulticast mode [ 398.460397][T12351] bridge_slave_0: entered promiscuous mode [ 398.492822][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.500127][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.513055][T12351] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.533156][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.540432][T12351] bridge_slave_1: entered allmulticast mode [ 398.548726][T12351] bridge_slave_1: entered promiscuous mode [ 398.615037][T12351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.631934][T12351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.694545][T12351] team0: Port device team_slave_0 added [ 398.716116][T12351] team0: Port device team_slave_1 added [ 398.859381][T12351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.877062][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.928359][T12351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.942533][T12351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.957468][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.001733][T12351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.118269][T12351] hsr_slave_0: entered promiscuous mode [ 399.139242][T12351] hsr_slave_1: entered promiscuous mode [ 399.692085][ T5777] Bluetooth: hci0: command tx timeout [ 399.891186][T12271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.076453][T12351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 400.123520][T12351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 400.182349][ T5777] Bluetooth: hci2: command tx timeout [ 400.188404][T12351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.230335][T12271] veth0_vlan: entered promiscuous mode [ 400.279648][T12351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 400.320056][T12271] veth1_vlan: entered promiscuous mode [ 400.483974][T12271] veth0_macvtap: entered promiscuous mode [ 400.509782][T12271] veth1_macvtap: entered promiscuous mode [ 400.579302][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.590919][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.607167][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.617987][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.628141][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.645988][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.669266][T12271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.716720][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.734778][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.748856][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.768128][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.778480][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.799015][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.814311][T12271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.886999][T12351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.955258][T12351] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.985843][T12271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.003288][T12271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.022127][T12271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.030895][T12271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.123805][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.131045][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.190725][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.197982][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.366646][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.404264][T12351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.414842][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.521097][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.530160][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.969923][T12351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.251988][ T5777] Bluetooth: hci2: command tx timeout [ 402.569334][T12351] veth0_vlan: entered promiscuous mode [ 402.614821][T12351] veth1_vlan: entered promiscuous mode [ 402.843866][T12351] veth0_macvtap: entered promiscuous mode [ 402.892287][T12351] veth1_macvtap: entered promiscuous mode [ 402.965636][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.977486][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.021792][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.072117][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.118446][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.153292][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.202130][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.231862][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.264983][T12351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.295513][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.313113][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.336831][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.381727][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.391617][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.421708][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.431584][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.472317][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.503975][T12351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.574401][T12351] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.593882][T12351] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.619936][T12351] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.638377][T12351] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.921568][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.946634][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.057074][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.072906][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.333671][ T5777] Bluetooth: hci2: command tx timeout [ 405.458995][ T5085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 405.479604][ T5085] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 405.512085][ T5085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 405.522584][ T5085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 405.537464][ T5085] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 405.545045][ T5085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 407.613020][ T5777] Bluetooth: hci5: command tx timeout [ 407.669257][T12528] chnl_net:caif_netlink_parms(): no params data found [ 409.021533][T12528] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.031903][T12528] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.039210][T12528] bridge_slave_0: entered allmulticast mode [ 409.053227][T12528] bridge_slave_0: entered promiscuous mode [ 409.073791][T12528] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.080978][T12528] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.090650][T12528] bridge_slave_1: entered allmulticast mode [ 409.102916][T12528] bridge_slave_1: entered promiscuous mode [ 409.259622][T12573] syzkaller0: entered promiscuous mode [ 409.275934][T12573] syzkaller0: entered allmulticast mode [ 409.287481][T12578] sit0: entered allmulticast mode [ 409.692171][ T5777] Bluetooth: hci5: command tx timeout [ 411.383625][T12579] sit0: entered promiscuous mode [ 411.424557][T12528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.443175][T12528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.545791][T12528] team0: Port device team_slave_0 added [ 411.557436][T12528] team0: Port device team_slave_1 added [ 411.611437][T12583] sit0: left promiscuous mode [ 411.706386][T12528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.723498][T12528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.772428][ T5777] Bluetooth: hci5: command tx timeout [ 411.772462][T12528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.798877][T12584] sit0: entered promiscuous mode [ 412.442729][T12528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.449752][T12528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.477996][T12528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.600705][T12528] hsr_slave_0: entered promiscuous mode [ 412.616983][T12528] hsr_slave_1: entered promiscuous mode [ 412.635073][T12528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.652031][T12528] Cannot create hsr debugfs directory [ 412.734022][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.119058][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.570674][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.653839][T12610] syzkaller0: entered promiscuous