last executing test programs: 3.19558679s ago: executing program 4 (id=5): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 2.736051525s ago: executing program 0 (id=20): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) 2.5905037s ago: executing program 3 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x22, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call, @jmp={0x5, 0x1, 0x5, 0x3, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}, @ldst={0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x2f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}, @call={0x85, 0x0, 0x0, 0x46}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000003c0)='GPL\x00', 0xffff, 0x45, &(0x7f0000000600)=""/69, 0x41100, 0x0, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c40)=[{0x3, 0x3, 0xc, 0xb}], 0x10, 0xe}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdfffffeb6081dccfb3567581deb708380ff967a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 2.589165061s ago: executing program 1 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x66) 1.570092903s ago: executing program 4 (id=23): perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x5156, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x4, @perf_config_ext={0x2, 0x8000000000010001}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x19, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x4}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcf7a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call, @jmp={0x5, 0x1, 0xb, 0x7, 0x3, 0x20, 0x10}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x39, &(0x7f00000004c0)=""/57, 0x41100, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x3, 0x7, 0x9, 0xff}, 0x10, 0x0, r1, 0x0, &(0x7f0000000bc0)=[0x1], 0x0, 0x10, 0xb}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x24, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f0000000240), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r8, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, 0x0, 0x275a, 0x0) syz_clone(0xc4201100, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) 1.558918564s ago: executing program 3 (id=24): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x6c0000000000) 1.342373426s ago: executing program 0 (id=25): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x65) close(r2) 1.278305242s ago: executing program 1 (id=26): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.171997713s ago: executing program 1 (id=27): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x2af7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000006000000000000000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000ef, 0x1af1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000fbedd016f692d1daa8cbfa2b8e156a91dcfa58fea9ebf8022d2958623d0b2b1885c41f1179c20505f4cba4158ce7a439c367fc8660f558", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000010000007f4e980d0000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) 1.157614194s ago: executing program 0 (id=28): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.076446943s ago: executing program 3 (id=29): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00N\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000001140)=ANY=[@ANYBLOB="8fedc5790700117df37538e486dd6317ce220000000000000000000000000000ffff7fc5f6112be8263da43a7fc33922bdbb4e0aa8ede71a"], 0xfdef) 952.047975ms ago: executing program 3 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa2000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) 856.809004ms ago: executing program 3 (id=31): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x2e}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f0000000080)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 769.785213ms ago: executing program 2 (id=32): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r1) 715.494599ms ago: executing program 0 (id=34): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='hrtimer_init\x00', r2}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) 714.145179ms ago: executing program 1 (id=35): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='fdb_delete\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 554.308725ms ago: executing program 2 (id=36): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) unlink(0x0) 546.118636ms ago: executing program 0 (id=37): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 456.548375ms ago: executing program 2 (id=38): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 456.333005ms ago: executing program 1 (id=39): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x81b00, &(0x7f0000000380)="93d87ed86f53f2cf09b25d6dc5acda620b77f4427c0d8efddc77f8a7c332b22ca1fad1ac88ebfa90985c641c8724b92623269e4d2affb31fe0a3a0c9bfe433c3e8c0828640e3e0ea69", 0x49, 0x0, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 384.655632ms ago: executing program 2 (id=40): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00083300db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 214.253559ms ago: executing program 0 (id=41): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 206.29446ms ago: executing program 2 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 161.757984ms ago: executing program 1 (id=43): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd74) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001}, 0x0, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 3.76733ms ago: executing program 3 (id=44): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x7a1681, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x39, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) 0s ago: executing program 2 (id=54): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 65.662658][ T4172] cgroup: Unknown subsys name 'net' [ 65.796130][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.269309][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.654067][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.810608][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.860738][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 68.875252][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.883223][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.894270][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.907101][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.914306][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.922614][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.987048][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 69.001627][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 69.013507][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.052537][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.084858][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.093034][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.101508][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.138131][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.145518][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.153825][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.168482][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.175926][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.184188][ T4189] device bridge_slave_0 entered promiscuous mode [ 69.208387][ T4183] team0: Port device team_slave_0 added [ 69.214640][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.222463][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.230504][ T4189] device bridge_slave_1 entered promiscuous mode [ 69.254808][ T4183] team0: Port device team_slave_1 added [ 69.294052][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.335708][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.345031][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.356369][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.364670][ T4190] device bridge_slave_0 entered promiscuous mode [ 69.376464][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.383802][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.410373][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.424047][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.433351][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.440582][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.448391][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.463018][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.470362][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.478323][ T4190] device bridge_slave_1 entered promiscuous mode [ 69.485849][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.493180][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.519251][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.532136][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.541691][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.548753][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.556889][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.608302][ T4187] team0: Port device team_slave_0 added [ 69.616423][ T4187] team0: Port device team_slave_1 added [ 69.633151][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.644992][ T4189] team0: Port device team_slave_0 added [ 69.680182][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.690538][ T4189] team0: Port device team_slave_1 added [ 69.697969][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.716402][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.723439][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.749821][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.787984][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.809496][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.816491][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.842870][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.879565][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.886494][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.899986][ T4190] team0: Port device team_slave_0 added [ 69.906909][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.914648][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.940705][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.964325][ T4194] team0: Port device team_slave_0 added [ 69.972297][ T4190] team0: Port device team_slave_1 added [ 69.985329][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.992601][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.018640][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.034997][ T4194] team0: Port device team_slave_1 added [ 70.086360][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.093730][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.120435][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.151457][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.158650][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.165630][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.173683][ T4187] Cannot create hsr debugfs directory [ 70.195541][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.202634][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.228651][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.247397][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.254492][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.260368][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 70.287050][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.314870][ T4189] device hsr_slave_0 entered promiscuous mode [ 70.321816][ T4189] device hsr_slave_1 entered promiscuous mode [ 70.328368][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.336830][ T4189] Cannot create hsr debugfs directory [ 70.343191][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 70.359384][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.366370][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.392397][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.419362][ T2014] Bluetooth: hci3: command 0x0409 tx timeout [ 70.430124][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 70.448109][ T4190] device hsr_slave_0 entered promiscuous mode [ 70.455344][ T4190] device hsr_slave_1 entered promiscuous mode [ 70.462031][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.470348][ T4190] Cannot create hsr debugfs directory [ 70.499242][ T2014] Bluetooth: hci4: command 0x0409 tx timeout [ 70.565087][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.572272][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.578831][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.586618][ T4194] Cannot create hsr debugfs directory [ 70.795952][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.820986][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.838290][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.847894][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.914017][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.935618][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.946006][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.957139][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.017668][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.046493][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.072225][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.083866][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.095615][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.114800][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.125057][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.134791][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.160141][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.173287][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.185595][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.205076][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.215825][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.225636][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.235865][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.243397][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.275745][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.298866][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.310582][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.321432][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.331435][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.338492][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.348960][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.372132][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.382398][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.393668][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.446148][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.455323][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.466505][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.474424][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.474568][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.483411][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.496833][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.505621][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.514580][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.523859][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.535781][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.544961][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.577531][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.590873][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.628159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.636780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.653884][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.709577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.721314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.730451][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.737532][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.745847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.765865][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.775056][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.785968][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.795695][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.802848][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.814665][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.859536][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.868443][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.886890][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.898331][