last executing test programs: 2.204175918s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000880)='./file0\x00', 0x8) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xb, r2, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r5) 1.246179322s ago: executing program 0 (id=1): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1.101453984s ago: executing program 3 (id=5): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b40500000000000061105000000000000700000000000000950000000000000038e7cd343ca00e75f590228f4ac6648f84c4cef0eee2cbe0cf4825006894d60deb435f38413663f51b7f43fa6f8e629e042afbf7603a3d98e7c24ee2806cd1197d5d2fbafee76baa0204303c143ca69d7d14"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.006847565s ago: executing program 1 (id=2): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNSETOFFLOAD(r3, 0x541b, 0x4000000000000000) 917.500517ms ago: executing program 0 (id=6): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000030000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000400)='task_rename\x00', r1}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000010000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 703.52295ms ago: executing program 3 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xc, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) 537.920752ms ago: executing program 0 (id=8): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 346.078705ms ago: executing program 2 (id=3): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 200.894547ms ago: executing program 3 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000020000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xc2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x102000, 0xc8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6307e08102030000fe0ea66718330200975a65789ff57b00000000000000cade22000000000000ac9ccb"], 0xfdef) 72.972629ms ago: executing program 0 (id=10): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 0s ago: executing program 1 (id=11): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="00cc0b706f008a6996460cf07536"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r5}, 0x18) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. [ 80.506829][ T5759] cgroup: Unknown subsys name 'net' [ 80.618330][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.557648][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.153399][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.164093][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.168173][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.172772][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.181304][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.188250][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.195728][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.209902][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.210925][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.217607][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.225686][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.240219][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.246948][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.258690][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.267255][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.319485][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.320006][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.327787][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.342525][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.350242][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.374210][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.384078][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.393264][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.402887][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.827796][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 84.976281][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 85.050758][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 85.103374][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 85.141127][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.149054][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.157040][ T5768] bridge_slave_0: entered allmulticast mode [ 85.165171][ T5768] bridge_slave_0: entered promiscuous mode [ 85.216899][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.224656][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.232987][ T5768] bridge_slave_1: entered allmulticast mode [ 85.241140][ T5768] bridge_slave_1: entered promiscuous mode [ 85.337658][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.345712][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.353467][ T5769] bridge_slave_0: entered allmulticast mode [ 85.361775][ T5769] bridge_slave_0: entered promiscuous mode [ 85.370225][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.377760][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.385451][ T5769] bridge_slave_1: entered allmulticast mode [ 85.394481][ T5769] bridge_slave_1: entered promiscuous mode [ 