last executing test programs: 27.995206732s ago: executing program 0 (id=158): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.907367003s ago: executing program 0 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0x7fe2, 0x2, 0x140}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 27.802750295s ago: executing program 0 (id=162): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 27.661780708s ago: executing program 0 (id=164): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 27.346895232s ago: executing program 0 (id=169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000340)=@framed={{}, [@printk={@p, {0x3, 0x0}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7}, {}, {0x85, 0x0, 0x0, 0x71}}, @printk={@p, {0x3, 0x0}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.605364667s ago: executing program 0 (id=169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000340)=@framed={{}, [@printk={@p, {0x3, 0x0}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7}, {}, {0x85, 0x0, 0x0, 0x71}}, @printk={@p, {0x3, 0x0}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.990871969s ago: executing program 3 (id=375): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.660717154s ago: executing program 3 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000300000004000100"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.432268078s ago: executing program 3 (id=381): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 1.385269568s ago: executing program 2 (id=382): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.250858121s ago: executing program 3 (id=384): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4}, {0x10000002, 0x5}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r3) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) 1.133826942s ago: executing program 2 (id=385): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b70400000000000085000000330000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) 956.307095ms ago: executing program 1 (id=387): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 955.639615ms ago: executing program 2 (id=388): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 790.027808ms ago: executing program 1 (id=389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 705.689229ms ago: executing program 2 (id=390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 555.104942ms ago: executing program 1 (id=391): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 485.213063ms ago: executing program 1 (id=392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r2, r0}, 0xc) 382.519564ms ago: executing program 2 (id=393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000001340)='~', 0x0}, 0x20) 265.618266ms ago: executing program 1 (id=394): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2}) 264.970336ms ago: executing program 3 (id=395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) 150.704148ms ago: executing program 1 (id=396): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x6}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 102.218758ms ago: executing program 3 (id=397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) 0s ago: executing program 2 (id=398): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. [ 90.060165][ T5759] cgroup: Unknown subsys name 'net' [ 90.232096][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.954866][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.617087][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.625927][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.634035][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.642668][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.650496][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.658140][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.661345][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.681857][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.689406][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.690034][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.706540][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.714519][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.721987][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.725547][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.735766][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.736998][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.744890][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.751579][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.765597][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.773522][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.782639][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.797312][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.805471][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.813377][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.388836][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 94.407431][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 94.419783][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 94.489043][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 94.669651][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.681017][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.688834][ T5769] bridge_slave_0: entered allmulticast mode [ 94.696937][ T5769] bridge_slave_0: entered promiscuous mode [ 94.736742][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.744101][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.751301][ T5773] bridge_slave_0: entered allmulticast mode [ 94.758604][ T5773] bridge_slave_0: entered promiscuous mode [ 94.767360][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.774687][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.781905][ T5773] bridge_slave_1: entered allmulticast mode [ 94.789080][ T5773] bridge_slave_1: entered promiscuous mode [ 94.796728][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.804064][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.811246][ T5769] bridge_slave_1: entered allmulticast mode [ 94.818605][ T5769] bridge_slave_1: entered promiscuous mode [ 