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.907928][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.916455][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.937146][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.945293][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.954748][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.963648][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.976433][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.986491][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.011438][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.023669][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.041977][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.053486][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.062850][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.072098][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.079415][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.087336][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.096585][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.105939][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.114433][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.124027][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.141580][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.158138][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.168540][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.196460][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.214378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.225444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.235878][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.243061][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.252956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.263211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.272184][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.279314][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.289511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.298218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.306500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.315746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.324609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.334251][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.339684][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 72.341391][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.355838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.365091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.377049][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.394762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.419945][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 72.446872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.457917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.475724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.486214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.495224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.503391][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 72.504454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.509576][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 72.526752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.535394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.544136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.553201][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.560340][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.568065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.577126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.585646][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 72.587324][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.598832][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.608422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.617340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.625667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.676289][ T4187] device veth0_vlan entered promiscuous mode [ 72.683546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.692474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.703824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.714720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.723748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.733097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.742350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.751580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.760658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.769752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.778678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.787607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.795155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.803169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.812045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.822821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.831049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.839018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.847086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.860851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.870258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.881728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.890919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.914648][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.936269][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.946279][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.955008][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.964472][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.973508][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.984671][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.996217][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.020666][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.050370][ T4187] device veth1_vlan entered promiscuous mode [ 73.071997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.090056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.161941][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.171907][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.188298][ T4187] device veth0_macvtap entered promiscuous mode [ 73.214787][ T4189] device veth0_vlan entered promiscuous mode [ 73.223503][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.232722][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.242380][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.252344][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.262302][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.281031][ T4187] device veth1_macvtap entered promiscuous mode [ 73.293914][ T4189] device veth1_vlan entered promiscuous mode [ 73.323929][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.334496][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.343973][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.351691][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.367292][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.397471][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.434547][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.445003][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.453945][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.463338][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.471900][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.492294][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.513597][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.532690][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.543132][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.552953][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.567948][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.577394][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.587371][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.597828][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.608153][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.617937][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.629057][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.638072][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.651813][ T4189] device veth0_macvtap entered promiscuous mode [ 73.677018][ T4189] device veth1_macvtap entered promiscuous mode [ 73.703801][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.712617][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.721592][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.730948][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.756822][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.768814][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.782569][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.813763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.830158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.839099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.848373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.876300][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.890498][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.901731][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.933171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.952201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.962351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.971956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.987656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.996479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.006058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.016329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.028584][ T4183] device veth0_vlan entered promiscuous mode [ 74.046675][ T4194] device veth0_vlan entered promiscuous mode [ 74.059070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.067354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.076420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.086032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.096352][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.106610][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.116814][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.125865][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.186688][ T4183] device veth1_vlan entered promiscuous mode [ 74.203715][ T4194] device veth1_vlan entered promiscuous mode [ 74.231600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.243482][ T3062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.249911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.254303][ T3062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.268262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.298820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.307828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.316341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.325507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.334065][ T4190] device veth0_vlan entered promiscuous mode [ 74.384500][ T4190] device veth1_vlan entered promiscuous mode [ 74.393697][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.404150][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.412966][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.421519][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 74.424532][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.436879][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.451913][ T4194] device veth0_macvtap entered promiscuous mode [ 74.463711][ T4183] device veth0_macvtap entered promiscuous mode [ 74.484309][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.493222][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.500175][ T4225] Bluetooth: hci1: command 0x040f tx timeout [ 74.508741][ T4194] device veth1_macvtap entered promiscuous mode [ 74.525119][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.533646][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.543318][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.552146][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.561196][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.580244][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 74.586649][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 74.611018][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.613717][ T4183] device veth1_macvtap entered promiscuous mode [ 74.619372][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.643457][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.655829][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.666282][ T4225] Bluetooth: hci4: command 0x040f tx timeout [ 74.667373][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.683356][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.695412][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.706584][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.716410][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.724676][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.734066][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.745829][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.757952][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.770089][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.782578][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.793065][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.803906][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.814070][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.824855][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.836595][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.850984][ T4190] device veth0_macvtap entered promiscuous mode [ 74.859351][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.873591][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.881456][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.885298][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.892047][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.909525][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.926798][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.936368][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.946648][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.958001][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.967568][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.977566][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.987948][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.999684][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.016385][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.026766][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.038306][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.048611][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.061104][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.072818][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.087103][ T4190] device veth1_macvtap entered promiscuous mode [ 75.100485][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.109390][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.118097][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.127791][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.144348][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.153340][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.172391][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.181766][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.191617][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.200748][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.348148][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.362531][ C0] hrtimer: interrupt took 34549 ns [ 