last executing test programs: 1.199390421s ago: executing program 0 (id=5): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000000c0)="92", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r2) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.095355793s ago: executing program 0 (id=6): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 883.490036ms ago: executing program 0 (id=7): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000200), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000002b00), 0x2, 0x0) close(r2) 789.577368ms ago: executing program 0 (id=8): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x41) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x24, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 661.09439ms ago: executing program 0 (id=9): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000002c0), &(0x7f0000000640)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r4, 0x0, 0x0}, 0x10) 376.606314ms ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 314.077565ms ago: executing program 1 (id=2): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 187.523698ms ago: executing program 2 (id=10): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10, 0x0}, 0x8040) 40.14162ms ago: executing program 0 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 15.31956ms ago: executing program 2 (id=12): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) 0s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000004100000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 56.486708][ T5754] cgroup: Unknown subsys name 'net' [ 56.620053][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.974831][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.975595][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.986321][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.994104][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.002713][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.008768][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.010776][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.024887][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.026811][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.032618][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.040521][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.053442][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.054012][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.068947][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.076729][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.085191][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.092950][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.094322][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.100546][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.115802][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.116045][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.130111][ T5769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.130784][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.145313][ T5769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.158092][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.481957][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 60.579654][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 60.694648][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.701774][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.712432][ T5763] bridge_slave_0: entered allmulticast mode [ 60.720630][ T5763] bridge_slave_0: entered promiscuous mode [ 60.732477][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.740430][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.749765][ T5763] bridge_slave_1: entered allmulticast mode [ 60.756618][ T5763] bridge_slave_1: entered promiscuous mode [ 60.789187][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 60.817005][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 60.830314][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.873241][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.881200][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.888957][ T5764] bridge_slave_0: entered allmulticast mode [ 60.896190][ T5764] bridge_slave_0: entered promiscuous mode [ 60.904978][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.937990][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.945370][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.952476][ T5764] bridge_slave_1: entered allmulticast mode [ 60.959389][ T5764] bridge_slave_1: entered promiscuous mode [ 61.011138][ T5763] team0: Port device team_slave_0 added [ 61.019779][ T5763] team0: Port device team_slave_1 added [ 