85.407469][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.421624][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.494198][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.503334][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.511768][ T5771] bridge_slave_0: entered allmulticast mode [ 85.521336][ T5771] bridge_slave_0: entered promiscuous mode [ 85.531831][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.542017][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.551843][ T5771] bridge_slave_1: entered allmulticast mode [ 85.561234][ T5771] bridge_slave_1: entered promiscuous mode [ 85.571645][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.586045][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.661200][ T5768] team0: Port device team_slave_0 added [ 85.668422][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.676337][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.684218][ T5772] bridge_slave_0: entered allmulticast mode [ 85.693357][ T5772] bridge_slave_0: entered promiscuous mode [ 85.729333][ T5768] team0: Port device team_slave_1 added [ 85.746344][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.754959][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.764813][ T5772] bridge_slave_1: entered allmulticast mode [ 85.773318][ T5772] bridge_slave_1: entered promiscuous mode [ 85.783174][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.796408][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.809773][ T5769] team0: Port device team_slave_0 added [ 85.819248][ T5769] team0: Port device team_slave_1 added [ 85.896810][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.904122][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.933187][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.961683][ T5771] team0: Port device team_slave_0 added [ 85.972098][ T5771] team0: Port device team_slave_1 added [ 85.989623][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.996907][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.026283][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.049757][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.091856][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.100168][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.129674][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.145334][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.153654][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.185240][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.205005][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.219227][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.227795][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.258230][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.275002][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.283861][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.316822][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.329190][ T5774] Bluetooth: hci0: command tx timeout [ 86.333300][ T5085] Bluetooth: hci1: command tx timeout [ 86.396870][ T5772] team0: Port device team_slave_0 added [ 86.398844][ T5085] Bluetooth: hci2: command tx timeout [ 86.425922][ T5772] team0: Port device team_slave_1 added [ 86.460401][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.467717][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.496887][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.509019][ T5085] Bluetooth: hci3: command tx timeout [ 86.521256][ T5768] hsr_slave_0: entered promiscuous mode [ 86.529570][ T5768] hsr_slave_1: entered promiscuous mode [ 86.560772][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.569144][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.597935][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.693921][ T5771] hsr_slave_0: entered promiscuous mode [ 86.702491][ T5771] hsr_slave_1: entered promiscuous mode [ 86.712795][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.724412][ T5771] Cannot create hsr debugfs directory [ 86.737888][ T5769] hsr_slave_0: entered promiscuous mode [ 86.746922][ T5769] hsr_slave_1: entered promiscuous mode [ 86.756912][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.765664][ T5769] Cannot create hsr debugfs directory [ 86.788656][ T5772] hsr_slave_0: entered promiscuous mode [ 86.795781][ T5772] hsr_slave_1: entered promiscuous mode [ 86.803679][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.813077][ T5772] Cannot create hsr debugfs directory [ 87.261299][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.276078][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.288280][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.298451][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.366853][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.380535][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.394348][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.404573][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.525117][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.543350][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.554512][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.571503][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.754404][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.796945][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