last executing test programs: 2.068076251s ago: executing program 2 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 1.688155967s ago: executing program 2 (id=75): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 1.292432544s ago: executing program 2 (id=81): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.236246917s ago: executing program 3 (id=82): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.045900845s ago: executing program 2 (id=84): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 964.729838ms ago: executing program 3 (id=85): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f0300000000000069440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 964.523668ms ago: executing program 1 (id=86): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x8000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 805.172835ms ago: executing program 1 (id=88): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ea00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2004}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x10) 763.799397ms ago: executing program 0 (id=89): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 708.73184ms ago: executing program 3 (id=90): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 643.768732ms ago: executing program 1 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 562.657335ms ago: executing program 3 (id=92): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 488.721629ms ago: executing program 0 (id=93): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_clone(0x8081680, 0x0, 0x898721cd1961bf55, 0x0, 0x0, 0x0) 488.505019ms ago: executing program 2 (id=94): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 488.248049ms ago: executing program 1 (id=95): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 308.904077ms ago: executing program 3 (id=96): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x0, 0xb00}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 280.438338ms ago: executing program 1 (id=97): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000010c0)) 228.68946ms ago: executing program 0 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 158.394353ms ago: executing program 3 (id=99): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 149.470383ms ago: executing program 1 (id=100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 80.811296ms ago: executing program 0 (id=101): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x6, 0x0}, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b80)={r0, 0x3, 0x8}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001d00)={r1, &(0x7f0000001bc0), 0x0}, 0x20) 70.596897ms ago: executing program 0 (id=102): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000800)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 19.592769ms ago: executing program 2 (id=103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=104): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000001a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. [ 63.115570][ T5771] cgroup: Unknown subsys name 'net' [ 63.251190][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.637146][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.001999][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.011127][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.020187][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.028104][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.035876][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.045349][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.048730][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.053758][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.067994][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.076872][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.077041][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.084389][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.093211][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.098371][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.106656][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.114674][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.119935][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.133789][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.157886][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.170970][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.173068][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.178726][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.196639][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.206048][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.540786][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 66.707524][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 66.726289][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.733447][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.741332][ T5782] bridge_slave_0: entered allmulticast mode [ 66.748195][ T5782] bridge_slave_0: entered promiscuous mode [ 66.763029][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.770320][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.777536][ T5782] bridge_slave_1: entered allmulticast mode [ 66.784638][ T5782] bridge_slave_1: entered promiscuous mode [ 66.828204][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 66.843277][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.880678][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.893217][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 66.989920][ T5782] team0: Port device team_slave_0 added [ 67.011803][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.019752][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.027082][ T5781] bridge_slave_0: entered allmulticast mode [ 67.033889][ T5781] bridge_slave_0: entered promiscuous mode [ 67.064056][ T5782] team0: Port device team_slave_1 added [ 67.073371][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.081356][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.088633][ T5781] bridge_slave_1: entered allmulticast mode [ 67.097627][ T5781] bridge_slave_1: entered promiscuous mode [ 67.104570][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.111683][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.119513][ T5780] bridge_slave_0: entered allmulticast mode [ 67.126606][ T5780] bridge_slave_0: entered promiscuous mode [ 67.169025][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.176285][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.183415][ T5780] bridge_slave_1: entered allmulticast mode [ 67.190745][ T5780] bridge_slave_1: entered promiscuous mode [ 67.221706][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.234196][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.253934][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.260990][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.287264][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.300882][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.308666][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.334754][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.381899][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.389206][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.396794][ T5783] bridge_slave_0: entered allmulticast mode [ 67.403493][ T5783] bridge_slave_0: entered promiscuous mode [ 67.424965][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.445908][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.453001][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.461212][ T5783] bridge_slave_1: entered allmulticast mode [ 67.468111][ T5783] bridge_slave_1: entered promiscuous mode [ 67.490517][ T5781] team0: Port device team_slave_0 added [ 