last executing test programs: 2.911809881s ago: executing program 3 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffffd6c0, r3, 0x0, 0xf2ff}, 0x38) 2.351823465s ago: executing program 2 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.080990321s ago: executing program 1 (id=611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.955187813s ago: executing program 2 (id=612): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.741044093s ago: executing program 1 (id=616): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.662523071s ago: executing program 3 (id=618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c3000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.556807321s ago: executing program 2 (id=619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.414342774s ago: executing program 4 (id=620): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 1.404291806s ago: executing program 3 (id=621): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x640, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.373466438s ago: executing program 1 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 1.292157946s ago: executing program 0 (id=623): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 1.239481581s ago: executing program 4 (id=624): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.193995126s ago: executing program 3 (id=625): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xb3d8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.032087231s ago: executing program 2 (id=626): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.031812351s ago: executing program 4 (id=627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000300), &(0x7f0000000340)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r1}, 0xc) 1.012146813s ago: executing program 1 (id=628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 939.19119ms ago: executing program 0 (id=629): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 840.090969ms ago: executing program 4 (id=630): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 754.370337ms ago: executing program 0 (id=631): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x10, 0x0, 0x0, 0x0, 0x7fef, 0x4592, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0}, 0x14105, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) 652.387268ms ago: executing program 2 (id=632): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000002000000000000800000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f5c4e59f8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x6, 0x0, 0x1}, 0x50) 588.139094ms ago: executing program 0 (id=633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) 514.55581ms ago: executing program 0 (id=634): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 425.702719ms ago: executing program 1 (id=635): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 331.973898ms ago: executing program 3 (id=636): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0xd, 0x0, 0x0, 0x0, 0x2, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xc}, 0x1002, 0x0, 0x0, 0x9, 0x3fe, 0x7ffdffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='$', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 331.592888ms ago: executing program 4 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 267.819824ms ago: executing program 2 (id=638): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 226.058958ms ago: executing program 0 (id=639): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f00000006c0)="cb030000004c0b24676c6c71ae37efcedaf46242309766deb4e793f90000000000fb000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f3df056e4984e8b05ed2c4a920711fb4154b544672fc569e52bca80efaa99b0ea491c8999997c97c20517071900fdb72c92faadd3c304d838b1771aa94e1ef38983ac314bf11275d8b5099110a730139be654440b72eaf6c035dec41a", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000e00)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x3, 0x0, 0x3ff}, 0x23) 168.118483ms ago: executing program 1 (id=640): bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 92.533541ms ago: executing program 3 (id=641): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 4 (id=642): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. [ 74.118579][ T4253] cgroup: Unknown subsys name 'net' [ 74.223953][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.785517][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.191276][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.200040][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.208285][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.216199][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.248394][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.256197][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.265250][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.272809][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.280704][ T4273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.288597][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.295910][ T4273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.304260][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.311666][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.319610][ T4273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.326857][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.334240][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.357616][ T4270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.390986][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.437793][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.446126][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.454043][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.462135][ T4273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.470020][ T4273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.479563][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.528436][ T4267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.537135][ T4267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.545360][ T4267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.553757][ T4267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.561561][ T4267] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.568982][ T4267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.962471][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 77.973216][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 78.096979][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 78.142012][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 78.156170][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 78.212374][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.220741][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.229305][ T4269] device bridge_slave_0 entered promiscuous mode [ 78.243161][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.250734][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.258887][ T4269] device bridge_slave_1 entered promiscuous mode [ 78.285399][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.292671][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.301264][ T4268] device bridge_slave_0 entered promiscuous mode [ 78.342074][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.350030][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.358511][ T4268] device bridge_slave_1 entered promiscuous mode [ 78.375573][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.415960][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.464307][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.471710][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.480401][ T4264] device bridge_slave_0 entered promiscuous mode [ 78.490029][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.525345][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.532774][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.541012][ T4264] device bridge_slave_1 entered promiscuous mode [ 78.558562][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.576702][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.583953][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.592570][ T4275] device bridge_slave_0 entered promiscuous mode [ 78.611146][ T4269] team0: Port device team_slave_0 added [ 78.635169][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.642579][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.651148][ T4275] device bridge_slave_1 entered promiscuous mode [ 78.658560][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.665734][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.674737][ T4277] device bridge_slave_0 entered promiscuous mode [ 78.683480][ T4269] team0: Port device team_slave_1 added [ 78.700472][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.712743][ T4268] team0: Port device team_slave_0 added [ 78.738715][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.745944][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.754689][ T4277] device bridge_slave_1 entered promiscuous mode [ 78.771763][ T4268] team0: Port device team_slave_1 added [ 78.779691][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.791173][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.810913][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.818046][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.845010][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.875477][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.901084][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.908468][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.935346][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.975908][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.000260][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.007466][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.033720][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.047849][ T4264] team0: Port device team_slave_0 added [ 79.054462][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.062581][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.089230][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.112558][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.138084][ T4264] team0: Port device team_slave_1 added [ 79.163764][ T4277] team0: Port device team_slave_0 added [ 79.173021][ T4275] team0: Port device team_slave_0 added [ 79.190927][ T4269] device hsr_slave_0 entered promiscuous mode [ 79.199283][ T4269] device hsr_slave_1 entered promiscuous mode [ 79.225626][ T4277] team0: Port device team_slave_1 added [ 79.233942][ T4275] team0: Port device team_slave_1 added [ 79.248080][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.255101][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.281146][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.296919][ T4268] device hsr_slave_0 entered promiscuous mode [ 79.303941][ T4268] device hsr_slave_1 entered promiscuous mode [ 79.311125][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.319268][ T4268] Cannot create hsr debugfs directory [ 79.341545][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.348670][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.375140][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.387878][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 79.394219][ T4267] Bluetooth: hci1: command 0x0409 tx timeout [ 79.448953][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.455942][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.482244][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 79.484435][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.500658][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.507757][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.534212][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.547435][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 79.568559][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.575574][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.601695][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.613884][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.620960][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.647086][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.647870][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 79.682504][ T4264] device hsr_slave_0 entered promiscuous mode [ 79.689623][ T4264] device hsr_slave_1 entered promiscuous mode [ 79.696230][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.704323][ T4264] Cannot create hsr debugfs directory [ 79.801527][ T4275] device hsr_slave_0 entered promiscuous mode [ 79.808662][ T4275] device hsr_slave_1 entered promiscuous mode [ 79.815685][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.823491][ T4275] Cannot create hsr debugfs directory [ 79.833594][ T4277] device hsr_slave_0 entered promiscuous mode [ 79.840707][ T4277] device hsr_slave_1 entered promiscuous mode [ 79.847676][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.855383][ T4277] Cannot create hsr debugfs directory [ 80.160332][ T4268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.174435][ T4268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.186932][ T4268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.213094][ T4268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.281986][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.292315][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.310536][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.322419][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.380995][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.395095][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.405364][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.438524][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.507943][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.517847][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.528802][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.560480][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.574126][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.630978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.642476][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.675699][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.689899][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.709410][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.720818][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.743901][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.754049][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.763654][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.773609][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.781051][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.791184][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.801310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.811611][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.821656][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.831226][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.838411][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.846483][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.863632][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.871534][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.883340][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.931998][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.939767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.951469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.960521][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.967732][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.975673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.985086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.994140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.002937][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.010202][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.021704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.047458][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.056689][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.069178][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.079000][