last executing test programs: 4m23.351833267s ago: executing program 2 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 4m21.116054982s ago: executing program 2 (id=251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xd4}}, &(0x7f0000000480)='GPL\x00'}, 0x94) 4m21.020144593s ago: executing program 2 (id=254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffee9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x8e) 4m17.304171541s ago: executing program 2 (id=264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1fe"], 0xffdd) 4m16.904352178s ago: executing program 2 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m16.815053479s ago: executing program 2 (id=269): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x5}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x1e, 0xa, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x2}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) gettid() close(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00001446a9180000000000040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) sendmsg$unix(r0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"/11, @ANYRES32, @ANYBLOB="00000000d3ec66ecc053c543da2e2e"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0xb, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m1.521639107s ago: executing program 32 (id=269): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x5}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x1e, 0xa, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x2}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) gettid() close(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00001446a9180000000000040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) sendmsg$unix(r0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"/11, @ANYRES32, @ANYBLOB="00000000d3ec66ecc053c543da2e2e"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0xb, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.896104208s ago: executing program 4 (id=2650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x8, 0x2, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) 3.75693568s ago: executing program 4 (id=2653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 3.602728583s ago: executing program 4 (id=2654): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0xc00}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 3.068035172s ago: executing program 3 (id=2659): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 2.987283193s ago: executing program 0 (id=2660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r0}, 0x10) 2.922930503s ago: executing program 0 (id=2661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x8, 0x2, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) 2.873138214s ago: executing program 3 (id=2662): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x2020, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007ce36c469259f0ead2a37cf74bc50c0317034446b40509f3205b91c55ad21ded5df9337875772a3dc96aaedc7680e359332338a517847eb56580a1092b347d5ac3012262864205fca6c5307c1f5d62bd835300b7ebbee6e5a8c61ef128156782229bdf689e85acbd9ba39f7e9ef82dd376e5e0bd55f775e9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000340)="093ca70d1afdec598b1fda19f8f5ef7352ab3164e3549f4d8a00541b4f3c8d90bf2b08df2067afd9db097111302d0ee9e0ab22a5ef26869b13dfc7f92ebd39b42d7b5a8b7bb322c7ff34f9d1afee23e0678bbbe57b57496dcb61ac751bd2c765ec4d153c0a683bcb28206f50ad46cbed4255043369a721396375bc5f1a7c8c1b84ce3f6d3d0a7e031c799f205f07624d48e9b6050cf63a5435807aa297c775faeef6e7a2b1fd718c2f63a6e12232f539c8028504fb3cc0fe8b3aee824c", 0x0, 0x4}, 0x20) 2.746062346s ago: executing program 0 (id=2663): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pK \x00'}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000280)=0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x2000000}, 0x80, 0x0}, 0x0) 2.54663209s ago: executing program 0 (id=2665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.397363242s ago: executing program 1 (id=2666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r1}, 0x10) 2.268187194s ago: executing program 1 (id=2667): bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e00000004000000040000000200020000", @ANYBLOB="00000000ebffffffffffdff9eeb1"], 0x50) 2.190888795s ago: executing program 1 (id=2668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 896.983075ms ago: executing program 3 (id=2669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) close(r3) 838.122386ms ago: executing program 4 (id=2670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r0}, 0x10) 749.255518ms ago: executing program 3 (id=2671): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x8, 0x2, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 748.512148ms ago: executing program 4 (id=2672): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 668.097239ms ago: executing program 1 (id=2673): socket$kcm(0x2a, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x6, 0x4, 0x3, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 667.124969ms ago: executing program 0 (id=2674): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x90, 0x9, 0x3e, 0x0, 0x8000000000000001, 0x10000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x10000, 0x4, 0xfffffffd, 0x9, 0x88, 0xc76, 0x15, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)=0x12800) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0x8, 0x7, 0x5f, 0x5, 0x0, 0x4, 0x4a401, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xcf, 0x1, @perf_config_ext={0x9, 0x7}, 0x1, 0xfffffffffffffffc, 0xd7, 0x6, 0x6, 0xffff, 0x8, 0x0, 0x3b, 0x0, 0x2}) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x8) sendmsg$kcm(r0, 0x0, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 545.867401ms ago: executing program 3 (id=2675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1fff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa5", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) 444.860122ms ago: executing program 4 (id=2676): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x49208000, 0x0, 0x0, 0x0, 0x0, 0x0) 362.250014ms ago: executing program 1 (id=2677): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x2020, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007ce36c469259f0ead2a37cf74bc50c0317034446b40509f3205b91c55ad21ded5df9337875772a3dc96aaedc7680e359332338a517847eb56580a1092b347d5ac3012262864205fca6c5307c1f5d62bd835300b7ebbee6e5a8c61ef128156782229bdf689e85acbd9ba39f7e9ef82dd376e5e0bd55f775e9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000340)="093ca70d1afdec598b1fda19f8f5ef7352ab3164e3549f4d8a00541b4f3c8d90bf2b08df2067afd9db097111302d0ee9e0ab22a5ef26869b13dfc7f92ebd39b42d7b5a8b7bb322c7ff34f9d1afee23e0678bbbe57b57496dcb61ac751bd2c765ec4d153c0a683bcb28206f50ad46cbed4255043369a721396375bc5f1a7c8c1b84ce3f6d3d0a7e031c799f205f07624d48e9b6050cf63a5435807aa297c775faeef6e7a2b1fd718c2f63a6e12232f539c8028504fb3cc0fe8b3aee824c", 0x0, 0x4}, 0x20) 325.471934ms ago: executing program 0 (id=2678): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0xc00}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 152.918237ms ago: executing program 3 (id=2679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) close(0x3) 0s ago: executing program 1 (id=2680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r0, 0x0, 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. [ 340.689916][ T5813] cgroup: Unknown subsys name 'net' [ 340.884012][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 342.612794][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 344.250486][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.259759][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.261089][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.268482][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.276467][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.282723][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.296405][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.297435][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.304598][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.319659][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.328515][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.335702][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.342864][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.350956][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.358738][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.366992][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.367001][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.375223][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.384023][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.388214][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.407189][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.416982][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.434268][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.441869][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.896863][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 345.070312][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.078530][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.086565][ T5824] bridge_slave_0: entered allmulticast mode [ 345.094365][ T5824] bridge_slave_0: entered promiscuous mode [ 345.124330][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 345.138015][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.145478][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.152675][ T5824] bridge_slave_1: entered allmulticast mode [ 345.160792][ T5824] bridge_slave_1: entered promiscuous mode [ 345.232258][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.254312][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 345.270653][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.363761][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 345.380970][ T5824] team0: Port device team_slave_0 added [ 345.390169][ T5824] team0: Port device team_slave_1 added [ 345.459217][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.466552][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.473863][ T5834] bridge_slave_0: entered allmulticast mode [ 345.481991][ T5834] bridge_slave_0: entered promiscuous mode [ 345.532079][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.539543][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.548372][ T5834] bridge_slave_1: entered allmulticast mode [ 345.555973][ T5834] bridge_slave_1: entered promiscuous mode [ 345.564162][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.571458][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.597836][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.611896][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.619080][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.645549][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.732253][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.739934][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.747985][ T5823] bridge_slave_0: entered allmulticast mode [ 345.755139][ T5823] bridge_slave_0: entered promiscuous mode [ 345.762998][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.770824][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.778527][ T5823] bridge_slave_1: entered allmulticast mode [ 345.785804][ T5823] bridge_slave_1: entered promiscuous mode [ 345.810255][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.822694][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.911483][ T5824] hsr_slave_0: entered promiscuous mode [ 345.918279][ T5824] hsr_slave_1: entered promiscuous mode [ 345.930200][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.939819][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.947869][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.955188][ T5826] bridge_slave_0: entered allmulticast mode [ 345.962644][ T5826] bridge_slave_0: entered promiscuous mode [ 345.986126][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.008213][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.015515][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.022708][ T5826] bridge_slave_1: entered allmulticast mode [ 346.030579][ T5826] bridge_slave_1: entered promiscuous mode [ 346.065016][ T5834] team0: Port device team_slave_0 added [ 346.108149][ T5834] team0: Port device team_slave_1 added [ 346.116893][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.148553][ T5823] team0: Port device team_slave_0 added [ 346.170931][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.200695][ T5823] team0: Port device team_slave_1 added [ 346.252083][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.259358][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.285757][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.299106][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.307302][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.334421][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.350316][ T5826] team0: Port device team_slave_0 added [ 346.362885][ T5826] team0: Port device team_slave_1 added [ 346.434275][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.441463][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.468315][ T5828] Bluetooth: hci3: command tx timeout [ 346.472743][ T5840] Bluetooth: hci0: command tx timeout [ 346.474128][ T5828] Bluetooth: hci1: command tx timeout [ 346.487080][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.517143][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.524141][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.550831][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.561731][ T5828] Bluetooth: hci2: command tx timeout [ 346.568573][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.575938][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.602029][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.614553][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.621629][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.647707][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.662803][ T5834] hsr_slave_0: entered promiscuous mode [ 346.669484][ T5834] hsr_slave_1: entered promiscuous mode [ 346.676309][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.684209][ T5834] Cannot create hsr debugfs directory [ 346.857326][ T5823] hsr_slave_0: entered promiscuous mode [ 346.864017][ T5823] hsr_slave_1: entered promiscuous mode [ 346.870889][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.878661][ T5823] Cannot create hsr debugfs directory [ 346.889752][ T5826] hsr_slave_0: entered promiscuous mode [ 346.896438][ T5826] hsr_slave_1: entered promiscuous mode [ 346.902627][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.911318][ T5826] Cannot create hsr debugfs directory [ 347.169096][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.182239][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.193525][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.235651][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.334281][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.352282][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.368598][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.382508][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.479653][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.490999][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.516013][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 347.527174][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 347.623872][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 347.637018][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.657424][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 347.670448][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.791474][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.807396][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.870850][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.891099][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.919364][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.926810][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.940844][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.948045][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.973392][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.980602][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.991382][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.998758][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.058616][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.122004][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.158013][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.207690][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.214940][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.251203][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.258451][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.280034][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.344106][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.351471][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.388256][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.395504][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.545140][ T5828] Bluetooth: hci0: command tx timeout [ 348.545155][ T5831] Bluetooth: hci1: command tx timeout [ 348.545191][ T5831] Bluetooth: hci3: command tx timeout [ 348.582385][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.625499][ T5831] Bluetooth: hci2: command tx timeout [ 348.759596][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.853431][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.943238][ T5834] veth0_vlan: entered promiscuous mode [ 348.989199][ T5834] veth1_vlan: entered promiscuous mode [ 349.027788][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.092444][ T5824] veth0_vlan: entered promiscuous mode [ 349.114671][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.140187][ T5834] veth0_macvtap: entered promiscuous mode [ 349.151535][ T5834] veth1_macvtap: entered promiscuous mode [ 349.164708][ T5824] veth1_vlan: entered promiscuous mode [ 349.209996][ T5826] veth0_vlan: entered promiscuous mode [ 349.241140][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.264354][ T5826] veth1_vlan: entered promiscuous mode [ 349.281435][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.299766][ T5824] veth0_macvtap: entered promiscuous mode [ 349.310868][ T5824] veth1_macvtap: entered promiscuous mode [ 349.334645][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.345962][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.354723][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.365016][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.433110][ T5826] veth0_macvtap: entered promiscuous mode [ 349.458822][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.470451][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.484070][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.493706][ T5823] veth0_vlan: entered promiscuous mode [ 349.503680][ T5826] veth1_macvtap: entered promiscuous mode [ 349.532642][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.545263][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.557780][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.628068][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.641105][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.650173][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.659197][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.672674][ T5823] veth1_vlan: entered promiscuous mode [ 349.687371][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.698563][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.709706][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.720892][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.732791][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.798135][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.820607][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.824466][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.845350][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.856197][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.867578][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.880136][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.921117][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.930020][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.939887][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.948731][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.975435][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.983597][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.000364][ T5823] veth0_macvtap: entered promiscuous mode [ 350.019956][ T5823] veth1_macvtap: entered promiscuous mode [ 350.103642][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.118324][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.129471][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.140094][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.151626][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.163112][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.175764][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.287010][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.302156][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.327745][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.330519][ T5916] Zero length message leads to an empty skb [ 350.342627][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.354472][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.365131][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.378968][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.435933][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.439924][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.443820][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.476792][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.491025][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.500405][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.625889][ T5831] Bluetooth: hci0: command tx timeout [ 350.635318][ T5840] Bluetooth: hci3: command tx timeout [ 350.635551][ T5828] Bluetooth: hci1: command tx timeout [ 350.662926][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.665872][ T5866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.679280][ T5866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.688538][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.706013][ T5828] Bluetooth: hci2: command tx timeout [ 350.848790][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.861742][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.957115][ T5904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.976414][ T5904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.083008][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.114083][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.175647][ C0] hrtimer: interrupt took 76191 ns [ 351.250930][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.267591][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.344478][ T5925] bridge0: entered allmulticast mode [ 351.794109][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.803663][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.899533][ T5928] bridge0: entered allmulticast mode [ 352.200840][ T5931] bridge_slave_1: left allmulticast mode [ 352.247486][ T5931] bridge_slave_1: left promiscuous mode [ 352.333950][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.399827][ T5931] bridge_slave_0: left allmulticast mode [ 352.410240][ T5931] bridge_slave_0: left promiscuous mode [ 352.417171][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.513577][ T5995] warning: `syz.3.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 352.705480][ T5828] Bluetooth: hci1: command tx timeout [ 352.706517][ T5840] Bluetooth: hci3: command tx timeout [ 352.717152][ T5831] Bluetooth: hci0: command tx timeout [ 352.795015][ T5831] Bluetooth: hci2: command tx timeout [ 352.847129][ T5932] bridge_slave_1: left allmulticast mode [ 352.853110][ T5932] bridge_slave_1: left promiscuous mode [ 352.862041][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.875742][ T5932] bridge_slave_0: left allmulticast mode [ 352.885763][ T5932] bridge_slave_0: left promiscuous mode [ 352.895871][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.975080][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 353.081954][ T6008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.219192][ T6008] syz.0.11 (6008) used greatest stack depth: 19568 bytes left [ 353.526892][ T6021] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.16'. [ 353.701115][ T6024] netlink: 188 bytes leftover after parsing attributes in process `syz.0.17'. [ 355.224926][ T6078] netlink: 168 bytes leftover after parsing attributes in process `syz.3.30'. [ 359.910680][ T6258] : renamed from bond_slave_0 (while UP) [ 360.231125][ T6267] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 360.738393][ T6284] syz.3.132[6284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.738546][ T6284] syz.3.132[6284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.778510][ T6288] tap0: tun_chr_ioctl cmd 2147767520 [ 360.846100][ T6284] pim6reg1: entered promiscuous mode [ 360.851729][ T6284] pim6reg1: entered allmulticast mode [ 360.899050][ T6288] tap0: tun_chr_ioctl cmd 1074025678 [ 360.907583][ T6288] tap0: group set to 0 [ 361.003959][ T6294] tap0: tun_chr_ioctl cmd 1074025681 [ 361.009875][ T6294] tap0: tun_chr_ioctl cmd 2147767520 [ 362.655227][ T6358] pimreg: tun_chr_ioctl cmd 1074025680 [ 362.671617][ T6358] pimreg: tun_chr_ioctl cmd 2147767506 [ 362.751548][ T6362] tap0: tun_chr_ioctl cmd 2147767520 [ 362.773045][ T6362] tap0: tun_chr_ioctl cmd 1074025673 [ 367.513893][ T6519] syzkaller0: entered promiscuous mode [ 367.521460][ T6519] syzkaller0: entered allmulticast mode [ 369.485657][ T6540] syzkaller0: entered promiscuous mode [ 378.098834][ T6661] ..: renamed from ipvlan0 [ 379.234988][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.242002][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.033184][ T6808] wg2: entered promiscuous mode [ 386.045232][ T6808] wg2: entered allmulticast mode [ 391.032506][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 391.067119][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 391.155316][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 391.169249][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 391.181090][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 391.189141][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 392.633984][ T6877] chnl_net:caif_netlink_parms(): no params data found [ 392.969881][ T5980] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.265941][ T5840] Bluetooth: hci4: command tx timeout [ 393.483151][ T5980] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.547328][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.563764][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.579225][ T6877] bridge_slave_0: entered allmulticast mode [ 393.592065][ T6877] bridge_slave_0: entered promiscuous mode [ 393.669223][ T5980] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.770432][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.790427][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.805043][ T6877] bridge_slave_1: entered allmulticast mode [ 393.818769][ T6877] bridge_slave_1: entered promiscuous mode [ 394.014413][ T5980] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.144607][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.179161][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.361576][ T6877] team0: Port device team_slave_0 added [ 394.378165][ T6877] team0: Port device team_slave_1 added [ 394.531855][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.543416][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.572117][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.674336][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.694926][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.764938][ T6877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.344839][ T5840] Bluetooth: hci4: command tx timeout [ 395.403584][ T6877] hsr_slave_0: entered promiscuous mode [ 395.478457][ T6877] hsr_slave_1: entered promiscuous mode [ 395.532148][ T6877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.556971][ T6877] Cannot create hsr debugfs directory [ 397.401104][ T7067] syzkaller0: create flow: hash 3022702876 index 1 [ 397.435164][ T5840] Bluetooth: hci4: command tx timeout [ 397.608922][ T5914] syzkaller0: tun_net_xmit 76 [ 397.614360][ T5914] syzkaller0: tun_net_xmit 48 [ 397.635879][ T5867] syzkaller0: tun_net_xmit 76 [ 397.836816][ T5914] syzkaller0: tun_net_xmit 76 [ 397.872557][ T5914] syzkaller0: tun_net_xmit 76 [ 397.965676][ T7060] syzkaller0: delete flow: hash 3022702876 index 1 [ 398.672634][ T7111] syz.0.468[7111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.672893][ T7111] syz.0.468[7111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.510963][ T5840] Bluetooth: hci4: command tx timeout [ 400.522180][ T6877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 400.810038][ T6877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 400.858664][ T6877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.965273][ T6877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 401.076237][ T5980] hsr_slave_0: left promiscuous mode [ 401.116851][ T5980] hsr_slave_1: left promiscuous mode [ 401.129346][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.138342][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.149416][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.172899][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.216728][ T5980] bridge_slave_1: left allmulticast mode [ 401.224448][ T5980] bridge_slave_1: left promiscuous mode [ 401.242105][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.275633][ T5980] bridge_slave_0: left allmulticast mode [ 401.286035][ T5980] bridge_slave_0: left promiscuous mode [ 401.298726][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.357281][ T5980] veth1_macvtap: left promiscuous mode [ 401.367983][ T5980] veth0_macvtap: left promiscuous mode [ 401.381826][ T5980] veth1_vlan: left promiscuous mode [ 401.395578][ T5980] veth0_vlan: left promiscuous mode [ 402.482550][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 402.527593][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 402.569498][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.621790][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.080590][ T5980] bond0 (unregistering): Released all slaves [ 403.170449][ T7164] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 403.176647][ T7164] syzkaller1: owner set to 778 [ 403.552643][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.695839][ T6877] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.983159][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.991298][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.083955][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.091273][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.035203][ T6877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.204242][ T6877] veth0_vlan: entered promiscuous mode [ 406.260280][ T6877] veth1_vlan: entered promiscuous mode [ 406.377724][ T6877] veth0_macvtap: entered promiscuous mode [ 406.405809][ T6877] veth1_macvtap: entered promiscuous mode [ 406.506757][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.546708][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.584960][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.605535][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.625105][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.652885][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.680227][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.771403][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.822402][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.849070][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.884814][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.894715][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.958760][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.007141][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.036863][ T6877] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.076787][ T6877] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.114001][ T6877] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.134815][ T6877] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.464976][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.472935][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.607945][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.621238][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.502794][ T7633] pimreg: tun_chr_ioctl cmd 1074812118 [ 417.796689][ T7642] tap0: tun_chr_ioctl cmd 2147767506 [ 417.833561][ T7645] tap0: tun_chr_ioctl cmd 1074812118 [ 419.365329][ T7707] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 419.840128][ T7724] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.689'. [ 421.482152][ T7758] bridge_slave_1: left allmulticast mode [ 421.514807][ T7758] bridge_slave_1: left promiscuous mode [ 421.520691][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.636422][ T7758] bridge_slave_0: left allmulticast mode [ 421.642269][ T7758] bridge_slave_0: left promiscuous mode [ 421.673521][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.616484][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 423.682496][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 423.727535][ T7795] netlink: 33 bytes leftover after parsing attributes in process `syz.1.715'. [ 423.769434][ T7795] bridge_slave_0: entered allmulticast mode [ 423.786279][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 423.801856][ T7795] netlink: 33 bytes leftover after parsing attributes in process `syz.1.715'. [ 424.078792][ T7805] netlink: 164 bytes leftover after parsing attributes in process `syz.4.719'. [ 424.495125][ T7814] netlink: 'syz.1.723': attribute type 10 has an invalid length. [ 424.731824][ T7814] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 426.069067][ T7846] netlink: 'syz.1.732': attribute type 8 has an invalid length. [ 428.586290][ T7862] netlink: 'syz.4.735': attribute type 21 has an invalid length. [ 428.626265][ T7862] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.647663][ T7862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.656001][ T7862] IPv6: NLM_F_CREATE should be set when creating new route [ 428.664773][ T7862] IPv6: NLM_F_CREATE should be set when creating new route [ 428.672920][ T7862] IPv6: NLM_F_CREATE should be set when creating new route [ 429.370291][ T7891] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.744'. [ 429.743056][ T7899] netlink: 'syz.1.746': attribute type 21 has an invalid length. [ 429.798967][ T7899] netlink: 132 bytes leftover after parsing attributes in process `syz.1.746'. [ 430.360040][ T7919] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.753'. [ 430.482610][ T7917] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.751'. [ 433.698783][ T7974] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.768'. [ 435.614142][ T8015] netlink: 36 bytes leftover after parsing attributes in process `syz.3.785'. [ 435.720833][ T8015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.463876][ T8032] pim6reg1: entered promiscuous mode [ 436.484617][ T8032] pim6reg1: entered allmulticast mode [ 437.454390][ T8051] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.800'. [ 437.535881][ T8051] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 439.523764][ T8077] delete_channel: no stack [ 440.228545][ T8098] syzkaller0: entered promiscuous mode [ 440.234677][ T8098] syzkaller0: entered allmulticast mode [ 440.755384][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.761778][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.006965][ T8113] netlink: 'syz.4.825': attribute type 39 has an invalid length. [ 446.160821][ T8141] netlink: 'syz.4.836': attribute type 10 has an invalid length. [ 446.185923][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.872456][ T8177] netlink: 'syz.3.850': attribute type 4 has an invalid length. [ 447.127651][ T8185] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 447.267601][ T8185] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 447.585181][ T8187] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 448.171342][ T8198] syzkaller0: entered promiscuous mode [ 448.179233][ T8198] syzkaller0: entered allmulticast mode [ 448.224209][ T8206] team0: Port device team_slave_0 removed [ 448.243238][ T8206] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 449.334392][ T8223] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.865'. [ 449.348171][ T8223] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 468.308585][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 468.309024][ T5100] Bluetooth: hci3: command 0x0406 tx timeout [ 468.314788][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 487.846462][ T9370] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1432'. [ 487.949304][ T9370] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 489.142837][ T9408] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1448'. [ 489.186802][ T9408] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 491.414577][ T9496] netlink: 'syz.4.1490': attribute type 4 has an invalid length. [ 492.303774][ T9496] netlink: 'syz.4.1490': attribute type 10 has an invalid length. [ 493.152915][ T9502] syzkaller0: entered promiscuous mode [ 493.163005][ T9502] syzkaller0: entered allmulticast mode [ 493.180418][ T9496] netlink: 'syz.4.1490': attribute type 10 has an invalid length. [ 496.990703][ T9622] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1547'. [ 497.163757][ T9624] netlink: 'syz.1.1546': attribute type 4 has an invalid length. [ 497.807929][ T9624] netlink: 'syz.1.1546': attribute type 10 has an invalid length. [ 497.833645][ T9624] netlink: 'syz.1.1546': attribute type 10 has an invalid length. [ 497.864139][ T9627] netlink: 'syz.1.1546': attribute type 10 has an invalid length. [ 499.900640][ T9686] netlink: 'syz.0.1576': attribute type 4 has an invalid length. [ 499.920359][ T9686] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1576'. [ 499.981156][ T9686] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 501.866852][ T9739] netlink: 'syz.1.1601': attribute type 4 has an invalid length. [ 501.894518][ T9739] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1601'. [ 501.969862][ T9739] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 502.069760][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.079423][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.010105][ T9779] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1622'. [ 503.045413][ T9779] openvswitch: netlink: Flow key attribute not present in set flow. [ 503.828024][ T9797] syzkaller0: entered promiscuous mode [ 503.849528][ T9797] syzkaller0: entered allmulticast mode [ 504.761839][ T9826] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1645'. [ 504.774888][ T9826] openvswitch: netlink: Flow key attribute not present in set flow. [ 506.931292][ T9840] netlink: 'syz.3.1652': attribute type 39 has an invalid length. [ 507.747369][ T9863] lo: entered allmulticast mode [ 507.846120][ T9863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.925642][ T9867] netlink: 'syz.4.1665': attribute type 39 has an invalid length. [ 508.076231][ T9863] syz.3.1663 (9863) used greatest stack depth: 19432 bytes left [ 509.705569][ T9900] netlink: 'syz.1.1680': attribute type 39 has an invalid length. [ 510.587447][ T9926] lo: entered allmulticast mode [ 510.647765][ T9926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.160084][ T9936] netlink: 'syz.0.1696': attribute type 39 has an invalid length. [ 511.584230][ T9948] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1703'. [ 511.737319][ T9950] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1702'. [ 512.159018][ T9948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.206612][ T9948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.260961][ T9948] bond0 (unregistering): Released all slaves [ 512.392008][ T9955] lo: entered allmulticast mode [ 512.445980][ T9950] Y4`Ҙ: renamed from lo [ 513.340053][ T9993] netlink: 'syz.3.1724': attribute type 25 has an invalid length. [ 513.394987][ T9993] netlink: 'syz.3.1724': attribute type 7 has an invalid length. [ 513.418234][ T9986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 513.427604][ T9986] IPv6: NLM_F_CREATE should be set when creating new route [ 513.437059][ T9986] IPv6: NLM_F_CREATE should be set when creating new route [ 513.444345][ T9986] IPv6: NLM_F_CREATE should be set when creating new route [ 513.913506][T10010] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 513.920551][T10010] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 514.395027][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 514.433995][T10026] netlink: 'syz.4.1737': attribute type 10 has an invalid length. [ 514.481939][T10026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.559338][T10026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.660116][T10034] netlink: 'syz.3.1741': attribute type 10 has an invalid length. [ 514.685627][T10034] veth0_macvtap: left promiscuous mode [ 514.731381][T10034] veth0_macvtap: entered promiscuous mode [ 514.758316][T10034] team0: Device macvtap0 failed to register rx_handler [ 514.781717][T10034] veth0_macvtap: left promiscuous mode [ 515.030104][T10045] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1745'. [ 515.394216][T10056] netlink: 'syz.0.1752': attribute type 39 has an invalid length. [ 515.616525][T10065] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1757'. [ 515.871954][T10077] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1763'. [ 516.152338][T10085] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1766'. [ 516.186878][T10085] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 516.345600][T10092] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1769'. [ 516.615017][T10100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.637426][T10100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.658921][T10100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.669873][T10100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.316759][T10120] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1781'. [ 517.336479][T10120] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 518.301283][T10151] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1798'. [ 518.323199][T10151] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 519.987410][T10204] wg2: entered allmulticast mode [ 520.650223][T10206] syzkaller0: entered promiscuous mode [ 520.658713][T10206] syzkaller0: entered allmulticast mode [ 523.327615][T10248] wg2: entered allmulticast mode [ 523.664115][T10258] netlink: 'syz.3.1844': attribute type 4 has an invalid length. [ 524.083670][T10270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.101882][T10270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.130831][T10270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.156376][T10270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.269546][T10271] netlink: 'syz.4.1849': attribute type 2 has an invalid length. [ 524.306180][T10275] netlink: 'syz.1.1850': attribute type 10 has an invalid length. [ 524.351542][T10275] team0: Device ipvlan1 failed to register rx_handler [ 524.499492][T10284] netlink: 'syz.4.1854': attribute type 4 has an invalid length. [ 525.092190][T10302] netlink: 'syz.3.1863': attribute type 2 has an invalid length. [ 525.378991][T10312] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 528.339317][T10362] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 528.359751][T10362] team0: Device ipvlan1 failed to register rx_handler [ 528.393844][T10367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.412733][T10367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.516831][T10368] netlink: 'syz.1.1890': attribute type 10 has an invalid length. [ 528.541022][T10368] team0: Device hsr_slave_0 failed to register rx_handler [ 528.742782][T10373] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1893'. [ 529.298882][T10390] netlink: 'syz.0.1898': attribute type 4 has an invalid length. [ 529.314973][T10390] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1898'. [ 529.571523][T10400] netlink: 'syz.4.1903': attribute type 10 has an invalid length. [ 529.667775][T10400] team0: Device hsr_slave_0 failed to register rx_handler [ 529.790122][T10407] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1907'. [ 530.997856][T10438] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1924'. [ 531.050422][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.059794][T10437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.108112][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.128505][T10437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.823781][T10490] syz.3.1945 uses obsolete (PF_INET,SOCK_PACKET) [ 533.036390][T10492] syzkaller0: entered promiscuous mode [ 533.042013][T10492] syzkaller0: entered allmulticast mode [ 538.991709][T10575] netlink: 'syz.0.1982': attribute type 21 has an invalid length. [ 538.999867][T10575] IPv6: NLM_F_CREATE should be specified when creating new route [ 539.008034][T10575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.015361][T10575] IPv6: NLM_F_CREATE should be set when creating new route [ 539.022715][T10575] IPv6: NLM_F_CREATE should be set when creating new route [ 539.030053][T10575] IPv6: NLM_F_CREATE should be set when creating new route [ 539.331104][T10601] netlink: 'syz.1.1994': attribute type 2 has an invalid length. [ 539.358316][T10601] netlink: 'syz.1.1994': attribute type 8 has an invalid length. [ 539.366645][T10601] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1994'. [ 539.677373][T10611] netlink: 'syz.1.1999': attribute type 16 has an invalid length. [ 539.726374][T10611] netlink: 'syz.1.1999': attribute type 3 has an invalid length. [ 539.745435][T10611] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1999'. [ 541.604007][T10653] netlink: 'syz.1.2018': attribute type 39 has an invalid length. [ 541.626482][T10653] veth0_macvtap: left promiscuous mode [ 543.670291][T10710] netlink: 'syz.3.2043': attribute type 19 has an invalid length. [ 543.689053][T10710] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2043'. [ 543.914915][T10717] netlink: 'syz.3.2046': attribute type 4 has an invalid length. [ 544.241861][T10720] netlink: 'syz.3.2046': attribute type 10 has an invalid length. [ 544.250595][T10720] netlink: 'syz.3.2046': attribute type 10 has an invalid length. [ 544.277952][T10717] netlink: 'syz.3.2046': attribute type 10 has an invalid length. [ 544.363829][T10728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 544.371181][T10728] IPv6: NLM_F_CREATE should be set when creating new route [ 544.378578][T10728] IPv6: NLM_F_CREATE should be set when creating new route [ 544.385883][T10728] IPv6: NLM_F_CREATE should be set when creating new route [ 544.911341][T10741] syzkaller0: entered promiscuous mode [ 