last executing test programs: 5.147054717s ago: executing program 4 (id=427): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c00)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x7, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x7, 0xb3d1, 0x4}]}]}, {0x0, [0x0, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x5f]}}, &(0x7f00000006c0)=""/248, 0x39, 0xf8, 0x1}, 0x28) 5.006310064s ago: executing program 4 (id=430): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x7}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbbd, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x5, 0x2, 0x7fffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 3.70849645s ago: executing program 4 (id=436): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@d, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.512221168s ago: executing program 4 (id=438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 3.495025249s ago: executing program 2 (id=439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.336215696s ago: executing program 2 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.2458037s ago: executing program 4 (id=443): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0x0, 0xa}, {0x0, 0x4, 0x10009, 0x1}], 0x10, 0xfffffff6}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 3.180232292s ago: executing program 2 (id=444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) 2.171963946s ago: executing program 2 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.063788181s ago: executing program 2 (id=451): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 1.881724149s ago: executing program 3 (id=455): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x45}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.760695314s ago: executing program 3 (id=457): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 1.760305554s ago: executing program 1 (id=458): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.704942126s ago: executing program 1 (id=460): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, 0x0, 0x8) 1.685461077s ago: executing program 3 (id=461): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r4) 1.584286792s ago: executing program 0 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000008ffffff000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) 1.310575173s ago: executing program 0 (id=463): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 759.530587ms ago: executing program 2 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0, 0x0, 0xf00000000000000}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) 611.443824ms ago: executing program 1 (id=465): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000180), &(0x7f00000002c0)=r1}, 0x20) 460.23568ms ago: executing program 3 (id=466): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x7}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbbd, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x5, 0x2, 0x7fffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, 0x0}, 0x4) 459.42225ms ago: executing program 0 (id=467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r1, 0x0, 0x0}, 0x10) 459.03692ms ago: executing program 1 (id=468): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) 342.254785ms ago: executing program 0 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 281.067468ms ago: executing program 1 (id=470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 221.52621ms ago: executing program 3 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 152.301514ms ago: executing program 0 (id=472): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 94.535536ms ago: executing program 3 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) 45.864728ms ago: executing program 4 (id=474): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 267.12µs ago: executing program 1 (id=475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, 0x0, 0x8) 0s ago: executing program 0 (id=476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 58.487533][ T4172] cgroup: Unknown subsys name 'net' [ 58.647751][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.092301][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.322225][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 62.396688][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 62.460495][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 62.491722][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.499005][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.507746][ T4194] device bridge_slave_0 entered promiscuous mode [ 62.534554][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 62.544356][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.551586][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.559770][ T4194] device bridge_slave_1 entered promiscuous mode [ 62.634518][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.675728][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.695679][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.703432][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.711581][ T4183] device bridge_slave_0 entered promiscuous mode [ 62.749465][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.759788][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.767959][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.775192][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 62.785362][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.792831][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.800653][ T4197] device bridge_slave_0 entered promiscuous mode [ 62.812554][ T4194] team0: Port device team_slave_0 added [ 62.842835][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.849997][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.858788][ T4197] device bridge_slave_1 entered promiscuous mode [ 62.866799][ T4194] team0: Port device team_slave_1 added [ 62.903611][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.927062][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.934433][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.942832][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.956342][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.973889][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.980877][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.006926][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.018674][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.026122][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.034034][ T4184] device bridge_slave_1 entered promiscuous mode [ 63.054359][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.063953][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.071437][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.097645][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.130852][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.161822][ T4183] team0: Port device team_slave_0 added [ 63.177322][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.196235][ T4183] team0: Port device team_slave_1 added [ 63.211979][ T4197] team0: Port device team_slave_0 added [ 63.219791][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.229043][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.236283][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.244964][ T4198] device bridge_slave_0 entered promiscuous mode [ 63.269435][ T4197] team0: Port device team_slave_1 added [ 63.289563][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.296900][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.305244][ T4198] device bridge_slave_1 entered promiscuous mode [ 63.351215][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.358346][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.384329][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.412172][ T4194] device hsr_slave_0 entered promiscuous mode [ 63.419002][ T4194] device hsr_slave_1 entered promiscuous mode [ 63.426668][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.433798][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.459838][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.473290][ T4184] team0: Port device team_slave_0 added [ 63.479719][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.486735][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.512904][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.531282][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.538258][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.564400][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.580613][ T4184] team0: Port device team_slave_1 added [ 63.592398][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.632655][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.700363][ T4197] device hsr_slave_0 entered promiscuous mode [ 63.707370][ T4197] device hsr_slave_1 entered promiscuous mode [ 63.715521][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.723489][ T4197] Cannot create hsr debugfs directory [ 63.732334][ T4183] device hsr_slave_0 entered promiscuous mode [ 63.739133][ T4183] device hsr_slave_1 entered promiscuous mode [ 63.745986][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.753772][ T4183] Cannot create hsr debugfs directory [ 63.759836][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.766887][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.793095][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.825564][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.832835][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.859213][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.881081][ T4198] team0: Port device team_slave_0 added [ 63.913964][ T4198] team0: Port device team_slave_1 added [ 63.961994][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 63.974527][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 64.052036][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 64.054673][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.058182][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 64.071469][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.078189][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.085964][ T4184] Cannot create hsr debugfs directory [ 64.095653][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.102721][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.128913][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 64.129063][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.148284][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.155547][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.181508][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.277059][ T4198] device hsr_slave_0 entered promiscuous mode [ 64.284114][ T4198] device hsr_slave_1 entered promiscuous mode [ 64.290623][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.298528][ T4198] Cannot create hsr debugfs directory [ 64.396802][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.428396][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.440809][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.467119][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.506008][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.515973][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.530522][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.552032][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.621626][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.630847][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.658864][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.668420][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.728405][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.737905][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.750252][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.787492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.796667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.806440][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.815950][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.854457][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.884484][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.894877][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.904509][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.911813][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.922201][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.932222][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.940572][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.947751][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.957978][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.967823][ T4198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.977635][ T4198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.999661][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.012611][ T4198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.029614][ T4198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.048776][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.066961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.102123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.110867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.119083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.128890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.140342][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.158473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.167766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.178095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.216679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.226863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.237471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.246660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.256451][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.263609][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.272447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.280857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.289652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.304784][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.321694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.330610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.339700][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.346863][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.358118][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.372810