61.041875][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.079160][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.087892][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.114388][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.140236][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.163176][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.170313][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.196240][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.207758][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.215377][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.222516][ T5765] bridge_slave_0: entered allmulticast mode [ 61.229829][ T5765] bridge_slave_0: entered promiscuous mode [ 61.263330][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.270999][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.278225][ T5765] bridge_slave_1: entered allmulticast mode [ 61.285485][ T5765] bridge_slave_1: entered promiscuous mode [ 61.303052][ T5764] team0: Port device team_slave_0 added [ 61.311684][ T5764] team0: Port device team_slave_1 added [ 61.328656][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.335880][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.343116][ T5766] bridge_slave_0: entered allmulticast mode [ 61.350642][ T5766] bridge_slave_0: entered promiscuous mode [ 61.391292][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.398873][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.406176][ T5766] bridge_slave_1: entered allmulticast mode [ 61.412830][ T5766] bridge_slave_1: entered promiscuous mode [ 61.430946][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.444198][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.454379][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.461335][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.487317][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.499992][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.508107][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.534171][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.610625][ T5765] team0: Port device team_slave_0 added [ 61.619987][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.634556][ T5763] hsr_slave_0: entered promiscuous mode [ 61.640920][ T5763] hsr_slave_1: entered promiscuous mode [ 61.650493][ T5765] team0: Port device team_slave_1 added [ 61.666678][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.729702][ T5766] team0: Port device team_slave_0 added [ 61.738447][ T5766] team0: Port device team_slave_1 added [ 61.749226][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.756479][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.782445][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.796014][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.802983][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.828984][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.877367][ T5764] hsr_slave_0: entered promiscuous mode [ 61.884939][ T5764] hsr_slave_1: entered promiscuous mode [ 61.890965][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.898834][ T5764] Cannot create hsr debugfs directory [ 61.916320][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.923293][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.949214][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.993422][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.000500][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.027061][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.064846][ T5779] Bluetooth: hci0: command tx timeout [ 62.089345][ T5765] hsr_slave_0: entered promiscuous mode [ 62.096057][ T5765] hsr_slave_1: entered promiscuous mode [ 62.102087][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.109708][ T5765] Cannot create hsr debugfs directory [ 62.144365][ T5779] Bluetooth: hci1: command tx timeout [ 62.222232][ T5766] hsr_slave_0: entered promiscuous mode [ 62.225539][ T5779] Bluetooth: hci2: command tx timeout [ 62.228039][ T50] Bluetooth: hci3: command tx timeout [ 62.239519][ T5766] hsr_slave_1: entered promiscuous mode [ 62.245599][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.253141][ T5766] Cannot create hsr debugfs directory [ 62.406401][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.418607][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.431961][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.457844][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.585642][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.596081][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.605968][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.645239][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.695504][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.706159][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.716404][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.727049][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.809047][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.829789][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.842593][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.853515][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.884897][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.923125][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.958858][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.966172][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.002121][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.009312][ T4456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.068219][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.121321][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.136841][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.166862][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.174340][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.210480][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.217735][ T4435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.240050][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.265703][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.273137][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.291232][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.298390][ T4456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.320694][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.405162][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.440870][ T4456] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.448013][ T4456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.460154][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.467290][ T4456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.513165][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.698264][ T5763] veth0_vlan: entered promiscuous mode [ 63.730957][ T5763] veth1_vlan: entered promiscuous mode [ 63.828647][ T5763] veth0_macvtap: entered promiscuous mode [ 63.859021][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.880848][ T5763] veth1_macvtap: entered promiscuous mode [ 63.932678][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.955649][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.980954][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.007938][ T5765] veth0_vlan: entered promiscuous mode [ 64.031351][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.040538][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.050316][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.059214][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.087239][ T5764] veth0_vlan: entered promiscuous mode [ 64.102291][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.120065][ T5765] veth1_vlan: entered promiscuous mode [ 64.155845][ T50] Bluetooth: hci0: command tx timeout [ 64.164409][ T5764] veth1_vlan: entered promiscuous mode [ 64.222579][ T5765] veth0_macvtap: entered promiscuous mode [ 64.234070][ T50] Bluetooth: hci1: command tx timeout [ 64.253047][ T5765] veth1_macvtap: entered promiscuous mode [ 64.270737][ T4456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.293336][ T4456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.305152][ T50] Bluetooth: hci2: command tx timeout [ 64.305363][ T5779] Bluetooth: hci3: command tx timeout [ 64.322145][ T5764] veth0_macvtap: entered promiscuous mode [ 64.356410][ T5766] veth0_vlan: entered promiscuous mode [ 64.369421][ T5764] veth1_macvtap: entered promiscuous mode [ 64.393025][ T4456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.403570][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.416415][ T4456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.422023][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.436379][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.447241][ T5766] veth1_vlan: entered promiscuous mode [ 64.459621][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.473253][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.485461][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.496073][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.509803][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.537548][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.554546][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.568170][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.577550][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.588674][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.598672][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.613042][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.625425][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.642913][ T5765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.652794][ T5765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.662431][ T5765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.671521][ T5765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.700989][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.717340][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.733965][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.742682][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.846701][ T5766] veth0_macvtap: entered promiscuous mode [ 