last executing test programs: 2.673773667s ago: executing program 3 (id=5): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) 2.626211559s ago: executing program 0 (id=6): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$sock(r3, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) 2.49401369s ago: executing program 0 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.447681821s ago: executing program 3 (id=8): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2.299291264s ago: executing program 0 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x200}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 2.077235827s ago: executing program 3 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x6, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9e}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1.964937189s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 1.853723441s ago: executing program 1 (id=11): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c", 0xd4d}], 0x1}, 0x0) 1.846648101s ago: executing program 3 (id=12): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1.807198501s ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 1.757500372s ago: executing program 0 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 286.963076ms ago: executing program 2 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) 208.773907ms ago: executing program 3 (id=15): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) close(r0) 203.513847ms ago: executing program 1 (id=16): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b706"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000008000000030000000000000c000000000000002e5f"], 0x0, 0x2c}, 0x28) 164.734777ms ago: executing program 0 (id=17): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xe, 0x0, 0x0, [{}]}]}}, &(0x7f0000000100)=""/175, 0x32, 0xaf, 0x1}, 0x20) 57.207579ms ago: executing program 1 (id=18): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x6400, 0x4000000}, 0x28) 23.8781ms ago: executing program 3 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 0s ago: executing program 0 (id=20): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000045b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. syzkaller login: [ 65.168491][ T5760] cgroup: Unknown subsys name 'net' [ 65.301358][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.600176][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.855731][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.864370][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.872381][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.880929][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.888846][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.896303][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.941170][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.949376][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.957403][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.966878][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.974619][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.012043][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.023997][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.032725][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.040488][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.047934][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.055337][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.060993][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.070244][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.078772][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.102960][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.111612][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.119801][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.127291][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.310683][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 68.484413][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.492201][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.499787][ T5769] bridge_slave_0: entered allmulticast mode [ 68.506686][ T5769] bridge_slave_0: entered promiscuous mode [ 68.516340][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.523473][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.531020][ T5769] bridge_slave_1: entered allmulticast mode [ 68.538035][ T5769] bridge_slave_1: entered promiscuous mode [ 68.589874][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.632999][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.684321][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 68.696725][ T5769] team0: Port device team_slave_0 added [ 68.743313][ T5769] team0: Port device team_slave_1 added [ 68.809021][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.816274][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.842612][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.858487][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 68.869087][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 68.888157][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.895299][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.921340][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.970978][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.978331][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.985798][ T5775] bridge_slave_0: entered allmulticast mode [ 68.992773][ T5775] bridge_slave_0: entered promiscuous mode [ 69.000588][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.007785][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.015875][ T5775] bridge_slave_1: entered allmulticast mode [ 69.022906][ T5775] bridge_slave_1: entered promiscuous mode [ 69.111814][ T5769] hsr_slave_0: entered promiscuous mode [ 69.119469][ T5769] hsr_slave_1: entered promiscuous mode [ 69.128067][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.140598][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.170763][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.178006][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.185616][ T5774] bridge_slave_0: entered allmulticast mode [ 69.192362][ T5774] bridge_slave_0: entered promiscuous mode [ 69.231139][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.238414][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.245792][ T5774] bridge_slave_1: entered allmulticast mode [ 69.252483][ T5774] bridge_slave_1: entered promiscuous