.817695][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.860773][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.003749][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.032207][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.126921][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.163249][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.197314][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.205839][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.224160][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.251906][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.259803][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.305637][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.314889][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.377947][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.386001][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.399620][ T5085] Bluetooth: hci1: command tx timeout [ 88.405793][ T5085] Bluetooth: hci0: command tx timeout [ 88.472457][ T5085] Bluetooth: hci2: command tx timeout [ 88.490760][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.503673][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.522826][ T2100] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.531116][ T2100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.549143][ T5085] Bluetooth: hci3: command tx timeout [ 88.583598][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.592482][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.616452][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.652352][ T2100] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.660230][ T2100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.697037][ T5772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.708858][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.734354][ T2100] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.742231][ T2100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.215946][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.394561][ T5768] veth0_vlan: entered promiscuous mode [ 89.424694][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.456273][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.484115][ T5768] veth1_vlan: entered promiscuous mode [ 89.506744][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.630356][ T5769] veth0_vlan: entered promiscuous mode [ 89.643214][ T5768] veth0_macvtap: entered promiscuous mode [ 89.680731][ T5772] veth0_vlan: entered promiscuous mode [ 89.692094][ T5769] veth1_vlan: entered promiscuous mode [ 89.712401][ T5768] veth1_macvtap: entered promiscuous mode [ 89.741814][ T5771] veth0_vlan: entered promiscuous mode [ 89.774566][ T5772] veth1_vlan: entered promiscuous mode [ 89.801044][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.823904][ T5769] veth0_macvtap: entered promiscuous mode [ 89.833126][ T5771] veth1_vlan: entered promiscuous mode [ 89.847462][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.864942][ T5769] veth1_macvtap: entered promiscuous mode [ 89.895847][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.906565][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.919741][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.930239][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.003530][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.015882][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.030207][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.044159][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.055556][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.067039][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.107778][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.117991][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.129986][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.139889][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.172667][ T5772] veth0_macvtap: entered promiscuous mode [ 90.197479][ T5771] veth0_macvtap: entered promiscuous mode [ 90.228092][ T5771] veth1_macvtap: entered promiscuous mode [ 90.258367][ T5772] veth1_macvtap: entered promiscuous mode [ 90.296127][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.310005][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.375013][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.386593][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.401062][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.413086][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.426513][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.478053][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.484893][ T5085] Bluetooth: hci0: command tx timeout [ 90.492251][ T5085] Bluetooth: hci1: command tx timeout [ 90.503745][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.541184][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.549991][ T5085] Bluetooth: hci2: command tx timeout [ 90.558963][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.571487][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.582688][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.594717][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.604005][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.615579][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.625707][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.629228][ T5085] Bluetooth: hci3: command tx timeout [ 90.642798][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.653071][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.664751][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.678380][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.690498][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.701972][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.714465][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.725421][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.736383][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.747475][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.766361][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.775762][ T4085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.784802][ T4085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.841765][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.853297][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.863848][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.873323][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.886449][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.900323][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.909772][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.918933][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.064489][ T2100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.088110][ T2100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.100411][ C1] hrtimer: interrupt took 82520 ns [ 91.191702][ T2100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.237001][ T2100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.885583][ T2887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.899290][ T2887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.076210][ T2100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.109505][ T2100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.282515][ T2100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.389073][ T2100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.550698][ T5774] Bluetooth: hci0: command tx timeout [ 92.557844][ T5085] Bluetooth: hci1: command tx timeout [ 92.629705][ T5085] Bluetooth: hci2: command tx timeout [ 92.709807][ T5085] Bluetooth: hci3: command tx timeout [ 92.723563][ T8] cfg80211: failed to load regulatory.db [ 93.115841][ T5882] syzkaller0: create flow: hash 2114262527 index 1 [ 93.206059][ T5833] syzkaller0: tun_net_xmit 76 [ 93.219235][ T5833] syzkaller0: tun_net_xmit 48 [ 93.222918][ T5885] ------------[ cut here ]------------ [ 93.230319][ T5885] Please remove unsupported % in format string [ 93.237455][ T5885] WARNING: CPU: 0 PID: 5885 at lib/vsprintf.c:2679 format_decode+0xcfd/0x13d0 [ 93.242245][ T968] syzkaller0: tun_net_xmit 76 [ 93.246995][ T5885] Modules linked in: [ 93.247016][ T5885] CPU: 0 PID: 5885 Comm: syz.0.10 Not tainted 6.6.94-syzkaller #0 [ 93.265124][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.276313][ T5885] RIP: 0010:format_decode+0xcfd/0x13d0 [ 93.282303][ T5885] Code: ff e8 87 89 2e f7 c6 05 ae 53 dd 03 01 41 0f b6 04 1c 84 c0 0f 85 be 06 00 00 41 0f b6 36 48 c7 c7 20 93 c8 8b e8 63 ee f8 f6 <0f> 0b e9 79 fe ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c 46 f3 ff ff [ 93.303875][ T5885] RSP: 0018:ffffc900048ef888 EFLAGS: 00010246 [ 93.310436][ T5885] RAX: 6a4ee35691d90e00 RBX: dffffc0000000000 RCX: 0000000000080000 [ 93.318487][ T5885] RDX: ffffc9000c469000 RSI: 000000000000bdc1 RDI: 000000000000bdc2 [ 93.327301][ T5885] RBP: ffff0000ffffff00 R08: ffffc900048ef487 R09: 1ffff9200091de90 [ 93.336642][ T5885] R10: dffffc0000000000 R11: fffff5200091de91 R12: 1ffff9200091df55 [ 93.345226][ T5885] R13: 0000000000000000 R14: ffffc900048efaac R15: ffff0a00ffffff00 [ 93.353943][ T5885] FS: 00007f0ba96466c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 93.363703][ T5885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.371001][ T5885] CR2: 0000001b2c41fffc CR3: 000000002fe18000 CR4: 00000000003506f0 [ 93.381720][ T5885] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.391026][ T5885] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.399925][ T5885] Call Trace: [ 93.403346][ T5885] [ 93.406437][ T5885] bstr_printf+0xc4/0xf90 [ 93.411125][ T5885] ? lock_chain_count+0x20/0x20 [ 93.416434][ T5885] ? bpf_trace_printk+0xc2/0x190 [ 93.422559][ T5885] bpf_trace_printk+0x10f/0x190 [ 93.427800][ T5885] ? ktime_get+0x7f/0x280 [ 93.433295][ T5885] ? bpf_probe_write_user+0xe0/0xe0 [ 93.439445][ T5885] ? bpf_prog_test_run+0x321/0x390 [ 93.439683][ T23] syzkaller0: tun_net_xmit 76 [ 93.444631][ T5885] ? __local_bh_disable_ip+0xf2/0x190 [ 93.456701][ T5885] ? read_tsc+0x9/0x20 [ 93.461552][ T5885] ? ktime_get+0x24b/0x280 [ 93.466368][ T5885] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 93.472002][ T5885] bpf_test_run+0x340/0x8a0 [ 93.477481][ T5885] ? bpf_test_run+0x1da/0x8a0 [ 93.483503][ T5885] ? convert___skb_to_skb+0x590/0x590 [ 93.490681][ T5885] ? eth_get_headlen+0x200/0x200 [ 