mode [ 413.661458][T12610] syzkaller0: entered allmulticast mode [ 413.753876][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.769530][T12615] sit0: entered allmulticast mode [ 413.862298][ T5777] Bluetooth: hci5: command tx timeout [ 415.306030][T12616] sit0: entered promiscuous mode [ 415.867030][T12630] sit0: entered allmulticast mode [ 415.901459][T12633] sit0: entered promiscuous mode [ 416.807244][ T42] ip6gretap0 (unregistering): left allmulticast mode [ 416.817115][ T42] ip6gretap0 (unregistering): left promiscuous mode [ 416.827364][ T42] Ÿë: port 1(ip6gretap0) entered disabled state [ 417.231383][T12648] sit0: left promiscuous mode [ 417.391143][T12645] syzkaller0: entered promiscuous mode [ 417.399500][T12645] syzkaller0: entered allmulticast mode [ 417.570705][T12651] sit0: entered promiscuous mode [ 420.030505][T12670] sit0: left promiscuous mode [ 420.148025][T12671] sit0: entered promiscuous mode [ 420.976392][T12528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 421.056856][T12528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 421.070647][T12528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 421.469779][T12528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.507592][T12683] pim6reg1: entered promiscuous mode [ 421.514420][T12683] pim6reg1: entered allmulticast mode [ 422.030363][ T42] hsr_slave_0: left promiscuous mode [ 422.039851][ T42] hsr_slave_1: left promiscuous mode [ 422.048586][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.058199][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.067102][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.075619][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.100178][ T42] veth1_macvtap: left promiscuous mode [ 422.105976][ T42] veth0_macvtap: left promiscuous mode [ 422.111589][ T42] veth1_vlan: left promiscuous mode [ 422.117241][ T42] veth0_vlan: left promiscuous mode [ 422.738827][ T42] team0 (unregistering): Port device team_slave_1 removed [ 422.785104][ T42] team0 (unregistering): Port device team_slave_0 removed [ 422.852283][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.930929][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.376345][ T42] bond0 (unregistering): Released all slaves [ 423.431728][T12689] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 423.728161][T12528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.754963][T12528] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.778508][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.785739][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.832965][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.840154][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.578926][T12717] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 424.607294][T12528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.713662][T12528] veth0_vlan: entered promiscuous mode [ 424.748156][T12528] veth1_vlan: entered promiscuous mode [ 424.798408][T12528] veth0_macvtap: entered promiscuous mode [ 425.693498][T12528] veth1_macvtap: entered promiscuous mode [ 425.871741][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.893520][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.909150][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.919674][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.929897][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.953227][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.968789][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.987378][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.010125][T12528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.033370][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.055759][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.072407][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.091776][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.108803][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.120134][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.135909][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.153203][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.191528][T12528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.219287][T12528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.240007][T12528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.249145][T12528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.258472][T12528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.463606][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.471475][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.573610][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.604919][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.622424][T12754] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 427.375621][ T995] wlan1: Trigger new scan to find an IBSS to join [ 428.100165][T12787] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 429.734757][T12818] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.337253][ T3460] wlan1: Trigger new scan to find an IBSS to join [ 431.334618][T12853] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 432.507843][ T42] wlan1: Trigger new scan to find an IBSS to join [ 432.873293][T12879] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 433.372927][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 433.865049][T12914] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 434.358983][ T59] wlan1: Trigger new scan to find an IBSS to join [ 435.374645][ T3460] wlan1: Trigger new scan to find an IBSS to join [ 435.485756][ T3460] wlan1: Creating new IBSS network, BSSID 32:b6:14:d3:a0:95 [ 435.590611][T12948] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 436.332584][ T42] wlan1: Trigger new scan to find an IBSS to join [ 437.468586][ T42] wlan1: Creating new IBSS network, BSSID 52:f7:c5:74:41:12 [ 437.643996][T12990] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 439.140300][T13019] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 440.372716][ T48] wlan1: Trigger new scan to find an IBSS to join [ 440.379484][ T42] wlan1: Trigger new scan to find an IBSS to join [ 440.722165][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.735545][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.243172][T13054] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 441.292432][ T42] wlan1: Trigger new scan to find an IBSS to join [ 441.345302][ T48] wlan1: Creating new IBSS network, BSSID 2e:03:07:d6:71:51 [ 441.628047][T13062] syzkaller0: entered promiscuous mode [ 441.649687][T13062] syzkaller0: entered allmulticast mode [ 443.294605][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 444.333019][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 444.925696][T13080] sit0: entered allmulticast mode [ 444.970177][T13080] sit0: entered promiscuous mode [ 445.293880][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 445.854726][T13087] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 446.235571][ T3475] wlan1: Creating new IBSS network, BSSID ca:61:ec:ee:5e:33 [ 446.333032][T11907] wlan1: Trigger new scan to find an IBSS to join [ 447.008083][T13110] syzkaller0: entered promiscuous mode [ 447.013983][T13110] syzkaller0: entered allmulticast mode [ 447.303344][T11907] wlan1: Trigger new scan to find an IBSS to join [ 448.247320][ T42] wlan1: Creating new IBSS network, BSSID 22:7b:40:5b:2d:d0 [ 448.334895][ T59] wlan1: Trigger new scan to find an IBSS to join [ 448.856139][T13117] sit0: left promiscuous mode [ 448.926304][T13118] sit0: entered promiscuous mode [ 449.078511][T13121] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 449.309595][ T48] wlan1: Trigger new scan to find an IBSS to join [ 450.057815][T13153] sit0: left promiscuous mode [ 450.145246][T13155] sit0: entered promiscuous mode [ 450.299334][ T42] wlan1: Creating new IBSS network, BSSID ee:c1:63:3d:2b:ff [ 450.388772][T13151] syzkaller0: entered promiscuous mode [ 450.401729][T13151] syzkaller0: entered allmulticast mode [ 450.556090][T13165] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 452.524459][T13192] sit0: left promiscuous mode [ 453.060370][T13194] sit0: entered promiscuous mode [ 453.107831][T13201] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 453.298913][ T3460] wlan1: Trigger new scan to find an IBSS to join [ 454.315100][T13221] syzkaller0: entered promiscuous mode [ 454.320848][T13221] syzkaller0: entered allmulticast mode [ 454.448766][T13232] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 