last executing test programs: 1.470238486s ago: executing program 1 (id=12): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1.424420776s ago: executing program 1 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.331281045s ago: executing program 1 (id=14): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='signal_generate\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) recvmsg$unix(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40010000) 929.482754ms ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) 844.530933ms ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x28, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xed00}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 701.165853ms ago: executing program 0 (id=15): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000ef, 0x1af1ed, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x28ab0e99}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 653.251793ms ago: executing program 0 (id=16): perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000fdffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000006c0)={r0, r1}, 0xc) 645.112143ms ago: executing program 4 (id=5): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000084fff1000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 609.014722ms ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 495.635412ms ago: executing program 4 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 480.484362ms ago: executing program 0 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) 436.212412ms ago: executing program 1 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 372.221802ms ago: executing program 3 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 349.056701ms ago: executing program 2 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}]}}, 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 335.288382ms ago: executing program 0 (id=22): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x39d6c854, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 244.228461ms ago: executing program 1 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000170000001f"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 201.224941ms ago: executing program 2 (id=24): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x50001, 0x2, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xd, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 181.300561ms ago: executing program 1 (id=25): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0xc0001480, 0x0, 0x20, 0x0, 0x0, 0x0) 205.98µs ago: executing program 3 (id=26): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001401) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 0s ago: executing program 4 (id=27): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x200000000200}, 0x18) close(r0) kernel console output (not intermixed with test programs): forked to background, child pid 3838 [ 36.819183][ T3839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.828253][ T3839] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 37.190763][ T3914] sshd (3914) used greatest stack depth: 19856 bytes left OK syzkaller Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. syzkaller login: [ 54.177070][ T4155] cgroup: Unknown subsys name 'net' [ 54.353991][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.819252][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.098235][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 57.179988][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 57.270808][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.278763][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.286852][ T4167] device bridge_slave_0 entered promiscuous mode [ 57.312781][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.320426][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.331433][ T4167] device bridge_slave_1 entered promiscuous mode [ 57.363677][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 57.384568][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.398651][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.432906][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 57.486315][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.493637][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.501718][ T4176] device bridge_slave_0 entered promiscuous mode [ 57.523823][ T4167] team0: Port device team_slave_0 added [ 57.530071][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.537145][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.551119][ T4176] device bridge_slave_1 entered promiscuous mode [ 57.585977][ T4167] team0: Port device team_slave_1 added [ 57.609724][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.616796][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.625621][ T4175] device bridge_slave_0 entered promiscuous mode [ 57.635853][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.643138][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.651059][ T4175] device bridge_slave_1 entered promiscuous mode [ 57.676293][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 57.692986][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.700035][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.726117][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.739576][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.771527][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.778591][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.804763][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.817726][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.844817][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.858084][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.883571][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.890984][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.899183][ T4171] device bridge_slave_0 entered promiscuous mode [ 57.907316][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.914473][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.922445][ T4171] device bridge_slave_1 entered promiscuous mode [ 57.971871][ T4176] team0: Port device team_slave_0 added [ 58.000714][ T4175] team0: Port device team_slave_0 added [ 58.010460][ T4167] device hsr_slave_0 entered promiscuous mode [ 58.017270][ T4167] device hsr_slave_1 entered promiscuous mode [ 58.025612][ T4176] team0: Port device team_slave_1 added [ 58.035815][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.047355][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.057648][ T4175] team0: Port device team_slave_1 added [ 58.135926][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.143018][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.168956][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.181466][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.188497][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.214527][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.227865][ T4171] team0: Port device team_slave_0 added [ 58.234120][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.241109][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.273693][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.285014][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.292310][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.301165][ T4173] device bridge_slave_0 entered promiscuous mode [ 58.315378][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.322369][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.348349][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.364618][ T4171] team0: Port device team_slave_1 added [ 58.381971][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.389386][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.397191][ T4173] device bridge_slave_1 entered promiscuous mode [ 58.456889][ T4175] device hsr_slave_0 entered promiscuous mode [ 58.464013][ T4175] device hsr_slave_1 entered promiscuous mode [ 58.470805][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.478659][ T4175] Cannot create hsr debugfs directory [ 58.484642][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.491953][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.518490][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.542999][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.570295][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.577250][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.603599][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.622968][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.635417][ T4176] device hsr_slave_0 entered promiscuous mode [ 58.642264][ T4176] device hsr_slave_1 entered promiscuous mode [ 58.649318][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.656978][ T4176] Cannot create hsr debugfs directory [ 58.729684][ T4173] team0: Port device team_slave_0 added [ 58.755474][ T4173] team0: Port device team_slave_1 added [ 58.775422][ T4171] device hsr_slave_0 entered promiscuous mode [ 58.782306][ T4171] device hsr_slave_1 entered promiscuous mode [ 58.789237][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.796809][ T4171] Cannot create hsr debugfs directory [ 58.808494][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 58.815606][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 58.854824][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.862135][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.888289][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 58.888353][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 58.900501][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.915330][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.923067][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.949908][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.967649][ T4178] Bluetooth: hci4: command 0x0409 tx timeout [ 59.082041][ T4173] device hsr_slave_0 entered promiscuous mode [ 59.088905][ T4173] device hsr_slave_1 entered promiscuous mode [ 59.095432][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.103243][ T4173] Cannot create hsr debugfs directory [ 59.166105][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.204454][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.220402][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.244259][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.281953][ T4176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.300589][ T4176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.327615][ T4176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.340515][ T4176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.395464][ T4175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.406730][ T4175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.434146][ T4175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.466039][ T4175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.491911][ T4171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.502860][ T4171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.514787][ T4171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.540760][ T4171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.622452][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.632498][ T4173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.646931][ T4173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.660965][ T4173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.671001][ T4173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.700471][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.710865][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.736913][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.759643][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.780004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.789876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.800749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.810150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.819694][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.826899][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.870683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.879736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.888519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.897408][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.904506][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.914736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.924508][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.954568][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.964184][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.973172][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.983200][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.990302][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.998898][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.007678][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.016472][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.026002][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.035157][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.044120][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.052516][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.071838][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.081433][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.090302][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.097342][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.110875][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.138274][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.145693][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.154357][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.164640][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.173404][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.184316][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.192532][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.202418][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.221654][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.247532][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.255490][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.270141][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.279405][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.288164][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.295231][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.305700][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.314706][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.323740][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.340331][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.347389][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.363150][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.371544][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.381201][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.390177][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.399381][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.409791][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.425617][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.440516][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.454404][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.465431][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.472531][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