93.496653][ T5885] ? slab_build_skb+0x25f/0x3f0 [ 93.502336][ T5885] ? convert___skb_to_skb+0x3d/0x590 [ 93.508305][ T5885] bpf_prog_test_run_skb+0xa67/0x11c0 [ 93.514510][ T5885] ? cpu_online+0x60/0x60 [ 93.519107][ T5885] bpf_prog_test_run+0x321/0x390 [ 93.524136][ T5885] __sys_bpf+0x440/0x800 [ 93.528445][ T5885] ? bpf_link_show_fdinfo+0x350/0x350 [ 93.534109][ T5885] ? lock_chain_count+0x20/0x20 [ 93.539273][ T5885] __x64_sys_bpf+0x7c/0x90 [ 93.543756][ T5885] do_syscall_64+0x55/0xb0 [ 93.548322][ T5885] ? clear_bhb_loop+0x40/0x90 [ 93.553151][ T5885] ? clear_bhb_loop+0x40/0x90 [ 93.558239][ T5885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.564414][ T5885] RIP: 0033:0x7f0ba878e929 [ 93.569014][ T5885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.588928][ T5885] RSP: 002b:00007f0ba9646038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.597573][ T5885] RAX: ffffffffffffffda RBX: 00007f0ba89b5fa0 RCX: 00007f0ba878e929 [ 93.605984][ T5885] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 93.614504][ T5885] RBP: 00007f0ba8810b39 R08: 0000000000000000 R09: 0000000000000000 [ 93.622680][ T5885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.631175][ T5885] R13: 0000000000000000 R14: 00007f0ba89b5fa0 R15: 00007ffe18dd7378 [ 93.639636][ T5885] [ 93.642899][ T5885] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.650412][ T5885] CPU: 0 PID: 5885 Comm: syz.0.10 Not tainted 6.6.94-syzkaller #0 [ 93.658442][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.668536][ T5885] Call Trace: [ 93.671834][ T5885] [ 93.674785][ T5885] dump_stack_lvl+0x16c/0x230 [ 93.679498][ T5885] ? show_regs_print_info+0x20/0x20 [ 93.684718][ T5885] ? load_image+0x3b0/0x3b0 [ 93.689424][ T5885] panic+0x2c0/0x710 [ 93.693604][ T5885] ? bpf_jit_dump+0xd0/0xd0 [ 93.698137][ T5885] __warn+0x2e0/0x470 [ 93.702559][ T5885] ? format_decode+0xcfd/0x13d0 [ 93.707561][ T5885] ? format_decode+0xcfd/0x13d0 [ 93.712446][ T5885] report_bug+0x2be/0x4f0 [ 93.717206][ T5885] ? format_decode+0xcfd/0x13d0 [ 93.722292][ T5885] ? format_decode+0xcfd/0x13d0 [ 93.727574][ T5885] ? format_decode+0xcff/0x13d0 [ 93.733201][ T5885] handle_bug+0xcf/0x120 [ 93.737771][ T5885] exc_invalid_op+0x1a/0x50 [ 93.742765][ T5885] asm_exc_invalid_op+0x1a/0x20 [ 93.748143][ T5885] RIP: 0010:format_decode+0xcfd/0x13d0 [ 93.753810][ T5885] Code: ff e8 87 89 2e f7 c6 05 ae 53 dd 03 01 41 0f b6 04 1c 84 c0 0f 85 be 06 00 00 41 0f b6 36 48 c7 c7 20 93 c8 8b e8 63 ee f8 f6 <0f> 0b e9 79 fe ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c 46 f3 ff ff [ 93.775377][ T5885] RSP: 0018:ffffc900048ef888 EFLAGS: 00010246 [ 93.782449][ T5885] RAX: 6a4ee35691d90e00 RBX: dffffc0000000000 RCX: 0000000000080000 [ 93.791072][ T5885] RDX: ffffc9000c469000 RSI: 000000000000bdc1 RDI: 000000000000bdc2 [ 93.799811][ T5885] RBP: ffff0000ffffff00 R08: ffffc900048ef487 R09: 1ffff9200091de90 [ 93.808441][ T5885] R10: dffffc0000000000 R11: fffff5200091de91 R12: 1ffff9200091df55 [ 93.816602][ T5885] R13: 0000000000000000 R14: ffffc900048efaac R15: ffff0a00ffffff00 [ 93.824806][ T5885] ? format_decode+0xcfd/0x13d0 [ 93.829868][ T5885] bstr_printf+0xc4/0xf90 [ 93.834310][ T5885] ? lock_chain_count+0x20/0x20 [ 93.839556][ T5885] ? bpf_trace_printk+0xc2/0x190 [ 93.844648][ T5885] bpf_trace_printk+0x10f/0x190 [ 93.849816][ T5885] ? ktime_get+0x7f/0x280 [ 93.854183][ T5885] ? bpf_probe_write_user+0xe0/0xe0 [ 93.859574][ T5885] ? bpf_prog_test_run+0x321/0x390 [ 93.864880][ T5885] ? __local_bh_disable_ip+0xf2/0x190 [ 93.870752][ T5885] ? read_tsc+0x9/0x20 [ 93.874838][ T5885] ? ktime_get+0x24b/0x280 [ 93.879473][ T5885] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 93.885048][ T5885] bpf_test_run+0x340/0x8a0 [ 93.889807][ T5885] ? bpf_test_run+0x1da/0x8a0 [ 93.894766][ T5885] ? convert___skb_to_skb+0x590/0x590 [ 93.900159][ T5885] ? eth_get_headlen+0x200/0x200 [ 93.905341][ T5885] ? slab_build_skb+0x25f/0x3f0 [ 93.910324][ T5885] ? convert___skb_to_skb+0x3d/0x590 [ 93.916056][ T5885] bpf_prog_test_run_skb+0xa67/0x11c0 [ 93.921719][ T5885] ? cpu_online+0x60/0x60 [ 93.926176][ T5885] bpf_prog_test_run+0x321/0x390 [ 93.931505][ T5885] __sys_bpf+0x440/0x800 [ 93.936351][ T5885] ? bpf_link_show_fdinfo+0x350/0x350 [ 93.942129][ T5885] ? lock_chain_count+0x20/0x20 [ 93.947145][ T5885] __x64_sys_bpf+0x7c/0x90 [ 93.952185][ T5885] do_syscall_64+0x55/0xb0 [ 93.957260][ T5885] ? clear_bhb_loop+0x40/0x90 [ 93.962475][ T5885] ? clear_bhb_loop+0x40/0x90 [ 93.967462][ T5885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.973502][ T5885] RIP: 0033:0x7f0ba878e929 [ 93.978048][ T5885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.998077][ T5885] RSP: 002b:00007f0ba9646038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.006821][ T5885] RAX: ffffffffffffffda RBX: 00007f0ba89b5fa0 RCX: 00007f0ba878e929 [ 94.014936][ T5885] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 94.023232][ T5885] RBP: 00007f0ba8810b39 R08: 0000000000000000 R09: 0000000000000000 [ 94.031247][ T5885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.039826][ T5885] R13: 0000000000000000 R14: 00007f0ba89b5fa0 R15: 00007ffe18dd7378 [ 94.048017][ T5885] [ 94.051524][ T5885] Kernel Offset: disabled [ 94.056321][ T5885] Rebooting in 86400 seconds..