456.181309][T13237] sit0: left promiscuous mode [ 456.269359][T13240] sit0: entered promiscuous mode [ 456.335335][ T48] wlan1: Trigger new scan to find an IBSS to join [ 457.058654][T13262] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 457.554608][T13272] sit0: left promiscuous mode [ 457.749305][T13269] syzkaller0: entered promiscuous mode [ 457.764773][T13269] syzkaller0: entered allmulticast mode [ 457.817564][T13273] sit0: entered promiscuous mode [ 458.334510][T11907] wlan1: Trigger new scan to find an IBSS to join [ 459.295994][ T48] wlan1: Creating new IBSS network, BSSID 02:73:33:66:fc:7b [ 459.296924][T11907] wlan1: Trigger new scan to find an IBSS to join [ 460.620372][T13289] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 461.209040][T13303] syzkaller0: entered promiscuous mode [ 461.220309][T13303] syzkaller0: entered allmulticast mode [ 462.332139][T11907] wlan1: Trigger new scan to find an IBSS to join [ 463.308945][T13321] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 464.406937][T13347] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 464.801347][T13358] syzkaller0: entered promiscuous mode [ 464.813106][T13358] syzkaller0: entered allmulticast mode [ 467.293374][ T995] wlan1: Trigger new scan to find an IBSS to join [ 467.551458][T13383] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 468.344067][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 469.032546][T13408] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 470.105481][T13438] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 471.996628][T13462] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 472.332216][ T995] wlan1: Trigger new scan to find an IBSS to join [ 473.372143][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 474.002501][T13489] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 474.340995][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 475.571490][T13521] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 477.372172][ T3460] wlan1: Trigger new scan to find an IBSS to join [ 477.378905][ T995] wlan1: Trigger new scan to find an IBSS to join [ 477.999379][T13555] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 478.332271][ T3460] wlan1: Trigger new scan to find an IBSS to join [ 478.339927][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 478.406135][ T3475] wlan1: Creating new IBSS network, BSSID e2:9b:70:67:9c:48 [ 479.037361][T13589] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 480.374301][T13626] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.295001][ T3475] wlan1: Creating new IBSS network, BSSID 4e:f5:de:ad:71:25 [ 482.247818][T13673] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 482.332094][ T48] wlan1: Trigger new scan to find an IBSS to join [ 483.515555][T13701] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 484.342207][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 485.226425][T13740] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 485.293282][ T995] wlan1: Creating new IBSS network, BSSID 46:a5:41:44:a7:6f [ 487.293195][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 487.886749][T13775] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 488.652351][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 489.377577][ T48] wlan1: Trigger new scan to find an IBSS to join [ 489.590903][T13807] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 489.650384][ T5777] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 490.343108][ T48] wlan1: Trigger new scan to find an IBSS to join [ 491.152765][T13834] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 491.508732][T13837] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 493.113236][T13870] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 493.301965][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 494.331897][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 495.072888][T13913] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 495.375032][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 495.913871][ T5777] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 496.342911][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 496.429218][ T3475] wlan1: Creating new IBSS network, BSSID 86:12:2a:e8:b0:89 [ 496.613288][T13949] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 497.372775][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 498.562674][T13987] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 499.293393][ T3460] wlan1: Creating new IBSS network, BSSID 5e:5a:4f:9f:5e:5c [ 499.372834][ T59] wlan1: Trigger new scan to find an IBSS to join [ 500.531475][T14022] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 501.299958][ T59] wlan1: Trigger new scan to find an IBSS to join [ 501.812579][T14042] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 501.939941][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.946507][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.012176][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 502.336080][T11907] wlan1: Trigger new scan to find an IBSS to join [ 503.353033][T11907] wlan1: Creating new IBSS network, BSSID ee:cc:68:9b:d3:6c [ 503.512949][T14074] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 504.354497][ T48] wlan1: Trigger new scan to find an IBSS to join [ 505.138982][T14115] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 506.026045][T14147] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 507.031978][T14171] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 507.292170][ T995] wlan1: Trigger new scan to find an IBSS to join [ 508.345143][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 509.134512][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 509.294987][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 509.383074][T11907] wlan1: Trigger new scan to find an IBSS to join [ 510.282378][T11907] wlan1: Creating new IBSS network, BSSID 82:67:4e:6f:55:41 [ 510.333548][ T995] wlan1: Trigger new scan to find an IBSS to join [ 512.058517][T14207] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 512.950629][T14238] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 513.292797][ T995] wlan1: Trigger new scan to find an IBSS to join [ 513.299498][ T995] wlan1: Trigger new scan to find an IBSS to join [ 514.333202][ T48] wlan1: Trigger new scan to find an IBSS to join [ 514.487415][T11907] wlan1: Creating new IBSS network, BSSID 8a:bc:1b:4c:d6:22 [ 514.503583][ T3475] wlan1: Creating new IBSS network, BSSID a2:9e:a2:00:04:33 [ 515.303166][T14268] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 516.370878][T14298] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 516.600058][T14302] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 518.323228][T14338] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 518.594990][T14340] syzkaller0: entered promiscuous mode [ 518.600567][T14340] syzkaller0: entered allmulticast mode [ 519.371935][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 519.392421][T11907] wlan1: Trigger new scan to find an IBSS to join [ 520.361739][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 520.368349][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 523.291962][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 524.333442][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 524.340050][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 524.590226][ T3497] wlan1: Creating new IBSS network, BSSID ea:6f:5b:b1:61:1d [ 525.323226][T11907] wlan1: Creating new IBSS network, BSSID de:0a:ee:71:7e:1c [ 525.394258][T11907] wlan1: Creating new IBSS network, BSSID f2:f8:86:a8:a2:c1 [ 527.829189][T14377] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 529.631747][ T5085] Bluetooth: hci5: command 0x0406 tx timeout [ 530.350152][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 533.732640][T14414] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 533.947141][T14417] syzkaller0: entered promiscuous mode [ 533.956884][T14417] syzkaller0: entered allmulticast mode [ 536.342972][ T48] wlan1: Trigger new scan to find an IBSS to join [ 537.232096][T14454] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 538.283219][T14486] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 539.377009][T11907] wlan1: Trigger new scan to find an IBSS to join [ 539.449822][T14520] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 540.785754][T14560] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 540.793751][ T5777] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 