mode [ 69.273294][ T5775] team0: Port device team_slave_0 added [ 69.294581][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.301768][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.309249][ T5772] bridge_slave_0: entered allmulticast mode [ 69.316020][ T5772] bridge_slave_0: entered promiscuous mode [ 69.349499][ T5775] team0: Port device team_slave_1 added [ 69.355787][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.362895][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.373050][ T5772] bridge_slave_1: entered allmulticast mode [ 69.380617][ T5772] bridge_slave_1: entered promiscuous mode [ 69.413559][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.459598][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.473208][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.484980][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.494898][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.501861][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.527824][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.544995][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.551970][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.577978][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.661886][ T5774] team0: Port device team_slave_0 added [ 69.671206][ T5774] team0: Port device team_slave_1 added [ 69.691811][ T5775] hsr_slave_0: entered promiscuous mode [ 69.698645][ T5775] hsr_slave_1: entered promiscuous mode [ 69.707815][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.716190][ T5775] Cannot create hsr debugfs directory [ 69.724104][ T5772] team0: Port device team_slave_0 added [ 69.758245][ T5772] team0: Port device team_slave_1 added [ 69.764986][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.771939][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.798416][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.814607][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.822274][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.850636][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.952873][ T5774] hsr_slave_0: entered promiscuous mode [ 69.959028][ T5776] Bluetooth: hci0: command tx timeout [ 69.966522][ T5774] hsr_slave_1: entered promiscuous mode [ 69.972579][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.980336][ T5774] Cannot create hsr debugfs directory [ 69.996431][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.003382][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.029757][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.045514][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.052487][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.078420][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.185407][ T5776] Bluetooth: hci2: command tx timeout [ 70.188032][ T5771] Bluetooth: hci3: command tx timeout [ 70.191145][ T5776] Bluetooth: hci1: command tx timeout [ 70.205669][ T5772] hsr_slave_0: entered promiscuous mode [ 70.212269][ T5772] hsr_slave_1: entered promiscuous mode [ 70.219181][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.226979][ T5772] Cannot create hsr debugfs directory [ 70.331539][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.370497][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.383638][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.393522][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.533704][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.557144][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.568029][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.588493][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.672745][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.697667][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.719260][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.730118][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.797258][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.821804][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.831840][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.849645][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.897292][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.960615][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.972179][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.990890][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.998392][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.025436][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.032547][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.052309][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.091731][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.098917][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.132961][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.140103][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.188777][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.274062][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.294407][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.324185][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.331408][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.361569][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.380580][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.387795][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.432086][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.439297][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.461149][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.468377][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.511344][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.632190][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.639328][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.708862][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.731422][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.878667][ T5775] veth0_vlan: entered promiscuous mode [ 71.903454][ T5775] veth1_vlan: entered promiscuous mode [ 71.914090][ T5769] veth0_vlan: entered promiscuous mode [ 71.933299][ T5769] veth1_vlan: entered promiscuous mode [ 72.003740][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.018186][ T5775] veth0_macvtap: entered promiscuous mode [ 72.025191][ T5776] Bluetooth: hci0: command tx timeout [ 72.038625][ T5775] veth1_macvtap: entered promiscuous mode [ 72.064582][ T5769] veth0_macvtap: entered promiscuous mode [ 72.083746][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.096647][ T5769] veth1_macvtap: entered promiscuous mode [ 72.124206][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.138413][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.147967][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.156763][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.165769][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.208974][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.219979][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.233832][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.252253][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.265324][ T5776] Bluetooth: hci3: command tx timeout [ 72.270761][ T5776] Bluetooth: hci2: command tx timeout [ 72.274923][ T5781] Bluetooth: hci1: command tx timeout [ 72.339558][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.359464][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.373515][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.415971][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.424983][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.437097][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.446133][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.488221][ T5772] veth0_vlan: entered promiscuous mode [ 72.508514][ T5774] veth0_vlan: entered promiscuous mode [ 72.544561][ T5774] veth1_vlan: entered promiscuous mode [ 72.556118][ T5772] veth1_vlan: entered promiscuous mode [ 72.570431][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.588152][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.641124][ T5772] veth0_macvtap: entered promiscuous mode [ 72.680850][ T5774] veth0_macvtap: entered promiscuous mode [ 72.694253][ T5772] veth1_macvtap: entered promiscuous mode [ 72.722220][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.727206][ T5774] veth1_macvtap: entered promiscuous mode [ 72.730633][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.756917][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.766490][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.801855][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.817112][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.827803][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.838708][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.850889][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.885118][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.893682][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.897439][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.917132][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.927060][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.937876][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.949101][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.959180][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.970301][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.981493][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.992934][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.002888][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.013674][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.025064][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.091304][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.111580][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.129051][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.142184][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.153670][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.153828][ T5862] syz.3.4[5862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.165978][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.168441][ T5862] syz.3.4[5862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.180367][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.220100][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.234027][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.243518][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.252378][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.287586][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.313031][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.336826][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.359424][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.728982][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.768514][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.839956][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.853507][ T5872] wg2: entered promiscuous mode [ 73.860124][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.867445][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.870358][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.884277][ T5872] wg2: entered allmulticast mode [ 73.997611][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.038708][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.105915][ T5781] Bluetooth: hci0: command tx timeout [ 74.351217][ T5781] Bluetooth: hci1: command tx timeout [ 74.356764][ T5771] Bluetooth: hci2: command tx timeout [ 74.359059][ T5776] Bluetooth: hci3: command tx timeout [ 76.089725][ T5902] ------------[ cut here ]------------ [ 76.095413][ T5902] Please remove unsupported % in format string [ 76.102473][ T5902] WARNING: CPU: 0 PID: 5902 at lib/vsprintf.c:2679 format_decode+0xcfd/0x13d0 [ 76.111456][ T5902] Modules linked in: [ 76.115443][ T5902] CPU: 0 PID: 5902 Comm: syz.1.18 Not tainted 6.6.94-syzkaller #0 [ 76.123282][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.133433][ T5902] RIP: 0010:format_decode+0xcfd/0x13d0 [ 76.138992][ T5902] Code: ff e8 87 89 2e f7 c6 05 ae 53 dd 03 01 41 0f b6 04 1c 84 c0 0f 85 be 06 00 00 41 0f b6 36 48 c7 c7 20 93 c8 8b e8 63 ee f8 f6 <0f> 0b e9 79 fe ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c 46 f3 ff ff [ 76.158724][ T5902] RSP: 0018:ffffc90002e47888 EFLAGS: 00010246 [ 76.164866][ T5902] RAX: df05285609874200 RBX: dffffc0000000000 RCX: 0000000000080000 [ 76.172900][ T5902] RDX: ffffc9000dddb000 RSI: 0000000000004dfe RDI: 0000000000004dff [ 76.180982][ T5902] RBP: ffff0000ffffff00 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 76.189038][ T5902] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffff920005c8f55 [ 76.197094][ T5902] R13: 0000000000000000 R14: ffffc90002e47aac R15: ffff0a00ffffff00 [ 76.205133][ T5902] FS: 00007fc35c33a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 76.214097][ T5902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.220764][ T5902] CR2: 000000110c325dfa CR3: 000000002e6d4000 CR4: 00000000003506f0 [ 76.228809][ T5902] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.236866][ T5902] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.244893][ T5902] Call Trace: [ 76.248194][ T5902] [ 76.250104][ T5776] Bluetooth: hci0: command tx timeout [ 76.251145][ T5902] bstr_printf+0xc4/0xf90 [ 76.260939][ T5902] ? lock_chain_count+0x20/0x20 [ 76.265880][ T5902] ? bpf_trace_printk+0xc2/0x190 [ 76.270861][ T5902] bpf_trace_printk+0x10f/0x190 [ 76.275784][ T5902] ? ktime_get+0x7f/0x280 [ 76.280150][ T5902] ? bpf_probe_write_user+0xe0/0xe0 [ 76.285442][ T5902] ? bpf_prog_test_run+0x321/0x390 [ 76.290587][ T5902] ? __local_bh_disable_ip+0xf2/0x190 [ 76.296054][ T5902] ? read_tsc+0x9/0x20 [ 76.300153][ T5902] ? ktime_get+0x24b/0x280 [ 76.304608][ T5902] ? bpf_test_run+0x1da/0x8a0 [ 76.309388][ T5902] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 76.314926][ T5902] bpf_test_run+0x560/0x8a0 [ 76.319481][ T5902] ? bpf_test_run+0x1da/0x8a0 [ 76.324198][ T5902] ? convert___skb_to_skb+0x590/0x590 [ 76.329660][ T5902] ? eth_get_headlen+0x200/0x200 [ 76.334635][ T5902] ? slab_build_skb+0x25f/0x3f0 [ 76.339738][ T5902] ? convert___skb_to_skb+0x3d/0x590 [ 76.345095][ T5902] bpf_prog_test_run_skb+0xa67/0x11c0 [ 76.350509][ T5902] ? cpu_online+0x60/0x60 [ 76.354919][ T5902] bpf_prog_test_run+0x321/0x390 [ 76.359895][ T5902] __sys_bpf+0x440/0x800 [ 76.364173][ T5902] ? bpf_link_show_fdinfo+0x350/0x350 [ 76.369646][ T5902] ? lock_chain_count+0x20/0x20 [ 76.374539][ T5902] __x64_sys_bpf+0x7c/0x90 [ 76.379056][ T5902] do_syscall_64+0x55/0xb0 [ 76.383503][ T5902] ? clear_bhb_loop+0x40/0x90 [ 76.388260][ T5902] ? clear_bhb_loop+0x40/0x90 [ 76.392968][ T5902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.398959][ T5902] RIP: 0033:0x7fc35b58e929 [ 76.403405][ T5902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.423095][ T5902] RSP: 002b:00007fc35c33a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.426378][ T5781] Bluetooth: hci2: command tx timeout [ 76.431556][ T5902] RAX: ffffffffffffffda RBX: 00007fc35b7b5fa0 RCX: 00007fc35b58e929 [ 76.431577][ T5902] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 76.431590][ T5902] RBP: 00007fc35b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 76.431601][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.437835][ T5776] Bluetooth: hci1: command tx timeout [ 76.445005][ T5902] R13: 0000000000000000 R14: 00007fc35b7b5fa0 R15: 00007ffe03194b88 [ 76.445040][ T5902] [ 76.445049][ T5902] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.445059][ T5902] CPU: 0 PID: 5902 Comm: syz.1.18 Not tainted 6.6.94-syzkaller #0 [ 76.445076][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.445083][ T5902] Call Trace: [ 76.445091][ T5902] [ 76.445097][ T5902] dump_stack_lvl+0x16c/0x230 [ 76.445131][ T5902] ? show_regs_print_info+0x20/0x20 [ 76.445158][ T5902] ? load_image+0x3b0/0x3b0 [ 76.445191][ T5902] panic+0x2c0/0x710 [ 76.445215][ T5902] ? bpf_jit_dump+0xd0/0xd0 [ 76.445251][ T5902] __warn+0x2e0/0x470 [ 76.445269][ T5902] ? format_decode+0xcfd/0x13d0 [ 76.445291][ T5902] ? format_decode+0xcfd/0x13d0 [ 76.445311][ T5902] report_bug+0x2be/0x4f0 [ 76.445338][ T5902] ? format_decode+0xcfd/0x13d0 [ 76.445359][ T5902] ? format_decode+0xcfd/0x13d0 [ 76.445379][ T5902] ? format_decode+0xcff/0x13d0 [ 76.445399][ T5902] handle_bug+0xcf/0x120 [ 76.445426][ T5902] exc_invalid_op+0x1a/0x50 [ 76.445452][ T5902] asm_exc_invalid_op+0x1a/0x20 [ 76.445479][ T5902] RIP: 0010:format_decode+0xcfd/0x13d0 [ 76.445501][ T5902] Code: ff e8 87 89 2e f7 c6 05 ae 53 dd 03 01 41 0f b6 04 1c 84 c0 0f 85 be 06 00 00 41 0f b6 36 48 c7 c7 20 93 c8 8b e8 63 ee f8 f6 <0f> 0b e9 79 fe ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c 46 f3 ff ff [ 76.445516][ T5902] RSP: 0018:ffffc90002e47888 EFLAGS: 00010246 [ 76.445532][ T5902] RAX: df05285609874200 RBX: dffffc0000000000 RCX: 0000000000080000 [ 76.445546][ T5902] RDX: ffffc9000dddb000 RSI: 0000000000004dfe RDI: 0000000000004dff [ 76.445558][ T5902] RBP: ffff0000ffffff00 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 76.445571][ T5902] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffff920005c8f55 [ 76.445584][ T5902] R13: 0000000000000000 R14: ffffc90002e47aac R15: ffff0a00ffffff00 [ 76.445610][ T5902] ? format_decode+0xcfd/0x13d0 [ 76.445640][ T5902] bstr_printf+0xc4/0xf90 [ 76.445660][ T5902] ? lock_chain_count+0x20/0x20 [ 76.445680][ T5902] ? bpf_trace_printk+0xc2/0x190 [ 76.445711][ T5902] bpf_trace_printk+0x10f/0x190 [ 76.445736][ T5902] ? ktime_get+0x7f/0x280 [ 76.445757][ T5902] ? bpf_probe_write_user+0xe0/0xe0 [ 76.445782][ T5902] ? bpf_prog_test_run+0x321/0x390 [ 76.445804][ T5902] ? __local_bh_disable_ip+0xf2/0x190 [ 76.445827][ T5902] ? read_tsc+0x9/0x20 [ 76.445845][ T5902] ? ktime_get+0x24b/0x280 [ 76.445867][ T5902] ? bpf_test_run+0x1da/0x8a0 [ 76.445888][ T5902] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 76.445915][ T5902] bpf_test_run+0x560/0x8a0 [ 76.445947][ T5902] ? bpf_test_run+0x1da/0x8a0 [ 76.445970][ T5902] ? convert___skb_to_skb+0x590/0x590 [ 76.445993][ T5902] ? eth_get_headlen+0x200/0x200 [ 76.446014][ T5902] ? slab_build_skb+0x25f/0x3f0 [ 76.446031][ T5902] ? convert___skb_to_skb+0x3d/0x590 [ 76.446055][ T5902] bpf_prog_test_run_skb+0xa67/0x11c0 [ 76.446089][ T5902] ? cpu_online+0x60/0x60 [ 76.446109][ T5902] bpf_prog_test_run+0x321/0x390 [ 76.446132][ T5902] __sys_bpf+0x440/0x800 [ 76.446152][ T5902] ? bpf_link_show_fdinfo+0x350/0x350 [ 76.446185][ T5902] ? lock_chain_count+0x20/0x20 [ 76.446212][ T5902] __x64_sys_bpf+0x7c/0x90 [ 76.446231][ T5902] do_syscall_64+0x55/0xb0 [ 76.446255][ T5902] ? clear_bhb_loop+0x40/0x90 [ 76.446272][ T5902] ? clear_bhb_loop+0x40/0x90 [ 76.446290][ T5902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.446317][ T5902] RIP: 0033:0x7fc35b58e929 [ 76.446331][ T5902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.446345][ T5902] RSP: 002b:00007fc35c33a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.446363][ T5902] RAX: ffffffffffffffda RBX: 00007fc35b7b5fa0 RCX: 00007fc35b58e929 [ 76.446376][ T5902] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 76.446387][ T5902] RBP: 00007fc35b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 76.446398][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.446408][ T5902] R13: 0000000000000000 R14: 00007fc35b7b5fa0 R15: 00007ffe03194b88 [ 76.446435][ T5902] [ 76.453127][ T5902] Kernel Offset: disabled