544.926161][T10741] syzkaller0: entered allmulticast mode [ 549.666066][T10817] netlink: 'syz.4.2087': attribute type 21 has an invalid length. [ 549.674177][T10817] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2087'. [ 551.204562][T10892] bond_slave_0: entered promiscuous mode [ 551.212285][T10892] bond_slave_0: entered allmulticast mode [ 551.222198][T10890] netlink: 'syz.3.2116': attribute type 10 has an invalid length. [ 551.240378][T10890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2116'. [ 551.273517][T10890] ipvlan1: entered promiscuous mode [ 551.294874][T10890] ipvlan1: entered allmulticast mode [ 551.304437][T10890] veth0_vlan: entered allmulticast mode [ 551.315582][T10890] bridge0: port 3(ipvlan1) entered blocking state [ 551.322515][T10890] bridge0: port 3(ipvlan1) entered disabled state [ 551.339172][T10890] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 551.976265][T10917] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2126'. [ 551.991417][T10917] netlink: zone id is out of range [ 552.006347][T10917] netlink: zone id is out of range [ 552.011545][T10917] netlink: zone id is out of range [ 552.017859][T10917] netlink: zone id is out of range [ 552.023050][T10917] netlink: zone id is out of range [ 552.028814][T10917] netlink: zone id is out of range [ 552.034067][T10917] netlink: zone id is out of range [ 552.039804][T10917] netlink: zone id is out of range [ 552.045556][T10917] netlink: zone id is out of range [ 553.158208][T10956] netlink: 'syz.1.2140': attribute type 10 has an invalid length. [ 553.167084][T10956] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2140'. [ 554.589443][T10985] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2158'. [ 557.365073][T11060] syzkaller0: entered promiscuous mode [ 557.370624][T11060] syzkaller0: entered allmulticast mode [ 559.285076][T11071] netlink: 'syz.4.2193': attribute type 10 has an invalid length. [ 559.293011][T11071] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2193'. [ 559.651135][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.659050][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.702078][T11076] bridge0: entered allmulticast mode [ 560.777531][T11098] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 560.819878][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 560.831529][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 560.848798][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 560.860101][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.872384][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 560.881717][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 560.890075][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 562.693441][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.714164][T11106] netlink: 'syz.4.2210': attribute type 39 has an invalid length. [ 562.838234][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.944957][ T5828] Bluetooth: hci1: command tx timeout [ 562.977963][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.112817][T11121] netlink: 'syz.3.2216': attribute type 29 has an invalid length. [ 563.143098][T11121] netlink: 'syz.3.2216': attribute type 29 has an invalid length. [ 563.509585][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.516792][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.867420][T11103] chnl_net:caif_netlink_parms(): no params data found [ 564.408730][T11103] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.417465][T11103] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.427165][T11103] bridge_slave_0: entered allmulticast mode [ 564.448326][T11103] bridge_slave_0: entered promiscuous mode [ 564.472803][T11103] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.482796][T11103] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.490173][T11103] bridge_slave_1: entered allmulticast mode [ 564.497670][T11103] bridge_slave_1: entered promiscuous mode [ 564.561505][T11103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.594326][T11103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.635116][T11103] team0: Port device team_slave_0 added [ 564.646780][T11103] team0: Port device team_slave_1 added [ 564.731724][T11103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.739693][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.767597][T11103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.818296][T11103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.828004][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.855762][T11103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.936364][T11103] hsr_slave_0: entered promiscuous mode [ 564.943320][T11103] hsr_slave_1: entered promiscuous mode [ 564.952406][T11103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.960168][T11103] Cannot create hsr debugfs directory [ 565.024932][ T5828] Bluetooth: hci1: command tx timeout [ 565.653648][T11173] syzkaller0: entered promiscuous mode [ 565.659805][T11173] syzkaller0: entered allmulticast mode [ 565.697678][ T48] hsr_slave_0: left promiscuous mode [ 565.704157][ T48] hsr_slave_1: left promiscuous mode [ 565.726849][ T48] veth1_macvtap: left promiscuous mode [ 565.732427][ T48] veth0_macvtap: left promiscuous mode [ 565.739174][ T48] veth1_vlan: left promiscuous mode [ 565.744538][ T48] veth0_vlan: left promiscuous mode [ 566.322204][ T48] team0 (unregistering): Port device team_slave_1 removed [ 566.363101][ T48] team0 (unregistering): Port device team_slave_0 removed [ 566.418068][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.463191][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.899633][ T48] bond0 (unregistering): Released all slaves [ 567.114816][ T5828] Bluetooth: hci1: command tx timeout [ 569.191593][ T5828] Bluetooth: hci1: command tx timeout [ 569.327952][T11103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 569.353440][T11103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 569.390422][T11103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 569.414131][T11103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 569.620518][T11103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.650432][T11103] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.664203][T11222] netlink: 'syz.3.2254': attribute type 10 has an invalid length. [ 569.754213][T11222] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 569.794522][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.801852][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.859741][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.866992][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.526613][T11103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.617559][T11103] veth0_vlan: entered promiscuous mode [ 570.644196][T11103] veth1_vlan: entered promiscuous mode [ 570.741891][T11103] veth0_macvtap: entered promiscuous mode [ 570.788527][T11103] veth1_macvtap: entered promiscuous mode [ 570.856872][T11103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.897943][T11103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.930172][T11103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.955892][T11103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.974102][T11103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.000492][T11103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.208446][ T5968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.236797][ T5968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.335174][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.349276][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.666166][T11280] net_ratelimit: 65 callbacks suppressed [ 571.666234][T11280] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 571.680958][T11280] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 572.579276][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 572.595023][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 572.604288][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 572.612863][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 572.622031][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 572.630132][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 572.723752][ T5968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.998723][ T5968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.136921][ T5968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.366181][ T5968] bond0: (slave netdevsim0): Releasing backup interface [ 573.394346][ T5968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.450147][T11332] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2305'. [ 573.481810][T11332] batadv_slave_1: entered promiscuous mode [ 573.548209][T11332] veth0_vlan: entered allmulticast mode [ 573.801536][T11304] chnl_net:caif_netlink_parms(): no params data found [ 574.417343][T11304] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.449022][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.471122][T11304] bridge_slave_0: entered allmulticast mode [ 574.500798][T11304] bridge_slave_0: entered promiscuous mode [ 574.580009][T11304] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.592916][T11304] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.603242][T11304] bridge_slave_1: entered allmulticast mode [ 574.611428][T11304] bridge_slave_1: entered promiscuous mode [ 574.705574][ T5831] Bluetooth: hci0: command tx timeout [ 574.909097][T11304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.038534][T11304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.246085][T11304] team0: Port device team_slave_0 added [ 575.266687][T11304] team0: Port device team_slave_1 added [ 575.582093][T11304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.610371][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.639752][T11304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.655067][T11304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.662280][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.691465][T11304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.016070][T11304] hsr_slave_0: entered promiscuous mode [ 576.033315][T11304] hsr_slave_1: entered promiscuous mode [ 576.046319][T11304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.064162][T11304] Cannot create hsr debugfs directory [ 576.341764][T11420] netlink: 'syz.4.2341': attribute type 9 has an invalid length. [ 576.356840][T11420] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2341'. [ 576.426128][T11417] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 576.458810][T11419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.468986][T11419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.479218][T11419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.487680][T11419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.592222][ T5968] hsr_slave_0: left promiscuous mode [ 576.599894][ T5968] hsr_slave_1: left promiscuous mode [ 576.647385][ T5968] veth1_macvtap: left promiscuous mode [ 576.785572][ T5831] Bluetooth: hci0: command tx timeout [ 576.959090][T11431] netlink: 'syz.3.2347': attribute type 1 has an invalid length. [ 576.967076][T11431] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2347'. [ 577.598194][ T5968] team0 (unregistering): Port device team_slave_1 removed [ 577.648479][ T5968] team0 (unregistering): Port device team_slave_0 removed [ 577.692164][ T5968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.745621][ T5968] bond0 (unregistering): (slave 0): Releasing backup interface [ 578.223934][ T5968] bond0 (unregistering): Released all slaves [ 578.878282][ T5831] Bluetooth: hci0: command tx timeout [ 580.954894][ T5831] Bluetooth: hci0: command tx timeout [ 581.453471][T11490] syzkaller0: entered promiscuous mode [ 581.459311][T11490] syzkaller0: entered allmulticast mode [ 583.400592][T11304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 583.427247][T11304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 583.457381][T11304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 583.490409][T11304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 583.544954][T11507] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 583.739615][T11304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.781247][T11304] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.804512][T11516] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 583.826219][T11518] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2376'. [ 583.860946][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.868261][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.549394][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.556655][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.623136][T11304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 586.085254][T11304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.222229][T11304] veth0_vlan: entered promiscuous mode [ 586.260638][T11304] veth1_vlan: entered promiscuous mode [ 586.310587][T11304] veth0_macvtap: entered promiscuous mode [ 586.338203][T11304] veth1_macvtap: entered promiscuous mode [ 586.350331][T11549] netlink: 'syz.0.2387': attribute type 4 has an invalid length. [ 587.002225][T11549] netlink: 'syz.0.2387': attribute type 10 has an invalid length. [ 587.011115][T11549] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2387'. [ 587.021170][T11549] team0: entered promiscuous mode [ 587.028506][T11549] team_slave_0: entered promiscuous mode [ 587.038039][T11549] team_slave_1: entered promiscuous mode [ 587.049690][T11549] bridge0: port 3(team0) entered blocking state [ 587.059645][T11549] bridge0: port 3(team0) entered disabled state [ 587.072793][T11549] team0: entered allmulticast mode [ 587.086998][T11549] team_slave_0: entered allmulticast mode [ 587.093306][T11549] team_slave_1: entered allmulticast mode [ 587.119423][T11549] bridge0: port 3(team0) entered blocking state [ 587.125928][T11549] bridge0: port 3(team0) entered forwarding state [ 587.226541][T11304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.268078][T11304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.292309][T11304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.301340][T11304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.310900][T11304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.319916][T11304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.511106][ T5988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.540644][ T5988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.635540][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.643433][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.700468][T11563] netlink: 'syz.4.2394': attribute type 39 has an invalid length. [ 588.818083][T11582] delete_channel: no stack [ 589.011209][T11587] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 589.377071][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 589.400921][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 589.409756][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 589.453671][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 589.477668][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 589.486686][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 590.832652][T11593] netlink: 'syz.1.2405': attribute type 39 has an invalid length. [ 590.972195][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.319019][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.585761][ T5828] Bluetooth: hci2: command tx timeout [ 591.592962][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.788490][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.139710][T11594] chnl_net:caif_netlink_parms(): no params data found [ 592.735789][T11594] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.762581][T11594] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.786286][T11594] bridge_slave_0: entered allmulticast mode [ 592.793819][T11594] bridge_slave_0: entered promiscuous mode [ 592.927547][T11594] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.957288][T11594] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.991487][T11594] bridge_slave_1: entered allmulticast mode [ 593.014455][T11594] bridge_slave_1: entered promiscuous mode [ 593.232130][T11594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.258694][T11652] netlink: 'syz.0.2427': attribute type 10 has an invalid length. [ 593.372265][T11652] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 593.383724][T11652] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 593.398468][T11652] team0: Port device wlan1 added [ 593.411992][T11651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.487872][T11594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.543291][T11652] syz.0.2427 (11652) used greatest stack depth: 18600 bytes left [ 593.675408][ T5828] Bluetooth: hci2: command tx timeout [ 593.842465][T11594] team0: Port device team_slave_0 added [ 593.867036][T11594] team0: Port device team_slave_1 added [ 594.124332][T11594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.143830][T11594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.200931][T11594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.270426][T11594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.289271][T11594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.353440][T11594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.659470][T11594] hsr_slave_0: entered promiscuous mode [ 594.671841][T11594] hsr_slave_1: entered promiscuous mode [ 594.900589][ T48] hsr_slave_0: left promiscuous mode [ 594.921533][ T48] hsr_slave_1: left promiscuous mode [ 594.928324][ T48] bridge_slave_1: left allmulticast mode [ 594.938952][ T48] bridge_slave_1: left promiscuous mode [ 594.955077][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.972323][ T48] bridge_slave_0: left allmulticast mode [ 594.980454][ T48] bridge_slave_0: left promiscuous mode [ 594.991328][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.044695][ T48] veth1_macvtap: left promiscuous mode [ 595.054393][ T48] veth1_vlan: left promiscuous mode [ 595.764712][ T5828] Bluetooth: hci2: command tx timeout [ 596.389880][ T48] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 596.512616][ T48] team0 (unregistering): Port device team_slave_1 removed [ 596.696417][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.783567][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.428844][ T48] bond0 (unregistering): Released all slaves [ 597.549316][T11684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.565933][T11684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.574431][T11684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.582582][T11684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.834826][ T5828] Bluetooth: hci2: command tx timeout [ 598.638745][T11594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 598.681818][T11594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 598.725062][T11594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 598.758601][T11594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 