75.376682][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.388539][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.409571][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.425654][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.439545][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.452855][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.464924][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.480867][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.493934][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.506550][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.524363][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.537559][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.547899][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.560902][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.571637][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.582869][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.596155][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.634109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.693894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.730459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.746024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.796665][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.871429][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.881402][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.890296][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.063966][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.107850][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.159982][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.168044][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.171177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.204803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.292571][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.305424][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.324253][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.353987][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.357088][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.392190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.414717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.435435][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.485241][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.499329][ T2014] Bluetooth: hci0: command 0x0419 tx timeout [ 76.531550][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.564677][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.580485][ T2014] Bluetooth: hci1: command 0x0419 tx timeout [ 76.663616][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 76.680165][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 76.740619][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 76.955841][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.100282][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.108930][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.041371][ T4399] device wg2 entered promiscuous mode [ 80.466004][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.473826][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.559368][ C0] ------------[ cut here ]------------ [ 80.560328][ C0] [ 80.560334][ C0] ====================================================== [ 80.560341][ C0] WARNING: possible circular locking dependency detected [ 80.560356][ C0] syzkaller #0 Not tainted [ 80.560367][ C0] ------------------------------------------------------ [ 80.560373][ C0] syz.3.44/4418 is trying to acquire lock: [ 80.560383][ C0] ffffffff8c1111c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 80.560447][ C0] [ 80.560447][ C0] but task is already holding lock: [ 80.560452][ C0] ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 80.560497][ C0] [ 80.560497][ C0] which lock already depends on the new lock. [ 80.560497][ C0] [ 80.560502][ C0] [ 80.560502][ C0] the existing dependency chain (in reverse order) is: [ 80.560508][ C0] [ 80.560508][ C0] -> #5 (&base->lock){-.-.}-{2:2}: [ 80.560532][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 80.560552][ C0] lock_timer_base+0x123/0x270 [ 80.560571][ C0] __mod_timer+0x117/0xd20 [ 80.560589][ C0] queue_delayed_work_on+0x126/0x1e0 [ 80.560607][ C0] enqueue_task+0x26d/0x2b0 [ 80.560626][ C0] wake_up_new_task+0x442/0x9a0 [ 80.560646][ C0] kernel_clone+0x421/0x930 [ 80.560663][ C0] kernel_thread+0xc8/0x120 [ 80.560680][ C0] rest_init+0x21/0x330 [ 80.560698][ C0] start_kernel+0x486/0x530 [ 80.560717][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 80.560736][ C0] [ 80.560736][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 80.560759][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 80.560776][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 80.560795][ C0] task_fork_fair+0x5c/0x350 [ 80.560811][ C0] sched_cgroup_fork+0x2c6/0x320 [ 80.560830][ C0] copy_process+0x22d1/0x3e00 [ 80.560847][ C0] kernel_clone+0x219/0x930 [ 80.560864][ C0] kernel_thread+0xc8/0x120 [ 80.560880][ C0] rest_init+0x21/0x330 [ 80.560898][ C0] start_kernel+0x486/0x530 [ 80.560915][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 80.560935][ C0] [ 80.560935][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 80.560959][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 80.560975][ C0] try_to_wake_up+0x5c/0x1050 [ 80.560993][ C0] __wake_up_common+0x2a4/0x4e0 [ 80.561011][ C0] __wake_up+0x108/0x180 [ 80.561035][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 80.561055][ C0] serial8250_tx_chars+0x629/0x830 [ 80.561075][ C0] serial8250_handle_irq+0x519/0x610 [ 80.561095][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 80.561117][ C0] serial8250_interrupt+0x9b/0x1c0 [ 80.561135][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 80.561153][ C0] handle_irq_event+0xa5/0x220 [ 80.561170][ C0] handle_edge_irq+0x243/0xb20 [ 80.561188][ C0] __common_interrupt+0xd7/0x1e0 [ 80.561206][ C0] common_interrupt+0xb0/0xd0 [ 80.561223][ C0] asm_common_interrupt+0x22/0x40 [ 80.561239][ C0] __sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 80.561257][ C0] add_mm_rss_vec+0x7b/0x270 [ 80.561273][ C0] unmap_page_range+0x1c69/0x2520 [ 80.561289][ C0] unmap_vmas+0x11b/0x230 [ 80.561303][ C0] unmap_region+0x202/0x360 [ 80.561320][ C0] __do_munmap+0x9d3/0xdc0 [ 80.561337][ C0] mmap_region+0x8bb/0x1660 [ 80.561353][ C0] do_mmap+0x81f/0xea0 [ 80.561369][ C0] vm_mmap_pgoff+0x1b2/0x2b0 [ 80.561388][ C0] ksys_mmap_pgoff+0x542/0x780 [ 80.561405][ C0] do_syscall_64+0x4c/0xa0 [ 80.561421][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.561439][ C0] [ 80.561439][ C0] -> #2 (&tty->write_wait){-...}-{2:2}: [ 80.561463][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 80.561479][ C0] __wake_up+0xed/0x180 [ 80.561496][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 80.561513][ C0] serial8250_tx_chars+0x629/0x830 [ 80.561532][ C0] serial8250_handle_irq+0x519/0x610 [ 80.561551][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 80.561572][ C0] serial8250_interrupt+0x9b/0x1c0 [ 80.561591][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 80.561610][ C0] handle_irq_event+0xa5/0x220 [ 80.561628][ C0] handle_edge_irq+0x243/0xb20 [ 80.561647][ C0] __common_interrupt+0xd7/0x1e0 [ 80.561665][ C0] common_interrupt+0xb0/0xd0 [ 80.561682][ C0] asm_common_interrupt+0x22/0x40 [ 80.561700][ C0] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 80.561717][ C0] uart_write+0x62f/0x880 [ 80.561734][ C0] n_tty_write+0xd21/0x1210 [ 80.561749][ C0] file_tty_write+0x557/0x910 [ 80.561768][ C0] vfs_write+0x712/0xd00 [ 80.561785][ C0] ksys_write+0x14d/0x250 [ 80.561800][ C0] do_syscall_64+0x4c/0xa0 [ 80.561817][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.561836][ C0] [ 80.561836][ C0] -> #1 (&port_lock_key){-...}-{2:2}: [ 80.561860][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 80.561877][ C0] serial8250_console_write+0x170/0xf80 [ 80.561898][ C0] console_unlock+0xc86/0x1200 [ 80.561913][ C0] vprintk_emit+0xc0/0x150 [ 80.561933][ C0] _printk+0xcc/0x110 [ 80.561952][ C0] register_console+0x682/0x960 [ 80.561968][ C0] univ8250_console_init+0x41/0x50 [ 80.561988][ C0] console_init+0x177/0x5d0 [ 80.562004][ C0] start_kernel+0x2f9/0x530 [ 80.562027][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 80.562047][ C0] [ 80.562047][ C0] -> #0 (console_owner){-.-.