last executing test programs: 2.168393385s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000400000004000000040000000100", @ANYBLOB="00002202f5355ac6cf2e5f1e"], 0x48) 2.002270778s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) 1.963184839s ago: executing program 2 (id=5): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) 1.8667454s ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffff0000}, 0xffffffffffffffd2}, 0x48) 1.723271632s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r2) 1.585215614s ago: executing program 2 (id=6): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.543244295s ago: executing program 0 (id=7): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x4e, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 1.427256637s ago: executing program 2 (id=8): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 1.420494637s ago: executing program 0 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000f0000000000003490f82bf77b2a82a671c1209e6e873b9a19135d607149c68d0daa96906e4da3c227a9acb2c3375c46c0ba56dc4f8d9d38b589d9186011473191ed5f2a8ed07eeacc55e3f2ab18e97b0ec7bf5ba59d120dc6aa8139383d1a56ae44e6f30032482a4f1160b92532ba84de32848e8944e29e7ff15ad8901a8d04"], 0x0, 0x26}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0cb97907081175f37538e486dd"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0xfdef) 1.316678729s ago: executing program 2 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x66) 93.467998ms ago: executing program 3 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2e}, 0x28) 14.935739ms ago: executing program 0 (id=12): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0xff8e}}, 0x40) 0s ago: executing program 1 (id=13): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. [ 64.981970][ T5750] cgroup: Unknown subsys name 'net' [ 65.115000][ T5750] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.458107][ T5750] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.870878][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.879559][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.886170][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.889364][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.895415][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.902991][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.911716][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.917942][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.923996][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.938395][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.946802][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.948084][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.955863][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.968182][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.976912][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.984179][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.987848][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.991717][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.998397][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.013150][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.014065][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.031269][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.040782][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.052133][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.473815][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 68.539247][ T5760] chnl_net:caif_netlink_parms(): no params data found [ 68.604932][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 68.620373][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.627586][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.635610][ T5762] bridge_slave_0: entered allmulticast mode [ 68.643191][ T5762] bridge_slave_0: entered promiscuous mode [ 68.655914][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.663228][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.670533][ T5762] bridge_slave_1: entered allmulticast mode [ 68.677685][ T5762] bridge_slave_1: entered promiscuous mode [ 68.695126][ T5759] chnl_net:caif_netlink_parms(): no params data found [ 68.801480][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.827330][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.842818][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.850040][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.857164][ T5760] bridge_slave_0: entered allmulticast mode [ 68.864622][ T5760] bridge_slave_0: entered promiscuous mode [ 68.896255][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.903653][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.911004][ T5760] bridge_slave_1: entered allmulticast mode [ 68.917714][ T5760] bridge_slave_1: entered promiscuous mode [ 68.984976][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.992400][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.999983][ T5761] bridge_slave_0: entered allmulticast mode [ 69.006689][ T5761] bridge_slave_0: entered promiscuous mode [ 69.016657][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.024029][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.031953][ T5761] bridge_slave_1: entered allmulticast mode [ 69.039330][ T5761] bridge_slave_1: entered promiscuous mode [ 69.049084][ T5762] team0: Port device team_slave_0 added [ 69.055318][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.062851][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.070134][ T5759] bridge_slave_0: entered allmulticast mode [ 69.078084][ T5759] bridge_slave_0: entered promiscuous mode [ 69.085455][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.092648][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.100022][ T5759] bridge_slave_1: entered allmulticast mode [ 69.107074][ T5759] bridge_slave_1: entered promiscuous mode [ 69.116462][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.135799][ T5762] team0: Port device team_slave_1 added [ 69.163751][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.226042][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.236652][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.243987][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.270749][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.284713][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.297271][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.309440][ T5760] team0: Port device team_slave_0 added [ 69.317350][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.337230][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.344437][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.370454][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.399401][ T5760] team0: Port device team_slave_1 added [ 69.455470][ T5759] team0: Port device team_slave_0 added [ 69.464355][ T5761] team0: Port device team_slave_0 added [ 69.474356][ T5761] team0: Port device team_slave_1 added [ 69.493804][ T5762] hsr_slave_0: entered promiscuous mode [ 69.500348][ T5762] hsr_slave_1: entered promiscuous mode [ 69.519519][ T5759] team0: Port device team_slave_1 added [ 69.525877][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.533335][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.560015][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.603644][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.610821][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.636905][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.665123][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.672157][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.698856][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.711823][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.718857][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.745160][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.767423][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.774533][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.800680][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.818037][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.825000][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.851668][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.956498][ T5760] hsr_slave_0: entered promiscuous mode [ 69.963222][ T5760] hsr_slave_1: entered promiscuous mode [ 69.969672][ T5760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.977405][ T5760] Cannot create hsr debugfs directory [ 70.002758][ T5761] hsr_slave_0: entered promiscuous mode [ 70.011035][ T5761] hsr_slave_1: entered promiscuous mode [ 70.017093][ T5761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.025207][ T5761] Cannot create hsr debugfs directory [ 70.052514][ T5759] hsr_slave_0: entered promiscuous mode [ 70.058816][ T5759] hsr_slave_1: entered promiscuous mode [ 70.064833][ T5759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.072723][ T5759] Cannot create hsr debugfs directory [ 70.093024][ T5772] Bluetooth: hci2: command tx timeout [ 70.093036][ T5767] Bluetooth: hci1: command tx timeout [ 70.093309][ T5767] Bluetooth: hci3: command tx timeout [ 70.098862][ T5772] Bluetooth: hci0: command tx timeout [ 70.403473][ T5762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.435892][ T5762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.459916][ T5762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.474447][ T5762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.508728][ T5760] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.520764][ T5760] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.544369][ T5760] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.565197][ T5760] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.621718][ T5759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.632498][ T5759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.650676][ T5759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.669248][ T5759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.741051][ T5761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.755387][ T5761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.765083][ T5761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.777468][ T5761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.941805][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.956378][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.985304][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.999548][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.016271][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.023581][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.053576][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.063722][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.070852][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.096189][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.103332][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.128914][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.137559][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.144695][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.180866][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.188068][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.232769][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.239909][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.289041][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.311877][ T5762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.375720][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.437178][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.444412][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.476281][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.483492][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.631349][ T5761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.706420][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.715834][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.761446][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.789345][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.907351][ T5760] veth0_vlan: entered promiscuous mode [ 71.934201][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.955294][ T5760] veth1_vlan: entered promiscuous mode [ 71.971728][ T5762] veth0_vlan: entered promiscuous mode [ 72.003096][ T5762] veth1_vlan: entered promiscuous mode [ 72.070288][ T5760] veth0_macvtap: entered promiscuous mode [ 72.108681][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.118671][ T5760] veth1_macvtap: entered promiscuous mode [ 72.125743][ T5759] veth0_vlan: entered promiscuous mode [ 72.152681][ T5762] veth0_macvtap: entered promiscuous mode [ 72.162793][ T5759] veth1_vlan: entered promiscuous mode [ 72.170417][ T5772] Bluetooth: hci3: command tx timeout [ 72.170658][ T5767] Bluetooth: hci2: command tx timeout [ 72.175848][ T5772] Bluetooth: hci1: command tx timeout [ 72.181405][ T5775] Bluetooth: hci0: command tx timeout [ 72.214641][ T5762] veth1_macvtap: entered promiscuous mode [ 72.251166][ T5759] veth0_macvtap: entered promiscuous mode [ 72.264829][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.290214][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.298880][ T5759] veth1_macvtap: entered promiscuous mode [ 72.327222][ T5760] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.337502][ T5760] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.349902][ T5760] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.358803][ T5760] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.373387][ T5761] veth0_vlan: entered promiscuous mode [ 72.387207][ T5761] veth1_vlan: entered promiscuous mode [ 72.400914][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.414749][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.430222][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.446584][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.457519][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.467623][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.479233][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.491325][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.534010][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.544718][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.555979][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.569774][ T5762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.579693][ T5762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.588480][ T5762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.597518][ T5762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.614337][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.626002][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.640805][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.653278][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.665102][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.681716][ T5759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.692080][ T5759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.701555][ T5759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.710659][ T5759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.838708][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.846747][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.860450][ T5761] veth0_macvtap: entered promiscuous mode [ 72.884335][ T5761] veth1_macvtap: entered promiscuous mode [ 