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.399141][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.420527][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.439030][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.449281][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.464255][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.482432][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.505209][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.514740][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.523617][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.542344][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.557752][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.568366][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.577434][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.586033][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.602816][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.611877][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.632156][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.642615][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.651474][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.658680][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.671226][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.679339][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.687504][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.714303][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.732146][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.740295][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.756729][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.767049][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.774198][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.782363][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.791378][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.800048][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.810489][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.819548][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.827212][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.835253][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.852283][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.861725][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.876416][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.891460][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.907191][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.928316][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.940092][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.964444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.973771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.985289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.994932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.006179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.015830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.030516][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.037679][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.045974][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 66.052332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.052386][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 66.067489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.076643][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.083770][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.097676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.106028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.121604][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 66.146386][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 66.153965][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.192646][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.202816][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 66.203837][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.219226][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.228119][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.235277][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.245791][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.254572][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.263127][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.270378][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.278276][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.286503][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.294059][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.303101][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.312806][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.321639][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.330365][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.339139][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.347904][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.356739][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.366318][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.375084][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.383968][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.392839][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.400923][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.409690][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.425490][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.435945][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.452809][ T4194] device veth0_vlan entered promiscuous mode [ 66.492504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.500702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.513594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.523305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.532116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.540599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.550263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.558215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.566321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.574752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.584910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.594517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.612289][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.621728][ T4194] device veth1_vlan entered promiscuous mode [ 66.644118][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.656280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.665257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.677933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.696857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.725793][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.760974][ T4183] device veth0_vlan entered promiscuous mode [ 66.779193][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.789027][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.826409][ T4194] device veth0_macvtap entered promiscuous mode [ 