}-{0:0}: [ 80.562071][ C0] __lock_acquire+0x2c33/0x7c60 [ 80.562092][ C0] lock_acquire+0x197/0x3f0 [ 80.562112][ C0] console_lock_spinning_enable+0x51/0x60 [ 80.562129][ C0] console_unlock+0x9f8/0x1200 [ 80.562144][ C0] vprintk_emit+0xc0/0x150 [ 80.562164][ C0] _printk+0xcc/0x110 [ 80.562183][ C0] report_bug+0x1e5/0x2e0 [ 80.562202][ C0] handle_bug+0x3a/0x70 [ 80.562218][ C0] exc_invalid_op+0x16/0x40 [ 80.562234][ C0] asm_exc_invalid_op+0x16/0x20 [ 80.562250][ C0] copy_from_user_nofault+0x160/0x1c0 [ 80.562269][ C0] bpf_probe_read_user+0x26/0x70 [ 80.562288][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xe64 [ 80.562304][ C0] bpf_trace_run3+0x17e/0x320 [ 80.562320][ C0] enqueue_timer+0x394/0x520 [ 80.562339][ C0] __mod_timer+0x8e1/0xd20 [ 80.562356][ C0] dsp_cmx_send+0x1ab4/0x1b30 [ 80.562375][ C0] call_timer_fn+0x16c/0x530 [ 80.562393][ C0] __run_timers+0x525/0x7c0 [ 80.562412][ C0] run_timer_softirq+0x63/0xf0 [ 80.562431][ C0] handle_softirqs+0x328/0x820 [ 80.562448][ C0] __irq_exit_rcu+0x12f/0x220 [ 80.562464][ C0] irq_exit_rcu+0x5/0x20 [ 80.562480][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 80.562499][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.562519][ C0] preempt_schedule_irq+0xac/0x150 [ 80.562539][ C0] irqentry_exit+0x63/0x70 [ 80.562557][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.562576][ C0] kmemdup+0x1/0x50 [ 80.562595][ C0] scm_fp_dup+0x54/0x270 [ 80.562612][ C0] unix_attach_fds+0x135/0x2c0 [ 80.562632][ C0] unix_dgram_sendmsg+0x777/0x1890 [ 80.562652][ C0] ____sys_sendmsg+0x5a2/0x8c0 [ 80.562672][ C0] ___sys_sendmsg+0x1f0/0x260 [ 80.562691][ C0] __se_sys_sendmsg+0x190/0x250 [ 80.562711][ C0] do_syscall_64+0x4c/0xa0 [ 80.562727][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.562747][ C0] [ 80.562747][ C0] other info that might help us debug this: [ 80.562747][ C0] [ 80.562752][ C0] Chain exists of: [ 80.562752][ C0] console_owner --> &rq->__lock --> &base->lock [ 80.562752][ C0] [ 80.562778][ C0] Possible unsafe locking scenario: [ 80.562778][ C0] [ 80.562783][ C0] CPU0 CPU1 [ 80.562787][ C0] ---- ---- [ 80.562791][ C0] lock(&base->lock); [ 80.562815][ C0] lock(&rq->__lock); [ 80.562827][ C0] lock(&base->lock); [ 80.562839][ C0] lock(console_owner); [ 80.562849][ C0] [ 80.562849][ C0] *** DEADLOCK *** [ 80.562849][ C0] [ 80.562853][ C0] 5 locks held by syz.3.44/4418: [ 80.562865][ C0] #0: ffffc90000007be0 ((&dsp_spl_tl)){+.-.}-{0:0}, at: call_timer_fn+0xbb/0x530 [ 80.562912][ C0] #1: ffffffff8cfdcf18 (dsp_lock){..-.}-{2:2}, at: dsp_cmx_send+0x22/0x1b30 [ 80.562966][ C0] #2: ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 80.563012][ C0] #3: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 80.563067][ C0] #4: ffffffff8c1112a0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 80.563114][ C0] [ 80.563114][ C0] stack backtrace: [ 80.563133][ C0] CPU: 0 PID: 4418 Comm: syz.3.44 Not tainted syzkaller #0 [ 80.563159][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.563178][ C0] Call Trace: [ 80.563184][ C0] [ 80.563192][ C0] dump_stack_lvl+0x168/0x230 [ 80.563216][ C0] ? load_image+0x3b0/0x3b0 [ 80.563238][ C0] ? show_regs_print_info+0x20/0x20 [ 80.563266][ C0] ? print_circular_bug+0x12b/0x1a0 [ 80.563287][ C0] check_noncircular+0x274/0x310 [ 80.563308][ C0] ? add_chain_block+0x940/0x940 [ 80.563326][ C0] ? lockdep_lock+0xdc/0x1e0 [ 80.563352][ C0] ? mark_lock+0x94/0x320 [ 80.563373][ C0] __lock_acquire+0x2c33/0x7c60 [ 80.563411][ C0] ? verify_lock_unused+0x140/0x140 [ 80.563444][ C0] ? sprintf+0xd6/0x120 [ 80.563468][ C0] lock_acquire+0x197/0x3f0 [ 80.563489][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 80.563509][ C0] ? prb_read_valid+0x60/0x60 [ 80.563531][ C0] ? read_lock_is_recursive+0x10/0x10 [ 80.563552][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 80.563573][ C0] ? __rwlock_init+0x140/0x140 [ 80.563593][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 80.563614][ C0] console_lock_spinning_enable+0x51/0x60 [ 80.563632][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 80.563650][ C0] console_unlock+0x9f8/0x1200 [ 80.563672][ C0] ? console_trylock_spinning+0x350/0x350 [ 80.563697][ C0] ? __down_trylock_console_sem+0x184/0x1e0 [ 80.563715][ C0] ? vprintk_emit+0xa7/0x150 [ 80.563737][ C0] ? printk_parse_prefix+0x330/0x330 [ 80.563758][ C0] ? vprintk_emit+0xa7/0x150 [ 80.563779][ C0] ? console_trylock+0x70/0x70 [ 80.563792][ C0] ? rcu_lock_release+0x5/0x20 [ 80.563813][ C0] ? vprintk_emit+0x150/0x150 [ 80.563844][ C0] vprintk_emit+0xc0/0x150 [ 80.563868][ C0] _printk+0xcc/0x110 [ 80.563889][ C0] ? verify_lock_unused+0x140/0x140 [ 80.563913][ C0] ? load_image+0x3b0/0x3b0 [ 80.563938][ C0] ? find_bug+0xa1/0x350 [ 80.563956][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 80.563978][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 80.564000][ C0] report_bug+0x1e5/0x2e0 [ 80.564033][ C0] handle_bug+0x3a/0x70 [ 80.564052][ C0] exc_invalid_op+0x16/0x40 [ 80.564070][ C0] asm_exc_invalid_op+0x16/0x20 [ 80.564095][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 80.564118][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 80.564134][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00010046 [ 80.564151][ C0] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff88802b7a5940 [ 80.564165][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.564176][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 80.564189][ C0] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffff88802b7a70c8 [ 80.564204][ C0] R13: 1ffff92000000f1c R14: ffffc900000078c8 R15: 0000000000000000 [ 80.564219][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 80.564239][ C0] bpf_probe_read_user+0x26/0x70 [ 80.564256][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xe64 [ 80.564269][ C0] bpf_trace_run3+0x17e/0x320 [ 80.564281][ C0] ? bpf_trace_run2+0x2d0/0x2d0 [ 80.564292][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 80.564307][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 80.564323][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 80.564339][ C0] enqueue_timer+0x394/0x520 [ 80.564356][ C0] __mod_timer+0x8e1/0xd20 [ 80.564375][ C0] dsp_cmx_send+0x1ab4/0x1b30 [ 80.564391][ C0] ? detach_timer+0x33/0x2b0 [ 80.564406][ C0] ? read_lock_is_recursive+0x10/0x10 [ 80.564426][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 80.564441][ C0] call_timer_fn+0x16c/0x530 [ 80.564455][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 80.564469][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 80.564485][ C0] ? __run_timers+0x7c0/0x7c0 [ 80.564502][ C0] ? rcu_is_watching+0x11/0xa0 [ 80.564515][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 80.564528][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 80.564542][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 80.564557][ C0] __run_timers+0x525/0x7c0 [ 80.564576][ C0] ? detach_timer+0x2b0/0x2b0 [ 80.564590][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 80.564608][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 80.564622][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 80.564641][ C0] run_timer_softirq+0x63/0xf0 [ 80.564656][ C0] handle_softirqs+0x328/0x820 [ 80.564671][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 80.564686][ C0] ? do_softirq+0x200/0x200 [ 80.564700][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 80.564716][ C0] __irq_exit_rcu+0x12f/0x220 [ 80.564729][ C0] ? irq_exit_rcu+0x20/0x20 [ 80.564746][ C0] irq_exit_rcu+0x5/0x20 [ 80.564757][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 80.564773][ C0] [ 80.564778][ C0] [ 80.564783][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.564798][ C0] RIP: 0010:preempt_schedule_irq+0xac/0x150 [ 80.564814][ C0] Code: 44 24 20 f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 70 bf 01 00 00 00 e8 cf b7 9f f7 e8 1a 31 cc f7 fb bf 01 00 00 00 ef b5 ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 80.564825][ C0] RSP: 0018:ffffc90002f6f6c0 EFLAGS: 00000282 [ 80.564836][ C0] RAX: a5209b92eac2dd00 RBX: 0000000000000000 RCX: a5209b92eac2dd00 [ 80.564845][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1c60 RDI: 0000000000000001 [ 80.564855][ C0] RBP: ffffc90002f6f770 R08: ffffffff8eed3008 R09: ffffffff8eed3018 [ 80.564865][ C0] R10: ffffffff8eed3010 R11: ffffffff8eed3003 R12: 0000000000000000 [ 80.564875][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005eded8 [ 80.564892][ C0] ? __cond_resched+0xb0/0xb0 [ 80.564908][ C0] ? rcu_is_watching+0x11/0xa0 [ 80.564921][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 80.564936][ C0] irqentry_exit+0x63/0x70 [ 80.564949][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.564963][ C0] RIP: 0010:kmemdup+0x1/0x50 [ 80.564978][ C0] Code: 41 5e 41 5f 5d c3 89 da 80 e2 07 38 ca 7c dd 48 89 df e8 72 4d 