72.899996][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.917313][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.934145][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.945043][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.956239][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.967844][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.977733][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.989066][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.002239][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.053404][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.064697][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.075123][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.087782][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.097766][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.109531][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.121816][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.134760][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.143772][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.163249][ T5761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.173470][ T5761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.182825][ T5761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.193831][ T5761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.215007][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.223352][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.292514][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.314944][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.416647][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.458771][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.484322][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.498944][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.615914][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.648650][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.249345][ T5772] Bluetooth: hci2: command tx timeout [ 74.250553][ T5767] Bluetooth: hci0: command tx timeout [ 74.254788][ T5772] Bluetooth: hci3: command tx timeout [ 74.260757][ T5764] Bluetooth: hci1: command tx timeout [ 75.613779][ T1133] [ 75.616158][ T1133] ====================================================== [ 75.623195][ T1133] WARNING: possible circular locking dependency detected [ 75.630206][ T1133] 6.6.94-syzkaller #0 Not tainted [ 75.635218][ T1133] ------------------------------------------------------ [ 75.642218][ T1133] kworker/u4:7/1133 is trying to acquire lock: [ 75.648351][ T1133] ffff8880b8e295a8 (krc.lock){....}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 75.656969][ T1133] [ 75.656969][ T1133] but task is already holding lock: [ 75.664337][ T1133] ffff8880b8e297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 75.673300][ T1133] [ 75.673300][ T1133] which lock already depends on the new lock. [ 75.673300][ T1133] [ 75.683716][ T1133] [ 75.683716][ T1133] the existing dependency chain (in reverse order) is: [ 75.692717][ T1133] [ 75.692717][ T1133] -> #1 (&base->lock){-.-.}-{2:2}: [ 75.700058][ T1133] _raw_spin_lock_irqsave+0xa8/0xf0 [ 75.706381][ T1133] lock_timer_base+0x123/0x270 [ 75.712268][ T1133] __mod_timer+0xf9/0xdb0 [ 75.718094][ T1133] queue_delayed_work_on+0x12a/0x1e0 [ 75.725132][ T1133] kvfree_call_rcu+0x541/0x780 [ 75.731024][ T1133] rtnl_register_internal+0x486/0x590 [ 75.737112][ T1133] rtnl_register+0x32/0x70 [ 75.742128][ T1133] ip_rt_init+0x2ec/0x390 [ 75.746970][ T1133] ip_init+0xe/0x20 [ 75.751286][ T1133] inet_init+0x2c1/0x3e0 [ 75.756035][ T1133] do_one_initcall+0x1fd/0x750 [ 75.761309][ T1133] do_initcall_level+0x137/0x1f0 [ 75.766932][ T1133] do_initcalls+0x69/0xd0 [ 75.771775][ T1133] kernel_init_freeable+0x3d2/0x570 [ 75.777657][ T1133] kernel_init+0x1d/0x1c0 [ 75.782515][ T1133] ret_from_fork+0x48/0x80 [ 75.787443][ T1133] ret_from_fork_asm+0x11/0x20 [ 75.792720][ T1133] [ 75.792720][ T1133] -> #0 (krc.lock){....}-{2:2}: [ 75.799744][ T1133] __lock_acquire+0x2ddb/0x7c80 [ 75.805105][ T1133] lock_acquire+0x197/0x410 [ 75.810113][ T1133] _raw_spin_lock+0x2e/0x40 [ 75.815130][ T1133] kvfree_call_rcu+0x15a/0x780 [ 75.820415][ T1133] trie_delete_elem+0x535/0x6a0 [ 75.825875][ T1133] bpf_prog_d46ba5bef82912c0+0x45/0x49 [ 75.831860][ T1133] bpf_trace_run3+0x1e7/0x400 [ 75.837181][ T1133] __bpf_trace_timer_start+0x14a/0x1b0 [ 75.843193][ T1133] enqueue_timer+0x398/0x530 [ 75.848301][ T1133] __mod_timer+0x977/0xdb0 [ 75.853226][ T1133] queue_delayed_work_on+0x12a/0x1e0 [ 75.859016][ T1133] process_scheduled_works+0xa45/0x15b0 [ 75.865072][ T1133] worker_thread+0xa55/0xfc0 [ 75.870190][ T1133] kthread+0x2fa/0x390 [ 75.874770][ T1133] ret_from_fork+0x48/0x80 [ 75.879780][ T1133] ret_from_fork_asm+0x11/0x20 [ 75.885054][ T1133] [ 75.885054][ T1133] other info that might help us debug this: [ 75.885054][ T1133] [ 75.895287][ T1133] Possible unsafe locking scenario: [ 75.895287][ T1133] [ 75.902727][ T1133] CPU0 CPU1 [ 75.908079][ T1133] ---- ---- [ 75.913429][ T1133] lock(&base->lock); [ 75.917586][ T1133] lock(krc.lock); [ 75.923959][ T1133] lock(&base->lock); [ 75.930624][ T1133] lock(krc.lock); [ 75.934434][ T1133] [ 75.934434][ T1133] *** DEADLOCK *** [ 75.934434][ T1133] [ 75.942560][ T1133] 4 locks held by kworker/u4:7/1133: [ 75.947853][ T1133] #0: ffff88802d4d1938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 