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.090960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.116231][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.126061][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.135140][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.145516][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.160853][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.189349][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.198878][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.209306][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.220153][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.235724][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.245217][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.254376][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.266838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.276039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.285570][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.292795][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.305769][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.319101][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.335097][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.343646][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.352691][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.364433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.374337][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.383150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.392899][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.412049][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.454269][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.473789][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 81.480810][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 81.510978][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.522769][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.532454][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.539670][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.547594][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 81.573213][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.608738][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.627981][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 81.628997][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.657862][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.700656][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.712854][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.718523][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 81.736692][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.746179][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.760976][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.772317][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.779519][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.787857][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.796802][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.806210][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.813413][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.823894][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.833612][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.841878][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.864398][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.874918][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.886621][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.920994][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.938913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.958218][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.977883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.997856][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.017688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.028950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.073347][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.098936][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.129090][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.150886][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.171342][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.189069][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.206375][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.220624][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.234903][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.253659][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.277539][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.285486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.299159][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.306807][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.342041][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.366043][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.376798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.389929][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.401131][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.410232][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.417417][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.425977][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.435989][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.457929][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.465190][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.492461][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.520441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.529300][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.580874][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.598457][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.620509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.661879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.678615][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.696599][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.706575][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.728584][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.745100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.755736][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.766201][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.776264][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.821292][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.831262][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.850510][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.868037][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.886496][ T4268] device veth0_vlan entered promiscuous mode [ 82.904774][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.926692][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.939676][ T4269] device veth0_vlan entered promiscuous mode [ 82.957442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.972910][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.983184][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.998305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.011644][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.021328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.035403][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.046173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.075809][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.107695][ T4268] device veth1_vlan entered promiscuous mode [ 83.149594][ T4269] device veth1_vlan entered promiscuous mode [ 83.211741][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.221411][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.241921][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.276343][ T4268] device veth0_macvtap entered promiscuous mode [ 83.293357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.317940][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.333155][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.342674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.351816][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.368110][ T4268] device veth1_macvtap entered promiscuous mode [ 83.385677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.398165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.407717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.420270][ T4269] device veth0_macvtap entered promiscuous mode [ 83.451852][ T4264] device veth0_vlan entered promiscuous mode [ 83.461869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.472646][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.485235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.501415][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.512983][ T4269] device veth1_macvtap entered promiscuous mode [ 83.528936][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.538373][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.546457][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.554982][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 83.561474][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 83.571447][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.581013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.593742][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.625173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.635423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.639769][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 83.653206][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.663129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.681188][ T4264] device veth1_vlan entered promiscuous mode [ 83.697536][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.706499][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.718420][ T4273] Bluetooth: hci3: command 0x040f tx timeout [ 83.745164][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.754281][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.770286][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.786299][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.797252][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 83.806370][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.832090][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.841959][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.853733][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.870018][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.880895][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.893672][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.906370][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.916934][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.926455][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.935622][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.961583][ T4275] device veth0_vlan entered promiscuous mode [ 83.975095][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.983534][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.992860][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.002191][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.011632][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.022893][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.031482][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.041582][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.049942][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.081743][ T4264] device veth0_macvtap entered promiscuous mode [ 84.099986][ T4275] device veth1_vlan entered promiscuous mode [ 84.108705][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.118545][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.127772][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.136670][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.163934][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.196596][ T4264] device veth1_macvtap entered promiscuous mode [ 84.372934][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.389292][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.401487][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.415382][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.432981][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.457796][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.465890][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.476886][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.478295][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.496070][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.510777][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.514346][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.529744][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.542355][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.550455][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.561622][ T4275] device veth0_macvtap entered promiscuous mode [ 84.576423][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.594871][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.605912][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.617534][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.629687][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.642248][ T4275] device veth1_macvtap entered promiscuous mode [ 84.663355][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.680201][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.690069][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.705904][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.726085][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.738164][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.749442][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.759252][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.825051][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.843671][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.855627][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.868644][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.879438][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.890837][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.901787][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.912716][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.925473][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.952291][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.960607][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.970186][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.983100][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.984440][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.009702][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.017081][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.017098][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.017114][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.017126][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.017139][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.027466][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.095704][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.108462][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.119845][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.132036][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.148382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.156491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.184588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.380403][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.427402][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.456508][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.497505][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.505552][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.534226][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.552353][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.582686][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.591435][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.603841][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.610704][ C1] hrtimer: interrupt took 77607 ns [ 85.622986][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.646745][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 85.659175][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 85.707389][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 85.725866][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.756564][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.775668][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.784321][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.798824][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 85.814124][ T4277] device veth0_vlan entered promiscuous mode [ 85.817993][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.867720][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 85.881948][ T4277] device veth1_vlan entered promiscuous mode [ 85.910963][ T4391] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.1'. [ 85.926508][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.981882][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.997984][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.032337][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.227629][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.248210][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.292089][ T4277] device veth0_macvtap entered promiscuous mode [ 86.334961][ T4277] device veth1_macvtap entered promiscuous mode [ 86.447775][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.485434][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.522537][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.564263][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.615187][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.633286][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.646844][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.665125][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.695303][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.726103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.737502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.751234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.761545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.774057][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.795249][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.808011][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.826418][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.838829][ T129] cfg80211: failed to load regulatory.db [ 86.853240][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.875649][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.898352][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.920571][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.956133][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.090746][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.106169][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.183089][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.222209][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.277938][ T4424] netlink: 'syz.3.12': attribute type 29 has an invalid length. [ 87.286345][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.295379][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.319862][ T4424] netlink: 'syz.3.12': attribute type 29 has an invalid length. [ 87.544598][ T4427] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 87.649640][ T4431] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 87.834597][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.874544][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.926780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.961180][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.998873][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.061224][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.215368][ T4463] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 89.855904][ T4486] netlink: 'syz.0.27': attribute type 10 has an invalid length. [ 89.909029][ T4486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'. [ 89.977417][ T4486] device team0 entered promiscuous mode [ 90.042141][ T4486] device team_slave_0 entered promiscuous mode [ 90.096703][ T4486] device team_slave_1 entered promiscuous mode [ 90.164488][ T4486] bridge0: port 3(team0) entered blocking state [ 90.232044][ T4486] bridge0: port 3(team0) entered disabled state [ 90.301790][ T4486] bridge0: port 3(team0) entered blocking state [ 90.308511][ T4486] bridge0: port 3(team0) entered forwarding state [ 90.366009][ T4499] netlink: 'syz.0.27': attribute type 10 has an invalid length. [ 90.453695][ T4514] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.34'. [ 90.490934][ T4499] device wlan1 entered promiscuous mode [ 90.506543][ T4499] team0: Port device wlan1 added [ 90.528029][ T4502] netlink: 'syz.4.32': attribute type 10 has an invalid length. [ 90.539354][ T4502] netlink: 168 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.569720][ T4504] netlink: 'syz.4.32': attribute type 10 has an invalid length. [ 90.620655][ T4504] netlink: 168 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.752067][ T4518] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 90.768815][ T4518] syzkaller1: group set to 778 [ 90.817231][ T4519] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 90.823166][ T4519] syzkaller1: group set to 778 [ 92.056496][ T4545] netlink: 188 bytes leftover after parsing attributes in process `syz.0.43'. [ 93.695080][ T4605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.57'. [ 94.811877][ T4613] netlink: 'syz.2.60': attribute type 39 has an invalid length. [ 95.686872][ T4635] netlink: 830 bytes leftover after parsing attributes in process `syz.0.65'. [ 99.084356][ T4656] syzkaller0: tun_chr_ioctl cmd 35092 [ 99.490727][ T4669] netlink: 112 bytes leftover after parsing attributes in process `syz.1.79'. [ 99.633132][ T4676] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.81'. [ 100.075256][ T4681] netlink: 'syz.1.83': attribute type 3 has an invalid length. [ 100.097288][ T4681] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.83'. [ 100.666004][ T4699] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.89'. [ 100.965410][ T4719] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.92'. [ 101.696610][ T4750] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 101.713085][ T4750] netlink: 55 bytes leftover after parsing attributes in process `syz.3.101'. [ 101.843728][ T4754] netlink: 'syz.1.103': attribute type 21 has an invalid length. [ 102.268040][ T4759] device syzkaller0 entered promiscuous mode [ 102.329581][ T4769] netlink: 64851 bytes leftover after parsing attributes in process `syz.4.105'. [ 102.651847][ T4777] netlink: 'syz.0.109': attribute type 3 has an invalid length. [ 102.666670][ T4777] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.109'. [ 103.808750][ T4793] netlink: 60 bytes leftover after parsing attributes in process `syz.4.114'. [ 105.222813][ T4795] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 105.268594][ T4795] syzkaller1: group set to 778 [ 105.372852][ T4803] Zero length message leads to an empty skb [ 106.620405][ T4830] IPv6: Can't replace route, no match found [ 107.134222][ T4846] netlink: 'syz.3.130': attribute type 10 has an invalid length. [ 107.504260][ T4846] team0: Port device vlan0 added [ 107.714798][ T4846] syz.3.130 (4846) used greatest stack depth: 19944 bytes left [ 107.787879][ T4866] netlink: 'syz.0.135': attribute type 2 has an invalid length. [ 107.807072][ T4866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.135'. [ 107.982594][ T4874] netlink: 40 bytes leftover after parsing attributes in process `syz.3.137'. [ 108.794871][ T4896] netlink: 'syz.1.146': attribute type 46 has an invalid length. [ 108.805310][ T4896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.146'. [ 109.269932][ T4917] netlink: 'syz.0.152': attribute type 4 has an invalid length. [ 109.313201][ T4917] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.152'. [ 111.146647][ T4990] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.171'. [ 111.211801][ T4993] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.171'. [ 111.237034][ T4993] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 111.256650][ T4993] CPU: 1 PID: 4993 Comm: syz.3.171 Not tainted syzkaller #0 [ 111.264025][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.274150][ T4993] Call Trace: [ 111.277479][ T4993] [ 111.280451][ T4993] dump_stack_lvl+0x168/0x22e [ 111.285228][ T4993] ? show_regs_print_info+0x12/0x12 [ 111.290497][ T4993] ? load_image+0x3b0/0x3b0 [ 111.295080][ T4993] sysfs_warn_dup+0x8a/0xa0 [ 111.299677][ T4993] sysfs_do_create_link_sd+0xc0/0x110 [ 111.305150][ T4993] device_add+0x7ed/0xfb0 [ 111.309554][ T4993] wiphy_register+0x1e68/0x2bd0 [ 111.314578][ T4993] ? cfg80211_event_work+0x40/0x40 [ 111.319745][ T4993] ? minstrel_ht_alloc+0x894/0xa20 [ 111.324939][ T4993] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 111.331065][ T4993] ieee80211_register_hw+0x2d16/0x39e0 [ 111.336688][ T4993] ? ieee80211_register_hw+0xf01/0x39e0 [ 111.342299][ T4993] ? ieee80211_register_hw+0xf01/0x39e0 [ 111.347916][ T4993] ? ieee80211_tasklet_handler+0x20/0x20 [ 111.353618][ T4993] ? memset+0x1e/0x40 [ 111.357647][ T4993] ? __hrtimer_init+0x186/0x270 [ 111.362550][ T4993] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 111.368350][ T4993] hwsim_new_radio_nl+0xafa/0xce0 [ 111.373448][ T4993] genl_family_rcv_msg_doit+0x22e/0x320 [ 111.379041][ T4993] ? end_current_label_crit_section+0x170/0x170 [ 111.385352][ T4993] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 111.391310][ T4993] ? bpf_lsm_capable+0x5/0x10 [ 111.396035][ T4993] ? security_capable+0x85/0xb0 [ 111.400955][ T4993] genl_rcv_msg+0x5f2/0x780 [ 111.405530][ T4993] ? genl_bind+0x350/0x350 [ 111.410040][ T4993] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 111.416444][ T4993] netlink_rcv_skb+0x1de/0x420 [ 111.421453][ T4993] ? genl_bind+0x350/0x350 [ 111.425928][ T4993] ? netlink_ack+0x1100/0x1100 [ 111.430748][ T4993] ? down_read+0x1a8/0x2d0 [ 111.435260][ T4993] genl_rcv+0x24/0x40 [ 111.439290][ T4993] netlink_unicast+0x74d/0x8d0 [ 111.444124][ T4993] netlink_sendmsg+0x89e/0xbc0 [ 111.448952][ T4993] ? netlink_getsockopt+0x540/0x540 [ 111.454999][ T4993] ? aa_sock_msg_perm+0x94/0x150 [ 111.460102][ T4993] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 111.465437][ T4993] ? security_socket_sendmsg+0x7c/0xa0 [ 111.470970][ T4993] ? netlink_getsockopt+0x540/0x540 [ 111.476399][ T4993] ____sys_sendmsg+0x59b/0x970 [ 111.481317][ T4993] ? __sys_sendmsg_sock+0x30/0x30 [ 111.486407][ T4993] ? __import_iovec+0x315/0x500 [ 111.491355][ T4993] ? import_iovec+0x6f/0xa0 [ 111.495932][ T4993] ___sys_sendmsg+0x21c/0x290 [ 111.500758][ T4993] ? __sys_sendmsg+0x270/0x270 [ 111.505716][ T4993] ? __fdget+0x17c/0x200 [ 111.510021][ T4993] __se_sys_sendmsg+0x19e/0x270 [ 111.514923][ T4993] ? __se_sys_futex+0x14a/0x440 [ 111.519908][ T4993] ? __x64_sys_sendmsg+0x80/0x80 [ 111.525004][ T4993] ? lockdep_hardirqs_on+0x94/0x140 [ 111.530346][ T4993] do_syscall_64+0x4c/0xa0 [ 111.534846][ T4993] ? clear_bhb_loop+0x60/0xb0 [ 111.539682][ T4993] ? clear_bhb_loop+0x60/0xb0 [ 111.544448][ T4993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.550469][ T4993] RIP: 0033:0x7f55dcf8f749 [ 111.554939][ T4993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.574679][ T4993] RSP: 002b:00007f55dddce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.583265][ T4993] RAX: ffffffffffffffda RBX: 00007f55dd1e6180 RCX: 00007f55dcf8f749 [ 111.591382][ T4993] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 111.599396][ T4993] RBP: 00007f55dd013f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.607417][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.615436][ T4993] R13: 00007f55dd1e6218 R14: 00007f55dd1e6180 R15: 00007ffc7d57b758 [ 111.623491][ T4993] [ 112.131544][ T5008] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.639788][ T5041] device syzkaller0 entered promiscuous mode [ 112.686596][ T5044] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 112.703367][ T5039] netlink: 'syz.2.181': attribute type 17 has an invalid length. [ 112.714241][ T5044] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.181'. [ 112.732418][ T5039] netlink: 152 bytes leftover after parsing attributes in process `syz.2.181'. [ 112.777977][ T5039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.700028][ T5066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.189'. [ 114.843925][ T5057] IPv6: Can't replace route, no match found [ 114.850542][ T5060] netlink: 'syz.3.186': attribute type 2 has an invalid length. [ 114.863673][ T5060] netlink: 132 bytes leftover after parsing attributes in process `syz.3.186'. [ 114.893552][ T5061] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 114.897308][ T26] audit: type=1800 audit(1766575533.912:2): pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.187" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 114.942224][ T5061] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 114.994850][ T5061] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 115.144070][ T5079] sctp: [Deprecated]: syz.3.192 (pid 5079) Use of int in maxseg socket option. [ 115.144070][ T5079] Use struct sctp_assoc_value instead [ 115.543291][ T5095] netlink: 'syz.2.196': attribute type 19 has an invalid length. [ 115.553678][ T5095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.196'. [ 116.234934][ T5109] netlink: 'syz.3.200': attribute type 9 has an invalid length. [ 116.464905][ T5125] netlink: 60 bytes leftover after parsing attributes in process `syz.2.203'. [ 116.480174][ T5125] netlink: 60 bytes leftover after parsing attributes in process `syz.2.203'. [ 116.529912][ T5125] netlink: 56 bytes leftover after parsing attributes in process `syz.2.203'. [ 116.594599][ T5127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.203'. [ 116.637306][ T5130] netlink: 'syz.1.199': attribute type 13 has an invalid length. [ 116.689069][ T5130] netlink: 160 bytes leftover after parsing attributes in process `syz.1.199'. [ 116.722133][ T5125] netlink: 10 bytes leftover after parsing attributes in process `syz.2.203'. [ 117.198341][ T5139] netlink: 60 bytes leftover after parsing attributes in process `syz.2.207'. [ 119.328481][ T5197] netlink: 'syz.2.224': attribute type 3 has an invalid length. [ 119.336361][ T5197] __nla_validate_parse: 3 callbacks suppressed [ 119.336393][ T5197] netlink: 132 bytes leftover after parsing attributes in process `syz.2.224'. [ 119.424262][ T5197] netlink: 'syz.2.224': attribute type 27 has an invalid length. [ 119.644978][ T5197] bond0: (slave bond_slave_0): Releasing backup interface [ 120.102318][ T5220] netlink: 'syz.3.229': attribute type 21 has an invalid length. [ 120.356312][ T5228] netlink: 'syz.4.234': attribute type 29 has an invalid length. [ 120.948650][ T5247] delete_channel: no stack [ 121.615867][ T5256] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 121.653941][ T5256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.241'. [ 121.701362][ T5256] bridge0: port 3(veth0_vlan) entered blocking state [ 121.757719][ T5256] bridge0: port 3(veth0_vlan) entered disabled state [ 121.844523][ T5256] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 122.452389][ T5258] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.240'. [ 123.119815][ T5296] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.252'. [ 124.163780][ T5296] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 128.053136][ T5319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.262'. [ 128.064466][ T5333] netlink: 'syz.1.265': attribute type 10 has an invalid length. [ 128.092712][ T5333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.118621][ T5333] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 128.128685][ T5347] netlink: 'syz.3.269': attribute type 6 has an invalid length. [ 128.136488][ T5347] netlink: 164 bytes leftover after parsing attributes in process `syz.3.269'. [ 128.421795][ T5358] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.272'. [ 131.553497][ T5419] netlink: 'syz.3.287': attribute type 6 has an invalid length. [ 131.602233][ T5419] netlink: 164 bytes leftover after parsing attributes in process `syz.3.287'. [ 131.718546][ T5425] netlink: 'syz.0.289': attribute type 5 has an invalid length. [ 132.422642][ T5449] netlink: 148 bytes leftover after parsing attributes in process `syz.0.295'. [ 132.968235][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.975898][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.617250][ T5506] netlink: 'syz.0.310': attribute type 39 has an invalid length. [ 133.641208][ T4274] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 133.641265][ T4274] Bluetooth: unknown link type 105 [ 133.703656][ T5506] device veth0_macvtap left promiscuous mode [ 134.328305][ T5517] tap0: tun_chr_ioctl cmd 1074025675 [ 134.333692][ T5517] tap0: persist disabled [ 134.547403][ T5527] netlink: 60 bytes leftover after parsing attributes in process `syz.1.316'. [ 135.211579][ T5530] netlink: 'syz.1.316': attribute type 10 has an invalid length. [ 135.247885][ T5530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.316'. [ 135.267500][ T5530] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 135.290899][ T5530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.648869][ T5545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.320'. [ 135.698609][ T5545] device caif0 entered promiscuous mode [ 135.707515][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 136.002976][ T5558] netlink: 'syz.3.325': attribute type 21 has an invalid length. [ 136.073394][ T5565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.744637][ T5602] device syzkaller0 entered promiscuous mode [ 137.885799][ T5610] syz.4.340 (5610) used greatest stack depth: 16648 bytes left [ 139.750327][ T5616] netlink: 'syz.2.342': attribute type 10 has an invalid length. [ 139.773886][ T5616] team0: Port device wlan1 added [ 139.787984][ T5622] netlink: 'syz.4.344': attribute type 5 has an invalid length. [ 139.820756][ T5636] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 139.841721][ T5636] netlink: 144 bytes leftover after parsing attributes in process `syz.3.347'. [ 140.074393][ T5644] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.350'. [ 140.306420][ T5654] netlink: 164 bytes leftover after parsing attributes in process `syz.1.352'. [ 140.578295][ T5664] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.357'. [ 140.870312][ T5664] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 143.518904][ T5730] netlink: 132 bytes leftover after parsing attributes in process `syz.3.371'. [ 143.596291][ T5733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.370'. [ 144.590759][ T5785] netlink: 'syz.1.385': attribute type 10 has an invalid length. [ 144.651046][ T5785] team0: Device ipvlan1 failed to register rx_handler [ 144.775812][ T5792] netlink: 10 bytes leftover after parsing attributes in process `syz.3.388'. [ 145.138675][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 145.326583][ T5812] netlink: 'syz.0.394': attribute type 21 has an invalid length. [ 145.375046][ T5809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.393'. [ 146.192974][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.201259][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.648756][ T5871] device veth1_macvtap left promiscuous mode [ 148.521743][ T5913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.417'. [ 149.008033][ T5925] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.422'. [ 150.138243][ T5963] netlink: 'syz.2.430': attribute type 2 has an invalid length. [ 150.531535][ T5970] netlink: 164 bytes leftover after parsing attributes in process `syz.0.432'. [ 150.953795][ T5979] netlink: 'syz.4.435': attribute type 21 has an invalid length. [ 151.029951][ T5979] netlink: 132 bytes leftover after parsing attributes in process `syz.4.435'. [ 151.394352][ T5990] netlink: 'syz.4.438': attribute type 3 has an invalid length. [ 151.478170][ T5990] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.438'. [ 155.886204][ T6041] device wlan0 entered promiscuous mode [ 156.268163][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 156.287278][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 156.324278][ T6054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 156.606246][ T6063] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.461'. [ 157.720477][ T6097] netlink: 'syz.2.469': attribute type 11 has an invalid length. [ 157.778073][ T6097] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.469'. [ 158.042250][ T6104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.078873][ T6107] netlink: 'syz.1.471': attribute type 10 has an invalid length. [ 158.086759][ T6107] device bridge_slave_1 left promiscuous mode [ 158.197550][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.366531][ T6116] netlink: 'syz.2.474': attribute type 2 has an invalid length. [ 158.414860][ T6116] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.474'. [ 158.544365][ T6119] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.475'. [ 158.591861][ T6117] team0: Port device team_slave_0 removed [ 158.598916][ T6117] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 158.619916][ T6122] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.476'. [ 158.636138][ T6125] netlink: 'syz.0.477': attribute type 2 has an invalid length. [ 158.660609][ T6119] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 158.669335][ T6125] netlink: 10 bytes leftover after parsing attributes in process `syz.0.477'. [ 158.686784][ T6119] CPU: 1 PID: 6119 Comm: syz.3.475 Not tainted syzkaller #0 [ 158.694125][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.704577][ T6119] Call Trace: [ 158.707894][ T6119] [ 158.710853][ T6119] dump_stack_lvl+0x168/0x22e [ 158.715583][ T6119] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 158.721862][ T6119] ? show_regs_print_info+0x12/0x12 [ 158.727103][ T6119] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 158.733316][ T6119] sysfs_warn_dup+0x8a/0xa0 [ 158.737866][ T6119] sysfs_do_create_link_sd+0xc0/0x110 [ 158.743275][ T6119] device_add+0x7ed/0xfb0 [ 158.747746][ T6119] wiphy_register+0x1e68/0x2bd0 [ 158.752653][ T6119] ? cfg80211_event_work+0x40/0x40 [ 158.757797][ T6119] ? minstrel_ht_alloc+0x894/0xa20 [ 158.762953][ T6119] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 158.769049][ T6119] ieee80211_register_hw+0x2d16/0x39e0 [ 158.774551][ T6119] ? ieee80211_register_hw+0xf01/0x39e0 [ 158.780135][ T6119] ? ieee80211_register_hw+0xf01/0x39e0 [ 158.785739][ T6119] ? ieee80211_tasklet_handler+0x20/0x20 [ 158.791426][ T6119] ? memset+0x1e/0x40 [ 158.795445][ T6119] ? __hrtimer_init+0x186/0x270 [ 158.800340][ T6119] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 158.806104][ T6119] hwsim_new_radio_nl+0xafa/0xce0 [ 158.811166][ T6119] genl_family_rcv_msg_doit+0x22e/0x320 [ 158.816856][ T6119] ? end_current_label_crit_section+0x170/0x170 [ 158.823164][ T6119] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 158.829131][ T6119] ? bpf_lsm_capable+0x5/0x10 [ 158.833883][ T6119] ? security_capable+0x85/0xb0 [ 158.838775][ T6119] genl_rcv_msg+0x5f2/0x780 [ 158.843320][ T6119] ? genl_bind+0x350/0x350 [ 158.847794][ T6119] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 158.854165][ T6119] netlink_rcv_skb+0x1de/0x420 [ 158.858957][ T6119] ? genl_bind+0x350/0x350 [ 158.863403][ T6119] ? netlink_ack+0x1100/0x1100 [ 158.868199][ T6119] ? down_read+0x1a8/0x2d0 [ 158.872654][ T6119] genl_rcv+0x24/0x40 [ 158.876662][ T6119] netlink_unicast+0x74d/0x8d0 [ 158.881470][ T6119] netlink_sendmsg+0x89e/0xbc0 [ 158.886289][ T6119] ? netlink_getsockopt+0x540/0x540 [ 158.891511][ T6119] ? __sanitizer_cov_trace_pc+0x58/0x60 [ 158.897094][ T6119] ? aa_sock_msg_perm+0x94/0x150 [ 158.902072][ T6119] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 158.907392][ T6119] ? security_socket_sendmsg+0x7c/0xa0 [ 158.912978][ T6119] ? netlink_getsockopt+0x540/0x540 [ 158.918270][ T6119] ____sys_sendmsg+0x59b/0x970 [ 158.923068][ T6119] ? __sys_sendmsg_sock+0x30/0x30 [ 158.928119][ T6119] ? __import_iovec+0x315/0x500 [ 158.933018][ T6119] ? import_iovec+0x6f/0xa0 [ 158.937564][ T6119] ___sys_sendmsg+0x21c/0x290 [ 158.942360][ T6119] ? __sys_sendmsg+0x270/0x270 [ 158.947168][ T6119] ? rcu_is_watching+0x11/0xa0 [ 158.952082][ T6119] __se_sys_sendmsg+0x19e/0x270 [ 158.956964][ T6119] ? __se_sys_futex+0x14a/0x440 [ 158.961946][ T6119] ? __x64_sys_sendmsg+0x80/0x80 [ 158.966928][ T6119] ? lockdep_hardirqs_on+0x94/0x140 [ 158.972164][ T6119] do_syscall_64+0x4c/0xa0 [ 158.976618][ T6119] ? clear_bhb_loop+0x60/0xb0 [ 158.981329][ T6119] ? clear_bhb_loop+0x60/0xb0 [ 158.986040][ T6119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.991967][ T6119] RIP: 0033:0x7f55dcf8f749 [ 158.996428][ T6119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.016184][ T6119] RSP: 002b:00007f55dde10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.024635][ T6119] RAX: ffffffffffffffda RBX: 00007f55dd1e5fa0 RCX: 00007f55dcf8f749 [ 159.032732][ T6119] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 159.040756][ T6119] RBP: 00007f55dd013f91 R08: 0000000000000000 R09: 0000000000000000 [ 159.048770][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.056771][ T6119] R13: 00007f55dd1e6038 R14: 00007f55dd1e5fa0 R15: 00007ffc7d57b758 [ 159.064792][ T6119] [ 159.165590][ T6127] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.476'. [ 159.243539][ T6127] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 159.391413][ T6134] netlink: 'syz.1.478': attribute type 28 has an invalid length. [ 159.472637][ T6134] netlink: 'syz.1.478': attribute type 3 has an invalid length. [ 161.668633][ T6176] netlink: 'syz.1.491': attribute type 8 has an invalid length. [ 161.676561][ T6176] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 161.686378][ T6176] __nla_validate_parse: 1 callbacks suppressed [ 161.686392][ T6176] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.491'. [ 161.877853][ T6183] netlink: 'syz.3.494': attribute type 21 has an invalid length. [ 161.890393][ T6183] netlink: 10276 bytes leftover after parsing attributes in process `syz.3.494'. [ 161.904654][ T6183] raw_sendmsg: syz.3.494 forgot to set AF_INET. Fix it! [ 163.000677][ T6220] netlink: 'syz.1.503': attribute type 10 has an invalid length. [ 163.175878][ T6220] team0: Port device netdevsim0 added [ 163.218425][ T6223] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.507'. [ 163.509186][ T6234] netlink: 'syz.4.509': attribute type 29 has an invalid length. [ 163.547825][ T6234] netlink: 'syz.4.509': attribute type 29 has an invalid length. [ 163.579414][ T6235] netlink: 'syz.4.509': attribute type 29 has an invalid length. [ 164.079701][ T6261] netlink: 'syz.3.515': attribute type 7 has an invalid length. [ 164.832752][ T6294] netlink: 14 bytes leftover after parsing attributes in process `syz.3.525'. [ 165.517693][ T6300] netlink: 'syz.4.528': attribute type 3 has an invalid length. [ 165.630964][ T6300] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.528'. [ 165.682223][ T6294] device hsr_slave_1 left promiscuous mode [ 169.412835][ T6348] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.542'. [ 169.523821][ T6352] bridge0: port 2(veth0_to_bridge) entered blocking state [ 169.552192][ T6352] bridge0: port 2(veth0_to_bridge) entered disabled state [ 169.604723][ T6352] device veth0_to_bridge entered promiscuous mode [ 169.639711][ T6352] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.688681][ T6352] bridge0: port 2(veth0_to_bridge) entered blocking state [ 169.696425][ T6352] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 169.916593][ T6364] netlink: 763 bytes leftover after parsing attributes in process `syz.2.548'. [ 170.014153][ T6372] netlink: 'syz.3.550': attribute type 1 has an invalid length. [ 170.035001][ T6372] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.550'. [ 170.473215][ T6378] device syzkaller0 entered promiscuous mode [ 170.817781][ T6371] delete_channel: no stack [ 170.996310][ T6376] delete_channel: no stack [ 173.201782][ T6398] netlink: 14 bytes leftover after parsing attributes in process `syz.4.556'. [ 173.211513][ T6398] device hsr_slave_0 left promiscuous mode [ 173.220415][ T6398] device hsr_slave_1 left promiscuous mode [ 173.510584][ T6425] netlink: 763 bytes leftover after parsing attributes in process `syz.0.564'. [ 173.749607][ T6434] bridge0: port 2(veth0_to_bridge) entered disabled state [ 173.757126][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.869670][ T6435] device veth0_to_bridge left promiscuous mode [ 173.941567][ T6435] bridge0: port 2(veth0_to_bridge) entered disabled state [ 173.971194][ T6435] device bridge_slave_0 left promiscuous mode [ 173.990987][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.211154][ T6447] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 174.261194][ T6447] netlink: 'syz.4.571': attribute type 3 has an invalid length. [ 174.337093][ T6447] netlink: 132 bytes leftover after parsing attributes in process `syz.4.571'. [ 176.964004][ T6546] syz.1.616[6546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.964126][ T6546] syz.1.616[6546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.027392][ T6546] syz.1.616[6546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.071211][ T6546] syz.1.616[6546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.588081][ T6602] [ 178.602186][ T6602] ============================= [ 178.607373][ T6602] WARNING: suspicious RCU usage [ 178.612283][ T6602] syzkaller #0 Not tainted [ 178.616736][ T6602] ----------------------------- [ 178.621764][ T6602] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 178.630359][ T6602] [ 178.630359][ T6602] other info that might help us debug this: [ 178.630359][ T6602] [ 178.640714][ T6602] [ 178.640714][ T6602] rcu_scheduler_active = 2, debug_locks = 1 [ 178.648956][ T6602] 1 lock held by syz.3.641/6602: [ 178.653929][ T6602] #0: ffffffff8c92b2a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 178.664231][ T6602] [ 178.664231][ T6602] stack backtrace: [ 178.670199][ T6602] CPU: 1 PID: 6602 Comm: syz.3.641 Not tainted syzkaller #0 [ 178.677523][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.687634][ T6602] Call Trace: [ 178.690954][ T6602] [ 178.693927][ T6602] dump_stack_lvl+0x168/0x22e [ 178.698663][ T6602] ? show_regs_print_info+0x12/0x12 [ 178.703918][ T6602] ? load_image+0x3b0/0x3b0 [ 178.708464][ T6602] ? __lock_acquire+0x12e5/0x7c50 [ 178.713548][ T6602] lockdep_rcu_suspicious+0x1dd/0x300 [ 178.718989][ T6602] get_callchain_entry+0x2a5/0x3b0 [ 178.724163][ T6602] get_perf_callchain+0xb8/0x470 [ 178.729159][ T6602] ? verify_lock_unused+0x140/0x140 [ 178.734417][ T6602] ? put_callchain_entry+0xb0/0xb0 [ 178.739587][ T6602] ? plist_add+0x3d4/0x480 [ 178.744064][ T6602] ? verify_lock_unused+0x140/0x140 [ 178.749330][ T6602] __bpf_get_stack+0x2ce/0x4f0 [ 178.754233][ T6602] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 178.760525][ T6602] ? __cant_sleep+0x210/0x210 [ 178.765260][ T6602] ? bpf_prog_d43750871481577d+0x3d/0x41 [ 178.770946][ T6602] bpf_get_stack_raw_tp+0x189/0x1c0 [ 178.776211][ T6602] bpf_prog_d43750871481577d+0x3d/0x41 [ 178.781722][ T6602] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 178.787147][ T6602] bpf_prog_test_run_syscall+0x30d/0x490 [ 178.792908][ T6602] ? sock_gen_cookie+0x60/0x60 [ 178.797709][ T6602] ? sock_gen_cookie+0x60/0x60 [ 178.802509][ T6602] bpf_prog_test_run+0x31e/0x390 [ 178.807484][ T6602] __sys_bpf+0x593/0x6d0 [ 178.811757][ T6602] ? bpf_link_show_fdinfo+0x340/0x340 [ 178.817172][ T6602] ? lock_chain_count+0x20/0x20 [ 178.822064][ T6602] __x64_sys_bpf+0x78/0x90 [ 178.826525][ T6602] do_syscall_64+0x4c/0xa0 [ 178.830973][ T6602] ? clear_bhb_loop+0x60/0xb0 [ 178.835676][ T6602] ? clear_bhb_loop+0x60/0xb0 [ 178.840422][ T6602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.846426][ T6602] RIP: 0033:0x7f55dcf8f749 [ 178.851061][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.870710][ T6602] RSP: 002b:00007f55dde10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.879240][ T6602] RAX: ffffffffffffffda RBX: 00007f55dd1e5fa0 RCX: 00007f55dcf8f749 [ 178.887236][ T6602] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 178.895228][ T6602] RBP: 00007f55dd013f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.903221][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.911213][ T6602] R13: 00007f55dd1e6038 R14: 00007f55dd1e5fa0 R15: 00007ffc7d57b758 [ 178.919225][ T6602]