16 00 4c 89 f0 eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 <41> 57 41 56 53 89 d5 48 89 f3 49 89 fe e8 0d e5 d1 ff 48 8b 54 24 [ 80.564989][ C0] RSP: 0018:ffffc90002f6f838 EFLAGS: 00000246 [ 80.564999][ C0] RAX: 0000000000000046 RBX: ffffc90002f6f9d8 RCX: 0000000000080000 [ 80.565008][ C0] RDX: 0000000000400cc0 RSI: 0000000000000240 RDI: ffff88801ba7f000 [ 80.565018][ C0] RBP: ffffc90002f6fa70 R08: dffffc0000000000 R09: ffffed100fefad50 [ 80.565034][ C0] R10: ffffed100fefad50 R11: 1ffff1100fefad4f R12: dffffc0000000000 [ 80.565045][ C0] R13: 1ffff1100374fe00 R14: ffff88801ba7f000 R15: 0000000000000100 [ 80.565062][ C0] scm_fp_dup+0x54/0x270 [ 80.565077][ C0] unix_attach_fds+0x135/0x2c0 [ 80.565094][ C0] unix_dgram_sendmsg+0x777/0x1890 [ 80.565114][ C0] ? aa_sk_perm+0x7b4/0x8f0 [ 80.565133][ C0] ? unix_dgram_poll+0x660/0x660 [ 80.565146][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 80.565166][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 80.565181][ C0] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 80.565196][ C0] ? unix_dgram_peer_wake_me+0x430/0x430 [ 80.565212][ C0] ____sys_sendmsg+0x5a2/0x8c0 [ 80.565231][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 80.565250][ C0] ? import_iovec+0x6f/0xa0 [ 80.565267][ C0] ___sys_sendmsg+0x1f0/0x260 [ 80.565285][ C0] ? __sys_sendmsg+0x250/0x250 [ 80.565304][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 80.565328][ C0] ? __fdget+0x18b/0x210 [ 80.565342][ C0] __se_sys_sendmsg+0x190/0x250 [ 80.565358][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 80.565372][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 80.565393][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 80.565409][ C0] do_syscall_64+0x4c/0xa0 [ 80.565421][ C0] ? clear_bhb_loop+0x30/0x80 [ 80.565435][ C0] ? clear_bhb_loop+0x30/0x80 [ 80.565449][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.565463][ C0] RIP: 0033:0x7fcfbd4226c9 [ 80.565475][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.565485][ C0] RSP: 002b:00007fcfbb689038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.565498][ C0] RAX: ffffffffffffffda RBX: 00007fcfbd678fa0 RCX: 00007fcfbd4226c9 [ 80.565508][ C0] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000005 [ 80.565517][ C0] RBP: 00007fcfbd4a4f91 R08: 0000000000000000 R09: 0000000000000000 [ 80.565526][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.565534][ C0] R13: 00007fcfbd679038 R14: 00007fcfbd678fa0 R15: 00007ffc17f735e8 [ 80.565550][ C0] [ 82.298694][ C0] WARNING: CPU: 0 PID: 4418 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 82.307993][ C0] Modules linked in: [ 82.311905][ C0] CPU: 0 PID: 4418 Comm: syz.3.44 Not tainted syzkaller #0 [ 82.319099][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.329170][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 82.335336][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 82.354947][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00010046 [ 82.361016][ C0] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff88802b7a5940 [ 82.368982][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.376946][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 82.384916][ C0] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffff88802b7a70c8 [ 82.392881][ C0] R13: 1ffff92000000f1c R14: ffffc900000078c8 R15: 0000000000000000 [ 82.401023][ C0] FS: 00007fcfbb6896c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 82.409950][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.416553][ C0] CR2: 00007fcbbbad6a90 CR3: 000000001ed10000 CR4: 00000000003506f0 [ 82.424519][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.432485][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 82.440459][ C0] Call Trace: [ 82.443736][ C0] [ 82.446579][ C0] bpf_probe_read_user+0x26/0x70 [ 82.451615][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xe64 [ 82.457152][ C0] bpf_trace_run3+0x17e/0x320 [ 82.461841][ C0] ? bpf_trace_run2+0x2d0/0x2d0 [ 82.466686][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 82.472573][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 82.477595][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 82.482803][ C0] enqueue_timer+0x394/0x520 [ 82.487392][ C0] __mod_timer+0x8e1/0xd20 [ 82.491808][ C0] dsp_cmx_send+0x1ab4/0x1b30 [ 82.496485][ C0] ? detach_timer+0x33/0x2b0 [ 82.501101][ C0] ? read_lock_is_recursive+0x10/0x10 [ 82.506484][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 82.511746][ C0] call_timer_fn+0x16c/0x530 [ 82.516359][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 82.521559][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 82.527545][ C0] ? __run_timers+0x7c0/0x7c0 [ 82.532230][ C0] ? rcu_is_watching+0x11/0xa0 [ 82.537077][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 82.542278][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 82.547478][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 82.552585][ C0] __run_timers+0x525/0x7c0 [ 82.557090][ C0] ? detach_timer+0x2b0/0x2b0 [ 82.561782][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 82.567759][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 82.572702][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 82.578013][ C0] run_timer_softirq+0x63/0xf0 [ 82.582772][ C0] handle_softirqs+0x328/0x820 [ 82.587644][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 82.592580][ C0] ? do_softirq+0x200/0x200 [ 82.597081][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 82.602276][ C0] __irq_exit_rcu+0x12f/0x220 [ 82.606949][ C0] ? irq_exit_rcu+0x20/0x20 [ 82.611456][ C0] irq_exit_rcu+0x5/0x20 [ 82.615695][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 82.621349][ C0] [ 82.624276][ C0] [ 82.627203][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 82.633180][ C0] RIP: 0010:preempt_schedule_irq+0xac/0x150 [ 82.639075][ C0] Code: 44 24 20 f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 70 bf 01 00 00 00 e8 cf b7 9f f7 e8 1a 31 cc f7 fb bf 01 00 00 00 ef b5 ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 82.658965][ C0] RSP: 0018:ffffc90002f6f6c0 EFLAGS: 00000282 [ 82.665043][ C0] RAX: a5209b92eac2dd00 RBX: 0000000000000000 RCX: a5209b92eac2dd00 [ 82.673015][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1c60 RDI: 0000000000000001 [ 82.680987][ C0] RBP: ffffc90002f6f770 R08: ffffffff8eed3008 R09: ffffffff8eed3018 [ 82.688967][ C0] R10: ffffffff8eed3010 R11: ffffffff8eed3003 R12: 0000000000000000 [ 82.696938][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005eded8 [ 82.704919][ C0] ? __cond_resched+0xb0/0xb0 [ 82.709605][ C0] ? rcu_is_watching+0x11/0xa0 [ 82.714392][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 82.720199][ C0] irqentry_exit+0x63/0x70 [ 82.724662][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 82.730655][ C0] RIP: 0010:kmemdup+0x1/0x50 [ 82.735262][ C0] Code: 41 5e 41 5f 5d c3 89 da 80 e2 07 38 ca 7c dd 48 89 df e8 72 4d 16 00 4c 89 f0 eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 <41> 57 41 56 53 89 d5 48 89 f3 49 89 fe e8 0d e5 d1 ff 48 8b 54 24 [ 82.754910][ C0] RSP: 0018:ffffc90002f6f838 EFLAGS: 00000246 [ 82.761001][ C0] RAX: 0000000000000046 RBX: ffffc90002f6f9d8 RCX: 0000000000080000 [ 82.768975][ C0] RDX: 0000000000400cc0 RSI: 0000000000000240 RDI: ffff88801ba7f000 [ 82.776959][ C0] RBP: ffffc90002f6fa70 R08: dffffc0000000000 R09: ffffed100fefad50 [ 82.785063][ C0] R10: ffffed100fefad50 R11: 1ffff1100fefad4f R12: dffffc0000000000 [ 82.793055][ C0] R13: 1ffff1100374fe00 R14: ffff88801ba7f000 R15: 0000000000000100 [ 82.801071][ C0] scm_fp_dup+0x54/0x270 [ 82.805331][ C0] unix_attach_fds+0x135/0x2c0 [ 82.810101][ C0] unix_dgram_sendmsg+0x777/0x1890 [ 82.815217][ C0] ? aa_sk_perm+0x7b4/0x8f0 [ 82.819898][ C0] ? unix_dgram_poll+0x660/0x660 [ 82.825067][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 82.831496][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 82.836448][ C0] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 82.842089][ C0] ? unix_dgram_peer_wake_me+0x430/0x430 [ 82.847721][ C0] ____sys_sendmsg+0x5a2/0x8c0 [ 82.852596][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 82.857642][ C0] ? import_iovec+0x6f/0xa0 [ 82.862142][ C0] ___sys_sendmsg+0x1f0/0x260 [ 82.866824][ C0] ? __sys_sendmsg+0x250/0x250 [ 82.871595][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 