66.843312][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.858362][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.867489][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.883556][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.893236][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.902422][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.914153][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.924243][ T4183] device veth1_vlan entered promiscuous mode [ 66.937493][ T4184] device veth0_vlan entered promiscuous mode [ 66.947956][ T4194] device veth1_macvtap entered promiscuous mode [ 66.964485][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.973945][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.983660][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.993461][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.008704][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.017442][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.031742][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.039701][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.056896][ T4184] device veth1_vlan entered promiscuous mode [ 67.071821][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.092518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.100714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.109073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.118576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.130485][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.148138][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.159324][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.169471][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.179345][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.188228][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.210085][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.217665][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.227637][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.236639][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.245126][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.255009][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.264573][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.273674][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.285616][ T4183] device veth0_macvtap entered promiscuous mode [ 67.320706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.332554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.342575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.355609][ T4183] device veth1_macvtap entered promiscuous mode [ 67.389553][ T4184] device veth0_macvtap entered promiscuous mode [ 67.415811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.424708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.434953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.444263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.473376][ T4184] device veth1_macvtap entered promiscuous mode [ 67.483959][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.500195][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.521600][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.550681][ T4198] device veth0_vlan entered promiscuous mode [ 67.571904][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.579976][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.589168][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.598257][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.607548][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.616363][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.626303][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.652095][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.665427][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.677951][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.699530][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.709191][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.718560][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.728531][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.745109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.757797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.786565][ T4198] device veth1_vlan entered promiscuous mode [ 67.796833][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.807837][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.819853][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.830426][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.842034][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.861219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.869945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.879624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.889601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.917853][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.928127][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.933982][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.946548][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.953484][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.966724][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.978039][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.012609][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.020627][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.030322][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.044013][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.054404][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.063713][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.072754][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.111302][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.116145][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.126215][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.137048][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 68.138673][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.144461][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 68.160237][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.168461][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.178298][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.187616][ T4197] device veth0_vlan entered promiscuous mode [ 68.201543][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 68.207908][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 68.235337][ T4197] device veth1_vlan entered promiscuous mode [ 68.258904][ T4198] device veth0_macvtap entered promiscuous mode [ 68.293109][ T4294] Bluetooth: hci4: command 0x040f tx timeout [ 68.298176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.310238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.319985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.330676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.340443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.357540][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.368743][ T4198] device veth1_macvtap entered promiscuous mode [ 