94.830495][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.837932][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.845160][ T5774] bridge_slave_0: entered allmulticast mode [ 94.852284][ T5774] bridge_slave_0: entered promiscuous mode [ 94.860498][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.867897][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.875281][ T5774] bridge_slave_1: entered allmulticast mode [ 94.882361][ T5774] bridge_slave_1: entered promiscuous mode [ 94.972073][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.998267][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.024900][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.038061][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.049398][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.060875][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.081793][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.089592][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.097311][ T5770] bridge_slave_0: entered allmulticast mode [ 95.104561][ T5770] bridge_slave_0: entered promiscuous mode [ 95.151898][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.159389][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.167257][ T5770] bridge_slave_1: entered allmulticast mode [ 95.175220][ T5770] bridge_slave_1: entered promiscuous mode [ 95.224382][ T5769] team0: Port device team_slave_0 added [ 95.251973][ T5774] team0: Port device team_slave_0 added [ 95.261100][ T5773] team0: Port device team_slave_0 added [ 95.270432][ T5773] team0: Port device team_slave_1 added [ 95.278873][ T5769] team0: Port device team_slave_1 added [ 95.287274][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.300672][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.311511][ T5774] team0: Port device team_slave_1 added [ 95.393089][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.400106][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.426435][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.464846][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.471857][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.499001][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.511078][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.518114][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.544129][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.557224][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.565029][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.591516][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.608243][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.615492][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.641926][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.656371][ T5770] team0: Port device team_slave_0 added [ 95.663279][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.670313][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.696301][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.720461][ T5770] team0: Port device team_slave_1 added [ 95.743304][ T5778] Bluetooth: hci0: command tx timeout [ 95.812848][ T5778] Bluetooth: hci3: command tx timeout [ 95.812954][ T5087] Bluetooth: hci1: command tx timeout [ 95.827968][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.835149][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.861862][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.879412][ T5774] hsr_slave_0: entered promiscuous mode [ 95.886478][ T5774] hsr_slave_1: entered promiscuous mode [ 95.902675][ T5087] Bluetooth: hci2: command tx timeout [ 95.914077][ T5769] hsr_slave_0: entered promiscuous mode [ 95.920796][ T5769] hsr_slave_1: entered promiscuous mode [ 95.927263][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.935257][ T5769] Cannot create hsr debugfs directory [ 95.941491][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.948699][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.974930][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.032205][ T5773] hsr_slave_0: entered promiscuous mode [ 96.038997][ T5773] hsr_slave_1: entered promiscuous mode [ 96.045706][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.053394][ T5773] Cannot create hsr debugfs directory [ 96.139140][ T5770] hsr_slave_0: entered promiscuous mode [ 96.145772][ T5770] hsr_slave_1: entered promiscuous mode [ 96.151921][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.159753][ T5770] Cannot create hsr debugfs directory [ 96.573924][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.586137][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.596540][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.611423][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.687165][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.709180][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.719762][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.736675][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.841406][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.856686][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.874450][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.890526][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.957459][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.969342][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.993297][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.038338][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.091790][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.149395][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.186385][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.193832][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.227390][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.234604][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.277175][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.361754][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.391116][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.398394][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.431884][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.447889][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.460279][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.467516][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.549468][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.580229][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.590509][ T787] cfg80211: failed to load regulatory.db [ 97.626128][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.633383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.664108][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.671275][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.715194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.722384][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.767117][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.774407][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.813397][ T5087] Bluetooth: hci0: command tx timeout [ 97.893360][ T5087] Bluetooth: hci1: command tx timeout [ 97.906997][ T5087] Bluetooth: hci3: command tx timeout [ 97.914644][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.973580][ T5087] Bluetooth: hci2: command tx timeout [ 98.168715][ T5769] veth0_vlan: entered promiscuous mode [ 98.211040][ T5769] veth1_vlan: entered promiscuous mode [ 98.291786][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.336924][ T5769] veth0_macvtap: entered promiscuous mode [ 98.387130][ T5769] veth1_macvtap: entered promiscuous mode [ 98.462249][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.500020][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.509723][ T5773] veth0_vlan: entered promiscuous mode [ 98.531350][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.552029][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.563397][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.572151][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.581501][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.637667][ T5773] veth1_vlan: entered promiscuous mode [ 98.659231][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.796753][ T5770] veth0_vlan: entered promiscuous mode [ 98.815512][ T5773] veth0_macvtap: entered promiscuous mode [ 98.831864][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.841535][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.854713][ T5770] veth1_vlan: entered promiscuous mode [ 98.899268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.901234][ T5773] veth1_macvtap: entered promiscuous mode [ 98.907333][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.976911][ T5774] veth0_vlan: entered promiscuous mode [ 99.006265][ T5770] veth0_macvtap: entered promiscuous mode [ 99.030512][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.056612][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.069135][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.080247][ T5770] veth1_macvtap: entered promiscuous mode [ 99.111625][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.126433][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.139654][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.199511][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.211540][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.222314][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.231818][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.247103][ T5774] veth1_vlan: entered promiscuous mode [ 99.319465][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.332895][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.343201][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.366317][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.379118][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.410031][ T5774] veth0_macvtap: entered promiscuous mode [ 99.460470][ T5774] veth1_macvtap: entered promiscuous mode [ 99.484547][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.502166][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.517484][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.528168][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.540622][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.635522][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.644471][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.654378][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.666519][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.696681][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.707500][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.717760][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.730462][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.751299][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.762070][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.776041][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.789112][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.791221][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.802322][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.830203][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.830258][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.841431][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.859367][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.871303][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.884709][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.892802][ T5087] Bluetooth: hci0: command tx timeout [ 99.935222][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.974257][ T5087] Bluetooth: hci3: command tx timeout [ 99.978742][ T5778] Bluetooth: hci1: command tx timeout [ 99.982794][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.994082][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.003392][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.049122][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.057821][ T5778] Bluetooth: hci2: command tx timeout [ 100.058921][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.223260][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.231332][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.281655][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.319974][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.369193][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.382959][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.410841][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.421192][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.562273][ T5873] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8'. [ 100.631156][ T5875] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2'. [ 101.035272][ T5887] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.12'. [ 101.978726][ T5778] Bluetooth: hci0: command tx timeout [ 102.052855][ T5778] Bluetooth: hci3: command tx timeout [ 102.058397][ T5778] Bluetooth: hci1: command tx timeout [ 102.132710][ T5778] Bluetooth: hci2: command tx timeout [ 103.170830][ T5960] netlink: 'syz.2.48': attribute type 33 has an invalid length. [ 103.204955][ T5960] netlink: 152 bytes leftover after parsing attributes in process `syz.2.48'. [ 103.256821][ T5960] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 104.430346][ T6004] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.69'. [ 104.954085][ T6020] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.75'. [ 105.084778][ T6022] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.78'. [ 106.522058][ T6076] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.104'. [ 107.710715][ T6118] netlink: 'syz.3.125': attribute type 13 has an invalid length. [ 107.726202][ T6118] macvtap0: entered promiscuous mode [ 107.756080][ T6118] macvtap0: refused to change device tx_queue_len [ 108.298796][ T6144] netlink: 168 bytes leftover after parsing attributes in process `syz.0.138'. [ 110.049811][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.170022][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.258865][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.390480][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.164204][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.175833][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.187078][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.201737][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.212850][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.225225][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.752271][ T6232] chnl_net:caif_netlink_parms(): no params data found [ 112.920211][ T48] hsr_slave_0: left promiscuous mode [ 112.927249][ T48] hsr_slave_1: left promiscuous mode [ 112.948794][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.972684][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.999167][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.012499][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.063490][ T48] bridge_slave_1: left allmulticast mode [ 113.069231][ T48] bridge_slave_1: left promiscuous mode [ 113.103818][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.141341][ T48] bridge_slave_0: left allmulticast mode [ 113.158080][ T48] bridge_slave_0: left promiscuous mode [ 113.184814][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.254212][ T5087] Bluetooth: hci2: command tx timeout [ 113.382251][ T48] veth1_macvtap: left promiscuous mode [ 113.422785][ T48] veth0_macvtap: left promiscuous mode [ 113.429464][ T48] veth1_vlan: left promiscuous mode [ 113.451798][ T48] veth0_vlan: left promiscuous mode [ 114.827813][ T6332] netlink: 'syz.2.213': attribute type 2 has an invalid length. [ 114.851919][ T6332] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.213'. [ 115.105403][ T48] team0 (unregistering): Port device team_slave_1 removed [ 115.202244][ T48] team0 (unregistering): Port device team_slave_0 removed [ 115.283859][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.332588][ T5087] Bluetooth: hci2: command tx timeout [ 115.357132][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.821588][ T48] bond0 (unregistering): Released all slaves [ 116.122347][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.172842][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.180143][ T6232] bridge_slave_0: entered allmulticast mode [ 116.203585][ T6232] bridge_slave_0: entered promiscuous mode [ 116.243583][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.250805][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.285106][ T6232] bridge_slave_1: entered allmulticast mode [ 116.331290][ T6232] bridge_slave_1: entered promiscuous mode [ 116.552263][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.603710][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.733430][ T6232] team0: Port device team_slave_0 added [ 116.749937][ T6232] team0: Port device team_slave_1 added [ 116.861037][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.882965][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.944710][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.990507][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.012490][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.052829][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.184736][ T6232] hsr_slave_0: entered promiscuous mode [ 117.194956][ T6232] hsr_slave_1: entered promiscuous mode [ 117.206217][ T6232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.214824][ T6232] Cannot create hsr debugfs directory [ 117.412731][ T5087] Bluetooth: hci2: command tx timeout [ 118.706843][ T6232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.731814][ T6232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.776140][ T6232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.868261][ T6232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.210471][ T6439] sctp: [Deprecated]: syz.1.241 (pid 6439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.210471][ T6439] Use struct sctp_sack_info instead [ 119.256278][ T6232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.306290][ T6232] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.338782][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.346068][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.401542][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.408818][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.498638][ T5087] Bluetooth: hci2: command tx timeout [ 120.027443][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.171424][ T6465] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.214018][ T6232] veth0_vlan: entered promiscuous mode [ 120.248990][ T6232] veth1_vlan: entered promiscuous mode [ 120.351517][ T6232] veth0_macvtap: entered promiscuous mode [ 120.426170][ T6232] veth1_macvtap: entered promiscuous mode [ 120.509748][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.529758][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.548382][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.569637][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.580364][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.610627][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.633924][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.669332][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.718582][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.748512][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.781864][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.806082][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.831810][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.872580][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.928074][ T6232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.960139][ T6232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.992502][ T6232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.022507][ T6232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.228624][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.267247][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.381427][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.391796][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.106694][ T6553] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.271'. [ 123.742077][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.841903][ T6579] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.277'. [ 123.867880][ T6579] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 123.891277][ T6579] openvswitch: netlink: Message has 1 unknown bytes. [ 124.294261][ T6589] Driver unsupported XDP return value 0 on prog (id 143) dev N/A, expect packet loss! [ 124.377176][ T6591] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 124.396328][ T6591] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.280'. [ 124.503896][ T6595] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.281'. [ 124.538120][ T6595] netlink: zone id is out of range [ 124.562559][ T6595] netlink: zone id is out of range [ 124.582569][ T6595] netlink: zone id is out of range [ 124.593608][ T6595] netlink: zone id is out of range [ 124.621017][ T6595] netlink: zone id is out of range [ 124.627410][ T6595] netlink: zone id is out of range [ 124.642548][ T6595] netlink: zone id is out of range [ 124.660517][ T6595] netlink: zone id is out of range [ 124.735287][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.940253][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.131025][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.141912][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.175816][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.187451][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.211830][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.228722][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 125.242854][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.839565][ T6613] chnl_net:caif_netlink_parms(): no params data found [ 126.619681][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.669971][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.702748][ T6613] bridge_slave_0: entered allmulticast mode [ 126.710257][ T6613] bridge_slave_0: entered promiscuous mode [ 126.831919][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.861713][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.876112][ T6613] bridge_slave_1: entered allmulticast mode [ 126.899778][ T6613] bridge_slave_1: entered promiscuous mode [ 127.087187][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.103267][ T6672] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.300'. [ 127.160408][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.307965][ T6613] team0: Port device team_slave_0 added [ 127.331635][ T6613] team0: Port device team_slave_1 added [ 127.338699][ T5087] Bluetooth: hci2: command tx timeout [ 127.628211][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.645510][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.715685][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.827881][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.842697][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.905123][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.152366][ T6711] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.311'. [ 128.338440][ T6720] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.314'. [ 128.516234][ T6613] hsr_slave_0: entered promiscuous mode [ 128.542046][ T6613] hsr_slave_1: entered promiscuous mode [ 128.593569][ T6613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.601195][ T6613] Cannot create hsr debugfs directory [ 128.760094][ T42] hsr_slave_0: left promiscuous mode [ 128.768728][ T42] hsr_slave_1: left promiscuous mode [ 128.784557][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.805334][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.844247][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.867780][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.914916][ T42] bridge_slave_1: left allmulticast mode [ 128.920629][ T42] bridge_slave_1: left promiscuous mode [ 128.937844][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.959075][ T42] bridge_slave_0: left allmulticast mode [ 128.976525][ T42] bridge_slave_0: left promiscuous mode [ 128.992712][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.060150][ T42] veth1_macvtap: left promiscuous mode [ 129.065847][ T42] veth0_macvtap: left promiscuous mode [ 129.075114][ T42] veth1_vlan: left promiscuous mode [ 129.087259][ T42] veth0_vlan: left promiscuous mode [ 129.412604][ T5087] Bluetooth: hci2: command tx timeout [ 129.900961][ T42] team0 (unregistering): Port device team_slave_1 removed [ 129.940076][ T42] team0 (unregistering): Port device team_slave_0 removed [ 129.983626][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.017591][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.366547][ T42] bond0 (unregistering): Released all slaves [ 130.445483][ T6740] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.323'. [ 131.494464][ T5087] Bluetooth: hci2: command tx timeout [ 132.354238][ T6613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.406584][ T6613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.426120][ T6827] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.353'. [ 132.483599][ T6613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.505124][ T6828] pim6reg1: entered promiscuous mode [ 132.510527][ T6828] pim6reg1: entered allmulticast mode [ 132.542754][ T6613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.850149][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.901966][ T6613] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.943443][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.950823][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.983846][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.991554][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.111239][ T6613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.417397][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.427597][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.573250][ T5087] Bluetooth: hci2: command tx timeout [ 133.581409][ T6613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.670225][ T6613] veth0_vlan: entered promiscuous mode [ 133.705330][ T6613] veth1_vlan: entered promiscuous mode [ 133.824350][ T6613] veth0_macvtap: entered promiscuous mode [ 133.860032][ T6613] veth1_macvtap: entered promiscuous mode [ 133.944542][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.978595][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.019945][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.022589][ T6872] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.365'. [ 134.060394][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.084915][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.122449][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.174249][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.321415][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.362512][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.386464][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.422435][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.442946][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.464670][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.492288][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.531844][ T6613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.549153][ T6613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.563213][ T6613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.583211][ T6613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.645605][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.654242][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.670937][ T6888] bridge0: entered allmulticast mode [ 134.717267][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.724662][ T6891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.732981][ T6891] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.740181][ T6891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.775135][ T6891] bridge0: entered promiscuous mode [ 134.962587][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.982751][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.076735][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.107843][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.434695][ T6906] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.375'. [ 136.374267][ T6942] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.387'. [ 137.207013][ T6975] [ 137.209415][ T6975] ====================================================== [ 137.216458][ T6975] WARNING: possible circular locking dependency detected [ 137.223511][ T6975] 6.6.94-syzkaller #0 Not tainted [ 137.228558][ T6975] ------------------------------------------------------ [ 137.235599][ T6975] syz.1.396/6975 is trying to acquire lock: [ 137.241514][ T6975] ffff8880b8e295a8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 137.250210][ T6975] [ 137.250210][ T6975] but task is already holding lock: [ 137.257586][ T6975] ffff8880b8e297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 137.266494][ T6975] [ 137.266494][ T6975] which lock already depends on the new lock. [ 137.266494][ T6975] [ 137.276887][ T6975] [ 137.276887][ T6975] the existing dependency chain (in reverse order) is: [ 137.285912][ T6975] [ 137.285912][ T6975] -> #1 (&base->lock){-.-.}-{2:2}: [ 137.293219][ T6975] _raw_spin_lock_irqsave+0xa8/0xf0 [ 137.298950][ T6975] lock_timer_base+0x123/0x270 [ 137.304241][ T6975] __mod_timer+0xf9/0xdb0 [ 137.309092][ T6975] queue_delayed_work_on+0x12a/0x1e0 [ 137.314895][ T6975] kvfree_call_rcu+0x541/0x780 [ 137.320183][ T6975] rtnl_register_internal+0x486/0x590 [ 137.326080][ T6975] rtnl_register+0x32/0x70 [ 137.331035][ T6975] ip_rt_init+0x2ec/0x390 [ 137.335889][ T6975] ip_init+0xe/0x20 [ 137.340212][ T6975] inet_init+0x2c1/0x3e0 [ 137.344972][ T6975] do_one_initcall+0x1fd/0x750 [ 137.350283][ T6975] do_initcall_level+0x137/0x1f0 [ 137.355749][ T6975] do_initcalls+0x69/0xd0 [ 137.360599][ T6975] kernel_init_freeable+0x3d2/0x570 [ 137.366321][ T6975] kernel_init+0x1d/0x1c0 [ 137.371174][ T6975] ret_from_fork+0x48/0x80 [ 137.376111][ T6975] ret_from_fork_asm+0x11/0x20 [ 137.381404][ T6975] [ 137.381404][ T6975] -> #0 (krc.lock){..-.