82.876887][ C0] ? __fdget+0x18b/0x210 [ 82.881145][ C0] __se_sys_sendmsg+0x190/0x250 [ 82.886275][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 82.891356][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 82.897360][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 82.902624][ C0] do_syscall_64+0x4c/0xa0 [ 82.907053][ C0] ? clear_bhb_loop+0x30/0x80 [ 82.911743][ C0] ? clear_bhb_loop+0x30/0x80 [ 82.916444][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.922370][ C0] RIP: 0033:0x7fcfbd4226c9 [ 82.926918][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.946760][ C0] RSP: 002b:00007fcfbb689038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.955740][ C0] RAX: ffffffffffffffda RBX: 00007fcfbd678fa0 RCX: 00007fcfbd4226c9 [ 82.963725][ C0] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000005 [ 82.971794][ C0] RBP: 00007fcfbd4a4f91 R08: 0000000000000000 R09: 0000000000000000 [ 82.979865][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.987955][ C0] R13: 00007fcfbd679038 R14: 00007fcfbd678fa0 R15: 00007ffc17f735e8 [ 82.995957][ C0] [ 82.999029][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.006438][ C0] CPU: 0 PID: 4418 Comm: syz.3.44 Not tainted syzkaller #0 [ 83.013645][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.023725][ C0] Call Trace: [ 83.027010][ C0] [ 83.029860][ C0] dump_stack_lvl+0x168/0x230 [ 83.035064][ C0] ? show_regs_print_info+0x20/0x20 [ 83.040385][ C0] ? load_image+0x3b0/0x3b0 [ 83.044914][ C0] panic+0x2c9/0x7f0 [ 83.048938][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 83.053471][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 83.059217][ C0] __warn+0x248/0x2b0 [ 83.063223][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 83.068787][ C0] report_bug+0x1b7/0x2e0 [ 83.073127][ C0] handle_bug+0x3a/0x70 [ 83.077284][ C0] exc_invalid_op+0x16/0x40 [ 83.081786][ C0] asm_exc_invalid_op+0x16/0x20 [ 83.086637][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 83.092796][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 83.112403][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00010046 [ 83.118482][ C0] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff88802b7a5940 [ 83.126537][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.134516][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 83.142503][ C0] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffff88802b7a70c8 [ 83.150836][ C0] R13: 1ffff92000000f1c R14: ffffc900000078c8 R15: 0000000000000000 [ 83.158833][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 83.164399][ C0] bpf_probe_read_user+0x26/0x70 [ 83.169342][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xe64 [ 83.174887][ C0] bpf_trace_run3+0x17e/0x320 [ 83.179561][ C0] ? bpf_trace_run2+0x2d0/0x2d0 [ 83.184405][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 83.190301][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 83.195327][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 83.200450][ C0] enqueue_timer+0x394/0x520 [ 83.205044][ C0] __mod_timer+0x8e1/0xd20 [ 83.209465][ C0] dsp_cmx_send+0x1ab4/0x1b30 [ 83.214284][ C0] ? detach_timer+0x33/0x2b0 [ 83.218877][ C0] ? read_lock_is_recursive+0x10/0x10 [ 83.224344][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 83.229456][ C0] call_timer_fn+0x16c/0x530 [ 83.234071][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 83.239198][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 83.245186][ C0] ? __run_timers+0x7c0/0x7c0 [ 83.249877][ C0] ? rcu_is_watching+0x11/0xa0 [ 83.254664][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 83.259874][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 83.265074][ C0] ? dsp_cmx_receive+0x13c0/0x13c0 [ 83.270182][ C0] __run_timers+0x525/0x7c0 [ 83.274688][ C0] ? detach_timer+0x2b0/0x2b0 [ 83.279605][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 83.285727][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 83.290589][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 83.295998][ C0] run_timer_softirq+0x63/0xf0 [ 83.300955][ C0] handle_softirqs+0x328/0x820 [ 83.305729][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 83.310582][ C0] ? do_softirq+0x200/0x200 [ 83.315201][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 83.320421][ C0] __irq_exit_rcu+0x12f/0x220 [ 83.325183][ C0] ? irq_exit_rcu+0x20/0x20 [ 83.329774][ C0] irq_exit_rcu+0x5/0x20 [ 83.334019][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 83.339652][ C0] [ 83.342584][ C0] [ 83.345511][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 83.351491][ C0] RIP: 0010:preempt_schedule_irq+0xac/0x150 [ 83.357556][ C0] Code: 44 24 20 f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 70 bf 01 00 00 00 e8 cf b7 9f f7 e8 1a 31 cc f7 fb bf 01 00 00 00 ef b5 ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 83.377156][ C0] RSP: 0018:ffffc90002f6f6c0 EFLAGS: 00000282 [ 83.383222][ C0] RAX: a5209b92eac2dd00 RBX: 0000000000000000 RCX: a5209b92eac2dd00 [ 83.391394][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1c60 RDI: 0000000000000001 [ 83.399375][ C0] RBP: ffffc90002f6f770 R08: ffffffff8eed3008 R09: ffffffff8eed3018 [ 83.407339][ C0] R10: ffffffff8eed3010 R11: ffffffff8eed3003 R12: 0000000000000000 [ 83.415318][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005eded8 [ 83.423396][ C0] ? __cond_resched+0xb0/0xb0 [ 83.428089][ C0] ? rcu_is_watching+0x11/0xa0 [ 83.433038][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 83.438867][ C0] irqentry_exit+0x63/0x70 [ 83.443280][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 83.449265][ C0] RIP: 0010:kmemdup+0x1/0x50 [ 83.453865][ C0] Code: 41 5e 41 5f 5d c3 89 da 80 e2 07 38 ca 7c dd 48 89 df e8 72 4d 16 00 4c 89 f0 eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 <41> 57 41 56 53 89 d5 48 89 f3 49 89 fe e8 0d e5 d1 ff 48 8b 54 24 [ 83.473476][ C0] RSP: 0018:ffffc90002f6f838 EFLAGS: 00000246 [ 83.479540][ C0] RAX: 0000000000000046 RBX: ffffc90002f6f9d8 RCX: 0000000000080000 [ 83.487507][ C0] RDX: 0000000000400cc0 RSI: 0000000000000240 RDI: ffff88801ba7f000 [ 83.495477][ C0] RBP: ffffc90002f6fa70 R08: dffffc0000000000 R09: ffffed100fefad50 [ 83.503444][ C0] R10: ffffed100fefad50 R11: 1ffff1100fefad4f R12: dffffc0000000000 [ 83.511411][ C0] R13: 1ffff1100374fe00 R14: ffff88801ba7f000 R15: 0000000000000100 [ 83.519388][ C0] scm_fp_dup+0x54/0x270 [ 83.523633][ C0] unix_attach_fds+0x135/0x2c0 [ 83.528417][ C0] unix_dgram_sendmsg+0x777/0x1890 [ 83.533538][ C0] ? aa_sk_perm+0x7b4/0x8f0 [ 83.538047][ C0] ? unix_dgram_poll+0x660/0x660 [ 83.542984][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 83.549486][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 83.554451][ C0] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 83.559998][ C0] ? unix_dgram_peer_wake_me+0x430/0x430 [ 83.565628][ C0] ____sys_sendmsg+0x5a2/0x8c0 [ 83.570393][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 83.575427][ C0] ? import_iovec+0x6f/0xa0 [ 83.579931][ C0] ___sys_sendmsg+0x1f0/0x260 [ 83.584612][ C0] ? __sys_sendmsg+0x250/0x250 [ 83.589397][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 83.594710][ C0] ? __fdget+0x18b/0x210 [ 83.598954][ C0] __se_sys_sendmsg+0x190/0x250 [ 83.603802][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 83.608750][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 83.614734][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 83.620191][ C0] do_syscall_64+0x4c/0xa0 [ 83.624603][ C0] ? clear_bhb_loop+0x30/0x80 [ 83.629274][ C0] ? clear_bhb_loop+0x30/0x80 [ 83.633952][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.639844][ C0] RIP: 0033:0x7fcfbd4226c9 [ 83.644349][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.664581][ C0] RSP: 002b:00007fcfbb689038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.673013][ C0] RAX: ffffffffffffffda RBX: 00007fcfbd678fa0 RCX: 00007fcfbd4226c9 [ 83.680978][ C0] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000005 [ 83.688943][ C0] RBP: 00007fcfbd4a4f91 R08: 0000000000000000 R09: 0000000000000000 [ 83.696912][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.704878][ C0] R13: 00007fcfbd679038 R14: 00007fcfbd678fa0 R15: 00007ffc17f735e8 [ 83.712853][ C0] [ 84.814030][ C0] Shutting down cpus with NMI [ 84.819075][ C0] Kernel Offset: disabled [ 84.823428][ C0] Rebooting in 86400 seconds..