68.373615][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.438082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.453252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.497939][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.511320][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.522126][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.532928][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.543110][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.553884][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.565340][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.577972][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.589248][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.600015][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.619433][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.629544][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.640383][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.652071][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.669501][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.669525][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.670334][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.692529][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.704624][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.716980][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.726955][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.736100][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.745433][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.755291][ T4197] device veth0_macvtap entered promiscuous mode [ 68.776455][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.785479][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.796373][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.805860][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.824256][ T4296] device syzkaller0 entered promiscuous mode [ 68.838722][ T4197] device veth1_macvtap entered promiscuous mode [ 68.907146][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.914064][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.927103][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.935054][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.946958][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.957901][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.967790][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.978372][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.988864][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.999743][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.013447][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.066884][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.085995][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.117490][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.142891][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.156660][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.167632][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.184022][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.198411][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.211785][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.231215][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.242251][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.253100][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.266007][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.291089][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.304478][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.376860][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.390005][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.399734][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.411041][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.478128][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.487500][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.552718][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.576222][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.589282][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.611865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.693855][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.713512][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.745387][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.752286][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.767062][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.793505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.830327][ T4322] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.875809][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.894664][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.909213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.211640][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 70.223819][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 70.325593][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 70.337754][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 70.379557][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 70.586692][ T4356] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.661201][ T4359] device syzkaller1 entered promiscuous mode [ 70.738608][ T4365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18'. [ 71.204729][ T4373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.324879][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.325954][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.332183][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.571132][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 71.691218][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.727643][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 71.781506][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 71.855276][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 71.907660][ T23] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 71.958701][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.045243][ T4394] netlink: 'syz.3.25': attribute type 3 has an invalid length. [ 72.064271][ T23] hub 3-1:1.0: bad descriptor, ignoring hub [ 72.071032][ T23] hub: probe of 3-1:1.0 failed with error -5 [ 72.077665][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 72.105940][ T4394] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 72.140461][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 72.164607][ T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 72.168062][ T4397] device syzkaller1 entered promiscuous mode [ 72.170571][ T23] cdc_wdm 3-1:1.0: Unknown control protocol [ 72.248899][ T4394] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.25'. [ 72.491595][ T4402] netlink: 348 bytes leftover after parsing attributes in process `syz.1.30'. [ 72.591546][ T23] usb 3-1: USB disconnect, device number 2 [ 72.652258][ T4407] kvm: pic: level sensitive irq not supported [ 72.652434][ T4407] kvm: pic: non byte read [ 72.679629][ T4407] kvm: pic: non byte read [ 72.698257][ T4407] kvm: pic: level sensitive irq not supported [ 72.698335][ T4407] kvm: pic: non byte read [ 72.716436][ T4407] kvm: pic: non byte read [ 72.724247][ T4407] kvm: pic: non byte read [ 72.729135][ T4407] kvm: pic: non byte read [ 72.740326][ T4407] kvm: pic: non byte read [ 72.746832][ T4407] kvm: pic: single mode not supported [ 72.746851][ T4407] kvm: pic: level sensitive irq not supported [ 72.759283][ T4407] kvm: pic: non byte read [ 72.781759][ T4407] kvm: pic: non byte read [ 72.887939][ T4413] ======================================================= [ 72.887939][ T4413] WARNING: The mand mount option has been deprecated and [ 72.887939][ T4413] and is ignored by this kernel. Remove the mand [ 72.887939][ T4413] option from the mount to silence this warning. [ 72.887939][ T4413] ======================================================= [ 72.942925][ T4413] 9pnet_virtio: no channels available for device syz [ 73.840667][ T4192] block nbd4: Receive control failed (result -32) [ 73.850884][ T4425] block nbd4: shutting down sockets [ 74.002411][ T4454] binder_alloc: 4450: pid 4450 spamming oneway? 