542.331890][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 542.529654][T14595] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 543.224061][ T5777] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 543.377006][ T42] wlan1: Trigger new scan to find an IBSS to join [ 543.393193][ T59] wlan1: Creating new IBSS network, BSSID 42:4b:62:67:04:17 [ 543.971357][T14629] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 544.525653][ T3475] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 546.095997][T14664] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 546.355294][ T3475] wlan1: Trigger new scan to find an IBSS to join [ 548.332753][ T995] wlan1: Trigger new scan to find an IBSS to join [ 549.372035][ T48] wlan1: Trigger new scan to find an IBSS to join [ 549.421802][ T59] wlan1: Creating new IBSS network, BSSID 12:77:d0:12:a5:ef [ 552.332246][ T3497] wlan1: Creating new IBSS network, BSSID fe:75:c5:57:8f:b5 [ 554.342212][ T3475] wlan1: Creating new IBSS network, BSSID 42:63:15:05:20:b5 [ 563.386599][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.394919][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.472073][T15080] pim6reg1: entered promiscuous mode [ 568.477455][T15080] pim6reg1: entered allmulticast mode [ 569.399815][T15110] pim6reg1: entered promiscuous mode [ 569.415292][T15110] pim6reg1: entered allmulticast mode [ 573.414403][T11907] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 573.722850][T15254] syzkaller0: entered promiscuous mode [ 573.728419][T15254] syzkaller0: entered allmulticast mode [ 577.935058][T15294] sit0: left promiscuous mode [ 579.463124][T11907] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 580.217333][T15347] sit0: left promiscuous mode [ 580.478933][ T3497] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 580.562836][T15348] sit0: entered promiscuous mode [ 581.364214][T15376] sit0: entered promiscuous mode [ 582.528215][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 583.191228][T15430] sit0: left promiscuous mode [ 584.746575][T15468] sit0: entered promiscuous mode [ 586.394633][T15493] syzkaller0: entered promiscuous mode [ 586.400436][T15493] syzkaller0: entered allmulticast mode [ 591.755504][T15532] syzkaller0: entered promiscuous mode [ 591.761247][T15532] syzkaller0: entered allmulticast mode [ 591.813815][T15542] sit0: left promiscuous mode [ 594.119283][T15543] sit0: entered promiscuous mode [ 594.169374][T15548] sit0: left promiscuous mode [ 594.274148][T15550] sit0: entered promiscuous mode [ 594.614121][T15558] sit0: left promiscuous mode [ 594.739509][T15562] sit0: entered promiscuous mode [ 595.757349][T15580] syzkaller0: entered promiscuous mode [ 595.763199][T15580] syzkaller0: entered allmulticast mode [ 598.770862][T15611] sit0: left promiscuous mode [ 599.161354][T15612] sit0: entered promiscuous mode [ 600.261828][T15634] sit0: left promiscuous mode [ 600.455606][T15637] sit0: entered promiscuous mode [ 601.131225][T15644] sit0: left promiscuous mode [ 601.229254][T15646] sit0: entered promiscuous mode [ 602.427894][T15675] syzkaller0: entered promiscuous mode [ 602.440531][T15675] syzkaller0: entered allmulticast mode [ 602.597362][T15681] sit0: left promiscuous mode [ 604.433735][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 606.389169][T15714] sit0: left promiscuous mode [ 607.675537][T15731] sit0: left promiscuous mode [ 607.951002][T15733] sit0: entered promiscuous mode [ 609.419335][T15754] sit0: left promiscuous mode [ 609.508646][T15756] sit0: entered promiscuous mode [ 610.249871][T15767] syzkaller0: entered promiscuous mode [ 610.309432][T15767] syzkaller0: entered allmulticast mode [ 610.581288][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 611.497554][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 612.663960][T15788] sit0: entered promiscuous mode [ 613.380857][T15800] sit0: left promiscuous mode [ 613.505872][T15803] sit0: entered promiscuous mode [ 613.551502][ T995] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 614.192996][T15815] sit0: entered promiscuous mode [ 614.303254][T15819] sit0: left promiscuous mode [ 614.427910][T15820] sit0: entered promiscuous mode [ 615.045563][T15834] sit0: left promiscuous mode [ 615.175011][T15836] sit0: entered promiscuous mode [ 615.782831][T15837] syzkaller0: entered promiscuous mode [ 615.788648][T15837] syzkaller0: entered allmulticast mode [ 618.000096][T15863] sit0: left promiscuous mode [ 618.092983][T15864] sit0: entered promiscuous mode [ 618.884998][T15887] sit0: left promiscuous mode [ 619.042242][T15889] sit0: left promiscuous mode [ 619.213387][T15890] sit0: entered promiscuous mode [ 619.793365][T15894] sit0: entered promiscuous mode [ 621.422479][T15931] sit0: left promiscuous mode [ 621.661891][T15936] sit0: entered promiscuous mode [ 622.815341][T15972] sit0: left promiscuous mode [ 623.003266][T15974] sit0: entered promiscuous mode [ 623.744601][T15982] sit0: left promiscuous mode [ 624.039527][T15984] sit0: entered promiscuous mode [ 624.741121][T15989] sit0: left promiscuous mode [ 624.817694][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.824532][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.688165][T16025] sit0: left promiscuous mode [ 625.957278][T16028] sit0: entered promiscuous mode [ 626.553542][T16032] sit0: left promiscuous mode [ 627.356005][T16054] sit0: left promiscuous mode [ 627.655094][T16055] sit0: entered promiscuous mode [ 628.436518][T16065] sit0: entered promiscuous mode [ 628.860342][T16066] sit0: entered promiscuous mode [ 629.018903][T16070] sit0: left promiscuous mode [ 629.128527][T16071] sit0: entered promiscuous mode [ 630.034517][T16096] sit0: left promiscuous mode [ 630.521879][T16099] sit0: entered promiscuous mode [ 630.982850][T16103] sit0: left promiscuous mode [ 631.135594][T16104] sit0: entered promiscuous mode [ 631.446934][T16107] sit0: left promiscuous mode [ 631.733003][T16108] sit0: entered promiscuous mode [ 632.482107][T16134] sit0: left promiscuous mode [ 632.779172][T16139] sit0: entered promiscuous mode [ 633.542760][T16152] sit0: left promiscuous mode [ 633.767457][T16154] sit0: left promiscuous mode [ 633.901003][T16155] sit0: entered promiscuous mode [ 634.393206][T16156] sit0: entered promiscuous mode [ 634.505119][T16167] netlink: 'syz.4.4026': attribute type 10 has an invalid length. [ 634.548315][T16167] team0: Port device wlan1 added [ 635.320472][T16177] sit0: left promiscuous mode [ 635.446479][T16180] sit0: entered promiscuous mode [ 635.465610][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 636.120910][T16189] syzkaller0: entered promiscuous mode [ 636.128784][T16189] syzkaller0: entered allmulticast mode [ 636.160382][T16194] sit0: left promiscuous mode [ 636.385626][T16197] sit0: entered promiscuous mode [ 637.292661][ T995] wlan1: Trigger new scan to find an IBSS to join [ 639.339453][T16211] sit0: left promiscuous mode [ 639.485445][T16213] sit0: entered promiscuous mode [ 640.201949][T16216] sit0: left promiscuous mode [ 640.342084][ T59] wlan1: Trigger new scan to find an IBSS to join [ 640.368314][T16218] sit0: left promiscuous mode [ 640.469456][T16220] sit0: entered promiscuous mode [ 640.586419][T16221] sit0: entered promiscuous mode [ 641.265358][T16239] syzkaller0: entered promiscuous mode [ 641.281839][T16239] syzkaller0: entered allmulticast mode [ 641.396831][T16242] sit0: left promiscuous mode [ 641.529069][T16245] sit0: entered promiscuous mode [ 641.604929][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 642.073539][T16246] sit0: left promiscuous mode [ 642.180803][T16250] sit0: entered promiscuous mode [ 643.297319][ T3475] wlan1: Creating new IBSS network, BSSID 9e:36:f1:5a:7e:cc [ 644.378777][T16260] sit0: left promiscuous mode [ 644.446875][T16261] sit0: entered promiscuous mode [ 644.725174][T16267] sit0: left promiscuous mode [ 644.899382][T16271] sit0: entered promiscuous mode [ 645.003496][ T3460] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 645.703362][T16281] sit0: left promiscuous mode [ 645.923664][T16286] sit0: entered promiscuous mode [ 646.649876][T16289] sit0: left promiscuous mode [ 647.065414][T16302] sit0: left promiscuous mode [ 647.301673][T16307] sit0: entered promiscuous mode [ 647.918839][T16311] sit0: entered promiscuous mode [ 648.278736][T16318] sit0: left promiscuous mode [ 648.422757][T16319] sit0: entered promiscuous mode [ 648.920699][T16323] sit0: left promiscuous mode [ 649.501946][T16340] syzkaller0: entered promiscuous mode [ 649.549930][T16340] syzkaller0: entered allmulticast mode [ 649.574263][T16346] sit0: left promiscuous mode [ 649.765491][T16347] sit0: entered promiscuous mode [ 653.248693][T16359] sit0: left promiscuous mode [ 653.377629][T16360] sit0: entered promiscuous mode [ 654.169878][T16386] netlink: 'syz.0.4104': attribute type 10 has an invalid length. [ 654.330096][T16386] team0: Port device wlan1 added [ 654.524953][T16392] syzkaller0: entered promiscuous mode [ 654.551674][T16392] syzkaller0: entered allmulticast mode [ 656.337806][ T3460] wlan1: Trigger new scan to find an IBSS to join [ 657.547658][T16399] sit0: entered promiscuous mode [ 658.003232][T16406] syzkaller0: entered promiscuous mode [ 658.008928][T16406] syzkaller0: entered allmulticast mode [ 659.372848][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 660.466959][T16432] sit0: left promiscuous mode [ 660.563064][T16433] sit0: left promiscuous mode [ 660.679603][T16437] sit0: entered promiscuous mode [ 661.334661][T16432] sit0: entered promiscuous mode [ 661.475750][T16440] syzkaller0: entered promiscuous mode [ 661.481448][T16440] syzkaller0: entered allmulticast mode [ 662.337565][ T42] wlan1: Trigger new scan to find an IBSS to join [ 663.226015][ T995] wlan1: Creating new IBSS network, BSSID c6:77:bb:ca:19:82 [ 664.404624][T16465] sit0: left promiscuous mode [ 664.605228][T16461] syzkaller0: entered promiscuous mode [ 664.611223][T16461] syzkaller0: entered allmulticast mode [ 664.625733][T16467] sit0: entered promiscuous mode [ 667.615423][T16478] syzkaller0: entered promiscuous mode [ 667.621158][T16478] syzkaller0: entered allmulticast mode [ 669.955055][T16493] sit0: left promiscuous mode [ 670.048295][T16495] sit0: entered promiscuous mode [ 671.270521][T16505] netlink: 'syz.0.4146': attribute type 10 has an invalid length. [ 671.407517][T16470] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 671.785078][T16521] syzkaller0: entered promiscuous mode [ 671.790761][T16521] syzkaller0: entered allmulticast mode [ 671.814700][T16527] sit0: left promiscuous mode [ 672.628156][T16470] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 673.979351][T16529] sit0: entered promiscuous mode [ 674.457773][T16536] netlink: 'syz.2.4157': attribute type 10 has an invalid length. [ 674.536814][T16536] team0: Port device wlan1 added [ 675.237554][T16550] sit0: left promiscuous mode [ 675.337551][T16552] sit0: left promiscuous mode [ 675.461120][T16555] sit0: entered promiscuous mode [ 676.089885][T16556] sit0: entered promiscuous mode [ 676.826254][T16572] sit0: left promiscuous mode [ 676.955649][T16575] sit0: entered promiscuous mode [ 677.303823][T16470] wlan1: Trigger new scan to find an IBSS to join [ 677.584858][T16586] syzkaller0: entered promiscuous mode [ 677.590397][T16586] syzkaller0: entered allmulticast mode [ 677.606548][T16590] sit0: left promiscuous mode [ 679.846816][T16595] sit0: entered promiscuous mode [ 679.968999][T16598] sit0: left promiscuous mode [ 680.142477][T16601] sit0: entered promiscuous mode [ 680.346642][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 681.038451][T16614] sit0: left promiscuous mode [ 681.237268][T16618] sit0: entered promiscuous mode [ 681.918122][T16617] sit0: left promiscuous mode [ 682.021359][T16620] sit0: entered promiscuous mode [ 682.275357][T16638] sit0: left promiscuous mode [ 682.403473][T16641] sit0: entered promiscuous mode [ 683.141850][T16640] sit0: left promiscuous mode [ 683.222716][T16643] sit0: entered promiscuous mode [ 683.294577][ T3497] wlan1: Creating new IBSS network, BSSID ae:af:97:67:5c:fb [ 683.364855][T16645] sit0: left promiscuous mode [ 683.441650][T16649] sit0: entered promiscuous mode [ 684.109752][T16670] sit0: left promiscuous mode [ 684.399378][T16674] syzkaller0: entered promiscuous mode [ 684.431697][T16674] syzkaller0: entered allmulticast mode [ 684.451768][T16675] sit0: entered promiscuous mode [ 686.261111][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.269479][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.486760][T16682] sit0: left promiscuous mode [ 687.654803][T16683] sit0: entered promiscuous mode [ 688.216055][T16704] sit0: left promiscuous mode [ 688.356254][T16706] sit0: entered promiscuous mode [ 689.404767][T16716] syzkaller0: entered promiscuous mode [ 689.410367][T16716] syzkaller0: entered allmulticast mode [ 689.429647][T16721] sit0: left promiscuous mode [ 691.871157][T16724] sit0: entered promiscuous mode [ 691.978008][T16737] sit0: left promiscuous mode [ 692.376756][T16740] sit0: left promiscuous mode [ 692.451481][T16744] sit0: entered promiscuous mode [ 693.542992][T16759] sit0: left promiscuous mode [ 693.659004][T16762] sit0: entered promiscuous mode [ 694.109243][T16765] sit0: left promiscuous mode [ 694.267483][T16766] sit0: entered promiscuous mode [ 694.424629][T16770] sit0: entered promiscuous mode [ 694.861384][T16784] sit0: left promiscuous mode [ 694.996377][T16791] sit0: left promiscuous mode [ 695.148074][T16787] sit0: entered promiscuous mode [ 695.731388][T16793] sit0: entered promiscuous mode [ 695.922679][T16803] sit0: left promiscuous mode [ 696.061056][T16804] sit0: entered promiscuous mode [ 696.821945][T16806] sit0: left promiscuous mode [ 696.945383][T16809] sit0: entered promiscuous mode [ 697.082533][T16812] sit0: left promiscuous mode [ 697.188985][T16815] sit0: entered promiscuous mode [ 697.704303][T16830] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 697.736038][T16829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.942119][T16839] sit0: left promiscuous mode [ 698.077211][T16841] sit0: entered promiscuous mode [ 698.953439][T16845] sit0: left promiscuous mode [ 699.072488][T16848] sit0: entered promiscuous mode [ 699.480868][T16861] sit0: left promiscuous mode [ 699.564885][T16863] sit0: entered promiscuous mode [ 699.703241][T16865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.525515][T16875] sit0: left promiscuous mode [ 700.647845][T16878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.685621][T16880] sit0: entered promiscuous mode [ 701.499160][T16883] sit0: left promiscuous mode [ 701.566380][T16884] sit0: entered promiscuous mode [ 701.885049][T16894] sit0: left promiscuous mode [ 702.068628][T16900] sit0: entered promiscuous mode [ 702.427549][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 703.035923][T16911] sit0: left promiscuous mode [ 703.154558][T16912] sit0: entered promiscuous mode [ 703.553396][T16470] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 703.582083][T16917] sit0: left promiscuous mode [ 703.697902][T16918] sit0: entered promiscuous mode [ 704.272446][T16927] netlink: 'syz.2.4299': attribute type 10 has an invalid length. [ 704.539177][T16927] syz.2.4299 (16927) used greatest stack depth: 20080 bytes left [ 704.936818][T16945] syzkaller0: entered promiscuous mode [ 704.947187][T16945] syzkaller0: entered allmulticast mode [ 707.361867][T16964] sit0: left promiscuous mode [ 707.456847][T16965] sit0: entered promiscuous mode [ 707.636296][T16968] sit0: left promiscuous mode [ 707.803120][T16969] sit0: entered promiscuous mode [ 708.441775][T16972] sit0: left promiscuous mode [ 708.561308][T16977] sit0: entered promiscuous mode [ 709.615201][T16999] syzkaller0: entered promiscuous mode [ 709.631718][T16999] syzkaller0: entered allmulticast mode [ 712.819842][T17037] sit0: left promiscuous mode [ 713.497004][T17054] sit0: left promiscuous mode [ 713.659817][T17058] sit0: entered promiscuous mode [ 714.443913][T17065] sit0: left promiscuous mode [ 714.560759][T17066] sit0: entered promiscuous mode [ 715.599321][T17096] sit0: entered promiscuous mode [ 716.436210][T17097] sit0: left promiscuous mode [ 716.569607][T17103] sit0: entered promiscuous mode [ 718.004788][T17132] sit0: left promiscuous mode [ 718.226572][T17134] sit0: entered promiscuous mode [ 718.895692][T17137] sit0: left promiscuous mode [ 719.031696][T17140] sit0: entered promiscuous mode [ 719.204097][T17145] sit0: left promiscuous mode [ 719.318987][T17147] sit0: entered promiscuous mode [ 720.461761][T17171] sit0: left promiscuous mode [ 720.628644][T17175] sit0: entered promiscuous mode [ 721.233963][T17179] netlink: 'syz.1.4390': attribute type 10 has an invalid length. [ 721.356386][T17179] team0: Port device wlan1 added [ 721.975683][T17195] sit0: left promiscuous mode [ 722.148554][T17198] sit0: entered promiscuous mode [ 722.779132][T17197] sit0: left promiscuous mode [ 722.931803][T17199] sit0: entered promiscuous mode [ 723.225090][T17212] sit0: left promiscuous mode [ 723.378862][ T3460] wlan1: Trigger new scan to find an IBSS to join [ 723.431601][T17214] sit0: entered promiscuous mode [ 724.200405][T17226] netlink: 'syz.2.4406': attribute type 10 has an invalid length. [ 724.514974][T17230] sit0: left promiscuous mode [ 724.691728][T17232] sit0: left promiscuous mode [ 724.915834][T17233] sit0: entered promiscuous mode [ 725.452298][T17235] sit0: entered promiscuous mode [ 725.633239][T17240] sit0: left promiscuous mode [ 725.744470][T17241] sit0: entered promiscuous mode [ 726.047273][T17248] sit0: left promiscuous mode [ 726.221232][T17251] sit0: entered promiscuous mode [ 727.399322][T17277] sit0: left promiscuous mode [ 727.618079][T17281] sit0: left promiscuous mode [ 727.858958][T17280] sit0: left promiscuous mode [ 728.008788][T17283] sit0: entered promiscuous mode [ 728.280074][T17284] sit0: entered promiscuous mode [ 728.332542][ T3497] wlan1: Trigger new scan to find an IBSS to join [ 728.405248][T17282] sit0: entered promiscuous mode [ 728.521036][T17289] sit0: left promiscuous mode [ 728.728015][T17290] sit0: entered promiscuous mode [ 729.037989][T17293] sit0: left promiscuous mode [ 729.150715][T17295] sit0: entered promiscuous mode [ 729.283991][T16470] wlan1: Creating new IBSS network, BSSID ca:43:23:ba:0a:4b [ 729.625621][T17314] sit0: left promiscuous mode [ 729.961143][T17317] sit0: entered promiscuous mode [ 730.470582][T17321] sit0: left promiscuous mode [ 730.733788][T17323] sit0: entered promiscuous mode [ 730.873219][T17325] sit0: left promiscuous mode [ 731.109934][T17326] sit0: entered promiscuous mode [ 731.793587][T17346] sit0: left promiscuous mode [ 732.079026][T17347] sit0: entered promiscuous mode [ 732.864548][T17357] sit0: left promiscuous mode [ 733.119900][T17358] sit0: entered promiscuous mode [ 733.555460][ T995] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 733.934113][T17363] syzkaller0: entered promiscuous mode [ 733.951830][T17363] syzkaller0: entered allmulticast mode [ 734.001648][T17369] sit0: left promiscuous mode [ 734.260284][T17372] sit0: entered promiscuous mode [ 736.255923][T17376] sit0: left promiscuous mode [ 736.337420][T17377] sit0: entered promiscuous mode [ 736.467075][T17380] sit0: left promiscuous mode [ 736.550317][T17381] sit0: entered promiscuous mode [ 736.714361][T17390] sit0: left promiscuous mode [ 736.866450][T17391] sit0: entered promiscuous mode [ 738.174360][T17421] sit0: left promiscuous mode [ 738.468232][T17419] sit0: left promiscuous mode [ 738.980228][T17423] sit0: entered promiscuous mode [ 739.100780][T17432] sit0: left promiscuous mode [ 739.261799][T17436] sit0: left promiscuous mode [ 739.383421][T17433] sit0: entered promiscuous mode [ 739.547000][T17439] sit0: entered promiscuous mode [ 740.272089][T17451] sit0: left promiscuous mode [ 740.448883][T17460] sit0: entered promiscuous mode [ 741.239012][T17456] sit0: entered promiscuous mode [ 741.300390][T17457] sit0: left promiscuous mode [ 741.597278][T17465] sit0: left promiscuous mode [ 741.694426][T17466] sit0: entered promiscuous mode [ 742.287643][T17474] sit0: left promiscuous mode [ 742.420448][T17475] sit0: entered promiscuous mode [ 743.235612][T17483] sit0: entered promiscuous mode [ 745.103045][T17506] sit0: left promiscuous mode [ 745.527280][T17507] sit0: left promiscuous mode [ 745.600665][T17508] sit0: entered promiscuous mode [ 746.112261][T17517] sit0: left promiscuous mode [ 746.170414][T17518] sit0: entered promiscuous mode [ 746.870089][T17533] netlink: 'syz.0.4510': attribute type 10 has an invalid length. [ 746.905559][T17532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.937111][T17540] sit0: left promiscuous mode [ 747.056677][T17541] sit0: entered promiscuous mode [ 747.702487][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.711904][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.793445][T17546] sit0: left promiscuous mode [ 747.868782][T17548] sit0: entered promiscuous mode [ 748.852753][T17571] netlink: 'syz.4.4524': attribute type 10 has an invalid length. [ 748.897731][T17570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.378454][T17573] sit0: left promiscuous mode [ 749.473517][T17574] sit0: entered promiscuous mode [ 749.912085][T17577] sit0: left promiscuous mode [ 750.014708][T17578] sit0: entered promiscuous mode [ 750.363363][T17581] netlink: 'syz.1.4527': attribute type 10 has an invalid length. [ 750.424710][T17580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.792606][T17596] sit0: left promiscuous mode [ 750.926228][T17599] sit0: entered promiscuous mode [ 751.713325][T17602] sit0: entered promiscuous mode [ 751.824055][T17606] sit0: left promiscuous mode [ 751.937146][T17608] sit0: entered promiscuous mode [ 752.277552][T17611] sit0: left promiscuous mode [ 752.433096][T17612] sit0: entered promiscuous mode [ 752.679645][T17624] sit0: left promiscuous mode [ 752.800974][T17625] sit0: entered promiscuous mode [ 753.749262][T17645] sit0: left promiscuous mode [ 753.902391][T17647] sit0: left promiscuous mode [ 754.002694][T17648] sit0: entered promiscuous mode [ 754.643305][T17649] sit0: entered promiscuous mode [ 754.720705][T17653] sit0: left promiscuous mode [ 754.811382][T17654] sit0: entered promiscuous mode [ 755.216868][T17669] sit0: left promiscuous mode [ 755.361377][T17670] sit0: entered promiscuous mode [ 756.072769][T17675] sit0: left promiscuous mode [ 756.192971][T17676] sit0: entered promiscuous mode [ 756.618071][T17680] sit0: left promiscuous mode [ 756.710374][T17683] sit0: entered promiscuous mode [ 758.433656][T17722] sit0: left promiscuous mode [ 758.583242][T17724] sit0: entered promiscuous mode [ 759.180161][T17739] sit0: left promiscuous mode [ 759.451367][T17739] sit0: entered promiscuous mode [ 760.088837][T17752] netlink: 'syz.4.4590': attribute type 10 has an invalid length. [ 760.103620][T17751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.249117][T17756] sit0: left promiscuous mode [ 760.528559][T17759] sit0: entered promiscuous mode [ 761.524336][T17773] sit0: left promiscuous mode [ 761.915837][T17777] sit0: left promiscuous mode [ 762.046539][T17779] sit0: entered promiscuous mode [ 762.387181][T17784] sit0: left promiscuous mode [ 762.463535][T17785] sit0: entered promiscuous mode [ 763.286845][T17807] sit0: left promiscuous mode [ 765.164864][T17836] sit0: entered promiscuous mode [ 765.876082][T17842] sit0: left promiscuous mode [ 766.029535][T17845] sit0: entered promiscuous mode [ 766.045663][T17838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.263863][T17839] netlink: 'syz.0.4624': attribute type 10 has an invalid length. [ 766.988967][T17864] syzkaller0: entered promiscuous mode [ 767.022345][T17864] syzkaller0: entered allmulticast mode [ 767.423302][T17879] sit0: entered promiscuous mode [ 772.084891][T17912] sit0: left promiscuous mode [ 772.491484][T17915] sit0: entered promiscuous mode [ 772.994475][T17917] sit0: left promiscuous mode [ 773.612880][T17928] syzkaller0: entered promiscuous mode [ 773.621810][T17928] syzkaller0: entered allmulticast mode [ 773.639761][T17933] sit0: left promiscuous mode [ 775.002101][T17943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.318585][T17945] netlink: 'syz.0.4661': attribute type 10 has an invalid length. [ 777.020103][T17966] sit0: entered promiscuous mode [ 777.887342][T17969] netlink: 'syz.2.4671': attribute type 10 has an invalid length. [ 777.901084][T17968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.014068][T17974] syzkaller0: entered promiscuous mode [ 778.019643][T17974] syzkaller0: entered allmulticast mode [ 780.373591][T17993] syzkaller0: entered promiscuous mode [ 780.381404][T17993] syzkaller0: entered allmulticast mode [ 780.558648][T18001] syzkaller0: entered promiscuous mode [ 780.564380][T18001] syzkaller0: entered allmulticast mode [ 780.787054][T18011] syzkaller0: entered promiscuous mode [ 780.793200][T18011] syzkaller0: entered allmulticast mode [ 786.093491][T18031] sit0: left promiscuous mode [ 786.153447][T18032] sit0: entered promiscuous mode [ 786.483607][T18043] netlink: 'syz.1.4694': attribute type 10 has an invalid length. [ 786.493683][T18042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.522106][T18045] sit0: left promiscuous mode [ 786.796569][T18046] sit0: entered promiscuous mode [ 787.399542][T18051] sit0: entered promiscuous mode [ 787.539839][T18054] sit0: left promiscuous mode [ 787.631058][T18057] sit0: entered promiscuous mode [ 787.838080][T18069] sit0: left promiscuous mode [ 787.962098][T18070] sit0: entered promiscuous mode [ 788.087334][T18077] sit0: left promiscuous mode [ 788.249418][T18078] sit0: entered promiscuous mode [ 788.983584][T18079] syzkaller0: entered promiscuous mode [ 788.989246][T18079] syzkaller0: entered allmulticast mode [ 791.209799][T18106] sit0: left promiscuous mode [ 791.311120][T18107] sit0: entered promiscuous mode [ 792.077838][T18111] netlink: 'syz.2.4716': attribute type 10 has an invalid length. [ 792.089662][T18110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.192295][T18116] sit0: left promiscuous mode [ 792.276703][T18119] sit0: entered promiscuous mode [ 792.845158][T18128] syzkaller0: entered promiscuous mode [ 792.856907][T18128] syzkaller0: entered allmulticast mode [ 792.921284][T18138] sit0: left promiscuous mode [ 793.089057][T18140] sit0: entered promiscuous mode [ 795.754638][T18151] sit0: left promiscuous mode [ 795.808555][T18153] sit0: entered promiscuous mode [ 796.300627][T18170] sit0: left promiscuous mode [ 796.457277][T18172] sit0: entered promiscuous mode [ 797.183064][T18175] sit0: left promiscuous mode [ 797.322623][T18177] sit0: entered promiscuous mode [ 797.430048][T18181] sit0: left promiscuous mode [ 797.605973][T18183] sit0: entered promiscuous mode [ 798.166544][T18188] sit0: left promiscuous mode [ 798.270122][T18191] sit0: entered promiscuous mode [ 798.846270][T18212] sit0: left promiscuous mode [ 799.123060][T18218] syzkaller0: entered promiscuous mode [ 799.128856][T18218] syzkaller0: entered allmulticast mode [ 799.137293][T18219] sit0: entered promiscuous mode [ 799.467640][T18226] sit0: left promiscuous mode [ 800.337997][T18227] sit0: entered promiscuous mode [ 803.189388][T18237] sit0: left promiscuous mode [ 803.939003][T18262] netlink: 'syz.1.4767': attribute type 10 has an invalid length. [ 803.959029][T18261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.478497][T18272] syzkaller0: entered promiscuous mode [ 804.493403][T18272] syzkaller0: entered allmulticast mode [ 805.026427][T18286] sit0: left promiscuous mode [ 809.137625][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.145549][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.350593][T18317] sit0: entered promiscuous mode [ 809.663730][T18329] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 809.700619][T18329] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 810.179591][T18341] sit0: left promiscuous mode [ 810.376107][T18346] sit0: entered promiscuous mode [ 813.032163][T18392] sit0: left promiscuous mode [ 813.186731][T18394] sit0: entered promiscuous mode [ 815.388466][T18434] netlink: 'syz.0.4832': attribute type 10 has an invalid length. [ 815.410645][T18431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.512661][T18439] sit0: entered promiscuous mode [ 818.079125][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 818.088740][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 818.098047][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.107376][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.115932][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 818.135722][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 818.176830][T18484] sit0: left promiscuous mode [ 818.364406][T18486] sit0: entered promiscuous mode [ 819.035496][T18489] netlink: 'syz.4.4851': attribute type 10 has an invalid length. [ 819.054373][T18488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.267953][ T5085] Bluetooth: hci1: command tx timeout [ 820.855057][T18478] chnl_net:caif_netlink_parms(): no params data found [ 821.337124][T18478] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.360051][T18478] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.401663][T18478] bridge_slave_0: entered allmulticast mode [ 821.428661][T18478] bridge_slave_0: entered promiscuous mode [ 821.492657][T18478] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.531131][T18478] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.559184][T18478] bridge_slave_1: entered allmulticast mode [ 821.605516][T18478] bridge_slave_1: entered promiscuous mode [ 822.047825][T18478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.090737][T18478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.331828][ T5085] Bluetooth: hci1: command tx timeout [ 822.354651][T18478] team0: Port device team_slave_0 added [ 822.365926][T18478] team0: Port device team_slave_1 added [ 822.654824][T18478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.679940][T18478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.785554][T18478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.970125][ T995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.036957][T18478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.060344][T18478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.171609][T18478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.269233][ T995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.497929][ T995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.578946][T18478] hsr_slave_0: entered promiscuous mode [ 823.619151][T18478] hsr_slave_1: entered promiscuous mode [ 823.641008][T18478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 823.649178][T18478] Cannot create hsr debugfs directory [ 823.729505][ T995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.421865][ T5085] Bluetooth: hci1: command tx timeout [ 826.492591][ T5085] Bluetooth: hci1: command tx timeout [ 826.860431][T18478] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 826.921171][T18478] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 826.998265][T18478] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 827.079082][T18478] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 827.201681][ T995] [ 827.204113][ T995] ====================================================== [ 827.211141][ T995] WARNING: possible circular locking dependency detected [ 827.218202][ T995] 6.6.93-syzkaller #0 Not tainted [ 827.223239][ T995] ------------------------------------------------------ [ 827.230347][ T995] kworker/u4:5/995 is trying to acquire lock: [ 827.236527][ T995] ffff888024a44d00 (team->team_lock_key#6){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 827.246182][ T995] [ 827.246182][ T995] but task is already holding lock: [ 827.253558][ T995] ffff88802ea38768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 827.264107][ T995] [ 827.264107][ T995] which lock already depends on the new lock. [ 827.264107][ T995] [ 827.274620][ T995] [ 827.274620][ T995] the existing dependency chain (in reverse order) is: [ 827.283643][ T995] [ 827.283643][ T995] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 827.291389][ T995] __mutex_lock+0x129/0xcc0 [ 827.296474][ T995] ieee80211_open+0x144/0x200 [ 827.301692][ T995] __dev_open+0x2bc/0x430 [ 827.306583][ T995] dev_open+0xab/0x170 [ 827.311198][ T995] team_add_slave+0xae7/0x2660 [ 827.316520][ T995] do_setlink+0xe14/0x3fb0 [ 827.321482][ T995] rtnl_newlink+0x175b/0x2020 [ 827.326803][ T995] rtnetlink_rcv_msg+0x7c7/0xf10 [ 827.332271][ T995] netlink_rcv_skb+0x216/0x480 [ 827.337576][ T995] netlink_unicast+0x750/0x8c0 [ 827.342879][ T995] netlink_sendmsg+0x8c1/0xbe0 [ 827.348178][ T995] ____sys_sendmsg+0x5bf/0x950 [ 827.353478][ T995] ___sys_sendmsg+0x220/0x290 [ 827.358701][ T995] __se_sys_sendmsg+0x1a5/0x270 [ 827.364084][ T995] do_syscall_64+0x55/0xb0 [ 827.369042][ T995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 827.375498][ T995] [ 827.375498][ T995] -> #0 (team->team_lock_key#6){+.+.