}-{2:2}: [ 137.388438][ T6975] __lock_acquire+0x2ddb/0x7c80 [ 137.393809][ T6975] lock_acquire+0x197/0x410 [ 137.398829][ T6975] _raw_spin_lock+0x2e/0x40 [ 137.403856][ T6975] kvfree_call_rcu+0x15a/0x780 [ 137.409140][ T6975] trie_delete_elem+0x535/0x6a0 [ 137.414513][ T6975] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 137.420504][ T6975] bpf_trace_run3+0x1e7/0x400 [ 137.425735][ T6975] __bpf_trace_timer_start+0x14a/0x1b0 [ 137.431718][ T6975] __traceiter_timer_start+0x77/0xc0 [ 137.437528][ T6975] enqueue_timer+0x398/0x530 [ 137.442636][ T6975] __mod_timer+0x977/0xdb0 [ 137.447598][ T6975] sk_reset_timer+0x23/0xc0 [ 137.452639][ T6975] tipc_sk_finish_conn+0x154/0x7e0 [ 137.458269][ T6975] tipc_socketpair+0x254/0x470 [ 137.463574][ T6975] __sys_socketpair+0x2b0/0x550 [ 137.468959][ T6975] __x64_sys_socketpair+0x9b/0xb0 [ 137.474513][ T6975] do_syscall_64+0x55/0xb0 [ 137.479464][ T6975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.485917][ T6975] [ 137.485917][ T6975] other info that might help us debug this: [ 137.485917][ T6975] [ 137.496143][ T6975] Possible unsafe locking scenario: [ 137.496143][ T6975] [ 137.503586][ T6975] CPU0 CPU1 [ 137.508950][ T6975] ---- ---- [ 137.514313][ T6975] lock(&base->lock); [ 137.518407][ T6975] lock(krc.lock); [ 137.524762][ T6975] lock(&base->lock); [ 137.531371][ T6975] lock(krc.lock); [ 137.535178][ T6975] [ 137.535178][ T6975] *** DEADLOCK *** [ 137.535178][ T6975] [ 137.543316][ T6975] 2 locks held by syz.1.396/6975: [ 137.548424][ T6975] #0: ffff8880b8e297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 137.557786][ T6975] #1: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 137.567094][ T6975] [ 137.567094][ T6975] stack backtrace: [ 137.573092][ T6975] CPU: 0 PID: 6975 Comm: syz.1.396 Not tainted 6.6.94-syzkaller #0 [ 137.580986][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.591064][ T6975] Call Trace: [ 137.594343][ T6975] [ 137.597278][ T6975] dump_stack_lvl+0x16c/0x230 [ 137.601969][ T6975] ? load_image+0x3b0/0x3b0 [ 137.606477][ T6975] ? show_regs_print_info+0x20/0x20 [ 137.611683][ T6975] ? print_circular_bug+0x12b/0x1a0 [ 137.616906][ T6975] check_noncircular+0x2bd/0x3c0 [ 137.621854][ T6975] ? print_deadlock_bug+0x5d0/0x5d0 [ 137.627070][ T6975] ? lockdep_lock+0xe0/0x220 [ 137.631659][ T6975] ? _find_first_zero_bit+0xd3/0x100 [ 137.636945][ T6975] __lock_acquire+0x2ddb/0x7c80 [ 137.641815][ T6975] ? verify_lock_unused+0x140/0x140 [ 137.647036][ T6975] ? verify_lock_unused+0x140/0x140 [ 137.652255][ T6975] lock_acquire+0x197/0x410 [ 137.656770][ T6975] ? kvfree_call_rcu+0x15a/0x780 [ 137.661727][ T6975] ? __virt_addr_valid+0x18c/0x540 [ 137.666860][ T6975] ? read_lock_is_recursive+0x20/0x20 [ 137.672235][ T6975] ? __virt_addr_valid+0x18c/0x540 [ 137.677351][ T6975] ? __virt_addr_valid+0x18c/0x540 [ 137.682504][ T6975] ? __virt_addr_valid+0x469/0x540 [ 137.687614][ T6975] ? __phys_addr+0xba/0x170 [ 137.692135][ T6975] _raw_spin_lock+0x2e/0x40 [ 137.696646][ T6975] ? kvfree_call_rcu+0x15a/0x780 [ 137.701583][ T6975] kvfree_call_rcu+0x15a/0x780 [ 137.706372][ T6975] ? call_rcu+0x920/0x920 [ 137.710705][ T6975] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 137.716608][ T6975] ? _raw_spin_unlock+0x40/0x40 [ 137.721469][ T6975] trie_delete_elem+0x535/0x6a0 [ 137.726342][ T6975] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 137.731794][ T6975] bpf_trace_run3+0x1e7/0x400 [ 137.736463][ T6975] ? bpf_trace_run3+0xf4/0x400 [ 137.741219][ T6975] ? bpf_trace_run2+0x3c0/0x3c0 [ 137.746066][ T6975] ? __bpf_trace_timer_start+0x133/0x1b0 [ 137.751707][ T6975] __bpf_trace_timer_start+0x14a/0x1b0 [ 137.757184][ T6975] ? debug_object_activate+0x2f7/0x4b0 [ 137.762649][ T6975] ? __bpf_trace_timer_class+0x100/0x100 [ 137.768283][ T6975] ? __rwlock_init+0x150/0x150 [ 137.773051][ T6975] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 137.778947][ T6975] ? _raw_spin_unlock+0x40/0x40 [ 137.783808][ T6975] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 137.789190][ T6975] ? _raw_spin_lock+0x40/0x40 [ 137.793872][ T6975] ? __bpf_trace_timer_class+0x100/0x100 [ 137.799536][ T6975] __traceiter_timer_start+0x77/0xc0 [ 137.804830][ T6975] enqueue_timer+0x398/0x530 [ 137.809443][ T6975] __mod_timer+0x977/0xdb0 [ 137.813869][ T6975] sk_reset_timer+0x23/0xc0 [ 137.818378][ T6975] tipc_sk_finish_conn+0x154/0x7e0 [ 137.823494][ T6975] tipc_socketpair+0x254/0x470 [ 137.828259][ T6975] __sys_socketpair+0x2b0/0x550 [ 137.833124][ T6975] __x64_sys_socketpair+0x9b/0xb0 [ 137.838154][ T6975] do_syscall_64+0x55/0xb0 [ 137.842577][ T6975] ? clear_bhb_loop+0x40/0x90 [ 137.847250][ T6975] ? clear_bhb_loop+0x40/0x90 [ 137.851937][ T6975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.857836][ T6975] RIP: 0033:0x7f589df8e929 [ 137.862245][ T6975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.881849][ T6975] RSP: 002b:00007f589ed3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 137.890274][ T6975] RAX: ffffffffffffffda RBX: 00007f589e1b5fa0 RCX: 00007f589df8e929 [ 137.898260][ T6975] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 137.906245][ T6975] RBP: 00007f589e010b39 R08: 0000000000000000 R09: 0000000000000000 [ 137.914229][ T6975] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 137.922502][ T6975] R13: 0000000000000000 R14: 00007f589e1b5fa0 R15: 00007ffc92c33628 [ 137.930495][ T6975] [ 138.371622][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.937644][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.999630][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.071433][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.065557][ T78] hsr_slave_0: left promiscuous mode [ 140.085818][ T78] hsr_slave_1: left promiscuous mode [ 140.091836][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.104107][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.125688][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.144000][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.163172][ T78] bridge_slave_1: left allmulticast mode [ 140.168863][ T78] bridge_slave_1: left promiscuous mode [ 140.178866][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.189324][ T78] bridge_slave_0: left allmulticast mode [ 140.197064][ T78] bridge_slave_0: left promiscuous mode [ 140.203155][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.220157][ T78] veth1_macvtap: left promiscuous mode [ 140.225783][ T78] veth0_macvtap: left promiscuous mode [ 140.231421][ T78] veth1_vlan: left promiscuous mode [ 140.238523][ T78] veth0_vlan: left promiscuous mode [ 140.542647][ T78] team0 (unregistering): Port device team_slave_1 removed [ 140.579881][ T78] team0 (unregistering): Port device team_slave_0 removed [ 140.617941][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.649117][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.767479][ T78] bond0 (unregistering): Released all slaves