2 buffers allocated for a total size of 5360 [ 74.044268][ T4459] 9pnet_virtio: no channels available for device syz [ 74.277647][ T4470] device syzkaller0 entered promiscuous mode [ 74.282861][ T4471] block device autoloading is deprecated and will be removed. [ 74.624183][ T4486] device syzkaller0 entered promiscuous mode [ 74.712449][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 75.189759][ T4506] netlink: 'syz.2.65': attribute type 4 has an invalid length. [ 75.214666][ T4510] fuse: Bad value for 'fd' [ 75.651116][ T1325] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.659125][ T4528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.77'. [ 75.698596][ T4528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.77'. [ 75.823408][ T4536] input: syz0 as /devices/virtual/input/input5 [ 75.912575][ T4539] netlink: 'syz.2.79': attribute type 3 has an invalid length. [ 75.920259][ T4539] netlink: 'syz.2.79': attribute type 1 has an invalid length. [ 75.928061][ T4539] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.79'. [ 75.956203][ T1325] usb 2-1: Using ep0 maxpacket: 8 [ 76.182082][ T1325] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 76.333187][ T1325] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.581646][ T1325] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.648787][ T1325] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 76.662638][ T1325] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 76.673180][ T1325] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.686111][ T4549] 9pnet_virtio: no channels available for device syz [ 76.686433][ T1325] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.721986][ T4552] tmpfs: Unknown parameter 'usrquota' [ 76.726342][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.737251][ T4549] overlayfs: failed to clone upperpath [ 77.041469][ T1325] usb 2-1: usb_control_msg returned -32 [ 77.047160][ T1325] usbtmc 2-1:16.0: can't read capabilities [ 77.413773][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 77.618570][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.720988][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #142!!! [ 77.792516][ T4577] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 77.823398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 77.832954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 77.925771][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.997754][ T4174] usb 2-1: USB disconnect, device number 2 [ 78.282669][ T4592] netlink: 'syz.4.95': attribute type 3 has an invalid length. [ 78.290503][ T4592] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 78.298237][ T4592] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.95'. [ 78.426370][ T4587] process 'syz.3.96' launched './file0' with NULL argv: empty string added [ 79.117815][ T4602] binder: BINDER_SET_CONTEXT_MGR already set [ 79.140374][ T4602] binder: 4601:4602 ioctl 4018620d 200000000240 returned -16 [ 79.253866][ T4608] Zero length message leads to an empty skb [ 79.509306][ T4618] syz.2.106 uses obsolete (PF_INET,SOCK_PACKET) [ 79.694884][ T4600] mmap: syz.4.99 (4600) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 80.304454][ T4635] netlink: 'syz.2.110': attribute type 3 has an invalid length. [ 80.312254][ T4635] netlink: 'syz.2.110': attribute type 1 has an invalid length. [ 80.319975][ T4635] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.110'. [ 81.066344][ T4633] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 81.073325][ T4633] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.127762][ T4633] vhci_hcd vhci_hcd.0: Device attached [ 81.152175][ T4638] vhci_hcd: connection closed [ 81.157678][ T4346] vhci_hcd: stop threads [ 81.195260][ T4346] vhci_hcd: release socket [ 81.231333][ T4346] vhci_hcd: disconnect device [ 81.385934][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 81.434346][ T4656] overlayfs: failed to clone upperpath [ 81.625426][ T4662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 81.739576][ T4192] block nbd0: Receive control failed (result -1) [ 82.119646][ T4676] netlink: 'syz.0.124': attribute type 3 has an invalid length. [ 82.128210][ T4676] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 82.136190][ T4676] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.124'. [ 82.417039][ T4679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 82.671758][ T4681] 9pnet_virtio: no channels available for device syz [ 82.720646][ T4685] 9pnet_virtio: no channels available for device syz [ 82.729218][ T4683] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 82.766660][ T4683] netlink: 64 bytes leftover after parsing attributes in process `syz.0.128'. [ 82.891338][ T4192] Bluetooth: Wrong link type (-22) [ 83.233307][ T4174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.611183][ T4174] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 83.629573][ T4174] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 83.686520][ T4174] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.794358][ T4719] device pim6reg1 entered promiscuous mode [ 83.861458][ T4174] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.882152][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.911687][ T4174] usb 3-1: Product: syz [ 83.931082][ T4174] usb 3-1: Manufacturer: syz [ 83.946025][ T4174] usb 3-1: SerialNumber: syz [ 83.959830][ T4174] usb 3-1: config 0 descriptor?? [ 84.041778][ T4174] hub 3-1:0.0: bad descriptor, ignoring hub [ 84.058044][ T4174] hub: probe of 3-1:0.0 failed with error -5 [ 84.090729][ T4174] usb 3-1: selecting invalid altsetting 0 [ 84.261566][ T4738] device pim6reg1 entered promiscuous mode [ 84.265173][ T4174] usb 3-1: USB disconnect, device number 3 [ 84.708090][ T4762] syz.1.161[4762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.708192][ T4762] syz.1.161[4762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.734791][ T4759] device pim6reg1 entered promiscuous mode [ 84.831094][ T4174] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.081619][ T4174] usb 3-1: Using ep0 maxpacket: 16 [ 85.191089][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.211209][ T4174] usb 3-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.261518][ T4174] usb 3-1: config 1 interface 0 has no altsetting 0 [ 85.421310][ T4174] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 85.435933][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.471163][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 85.495251][ T4174] usb 3-1: Product: syz [ 85.521938][ T4174] usb 3-1: Manufacturer: syz [ 85.545028][ T4174] usb 3-1: SerialNumber: syz [ 85.591655][ T1107] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 