}-{3:3}: [ 827.383724][ T995] __lock_acquire+0x2ddb/0x7c80 [ 827.389201][ T995] lock_acquire+0x197/0x410 [ 827.394252][ T995] __mutex_lock+0x129/0xcc0 [ 827.399326][ T995] team_del_slave+0x32/0x1c0 [ 827.404817][ T995] team_device_event+0x28d/0xa20 [ 827.410476][ T995] notifier_call_chain+0x197/0x390 [ 827.416135][ T995] unregister_netdevice_many_notify+0xf36/0x1810 [ 827.423359][ T995] unregister_netdevice_queue+0x324/0x360 [ 827.429621][ T995] _cfg80211_unregister_wdev+0x16b/0x580 [ 827.435806][ T995] ieee80211_remove_interfaces+0x496/0x680 [ 827.442182][ T995] ieee80211_unregister_hw+0x5d/0x2a0 [ 827.448110][ T995] mac80211_hwsim_del_radio+0x274/0x450 [ 827.454203][ T995] hwsim_exit_net+0x585/0x640 [ 827.459429][ T995] cleanup_net+0x6f4/0xb90 [ 827.464430][ T995] process_scheduled_works+0xa45/0x15b0 [ 827.470531][ T995] worker_thread+0xa55/0xfc0 [ 827.475684][ T995] kthread+0x2fa/0x390 [ 827.480327][ T995] ret_from_fork+0x48/0x80 [ 827.485304][ T995] ret_from_fork_asm+0x11/0x20 [ 827.490621][ T995] [ 827.490621][ T995] other info that might help us debug this: [ 827.490621][ T995] [ 827.500961][ T995] Possible unsafe locking scenario: [ 827.500961][ T995] [ 827.508438][ T995] CPU0 CPU1 [ 827.513838][ T995] ---- ---- [ 827.519231][ T995] lock(&rdev->wiphy.mtx); [ 827.523808][ T995] lock(team->team_lock_key#6); [ 827.531392][ T995] lock(&rdev->wiphy.mtx); [ 827.538467][ T995] lock(team->team_lock_key#6); [ 827.543461][ T995] [ 827.543461][ T995] *** DEADLOCK *** [ 827.543461][ T995] [ 827.551691][ T995] 5 locks held by kworker/u4:5/995: [ 827.556936][ T995] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 827.567869][ T995] #1: ffffc900040efd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 827.578442][ T995] #2: ffffffff8dfa1c90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 827.587909][ T995] #3: ffffffff8dfaea88 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 827.597909][ T995] #4: ffff88802ea38768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 827.608820][ T995] [ 827.608820][ T995] stack backtrace: [ 827.614736][ T995] CPU: 0 PID: 995 Comm: kworker/u4:5 Not tainted 6.6.93-syzkaller #0 [ 827.622831][ T995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 827.632927][ T995] Workqueue: netns cleanup_net [ 827.637769][ T995] Call Trace: [ 827.641064][ T995] [ 827.644015][ T995] dump_stack_lvl+0x16c/0x230 [ 827.648741][ T995] ? load_image+0x3b0/0x3b0 [ 827.653320][ T995] ? show_regs_print_info+0x20/0x20 [ 827.658549][ T995] ? print_circular_bug+0x12b/0x1a0 [ 827.663781][ T995] check_noncircular+0x2bd/0x3c0 [ 827.668770][ T995] ? print_deadlock_bug+0x5d0/0x5d0 [ 827.674026][ T995] ? lockdep_lock+0xe0/0x220 [ 827.678824][ T995] ? __lock_acquire+0x1334/0x7c80 [ 827.683892][ T995] ? _find_first_zero_bit+0xd3/0x100 [ 827.689209][ T995] __lock_acquire+0x2ddb/0x7c80 [ 827.694100][ T995] ? verify_lock_unused+0x140/0x140 [ 827.699335][ T995] ? verify_lock_unused+0x140/0x140 [ 827.704658][ T995] lock_acquire+0x197/0x410 [ 827.709200][ T995] ? team_del_slave+0x32/0x1c0 [ 827.714004][ T995] ? __might_sleep+0xe0/0xe0 [ 827.718633][ T995] ? read_lock_is_recursive+0x20/0x20 [ 827.724045][ T995] __mutex_lock+0x129/0xcc0 [ 827.728630][ T995] ? team_del_slave+0x32/0x1c0 [ 827.733432][ T995] ? __lock_acquire+0x7c80/0x7c80 [ 827.738494][ T995] ? rcu_is_watching+0x15/0xb0 [ 827.743557][ T995] ? trace_contention_end+0x39/0xe0 [ 827.748787][ T995] ? __mutex_lock+0x304/0xcc0 [ 827.753507][ T995] ? team_del_slave+0x32/0x1c0 [ 827.758312][ T995] ? mutex_lock_nested+0x20/0x20 [ 827.763294][ T995] ? bond_netdev_event+0xe1/0xef0 [ 827.768358][ T995] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 827.774036][ T995] ? bond_ipsec_offload_ok+0x410/0x410 [ 827.779620][ T995] team_del_slave+0x32/0x1c0 [ 827.784262][ T995] team_device_event+0x28d/0xa20 [ 827.789235][ T995] notifier_call_chain+0x197/0x390 [ 827.794384][ T995] unregister_netdevice_many_notify+0xf36/0x1810 [ 827.800757][ T995] ? lock_chain_count+0x20/0x20 [ 827.805642][ T995] ? unregister_netdevice_many+0x20/0x20 [ 827.811295][ T995] ? kernfs_remove_by_name_ns+0x117/0x150 [ 827.817044][ T995] ? __lock_acquire+0x7c80/0x7c80 [ 827.822125][ T995] unregister_netdevice_queue+0x324/0x360 [ 827.827871][ T995] ? list_netdevice+0x730/0x730 [ 827.832756][ T995] ? kernfs_remove_by_name_ns+0x117/0x150 [ 827.838496][ T995] _cfg80211_unregister_wdev+0x16b/0x580 [ 827.844236][ T995] ieee80211_remove_interfaces+0x496/0x680 [ 827.850081][ T995] ? ieee80211_do_stop+0x1db0/0x1db0 [ 827.855396][ T995] ? rcu_is_watching+0x15/0xb0 [ 827.860205][ T995] ieee80211_unregister_hw+0x5d/0x2a0 [ 827.865649][ T995] mac80211_hwsim_del_radio+0x274/0x450 [ 827.871227][ T995] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 827.876820][ T995] hwsim_exit_net+0x585/0x640 [ 827.881546][ T995] ? hwsim_init_net+0x90/0x90 [ 827.886254][ T995] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 827.892081][ T995] cleanup_net+0x6f4/0xb90 [ 827.896540][ T995] ? ops_free_list+0x3b0/0x3b0 [ 827.901335][ T995] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.906581][ T995] ? process_scheduled_works+0x957/0x15b0 [ 827.912431][ T995] ? process_scheduled_works+0x957/0x15b0 [ 827.918194][ T995] process_scheduled_works+0xa45/0x15b0 [ 827.923868][ T995] ? assign_work+0x400/0x400 [ 827.928483][ T995] ? assign_work+0x39e/0x400 [ 827.933200][ T995] worker_thread+0xa55/0xfc0 [ 827.937842][ T995] kthread+0x2fa/0x390 [ 827.941948][ T995] ? pr_cont_work+0x560/0x560 [ 827.946838][ T995] ? kthread_blkcg+0xd0/0xd0 [ 827.951587][ T995] ret_from_fork+0x48/0x80 [ 827.956126][ T995] ? kthread_blkcg+0xd0/0xd0 [ 827.960740][ T995] ret_from_fork_asm+0x11/0x20 [ 827.965547][ T995] [ 827.976162][ T995] team0: Port device wlan1 removed [ 828.150975][T18478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.199908][ T995] hsr_slave_0: left promiscuous mode [ 828.207036][ T995] hsr_slave_1: left promiscuous mode [ 828.219557][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.227166][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.238747][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.246414][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.257292][ T995] bridge_slave_1: left allmulticast mode [ 828.263166][ T995] bridge_slave_1: left promiscuous mode [ 828.268983][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.281315][ T995] bridge_slave_0: left allmulticast mode [ 828.287358][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.307597][ T995] veth1_macvtap: left promiscuous mode [ 828.316300][ T995] veth0_macvtap: left promiscuous mode [ 828.322807][ T995] veth1_vlan: left promiscuous mode [ 828.328207][ T995] veth0_vlan: left promiscuous mode [ 828.711999][ T995] team0 (unregistering): Port device team_slave_1 removed [ 828.775492][ T995] team0 (unregistering): Port device team_slave_0 removed [ 828.817999][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.876185][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.058170][ T995] bond0 (unregistering): Released all slaves [ 829.157168][T18478] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.178371][T16470] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.185625][T16470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.210954][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.218227][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.555987][T18478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.606246][T18478] veth0_vlan: entered promiscuous mode [ 829.618956][T18478] veth1_vlan: entered promiscuous mode [ 829.650980][T18478] veth0_macvtap: entered promiscuous mode [ 829.662906][T18478] veth1_macvtap: entered promiscuous mode [ 829.679712][T18478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.690700][T18478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.702260][T18478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.713020][T18478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.723044][T18478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.733555][T18478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.743483][T18478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.754888][T18478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.766342][T18478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.785517][T18478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.796196][T18478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.806076][T18478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.816785][T18478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.826716][T18478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.837491][T18478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.847403][T18478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.857885][T18478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.869114][T18478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.886807][T18478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.896104][T18478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.905009][T18478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.914056][T18478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.947710][T18478] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 829.977243][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.979549][T18478] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 829.994713][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.029875][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.038421][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50