67.498318][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.545496][ T5781] team0: Port device team_slave_1 added [ 67.574486][ T5782] hsr_slave_0: entered promiscuous mode [ 67.581783][ T5782] hsr_slave_1: entered promiscuous mode [ 67.591207][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.613503][ T5780] team0: Port device team_slave_0 added [ 67.623631][ T5780] team0: Port device team_slave_1 added [ 67.632313][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.653766][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.660856][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.686804][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.719397][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.726704][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.752877][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.789799][ T5783] team0: Port device team_slave_0 added [ 67.799186][ T5783] team0: Port device team_slave_1 added [ 67.829721][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.836800][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.862887][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.875746][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.882709][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.908751][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.931606][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.938628][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.964684][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.999117][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.006208][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.032524][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.071781][ T5781] hsr_slave_0: entered promiscuous mode [ 68.078848][ T5781] hsr_slave_1: entered promiscuous mode [ 68.085887][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.093643][ T5781] Cannot create hsr debugfs directory [ 68.162675][ T5783] hsr_slave_0: entered promiscuous mode [ 68.169019][ T5783] hsr_slave_1: entered promiscuous mode [ 68.176820][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.184392][ T5783] Cannot create hsr debugfs directory [ 68.195438][ T5790] Bluetooth: hci0: command tx timeout [ 68.201517][ T5787] Bluetooth: hci1: command tx timeout [ 68.218550][ T5780] hsr_slave_0: entered promiscuous mode [ 68.225280][ T5780] hsr_slave_1: entered promiscuous mode [ 68.231810][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.240557][ T5780] Cannot create hsr debugfs directory [ 68.274888][ T5790] Bluetooth: hci2: command tx timeout [ 68.274903][ T5787] Bluetooth: hci3: command tx timeout [ 68.532314][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.567103][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.577691][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.611127][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.667969][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.678915][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.690093][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.717557][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.776381][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.785963][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.836190][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.847281][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.860965][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.872379][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.899866][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.917278][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.038686][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.094289][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.109490][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.138715][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.146267][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.168526][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.191058][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.198244][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.208013][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.215207][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.240728][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.265597][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.272728][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.287364][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.323419][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.342360][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.349535][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.370777][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.408943][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.416137][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.476022][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.483197][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.493553][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.500991][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.520705][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.614339][ T5780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.639495][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.774123][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.925557][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.963962][ T5782] veth0_vlan: entered promiscuous mode [ 70.021730][ T5782] veth1_vlan: entered promiscuous mode [ 70.068984][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.096062][ T5781] veth0_vlan: entered promiscuous mode [ 70.132738][ T5781] veth1_vlan: entered promiscuous mode [ 70.179479][ T5782] veth0_macvtap: entered promiscuous mode [ 70.192292][ T5782] veth1_macvtap: entered promiscuous mode [ 70.207058][ T5780] veth0_vlan: entered promiscuous mode [ 70.246543][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.262598][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.274981][ T5787] Bluetooth: hci0: command tx timeout [ 70.280414][ T5790] Bluetooth: hci1: command tx timeout [ 70.286694][ T5781] veth0_macvtap: entered promiscuous mode [ 70.296275][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.305500][ T5781] veth1_macvtap: entered promiscuous mode [ 70.319828][ T5780] veth1_vlan: entered promiscuous mode [ 70.338959][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.348176][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.355849][ T5790] Bluetooth: hci2: command tx timeout [ 70.362289][ T5790] Bluetooth: hci3: command tx timeout [ 70.369111][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.378078][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.402905][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.413735][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.427283][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.470091][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.481269][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.492220][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.517416][ T5780] veth0_macvtap: entered promiscuous mode [ 70.529824][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.539737][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.548858][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.557863][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.577432][ T5780] veth1_macvtap: entered promiscuous mode [ 70.611789][ T5783] veth0_vlan: entered promiscuous mode [ 70.684363][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.698997][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.709207][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.721037][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.732294][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.742682][ T5783] veth1_vlan: entered promiscuous mode [ 70.763159][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.786522][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.807884][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.819141][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.829677][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.840698][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.852457][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.884439][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.893659][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.902917][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.911706][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.929915][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.937814][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.998843][ T5783] veth0_macvtap: entered promiscuous mode [ 71.014986][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.022873][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.049313][ T5783] veth1_macvtap: entered promiscuous mode [ 71.127344][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.155013][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.165234][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.180762][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.191316][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.203526][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.220250][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.236685][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.252018][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.263596][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.264106][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.284315][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.295115][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.306854][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.317475][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.329863][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.353900][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.381626][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.413675][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.434105][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.443312][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.452408][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.493718][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.502629][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.544233][ T5874] warning: `syz.3.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.642840][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.650200][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.717626][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.754765][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.886513][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.923866][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.964566][ C0] hrtimer: interrupt took 67586 ns [ 72.287571][ T5897] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 72.317366][ T5902] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 72.356451][ T5787] Bluetooth: hci1: command tx timeout [ 72.361619][ T5897] veth0_vlan: left promiscuous mode [ 72.362088][ T5790] Bluetooth: hci0: command tx timeout [ 72.403983][ T5897] veth0_vlan: entered promiscuous mode [ 72.418141][ T5897] team0: Device veth0_vlan failed to register rx_handler [ 72.439106][ T5790] Bluetooth: hci3: command tx timeout [ 72.444646][ T5787] Bluetooth: hci2: command tx timeout [ 72.861920][ T5915] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.13'. [ 73.032596][ T5915] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.13'. [ 73.052838][ T5914] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.13'. [ 74.435003][ T5787] Bluetooth: hci0: command tx timeout [ 74.435099][ T5790] Bluetooth: hci1: command tx timeout [ 74.522757][ T5790] Bluetooth: hci3: command tx timeout [ 74.522882][ T5787] Bluetooth: hci2: command tx timeout [ 75.204470][ T5995] syz.1.49[5995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.205783][ T5995] syz.1.49[5995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.280333][ T5992] pim6reg1: entered promiscuous mode [ 75.302684][ T5992] pim6reg1: entered allmulticast mode [ 75.637518][ T6012] syz.2.57[6012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.637709][ T6012] syz.2.57[6012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.130945][ T6073] syz.2.81[6073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.143359][ T6073] syz.2.81[6073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.275416][ T6116] [ 80.289179][ T6116] ============================= [ 80.294391][ T6116] WARNING: suspicious RCU usage [ 80.299521][ T6116] syzkaller #0 Not tainted [ 80.303951][ T6116] ----------------------------- [ 80.308913][ T6116] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 80.317473][ T6116] [ 80.317473][ T6116] other info that might help us debug this: [ 80.317473][ T6116] [ 80.327845][ T6116] [ 80.327845][ T6116] rcu_scheduler_active = 2, debug_locks = 1 [ 80.336129][ T6116] 1 lock held by syz.3.99/6116: [ 80.341097][ T6116] #0: ffffffff8cd300c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 80.351479][ T6116] [ 80.351479][ T6116] stack backtrace: [ 80.357820][ T6116] CPU: 0 PID: 6116 Comm: syz.3.99 Not tainted syzkaller #0 [ 80.365133][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.375225][ T6116] Call Trace: [ 80.378530][ T6116] [ 80.381495][ T6116] dump_stack_lvl+0x16c/0x230 [ 80.386226][ T6116] ? show_regs_print_info+0x20/0x20 [ 80.391460][ T6116] ? load_image+0x3b0/0x3b0 [ 80.395987][ T6116] ? __lock_acquire+0x1260/0x7c80 [ 80.401053][ T6116] lockdep_rcu_suspicious+0x1e1/0x300 [ 80.406463][ T6116] get_callchain_entry+0x2a9/0x3c0 [ 80.411611][ T6116] get_perf_callchain+0xbc/0x4d0 [ 80.416579][ T6116] ? verify_lock_unused+0x140/0x140 [ 80.421814][ T6116] ? put_callchain_entry+0xb0/0xb0 [ 80.427045][ T6116] ? plist_add+0x3d8/0x490 [ 80.431505][ T6116] __bpf_get_stack+0x2d7/0x510 [ 80.436305][ T6116] ? stack_map_get_build_id_offset+0x720/0x720 [ 80.442495][ T6116] ? __cant_sleep+0x210/0x210 [ 80.447204][ T6116] ? bpf_prog_0f38b8827da495ce+0x42/0x46 [ 80.452887][ T6116] bpf_get_stack_raw_tp+0x1a9/0x210 [ 80.458127][ T6116] bpf_prog_0f38b8827da495ce+0x42/0x46 [ 80.463703][ T6116] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 80.469112][ T6116] bpf_prog_test_run_syscall+0x311/0x490 [ 80.474781][ T6116] ? sock_gen_cookie+0x60/0x60 [ 80.479575][ T6116] ? sock_gen_cookie+0x60/0x60 [ 80.484368][ T6116] bpf_prog_test_run+0x321/0x390 [ 80.489337][ T6116] __sys_bpf+0x440/0x800 [ 80.493621][ T6116] ? bpf_link_show_fdinfo+0x350/0x350 [ 80.499038][ T6116] ? lock_chain_count+0x20/0x20 [ 80.503926][ T6116] __x64_sys_bpf+0x7c/0x90 [ 80.508369][ T6116] do_syscall_64+0x55/0xb0 [ 80.512813][ T6116] ? clear_bhb_loop+0x40/0x90 [ 80.517512][ T6116] ? clear_bhb_loop+0x40/0x90 [ 80.522221][ T6116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.528152][ T6116] RIP: 0033:0x7f40afd8f749 [ 80.532679][ T6116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.552314][ T6116] RSP: 002b:00007f40b0c4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.560763][ T6116] RAX: ffffffffffffffda RBX: 00007f40affe5fa0 RCX: 00007f40afd8f749 [ 80.568737][ T6116] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 80.576701][ T6116] RBP: 00007f40afe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 80.584666][ T6116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.592661][ T6116] R13: 00007f40affe6038 R14: 00007f40affe5fa0 R15: 00007fffd3762748 [ 80.600724][ T6116] [ 81.883219][ T28] cfg80211: failed to load regulatory.db