85.761304][ T1107] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 85.784029][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 85.836352][ T1107] usb 4-1: Product: syz [ 85.849483][ T1107] usb 4-1: Manufacturer: syz [ 85.862682][ T1107] usb 4-1: SerialNumber: syz [ 85.885628][ T1107] usb 4-1: config 0 descriptor?? [ 85.931379][ T4769] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.031911][ T4174] usbhid 3-1:1.0: can't add hid device: -71 [ 86.049335][ T4174] usbhid: probe of 3-1:1.0 failed with error -71 [ 86.075208][ T4740] udevd[4740]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.077930][ T4174] usb 3-1: USB disconnect, device number 4 [ 86.174161][ T4255] usb 4-1: USB disconnect, device number 2 [ 86.703033][ T7] cfg80211: failed to load regulatory.db [ 87.768923][ T3561] udevd[3561]: worker [4744] terminated by signal 33 (Unknown signal 33) [ 87.801541][ T3561] udevd[3561]: worker [4744] failed while handling '/devices/virtual/block/loop1' [ 87.837473][ T4878] device syzkaller0 entered promiscuous mode [ 88.056476][ T4888] device pim6reg1 entered promiscuous mode [ 88.592319][ T4918] device wg2 entered promiscuous mode [ 88.855965][ T4926] device veth0_vlan left promiscuous mode [ 88.899165][ T4926] device veth0_vlan entered promiscuous mode [ 88.929830][ T4928] device wg2 entered promiscuous mode [ 88.995330][ T4938] device pim6reg1 entered promiscuous mode [ 89.116505][ T4945] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.124945][ T4945] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.223003][ T4949] device bridge_slave_1 left promiscuous mode [ 89.258637][ T4949] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.346800][ T4949] device bridge_slave_0 left promiscuous mode [ 89.406403][ T4949] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.007489][ T5028] device pim6reg1 entered promiscuous mode [ 91.034656][ T5032] device wg2 entered promiscuous mode [ 91.254140][ T5038] device syzkaller0 entered promiscuous mode [ 91.655944][ T3561] udevd[3561]: worker [4188] terminated by signal 33 (Unknown signal 33) [ 91.678817][ T3561] udevd[3561]: worker [4188] failed while handling '/devices/virtual/block/loop2' [ 92.527687][ T5097] device pim6reg1 entered promiscuous mode [ 92.829800][ T5109] device pim6reg1 entered promiscuous mode [ 94.278606][ T5192] device veth1_macvtap left promiscuous mode [ 94.286001][ T5192] device macsec0 entered promiscuous mode [ 95.230004][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.237582][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.341179][ T5259] device bridge_slave_1 left promiscuous mode [ 95.422939][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.550021][ T5259] device bridge_slave_0 left promiscuous mode [ 95.590342][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.518962][ T5355] device pim6reg1 entered promiscuous mode [ 102.283520][ T5464] device wg2 entered promiscuous mode [ 103.619234][ T5491] device syzkaller0 entered promiscuous mode [ 105.273589][ T5530] device syzkaller0 entered promiscuous mode [ 105.800153][ T5523] ODEBUG: Out of memory. ODEBUG disabled [ 105.801411][ T5523] [ 105.801417][ T5523] ====================================================== [ 105.801423][ T5523] WARNING: possible circular locking dependency detected [ 105.801444][ T5523] syzkaller #0 Not tainted [ 105.801453][ T5523] ------------------------------------------------------ [ 105.801458][ T5523] syz.2.464/5523 is trying to acquire lock: [ 105.801468][ T5523] ffffffff8c1111c0 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 105.801517][ T5523] [ 105.801517][ T5523] but task is already holding lock: [ 105.801522][ T5523] ffff88807bc29238 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc7/0xc50 [ 105.801564][ T5523] [ 105.801564][ T5523] which lock already depends on the new lock. [ 105.801564][ T5523] [ 105.801569][ T5523] [ 105.801569][ T5523] the existing dependency chain (in reverse order) is: [ 105.801575][ T5523] [ 105.801575][ T5523] -> #5 (&trie->lock){..-.}-{2:2}: [ 105.801598][ T5523] _raw_spin_lock_irqsave+0xa4/0xf0 [ 105.801617][ T5523] trie_delete_elem+0x90/0x710 [ 105.801643][ T5523] 0xffffffffa00180b2 [ 105.801656][ T5523] bpf_trace_run2+0x15b/0x2d0 [ 105.801680][ T5523] trace_tlb_flush+0xe6/0x110 [ 105.801700][ T5523] switch_mm_irqs_off+0x6e3/0x9a0 [ 105.801717][ T5523] __schedule+0x1024/0x4390 [ 105.801736][ T5523] preempt_schedule_common+0x82/0xd0 [ 105.801755][ T5523] preempt_schedule+0xa7/0xb0 [ 105.801773][ T5523] preempt_schedule_thunk+0x16/0x18 [ 105.801794][ T5523] _raw_spin_unlock+0x36/0x40 [ 105.801810][ T5523] wp_page_copy+0xfb2/0x1fd0 [ 105.801828][ T5523] handle_mm_fault+0x1ec7/0x43b0 [ 105.801844][ T5523] do_user_addr_fault+0x489/0xc80 [ 105.801865][ T5523] exc_page_fault+0x60/0x100 [ 105.801883][ T5523] asm_exc_page_fault+0x22/0x30 [ 105.801901][ T5523] [ 105.801901][ T5523] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 105.801924][ T5523] _raw_spin_lock_nested+0x2e/0x40 [ 105.801942][ T5523] raw_spin_rq_lock_nested+0x26/0x140 [ 105.801962][ T5523] task_fork_fair+0x5c/0x350 [ 105.801977][ T5523] sched_cgroup_fork+0x2c6/0x320 [ 105.801997][ T5523] copy_process+0x22d1/0x3e00 [ 105.802014][ T5523] kernel_clone+0x219/0x930 [ 105.802030][ T5523] kernel_thread+0xc8/0x120 [ 105.802046][ T5523] rest_init+0x21/0x330 [ 105.802064][ T5523] start_kernel+0x486/0x530 [ 105.802082][ T5523] secondary_startup_64_no_verify+0xb1/0xbb [ 105.802103][ T5523] [ 105.802103][ T5523] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 105.802134][ T5523] _raw_spin_lock_irqsave+0xa4/0xf0 [ 105.802151][ T5523] try_to_wake_up+0x5c/0x1050 [ 105.802169][ T5523] __wake_up_common+0x2a4/0x4e0 [ 105.802188][ T5523] __wake_up+0x108/0x180 [ 105.802204][ T5523] tty_port_default_wakeup+0xa5/0xf0 [ 105.802223][ T5523] serial8250_tx_chars+0x629/0x830 [ 105.802250][ T5523] serial8250_handle_irq+0x519/0x610 [ 105.802269][ T5523] serial8250_default_handle_irq+0xb4/0x1a0 [ 105.802291][ T5523] serial8250_interrupt+0x9b/0x1c0 [ 105.802310][ T5523] __handle_irq_event_percpu+0x291/0x9b0 [ 105.802329][ T5523] handle_irq_event+0xa5/0x220 [ 105.802347][ T5523] handle_edge_irq+0x243/0xb20 [ 105.802366][ T5523] __common_interrupt+0xd7/0x1e0 [ 105.802384][ T5523] common_interrupt+0xb0/0xd0 [ 105.802401][ T5523] asm_common_interrupt+0x22/0x40 [ 105.802418][ T5523] lock_acquire+0x1f2/0x3f0 [ 105.802437][ T5523] _raw_spin_lock+0x2a/0x40 [ 105.802452][ T5523] validate_mm+0x309/0x950 [ 105.802470][ T5523] __do_munmap+0xcc4/0xdc0 [ 105.802487][ T5523] mmap_region+0x8bb/0x1660 [ 105.802505][ T5523] do_mmap+0x81f/0xea0 [ 105.802522][ T5523] vm_mmap_pgoff+0x1b2/0x2b0 [ 105.802542][ T5523] ksys_mmap_pgoff+0x542/0x780 [ 105.802560][ T5523] do_syscall_64+0x4c/0xa0 [ 105.802576][ T5523] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.802595][ T5523] [ 105.802595][ T5523] -> #2 (&tty->write_wait){-...