.481285][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.489687][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.497448][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.506433][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.515163][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.522256][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.530936][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.545377][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.574241][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.583532][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.592918][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.601650][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.610622][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.620252][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.629425][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.638123][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.645584][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.653689][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.662530][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.673390][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.702504][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.710055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.719712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.729150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.738437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.747016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.755738][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.762828][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.771125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.781062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.790017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.799022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.807419][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.814519][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.823260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.831988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.840734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.849601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.860997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.869333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.878402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.888000][ T4205] Bluetooth: hci1: command 0x041b tx timeout [ 60.888163][ T1346] Bluetooth: hci0: command 0x041b tx timeout [ 60.904357][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.913626][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.924801][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.933641][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.963477][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.969041][ T4207] Bluetooth: hci2: command 0x041b tx timeout [ 60.979710][ T4207] Bluetooth: hci3: command 0x041b tx timeout [ 60.982813][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.997463][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.006904][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.015726][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.024442][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.033178][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.041712][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.049715][ T4209] Bluetooth: hci4: command 0x041b tx timeout [ 61.061448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.069906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.095252][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.117953][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.126956][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.138186][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.146914][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.161682][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.180307][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.200440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.215135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.230768][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.247159][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.265472][ T4167] device veth0_vlan entered promiscuous mode [ 61.277161][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.308726][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.333202][ T4167] device veth1_vlan entered promiscuous mode [ 61.378691][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.402249][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.418161][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.425653][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.445602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.455316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.472114][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.489900][ T4167] device veth0_macvtap entered promiscuous mode [ 61.504713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.513217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.526984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.537187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.545820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.560775][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.572267][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.582603][ T4167] device veth1_macvtap entered promiscuous mode [ 61.622413][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.632031][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.642368][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.670588][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.698691][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.705909][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.715728][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.724803][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.735592][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.744686][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.753688][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.788617][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.798483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.815337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.824674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.839965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.849894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.859016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.868529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.876436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.885159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.894060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.903622][ T4171] device veth0_vlan entered promiscuous mode [ 61.914225][ T4175] device veth0_vlan entered promiscuous mode [ 61.925077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.936107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.948518][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.957443][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.969063][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.980199][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.015129][ T4175] device veth1_vlan entered promiscuous mode [ 62.029902][ T4171] device veth1_vlan entered promiscuous mode [ 62.056288][ T4173] device veth0_vlan entered promiscuous mode [ 