64.907865][ T5766] veth1_macvtap: entered promiscuous mode [ 64.998123][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.011324][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.021324][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.035329][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.046713][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.080357][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.095600][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.109609][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.118246][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.140623][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.159678][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.172206][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.186337][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.200681][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.223931][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.236269][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.300983][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.316342][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.341077][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.358924][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.376085][ T4435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.389514][ T4435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.471274][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.502793][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.519269][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.533906][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.668555][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.701607][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.809468][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.839157][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.104628][ C1] [ 66.107000][ C1] ====================================================== [ 66.114000][ C1] WARNING: possible circular locking dependency detected [ 66.121004][ C1] 6.6.94-syzkaller #0 Not tainted [ 66.126007][ C1] ------------------------------------------------------ [ 66.133001][ C1] udevd/5767 is trying to acquire lock: [ 66.138522][ C1] ffff8880b8f295a8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 66.147133][ C1] [ 66.147133][ C1] but task is already holding lock: [ 66.154475][ C1] ffff8880b8f297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 66.163332][ C1] [ 66.163332][ C1] which lock already depends on the new lock. [ 66.163332][ C1] [ 66.173715][ C1] [ 66.173715][ C1] the existing dependency chain (in reverse order) is: [ 66.182705][ C1] [ 66.182705][ C1] -> #1 (&base->lock){-.-.}-{2:2}: [ 66.189996][ C1] _raw_spin_lock_irqsave+0xa8/0xf0 [ 66.195725][ C1] lock_timer_base+0x123/0x270 [ 66.200998][ C1] __mod_timer+0xf9/0xdb0 [ 66.205838][ C1] queue_delayed_work_on+0x12a/0x1e0 [ 66.211622][ C1] kvfree_call_rcu+0x541/0x780 [ 66.216895][ C1] rtnl_register_internal+0x486/0x590 [ 66.222777][ C1] rtnl_register+0x32/0x70 [ 66.227705][ C1] ip_rt_init+0x2ec/0x390 [ 66.232541][ C1] ip_init+0xe/0x20 [ 66.236846][ C1] inet_init+0x2c1/0x3e0 [ 66.241587][ C1] do_one_initcall+0x1fd/0x750 [ 66.246857][ C1] do_initcall_level+0x137/0x1f0 [ 66.252301][ C1] do_initcalls+0x69/0xd0 [ 66.257136][ C1] kernel_init_freeable+0x3d2/0x570 [ 66.262842][ C1] kernel_init+0x1d/0x1c0 [ 66.267675][ C1] ret_from_fork+0x48/0x80 [ 66.272593][ C1] ret_from_fork_asm+0x11/0x20 [ 66.277868][ C1] [ 66.277868][ C1] -> #0 (krc.lock){..-.}-{2:2}: [ 66.284887][ C1] __lock_acquire+0x2ddb/0x7c80 [ 66.290240][ C1] lock_acquire+0x197/0x410 [ 66.295245][ C1] _raw_spin_lock+0x2e/0x40 [ 66.300257][ C1] kvfree_call_rcu+0x15a/0x780 [ 66.305524][ C1] trie_delete_elem+0x535/0x6a0 [ 66.310880][ C1] bpf_prog_1db1603a7cfa36fb+0x45/0x49 [ 66.316849][ C1] bpf_trace_run3+0x1e7/0x400 [ 66.322031][ C1] __bpf_trace_timer_start+0x14a/0x1b0 [ 66.327997][ C1] enqueue_timer+0x398/0x530 [ 66.333093][ C1] __mod_timer+0x977/0xdb0 [ 66.338012][ C1] dsp_cmx_send+0x1ab8/0x1b40 [ 66.343200][ C1] call_timer_fn+0x16e/0x530 [ 66.348291][ C1] __run_timers+0x52d/0x7d0 [ 66.353292][ C1] run_timer_softirq+0x67/0xf0 [ 66.358556][ C1] handle_softirqs+0x280/0x820 [ 66.363823][ C1] __irq_exit_rcu+0xc7/0x190 [ 66.368915][ C1] irq_exit_rcu+0x9/0x20 [ 66.373675][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 66.379831][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.386330][ C1] _raw_spin_unlock_irqrestore+0xa9/0x110 [ 66.392567][ C1] folio_batch_move_lru+0x2cb/0x6b0 [ 66.398274][ C1] lru_add_drain_cpu+0x10e/0x8c0 [ 66.403725][ C1] lru_add_drain+0x121/0x3e0 [ 66.408823][ C1] __folio_batch_release+0x48/0xe0 [ 66.414450][ C1] shmem_undo_range+0x5d0/0x1a40 [ 66.419891][ C1] shmem_evict_inode+0x273/0xa70 [ 66.425340][ C1] evict+0x486/0x870 [ 66.429741][ C1] __dentry_kill+0x431/0x650 [ 66.434837][ C1] dentry_kill+0xb8/0x290 [ 66.439669][ C1] dput+0xfe/0x1e0 [ 66.443891][ C1] do_renameat2+0x8b1/0xc70 [ 66.448899][ C1] __x64_sys_rename+0x86/0x90 [ 66.454082][ C1] do_syscall_64+0x55/0xb0 [ 66.459008][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.465415][ C1] [ 66.465415][ C1] other info that might help us debug this: [ 66.465415][ C1] [ 66.475622][ C1] Possible unsafe locking scenario: [ 66.475622][ C1] [ 66.483053][ C1] CPU0 CPU1 [ 66.488400][ C1] ---- ---- [ 66.493745][ C1] lock(&base->lock); [ 66.497804][ C1] lock(krc.lock); [ 66.504115][ C1] lock(&base->lock); [ 66.510688][ C1] lock(krc.lock); [ 66.514481][ C1] [ 66.514481][ C1] *** DEADLOCK *** [ 66.514481][ C1] [ 66.522606][ C1] 7 locks held by udevd/5767: [ 66.527261][ C1] #0: ffff88807e50a418 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 66.536390][ C1] #1: ffff88807e6f3f80 (&type->i_mutex_dir_key#5/1){+.+.}-{3:3}, at: do_renameat2+0x427/0xc70 [ 66.546738][ C1] #2: ffff8880b8f36e18 (lock#4){+.+.}-{2:2}, at: lru_add_drain+0x79/0x3e0 [ 66.555348][ C1] #3: ffffc900001f0c00 ((&dsp_spl_tl)){+.-.}-{0:0}, at: call_timer_fn+0xbf/0x530 [ 66.564551][ C1] #4: ffffffff8dd22d18 (dsp_lock){..-.}-{2:2}, at: dsp_cmx_send+0x26/0x1b40 [ 66.573321][ C1] #5: ffff8880b8f297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 66.582619][ C1] #6: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 66.591908][ C1] [ 66.591908][ C1] stack backtrace: [ 66.597794][ C1] CPU: 1 PID: 5767 Comm: udevd Not tainted 6.6.94-syzkaller #0 [ 66.605322][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.615373][ C1] Call Trace: [ 66.618637][ C1] [ 66.621471][ C1] dump_stack_lvl+0x16c/0x230 [ 66.626145][ C1] ? load_image+0x3b0/0x3b0 [ 66.630638][ C1] ? show_regs_print_info+0x20/0x20 [ 66.635828][ C1] ? print_circular_bug+0x12b/0x1a0 [ 66.641015][ C1] check_noncircular+0x2bd/0x3c0 [ 66.645942][ C1] ? print_deadlock_bug+0x5d0/0x5d0 [ 66.651126][ C1] ? lockdep_lock+0xe0/0x220 [ 66.655703][ C1] ? _find_first_zero_bit+0xd3/0x100 [ 66.660972][ C1] __lock_acquire+0x2ddb/0x7c80 [ 66.665815][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 66.670914][ C1] ? __stack_depot_save+0x560/0x630 [ 66.676103][ C1] ? verify_lock_unused+0x140/0x140 [ 66.681287][ C1] ? kasan_save_stack+0x4d/0x60 [ 66.686129][ C1] ? kasan_save_stack+0x3e/0x60 [ 66.690963][ C1] ? __kasan_record_aux_stack+0xaf/0xc0 [ 66.696497][ C1] ? kvfree_call_rcu+0xee/0x780 [ 66.701335][ C1] ? trie_delete_elem+0x535/0x6a0 [ 66.706352][ C1] ? bpf_prog_1db1603a7cfa36fb+0x45/0x49 [ 66.711970][ C1] ? bpf_trace_run3+0x1e7/0x400 [ 66.716806][ C1] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 66.722429][ C1] ? enqueue_timer+0x398/0x530 [ 66.727178][ C1] ? __mod_timer+0x977/0xdb0 [ 66.731758][ C1] ? dsp_cmx_send+0x1ab8/0x1b40 [ 66.736594][ C1] ? call_timer_fn+0x16e/0x530 [ 66.741339][ C1] ? __run_timers+0x52d/0x7d0 [ 66.745997][ C1] ? run_timer_softirq+0x67/0xf0 [ 66.750919][ C1] ? handle_softirqs+0x280/0x820 [ 66.755840][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 66.760587][ C1] ? irq_exit_rcu+0x9/0x20 [ 66.764985][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 66.770786][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.776922][ C1] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 66.782804][ C1] ? folio_batch_move_lru+0x2cb/0x6b0 [ 66.788166][ C1] ? lru_add_drain+0x121/0x3e0 [ 66.792917][ C1] ? __folio_batch_release+0x48/0xe0 [ 66.798186][ C1] ? shmem_undo_range+0x5d0/0x1a40 [ 66.803284][ C1] lock_acquire+0x197/0x410 [ 66.807774][ C1] ? kvfree_call_rcu+0x15a/0x780 [ 66.812705][ C1] ? read_lock_is_recursive+0x20/0x20 [ 66.818066][ C1] ? __phys_addr+0xba/0x170 [ 66.822557][ C1] _raw_spin_lock+0x2e/0x40 [ 66.827051][ C1] ? kvfree_call_rcu+0x15a/0x780 [ 66.831979][ C1] kvfree_call_rcu+0x15a/0x780 [ 66.836734][ C1] ? call_rcu+0x920/0x920 [ 66.841053][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 66.846934][ C1] ? _raw_spin_unlock+0x40/0x40 [ 66.851777][ C1] trie_delete_elem+0x535/0x6a0 [ 66.856620][ C1] bpf_prog_1db1603a7cfa36fb+0x45/0x49 [ 66.862062][ C1] bpf_trace_run3+0x1e7/0x400 [ 66.866729][ C1] ? bpf_trace_run3+0xf4/0x400 [ 66.871482][ C1] ? bpf_trace_run2+0x3c0/0x3c0 [ 66.876320][ C1] ? __bpf_trace_timer_start+0x133/0x1b0 [ 66.881945][ C1] __bpf_trace_timer_start+0x14a/0x1b0 [ 66.887392][ C1] ? __bpf_trace_timer_class+0x100/0x100 [ 66.893014][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 66.898899][ C1] ? _raw_spin_unlock+0x40/0x40 [ 66.903750][ C1] enqueue_timer+0x398/0x530 [ 66.908325][ C1] __mod_timer+0x977/0xdb0 [ 66.912741][ C1] dsp_cmx_send+0x1ab8/0x1b40 [ 66.917408][ C1] ? read_lock_is_recursive+0x20/0x20 [ 66.922770][ C1] call_timer_fn+0x16e/0x530 [ 66.927365][ C1] ? dsp_cmx_receive+0x13d0/0x13d0 [ 66.932488][ C1] ? call_timer_fn+0xbf/0x530 [ 66.937174][ C1] ? __run_timers+0x7d0/0x7d0 [ 66.941840][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 66.947037][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 66.952226][ C1] ? dsp_cmx_receive+0x13d0/0x13d0 [ 66.957325][ C1] __run_timers+0x52d/0x7d0 [ 66.961817][ C1] ? detach_timer+0x2b0/0x2b0 [ 66.966479][ C1] ? lock_chain_count+0x20/0x20 [ 66.971315][ C1] run_timer_softirq+0x67/0xf0 [ 66.976060][ C1] handle_softirqs+0x280/0x820 [ 66.980806][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 66.985553][ C1] ? do_softirq+0x180/0x180 [ 66.990061][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 66.995279][ C1] __irq_exit_rcu+0xc7/0x190 [ 66.999872][ C1] ? irq_exit_rcu+0x20/0x20 [ 67.004371][ C1] irq_exit_rcu+0x9/0x20 [ 67.008601][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 67.014229][ C1] [ 67.017146][ C1] [ 67.020064][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.026050][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 67.032562][ C1] Code: 74 05 e8 7a 26 1c f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 82 91 eb f6 65 8b 05 93 e7 93 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 67.052161][ C1] RSP: 0018:ffffc9000491f4a0 EFLAGS: 00000206 [ 67.058215][ C1] RAX: 48a6da1b17654600 RBX: 0000000000000a02 RCX: 48a6da1b17654600 [ 67.066174][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaab2c0 RDI: 0000000000000001 [ 67.074133][ C1] RBP: ffffc9000491f530 R08: ffffffff90d85567 R09: 1ffffffff21b0aac [ 67.082087][ C1] R10: dffffc0000000000 R11: fffffbfff21b0aad R12: dffffc0000000000 [ 67.090045][ C1] R13: dffffc0000000000 R14: ffff88801c770050 R15: 1ffff92000923e94 [ 67.098015][ C1] ? _raw_spin_unlock+0x40/0x40 [ 67.102861][ C1] ? rcu_is_watching+0x15/0xb0 [ 67.107618][ C1] ? folio_memcg+0x127/0x480 [ 67.112199][ C1] folio_batch_move_lru+0x2cb/0x6b0 [ 67.117389][ C1] ? folio_add_lru+0xd50/0xd50 [ 67.122139][ C1] ? lru_add_drain_cpu+0x8c0/0x8c0 [ 67.127238][ C1] lru_add_drain_cpu+0x10e/0x8c0 [ 67.132166][ C1] ? folio_add_lru_vma+0x1f0/0x1f0 [ 67.137262][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 67.142279][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 67.147464][ C1] ? lru_add_drain+0x79/0x3e0 [ 67.152126][ C1] ? lru_add_drain+0x79/0x3e0 [ 67.156789][ C1] lru_add_drain+0x121/0x3e0 [ 67.161368][ C1] __folio_batch_release+0x48/0xe0 [ 67.166468][ C1] shmem_undo_range+0x5d0/0x1a40 [ 67.171391][ C1] ? __lock_acquire+0x1334/0x7c80 [ 67.176403][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 67.181597][ C1] ? inode_wait_for_writeback+0x1b4/0x200 [ 67.187310][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 67.192317][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 67.197330][ C1] shmem_evict_inode+0x273/0xa70 [ 67.202258][ C1] ? inode_wait_for_writeback+0x1b4/0x200 [ 67.207968][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 67.213507][ C1] ? sb_clear_inode_writeback+0x360/0x360 [ 67.219217][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 67.224234][ C1] ? bit_waitqueue+0x30/0x30 [ 67.228812][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 67.233998][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 67.239534][ C1] evict+0x486/0x870 [ 67.243420][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 67.248431][ C1] ? proc_nr_inodes+0x230/0x230 [ 67.253268][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 67.258455][ C1] ? _raw_spin_unlock+0x28/0x40 [ 67.263296][ C1] ? iput+0x70a/0x920 [ 67.267269][ C1] __dentry_kill+0x431/0x650 [ 67.271846][ C1] dentry_kill+0xb8/0x290 [ 67.276158][ C1] ? dput+0x3b/0x1e0 [ 67.280036][ C1] dput+0xfe/0x1e0 [ 67.283740][ C1] do_renameat2+0x8b1/0xc70 [ 67.288237][ C1] ? fsnotify_move+0x4e0/0x4e0 [ 67.292991][ C1] ? __check_object_size+0x506/0xa30 [ 67.298264][ C1] ? strncpy_from_user+0x197/0x2e0 [ 67.303361][ C1] ? getname_flags+0x20a/0x500 [ 67.308112][ C1] __x64_sys_rename+0x86/0x90 [ 67.312777][ C1] do_syscall_64+0x55/0xb0 [ 67.317183][ C1] ? clear_bhb_loop+0x40/0x90 [ 67.321845][ C1] ? clear_bhb_loop+0x40/0x90 [ 67.326508][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.332392][ C1] RIP: 0033:0x7fbb3827acc7 [ 67.336798][ C1] Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8 [ 67.356393][ C1] RSP: 002b:00007ffdeda83878 EFLAGS: 00000206 ORIG_RAX: 0000000000000052 [ 67.364791][ C1] RAX: ffffffffffffffda RBX: 000055f82bf027a0 RCX: 00007fbb3827acc7 [ 67.372745][ C1] RDX: 000055f82bede010 RSI: 00007ffdeda83890 RDI: 00007ffdeda83c90 [ 67.380701][ C1] RBP: 000055f82bf84760 R08: 00000000000001e0 R09: 0000000000000000 [ 67.388656][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffdeda83890 [ 67.396611][ C1] R13: 00007ffdeda83c90 R14: 0000000000000000 R15: 000055f7ee7ff9dd [ 67.404573][ C1] [ 67.433860][ T5779] Bluetooth: hci3: command tx timeout [ 67.439303][ T5779] Bluetooth: hci0: command tx timeout [ 67.444932][ T5779] Bluetooth: hci1: command tx timeout [ 67.450358][ T5779] Bluetooth: hci2: command tx timeout [ 69.504235][ T50] Bluetooth: hci2: command tx timeout [ 69.507403][ T5779] Bluetooth: hci1: command tx timeout [ 69.509733][ T5769] Bluetooth: hci0: command tx timeout [ 69.515092][ T5777] Bluetooth: hci3: command tx timeout [ 71.505712][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.512067][ T1279] ieee802154 phy1 wpan1: encryption failed: -22