}-{2:2}: [ 105.802619][ T5523] _raw_spin_lock_irqsave+0xa4/0xf0 [ 105.802636][ T5523] __wake_up+0xed/0x180 [ 105.802654][ T5523] tty_port_default_wakeup+0xa5/0xf0 [ 105.802672][ T5523] serial8250_tx_chars+0x629/0x830 [ 105.802691][ T5523] serial8250_handle_irq+0x519/0x610 [ 105.802711][ T5523] serial8250_default_handle_irq+0xb4/0x1a0 [ 105.802731][ T5523] serial8250_interrupt+0x9b/0x1c0 [ 105.802750][ T5523] __handle_irq_event_percpu+0x291/0x9b0 [ 105.802768][ T5523] handle_irq_event+0xa5/0x220 [ 105.802786][ T5523] handle_edge_irq+0x243/0xb20 [ 105.802805][ T5523] __common_interrupt+0xd7/0x1e0 [ 105.802822][ T5523] common_interrupt+0xb0/0xd0 [ 105.802839][ T5523] asm_common_interrupt+0x22/0x40 [ 105.802856][ T5523] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 105.802873][ T5523] uart_write+0x62f/0x880 [ 105.802887][ T5523] n_tty_write+0xd21/0x1210 [ 105.802908][ T5523] file_tty_write+0x557/0x910 [ 105.802928][ T5523] vfs_write+0x712/0xd00 [ 105.802944][ T5523] ksys_write+0x14d/0x250 [ 105.802959][ T5523] do_syscall_64+0x4c/0xa0 [ 105.802975][ T5523] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.802994][ T5523] [ 105.802994][ T5523] -> #1 (&port_lock_key){-...}-{2:2}: [ 105.803018][ T5523] _raw_spin_lock_irqsave+0xa4/0xf0 [ 105.803035][ T5523] serial8250_console_write+0x170/0xf80 [ 105.803055][ T5523] console_unlock+0xc86/0x1200 [ 105.803071][ T5523] vprintk_emit+0xc0/0x150 [ 105.803091][ T5523] _printk+0xcc/0x110 [ 105.803110][ T5523] register_console+0x682/0x960 [ 105.803140][ T5523] univ8250_console_init+0x41/0x50 [ 105.803161][ T5523] console_init+0x177/0x5d0 [ 105.803176][ T5523] start_kernel+0x2f9/0x530 [ 105.803193][ T5523] secondary_startup_64_no_verify+0xb1/0xbb [ 105.803213][ T5523] [ 105.803213][ T5523] -> #0 (console_owner){....}-{0:0}: [ 105.803236][ T5523] __lock_acquire+0x2c33/0x7c60 [ 105.803256][ T5523] lock_acquire+0x197/0x3f0 [ 105.803275][ T5523] console_lock_spinning_enable+0x51/0x60 [ 105.803292][ T5523] console_unlock+0x9f8/0x1200 [ 105.803308][ T5523] vprintk_emit+0xc0/0x150 [ 105.803327][ T5523] _printk+0xcc/0x110 [ 105.803346][ T5523] debug_objects_oom+0x89/0x2f0 [ 105.803366][ T5523] debug_object_activate+0x409/0x480 [ 105.803388][ T5523] kvfree_call_rcu+0xb5/0x7c0 [ 105.803404][ T5523] trie_update_elem+0x86e/0xc50 [ 105.803422][ T5523] bpf_map_update_value+0x57d/0x650 [ 105.803441][ T5523] generic_map_update_batch+0x525/0x7c0 [ 105.803460][ T5523] bpf_map_do_batch+0x466/0x600 [ 105.803478][ T5523] __sys_bpf+0x601/0x670 [ 105.803496][ T5523] __x64_sys_bpf+0x78/0x90 [ 105.803513][ T5523] do_syscall_64+0x4c/0xa0 [ 105.803529][ T5523] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.803548][ T5523] [ 105.803548][ T5523] other info that might help us debug this: [ 105.803548][ T5523] [ 105.803553][ T5523] Chain exists of: [ 105.803553][ T5523] console_owner --> &rq->__lock --> &trie->lock [ 105.803553][ T5523] [ 105.803579][ T5523] Possible unsafe locking scenario: [ 105.803579][ T5523] [ 105.803583][ T5523] CPU0 CPU1 [ 105.803587][ T5523] ---- ---- [ 105.803591][ T5523] lock(&trie->lock); [ 105.803602][ T5523] lock(&rq->__lock); [ 105.803613][ T5523] lock(&trie->lock); [ 105.803624][ T5523] lock(console_owner); [ 105.803635][ T5523] [ 105.803635][ T5523] *** DEADLOCK *** [ 105.803635][ T5523] [ 105.803639][ T5523] 3 locks held by syz.2.464/5523: [ 105.803649][ T5523] #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 105.803693][ T5523] #1: ffff88807bc29238 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc7/0xc50 [ 105.803737][ T5523] #2: ffffffff8c1112a0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 105.803783][ T5523] [ 105.803783][ T5523] stack backtrace: [ 105.803788][ T5523] CPU: 0 PID: 5523 Comm: syz.2.464 Not tainted syzkaller #0 [ 105.803806][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.803830][ T5523] Call Trace: [ 105.803836][ T5523] [ 105.803843][ T5523] dump_stack_lvl+0x168/0x230 [ 105.803866][ T5523] ? load_image+0x3b0/0x3b0 [ 105.803888][ T5523] ? show_regs_print_info+0x20/0x20 [ 105.803915][ T5523] ? print_circular_bug+0x12b/0x1a0 [ 105.803936][ T5523] check_noncircular+0x274/0x310 [ 105.803956][ T5523] ? add_chain_block+0x940/0x940 [ 105.803973][ T5523] ? lockdep_lock+0xdc/0x1e0 [ 105.803995][ T5523] ? lockdep_unlock+0x134/0x2d0 [ 105.804016][ T5523] ? lockdep_lock+0x1e0/0x1e0 [ 105.804038][ T5523] ? mark_lock+0x94/0x320 [ 105.804061][ T5523] __lock_acquire+0x2c33/0x7c60 [ 105.804082][ T5523] ? put_dec_trunc8+0x1fd/0x340 [ 105.804118][ T5523] ? verify_lock_unused+0x140/0x140 [ 105.804155][ T5523] ? sprintf+0xd6/0x120 [ 105.804180][ T5523] lock_acquire+0x197/0x3f0 [ 105.804201][ T5523] ? console_lock_spinning_enable+0x2c/0x60 [ 105.804221][ T5523] ? prb_read_valid+0x60/0x60 [ 105.804242][ T5523] ? read_lock_is_recursive+0x10/0x10 [ 105.804264][ T5523] ? do_raw_spin_lock+0x11d/0x280 [ 105.804284][ T5523] ? __rwlock_init+0x140/0x140 [ 105.804304][ T5523] ? do_raw_spin_unlock+0x11d/0x230 [ 105.804325][ T5523] console_lock_spinning_enable+0x51/0x60 [ 105.804344][ T5523] ? console_lock_spinning_enable+0x2c/0x60 [ 105.804361][ T5523] console_unlock+0x9f8/0x1200 [ 105.804384][ T5523] ? console_trylock_spinning+0x350/0x350 [ 105.804410][ T5523] ? __down_trylock_console_sem+0x184/0x1e0 [ 105.804429][ T5523] ? vprintk_emit+0xa7/0x150 [ 105.804450][ T5523] ? printk_parse_prefix+0x330/0x330 [ 105.804472][ T5523] ? vprintk_emit+0xa7/0x150 [ 105.804493][ T5523] ? console_trylock+0x70/0x70 [ 105.804519][ T5523] ? vprintk_emit+0x150/0x150 [ 105.804542][ T5523] ? 0xffffffffa00188d0 [ 105.804558][ T5523] ? __kernel_text_address+0x9a/0x100 [ 105.804581][ T5523] ? unwind_get_return_address+0x49/0x80 [ 105.804605][ T5523] vprintk_emit+0xc0/0x150 [ 105.804629][ T5523] _printk+0xcc/0x110 [ 105.804653][ T5523] ? load_image+0x3b0/0x3b0 [ 105.804676][ T5523] ? __lock_acquire+0x7c60/0x7c60 [ 105.804696][ T5523] ? do_raw_spin_lock+0x11d/0x280 [ 105.804719][ T5523] debug_objects_oom+0x89/0x2f0 [ 105.804740][ T5523] ? do_raw_spin_unlock+0x11d/0x230 [ 105.804761][ T5523] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 105.804780][ T5523] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 105.804808][ T5523] debug_object_activate+0x409/0x480 [ 105.804835][ T5523] kvfree_call_rcu+0xb5/0x7c0 [ 105.804857][ T5523] ? call_rcu+0x930/0x930 [ 105.804882][ T5523] trie_update_elem+0x86e/0xc50 [ 105.804914][ T5523] bpf_map_update_value+0x57d/0x650 [ 105.804938][ T5523] generic_map_update_batch+0x525/0x7c0 [ 105.804967][ T5523] ? rcu_read_unlock+0x90/0x90 [ 105.804989][ T5523] ? __fdget+0x18b/0x210 [ 105.805008][ T5523] ? rcu_read_unlock+0x90/0x90 [ 105.805025][ T5523] bpf_map_do_batch+0x466/0x600 [ 105.805050][ T5523] __sys_bpf+0x601/0x670 [ 105.805071][ T5523] ? bpf_link_show_fdinfo+0x340/0x340 [ 105.805098][ T5523] ? vtime_user_exit+0x2dc/0x400 [ 105.805129][ T5523] __x64_sys_bpf+0x78/0x90 [ 105.805150][ T5523] do_syscall_64+0x4c/0xa0 [ 105.805167][ T5523] ? clear_bhb_loop+0x30/0x80 [ 105.805186][ T5523] ? clear_bhb_loop+0x30/0x80 [ 105.805206][ T5523] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.805231][ T5523] RIP: 0033:0x7fd8d7cd1749 [ 105.805248][ T5523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.805264][ T5523] RSP: 002b:00007fd8d5f38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.805283][ T5523] RAX: ffffffffffffffda RBX: 00007fd8d7f27fa0 RCX: 00007fd8d7cd1749 [ 105.805297][ T5523] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001a [ 105.805310][ T5523] RBP: 00007fd8d7d55f91 R08: 0000000000000000 R09: 0000000000000000 [ 105.805321][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.805333][ T5523] R13: 00007fd8d7f28038 R14: 00007fd8d7f27fa0 R15: 00007ffd623bb3f8 [ 105.805356][ T5523]