598.979401][T11594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.027901][T11594] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.059438][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.066826][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.109268][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.116554][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.571648][T11594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.738461][T11594] veth0_vlan: entered promiscuous mode [ 599.770807][T11594] veth1_vlan: entered promiscuous mode [ 599.863606][T11594] veth0_macvtap: entered promiscuous mode [ 599.894303][T11594] veth1_macvtap: entered promiscuous mode [ 599.945823][T11594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.979084][T11594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.011108][T11594] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.021415][T11594] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.032583][T11594] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.050338][T11594] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.226128][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.234033][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.354395][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.367239][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.670114][T11784] netlink: 'syz.3.2399': attribute type 4 has an invalid length. [ 600.817359][T11784] netlink: 'syz.3.2399': attribute type 10 has an invalid length. [ 600.847279][T11784] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2399'. [ 600.863207][T11784] team0: entered promiscuous mode [ 600.873077][T11784] team_slave_0: entered promiscuous mode [ 600.888994][T11784] team_slave_1: entered promiscuous mode [ 600.918750][T11784] bridge0: port 3(team0) entered blocking state [ 600.934015][T11784] bridge0: port 3(team0) entered disabled state [ 600.942736][T11784] team0: entered allmulticast mode [ 600.949708][T11784] team_slave_0: entered allmulticast mode [ 600.960318][T11784] team_slave_1: entered allmulticast mode [ 601.029114][T11784] bridge0: port 3(team0) entered blocking state [ 601.038524][T11784] bridge0: port 3(team0) entered forwarding state [ 601.146710][T11795] syzkaller0: entered promiscuous mode [ 601.165805][T11795] syzkaller0: entered allmulticast mode [ 603.345562][T11808] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.358146][T11822] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2496'. [ 603.367797][T11822] bond_slave_0: entered promiscuous mode [ 603.373877][T11822] bond_slave_1: entered promiscuous mode [ 604.639019][T11859] netlink: 'syz.1.2508': attribute type 29 has an invalid length. [ 604.657582][T11859] netlink: 'syz.1.2508': attribute type 29 has an invalid length. [ 604.678885][T11859] netlink: 'syz.1.2508': attribute type 29 has an invalid length. [ 604.772472][T11864] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 607.440028][T11910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.465738][T11910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.483117][T11910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.505895][T11910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.681224][T11914] netlink: 'syz.0.2530': attribute type 25 has an invalid length. [ 607.696933][T11914] netlink: 'syz.0.2530': attribute type 1 has an invalid length. [ 607.724986][T11914] bridge0: port 1(bridge_slave_0) entered learning state [ 608.097528][T11928] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 611.285424][T11944] netlink: 'syz.1.2539': attribute type 10 has an invalid length. [ 611.580273][T11954] : port 1(vlan0) entered blocking state [ 611.597305][T11954] : port 1(vlan0) entered disabled state [ 611.603326][T11954] vlan0: entered allmulticast mode [ 611.634918][T11954] veth0_vlan: entered allmulticast mode [ 611.656802][T11954] vlan0: entered promiscuous mode [ 612.061699][T11972] bridge_slave_0: entered promiscuous mode [ 612.068285][T11972] bridge_slave_0: entered allmulticast mode [ 612.238537][T11978] netlink: 'syz.3.2555': attribute type 1 has an invalid length. [ 613.217505][T12006] veth0_vlan: entered allmulticast mode [ 613.502429][T12013] pim6reg1: entered promiscuous mode [ 613.508119][T12013] pim6reg1: entered allmulticast mode [ 617.850724][T12112] syz.3.2609[12112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 617.850990][T12112] syz.3.2609[12112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 621.345903][T12142] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 621.465994][T12146] pim6reg1: entered promiscuous mode [ 621.471503][T12146] pim6reg1: entered allmulticast mode [ 624.948728][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.955535][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.995244][T12281] pim6reg1: entered promiscuous mode [ 630.008034][T12281] pim6reg1: entered allmulticast mode [ 630.712925][T12303] [ 630.715327][T12303] ============================================ [ 630.721479][T12303] WARNING: possible recursive locking detected [ 630.727641][T12303] 6.6.99-syzkaller #0 Not tainted [ 630.732664][T12303] -------------------------------------------- [ 630.738840][T12303] syz.1.2680/12303 is trying to acquire lock: [ 630.744918][T12303] ffff88802d831238 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 630.753850][T12303] [ 630.753850][T12303] but task is already holding lock: [ 630.761217][T12303] ffff88807a756238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 630.770119][T12303] [ 630.770119][T12303] other info that might help us debug this: [ 630.778191][T12303] Possible unsafe locking scenario: [ 630.778191][T12303] [ 630.785646][T12303] CPU0 [ 630.788932][T12303] ---- [ 630.792216][T12303] lock(&trie->lock); [ 630.796300][T12303] lock(&trie->lock); [ 630.800387][T12303] [ 630.800387][T12303] *** DEADLOCK *** [ 630.800387][T12303] [ 630.808567][T12303] May be due to missing lock nesting notation [ 630.808567][T12303] [ 630.816910][T12303] 3 locks held by syz.1.2680/12303: [ 630.822116][T12303] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x41d/0x720 [ 630.832074][T12303] #1: ffff88807a756238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 630.841455][T12303] #2: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 630.850785][T12303] [ 630.850785][T12303] stack backtrace: [ 630.856704][T12303] CPU: 1 PID: 12303 Comm: syz.1.2680 Not tainted 6.6.99-syzkaller #0 [ 630.864804][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.874890][T12303] Call Trace: [ 630.878182][T12303] [ 630.881140][T12303] dump_stack_lvl+0x16c/0x230 [ 630.885846][T12303] ? show_regs_print_info+0x20/0x20 [ 630.891068][T12303] ? print_deadlock_bug+0x435/0x5d0 [ 630.896286][T12303] __lock_acquire+0x5d40/0x7c80 [ 630.901170][T12303] ? mark_lock+0x94/0x320 [ 630.905522][T12303] ? verify_lock_unused+0x140/0x140 [ 630.910732][T12303] ? __lock_acquire+0x1260/0x7c80 [ 630.915781][T12303] lock_acquire+0x197/0x410 [ 630.920312][T12303] ? trie_delete_elem+0x96/0x6a0 [ 630.925274][T12303] ? verify_lock_unused+0x140/0x140 [ 630.930499][T12303] ? read_lock_is_recursive+0x20/0x20 [ 630.935910][T12303] _raw_spin_lock_irqsave+0xa8/0xf0 [ 630.941129][T12303] ? trie_delete_elem+0x96/0x6a0 [ 630.946085][T12303] ? _raw_spin_lock+0x40/0x40 [ 630.950797][T12303] trie_delete_elem+0x96/0x6a0 [ 630.955591][T12303] ? __cant_sleep+0x210/0x210 [ 630.960298][T12303] bpf_prog_e3d85a4b6a7d3e61+0x48/0x4c [ 630.965791][T12303] bpf_trace_run4+0x1f9/0x420 [ 630.970497][T12303] ? bpf_trace_run4+0xfd/0x420 [ 630.975297][T12303] ? bpf_trace_run3+0x400/0x400 [ 630.980176][T12303] ? percpu_ref_put+0xef/0x180 [ 630.984969][T12303] ? __memcg_kmem_charge_page+0x264/0x380 [ 630.990730][T12303] __alloc_pages+0x429/0x460 [ 630.995408][T12303] ? zone_statistics+0x170/0x170 [ 631.000375][T12303] ? bpf_map_get_memcg+0x4e/0x4e0 [ 631.005426][T12303] ? __lock_acquire+0x7c80/0x7c80 [ 631.010470][T12303] ? __rwlock_init+0x150/0x150 [ 631.015256][T12303] __kmalloc_large_node+0x8c/0x1e0 [ 631.020396][T12303] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 631.025702][T12303] __kmalloc_node+0x10f/0x230 [ 631.030401][T12303] ? _raw_spin_lock+0x40/0x40 [ 631.035094][T12303] bpf_map_kmalloc_node+0xbc/0x1b0 [ 631.040409][T12303] trie_update_elem+0x166/0xea0 [ 631.045310][T12303] ? asm_exc_page_fault+0x26/0x30 [ 631.050358][T12303] bpf_map_update_value+0x660/0x720 [ 631.055588][T12303] map_update_elem+0x57b/0x700 [ 631.060379][T12303] __sys_bpf+0x652/0x800 [ 631.064653][T12303] ? bpf_link_show_fdinfo+0x350/0x350 [ 631.070067][T12303] ? lock_chain_count+0x20/0x20 [ 631.074968][T12303] __x64_sys_bpf+0x7c/0x90 [ 631.079421][T12303] do_syscall_64+0x55/0xb0 [ 631.083953][T12303] ? clear_bhb_loop+0x40/0x90 [ 631.088665][T12303] ? clear_bhb_loop+0x40/0x90 [ 631.093550][T12303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.099485][T12303] RIP: 0033:0x7fc57f78e9a9 [ 631.103925][T12303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.123556][T12303] RSP: 002b:00007fc5806bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 631.132008][T12303] RAX: ffffffffffffffda RBX: 00007fc57f9b6080 RCX: 00007fc57f78e9a9 [ 631.140003][T12303] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000002 [ 631.147994][T12303] RBP: 00007fc57f810d69 R08: 0000000000000000 R09: 0000000000000000 [ 631.156006][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.163989][T12303] R13: 0000000000000000 R14: 00007fc57f9b6080 R15: 00007ffd2b963368 [ 631.172007][T12303]