75.959245][ T1133] #1: ffffc900044cfd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 75.972546][ T1133] #2: ffff8880b8e297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 75.981854][ T1133] #3: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 75.991167][ T1133] [ 75.991167][ T1133] stack backtrace: [ 75.997057][ T1133] CPU: 0 PID: 1133 Comm: kworker/u4:7 Not tainted 6.6.94-syzkaller #0 [ 76.005216][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.015266][ T1133] Workqueue: bat_events batadv_nc_worker [ 76.020913][ T1133] Call Trace: [ 76.024195][ T1133] [ 76.027121][ T1133] dump_stack_lvl+0x16c/0x230 [ 76.031805][ T1133] ? load_image+0x3b0/0x3b0 [ 76.036571][ T1133] ? show_regs_print_info+0x20/0x20 [ 76.042055][ T1133] ? print_circular_bug+0x12b/0x1a0 [ 76.047290][ T1133] check_noncircular+0x2bd/0x3c0 [ 76.052247][ T1133] ? print_deadlock_bug+0x5d0/0x5d0 [ 76.057467][ T1133] ? lockdep_lock+0xe0/0x220 [ 76.062299][ T1133] ? _find_first_zero_bit+0xd3/0x100 [ 76.067579][ T1133] __lock_acquire+0x2ddb/0x7c80 [ 76.073040][ T1133] ? stack_trace_snprint+0xf0/0xf0 [ 76.078332][ T1133] ? __stack_depot_save+0x560/0x630 [ 76.083610][ T1133] ? verify_lock_unused+0x140/0x140 [ 76.088800][ T1133] ? kasan_save_stack+0x4d/0x60 [ 76.094981][ T1133] ? kasan_save_stack+0x3e/0x60 [ 76.099833][ T1133] ? __kasan_record_aux_stack+0xaf/0xc0 [ 76.105376][ T1133] ? kvfree_call_rcu+0xee/0x780 [ 76.110221][ T1133] ? trie_delete_elem+0x535/0x6a0 [ 76.115238][ T1133] ? bpf_prog_d46ba5bef82912c0+0x45/0x49 [ 76.120859][ T1133] ? bpf_trace_run3+0x1e7/0x400 [ 76.125698][ T1133] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 76.131320][ T1133] ? enqueue_timer+0x398/0x530 [ 76.136071][ T1133] ? __mod_timer+0x977/0xdb0 [ 76.140651][ T1133] ? queue_delayed_work_on+0x12a/0x1e0 [ 76.146102][ T1133] ? process_scheduled_works+0xa45/0x15b0 [ 76.151975][ T1133] ? worker_thread+0xa55/0xfc0 [ 76.156832][ T1133] ? kthread+0x2fa/0x390 [ 76.161062][ T1133] ? ret_from_fork+0x48/0x80 [ 76.165749][ T1133] ? ret_from_fork_asm+0x11/0x20 [ 76.170687][ T1133] lock_acquire+0x197/0x410 [ 76.175228][ T1133] ? kvfree_call_rcu+0x15a/0x780 [ 76.180164][ T1133] ? read_lock_is_recursive+0x20/0x20 [ 76.185530][ T1133] ? __phys_addr+0xba/0x170 [ 76.190030][ T1133] _raw_spin_lock+0x2e/0x40 [ 76.194613][ T1133] ? kvfree_call_rcu+0x15a/0x780 [ 76.199557][ T1133] kvfree_call_rcu+0x15a/0x780 [ 76.204317][ T1133] ? call_rcu+0x920/0x920 [ 76.208635][ T1133] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 76.214524][ T1133] ? _raw_spin_unlock+0x40/0x40 [ 76.219370][ T1133] trie_delete_elem+0x535/0x6a0 [ 76.224302][ T1133] bpf_prog_d46ba5bef82912c0+0x45/0x49 [ 76.229763][ T1133] bpf_trace_run3+0x1e7/0x400 [ 76.234456][ T1133] ? bpf_trace_run3+0xf4/0x400 [ 76.239299][ T1133] ? bpf_trace_run2+0x3c0/0x3c0 [ 76.244166][ T1133] ? __bpf_trace_timer_start+0x133/0x1b0 [ 76.250344][ T1133] __bpf_trace_timer_start+0x14a/0x1b0 [ 76.255838][ T1133] ? __bpf_trace_timer_class+0x100/0x100 [ 76.261478][ T1133] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 76.267639][ T1133] ? _raw_spin_unlock+0x40/0x40 [ 76.272482][ T1133] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 76.277949][ T1133] ? _raw_spin_lock+0x40/0x40 [ 76.283020][ T1133] enqueue_timer+0x398/0x530 [ 76.287777][ T1133] __mod_timer+0x977/0xdb0 [ 76.293338][ T1133] queue_delayed_work_on+0x12a/0x1e0 [ 76.298828][ T1133] ? delayed_work_timer_fn+0x80/0x80 [ 76.304136][ T1133] ? batadv_nc_process_nc_paths+0xba/0x390 [ 76.310828][ T1133] ? __msecs_to_jiffies+0x1e/0x50 [ 76.316201][ T1133] ? batadv_nc_worker+0x4f8/0x610 [ 76.321504][ T1133] ? process_scheduled_works+0x957/0x15b0 [ 76.327500][ T1133] process_scheduled_works+0xa45/0x15b0 [ 76.334279][ T1133] ? assign_work+0x400/0x400 [ 76.339597][ T1133] ? assign_work+0x39e/0x400 [ 76.344503][ T1133] worker_thread+0xa55/0xfc0 [ 76.349206][ T1133] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 76.355333][ T1133] ? _raw_spin_unlock+0x40/0x40 [ 76.360400][ T1133] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 76.367318][ T1133] kthread+0x2fa/0x390 [ 76.371495][ T1133] ? pr_cont_work+0x560/0x560 [ 76.376350][ T1133] ? kthread_blkcg+0xd0/0xd0 [ 76.382771][ T1133] ret_from_fork+0x48/0x80 [ 76.388683][ T1133] ? kthread_blkcg+0xd0/0xd0 [ 76.394278][ T1133] ret_from_fork_asm+0x11/0x20 [ 76.399694][ T1133] [ 76.417374][ T5767] Bluetooth: hci3: command tx timeout [ 76.423258][ T5767] Bluetooth: hci2: command tx timeout [ 76.428748][ T5767] Bluetooth: hci0: command tx timeout [ 76.434175][ T5767] Bluetooth: hci1: command tx timeout [ 76.709436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.815775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.824931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.910947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.920300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.970667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.013330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.048379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.056968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.115699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.930487][ T786] cfg80211: failed to load regulatory.db