62.064988][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.074283][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.082516][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.091293][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.100027][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.110225][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.118363][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.142939][ T4173] device veth1_vlan entered promiscuous mode [ 62.169521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.178994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.187302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.196224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.252872][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.267009][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.270326][ T4171] device veth0_macvtap entered promiscuous mode [ 62.287002][ T4176] device veth0_vlan entered promiscuous mode [ 62.299362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.308626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.317091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.325315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.334397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.343303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.352331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.361272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.370079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.378232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.394776][ T4171] device veth1_macvtap entered promiscuous mode [ 62.426527][ T4176] device veth1_vlan entered promiscuous mode [ 62.435935][ T4175] device veth0_macvtap entered promiscuous mode [ 62.453587][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.461920][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.462948][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.479297][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.489861][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.498922][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.506703][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.515576][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.533244][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.544148][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.556352][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.571174][ T4173] device veth0_macvtap entered promiscuous mode [ 62.585519][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.594091][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.603107][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.612013][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.622624][ T4175] device veth1_macvtap entered promiscuous mode [ 62.641676][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.653514][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.665010][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.674851][ T4173] device veth1_macvtap entered promiscuous mode [ 62.688305][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.702898][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.712368][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.727460][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.755537][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.774378][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.784727][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.795989][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.808776][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.835440][ T4176] device veth0_macvtap entered promiscuous mode [ 62.853981][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.864919][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.874153][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.883458][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.894974][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.904690][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.913908][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.923285][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.939177][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.955868][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.968236][ T4207] Bluetooth: hci0: command 0x040f tx timeout [ 62.968528][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.974626][ T4207] Bluetooth: hci1: command 0x040f tx timeout [ 62.992573][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.011213][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.024011][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.035119][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.045405][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.047951][ T4207] Bluetooth: hci3: command 0x040f tx timeout [ 63.062569][ T4207] Bluetooth: hci2: command 0x040f tx timeout [ 63.066729][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.078643][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.093819][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.105636][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.128414][ T4207] Bluetooth: hci4: command 0x040f tx timeout [ 63.144268][ T4176] device veth1_macvtap entered promiscuous mode [ 63.169956][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.182799][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.191924][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.201156][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.211405][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.222386][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.238365][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.250666][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.260703][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.271195][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.281534][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.292285][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.309819][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.330041][ T4175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.342395][ T4175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.352035][ T4175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.364934][ T4175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.375251][ T4249] syz.1.9[4249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.375347][ T4249] syz.1.9[4249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.395186][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.418581][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.445506][ T4173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.454697][ T4173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.466367][ T4173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.475347][ T4173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.486932][ T4249] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 63.495738][ T4249] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.9'. [ 63.515316][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.528067][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.542166][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.553486][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.563444][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.574465][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.584654][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.595417][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.607395][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.680680][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.694987][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.707680][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.719273][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.729676][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.740438][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.753762][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.764576][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.781850][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.795074][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.813989][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.844975][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.867206][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.914504][ T4176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.931648][ T4176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.940719][ T4176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.949858][ T4176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.976627][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.983556][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.991686][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.998141][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.025342][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.040554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.072050][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.096620][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.123669][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.131795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.136373][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.140667][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.149218][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.161394][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.184994][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.209841][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.236682][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.260275][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.286608][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.316708][ T4220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.318217][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.355987][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.368067][ T4220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.404365][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.048868][ T4207] Bluetooth: hci1: command 0x0419 tx timeout [ 65.059897][ T4207] Bluetooth: hci0: command 0x0419 tx timeout [ 65.128574][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 65.144865][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 65.210358][ T1346] Bluetooth: hci4: command 0x0419 tx timeout [ 65.275876][ T4296] [ 65.278219][ T4296] ====================================================== [ 65.285225][ T4296] WARNING: possible circular locking dependency detected [ 65.292216][ T4296] 5.15.175-syzkaller #0 Not tainted [ 65.297386][ T4296] ------------------------------------------------------ [ 65.304379][ T4296] syz.3.26/4296 is trying to acquire lock: [ 65.310167][ T4296] ffff8880b8e27e78 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x1b5/0x8a0 [ 65.318772][ T4296] [ 65.318772][ T4296] but task is already holding lock: [ 65.326113][ T4296] ffff88807ce73db8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 65.334964][ T4296] [ 65.334964][ T4296] which lock already depends on the new lock. [ 65.334964][ T4296] [ 65.345339][ T4296] [ 65.345339][ T4296] the existing dependency chain (in reverse order) is: [ 65.354333][ T4296] [ 65.354333][ T4296] -> #2 (&trie->lock){..-.}-{2:2}: [ 65.361613][ T4296] lock_acquire+0x1db/0x4f0 [ 65.366621][ T4296] _raw_spin_lock_irqsave+0xd1/0x120 [ 65.372419][ T4296] trie_delete_elem+0x90/0x690 [ 65.377688][ T4296] bpf_prog_0968317a0ea44b00+0x729/0xd9c [ 65.383831][ T4296] bpf_trace_run3+0x1d1/0x380 [ 65.389025][ T4296] enqueue_timer+0x3ae/0x540 [ 65.394115][ T4296] __mod_timer+0xa60/0xeb0 [ 65.399045][ T4296] dsp_cmx_send+0x21bb/0x2240 [ 65.404223][ T4296] call_timer_fn+0x16d/0x560 [ 65.409314][ T4296] __run_timers+0x67c/0x890 [ 65.414317][ T4296] run_timer_softirq+0x63/0xf0 [ 65.419614][ T4296] handle_softirqs+0x3a7/0x930 [ 65.424895][ T4296] __irq_exit_rcu+0x157/0x240 [ 65.430075][ T4296] irq_exit_rcu+0x5/0x20 [ 65.434821][ T4296] sysvec_apic_timer_interrupt+0x52/0xc0 [ 65.440958][ T4296] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 65.447443][ T4296] [ 65.447443][ T4296] -> #1 (&base->lock){-.-.}-{2:2}: [ 65.454721][ T4296] lock_acquire+0x1db/0x4f0 [ 65.459725][ T4296] _raw_spin_lock_irqsave+0xd1/0x120 [ 65.465514][ T4296] lock_timer_base+0x120/0x260 [ 65.470780][ T4296] __mod_timer+0x1d6/0xeb0 [ 65.475700][ T4296] queue_delayed_work_on+0x156/0x250 [ 65.481573][ T4296] kvfree_call_rcu+0x50e/0x8a0 [ 65.486942][ T4296] rtnl_register_internal+0x443/0x530 [ 65.492821][ T4296] rtnl_register+0x32/0x70 [ 65.497751][ T4296] ip_rt_init+0x2e6/0x390 [ 65.502584][ T4296] ip_init+0xa/0x20 [ 65.506891][ T4296] inet_init+0x27c/0x390 [ 65.511635][ T4296] do_one_initcall+0x22b/0x7a0 [ 65.516992][ T4296] do_initcall_level+0x157/0x210 [ 65.522434][ T4296] do_initcalls+0x49/0x90 [ 65.527274][ T4296] kernel_init_freeable+0x425/0x5c0 [ 65.532988][ T4296] kernel_init+0x19/0x290 [ 65.537820][ T4296] ret_from_fork+0x1f/0x30 [ 65.542754][ T4296] [ 65.542754][ T4296] -> #0 (krc.lock){..-.}-{2:2}: [ 65.549863][ T4296] validate_chain+0x1649/0x5930 [ 65.555227][ T4296] __lock_acquire+0x1295/0x1ff0 [ 65.560583][ T4296] lock_acquire+0x1db/0x4f0 [ 65.565600][ T4296] _raw_spin_lock+0x2a/0x40 [ 65.570625][ T4296] kvfree_call_rcu+0x1b5/0x8a0 [ 65.575901][ T4296] trie_delete_elem+0x520/0x690 [ 65.581254][ T4296] bpf_prog_0968317a0ea44b00+0x3a/0xd9c [ 65.587301][ T4296] bpf_trace_run2+0x19e/0x340 [ 65.592481][ T4296] __bpf_trace_kfree+0x6e/0x90 [ 65.597745][ T4296] __traceiter_kfree+0x26/0x40 [ 65.603020][ T4296] kfree+0x22f/0x270 [ 65.607437][ T4296] tomoyo_realpath_from_path+0xcb/0x5e0 [ 65.613507][ T4296] tomoyo_path_number_perm+0x225/0x810 [ 65.619672][ T4296] tomoyo_path_mknod+0x172/0x1b0 [ 65.625123][ T4296] security_path_mknod+0xf1/0x150 [ 65.630660][ T4296] path_openat+0xc78/0x2f20 [ 65.635674][ T4296] do_filp_open+0x21c/0x460 [ 65.640682][ T4296] do_sys_openat2+0x13b/0x4f0 [ 65.645862][ T4296] __x64_sys_openat+0x243/0x290 [ 65.651216][ T4296] do_syscall_64+0x3b/0xb0 [ 65.656223][ T4296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.662620][ T4296] [ 65.662620][ T4296] other info that might help us debug this: [ 65.662620][ T4296] [ 65.672841][ T4296] Chain exists of: [ 65.672841][ T4296] krc.lock --> &base->lock --> &trie->lock [ 65.672841][ T4296] [ 65.684553][ T4296] Possible unsafe locking scenario: [ 65.684553][ T4296] [ 65.692326][ T4296] CPU0 CPU1 [ 65.697665][ T4296] ---- ---- [ 65.703012][ T4296] lock(&trie->lock); [ 65.707061][ T4296] lock(&base->lock); [ 65.713628][ T4296] lock(&trie->lock); [ 65.720631][ T4296] lock(krc.lock); [ 65.724428][ T4296] [ 65.724428][ T4296] *** DEADLOCK *** [ 65.724428][ T4296] [ 65.732633][ T4296] 5 locks held by syz.3.26/4296: [ 65.737553][ T4296] #0: ffff88802317e460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 65.746673][ T4296] #1: ffff888078d87268 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: path_openat+0x824/0x2f20 [ 65.756835][ T4296] #2: ffffffff8d0b9438 (tomoyo_ss){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 65.765783][ T4296] #3: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 65.775079][ T4296] #4: ffff88807ce73db8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 65.784381][ T4296] [ 65.784381][ T4296] stack backtrace: [ 65.790279][ T4296] CPU: 0 PID: 4296 Comm: syz.3.26 Not tainted 5.15.175-syzkaller #0 [ 65.798240][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.808374][ T4296] Call Trace: [ 65.811656][ T4296] [ 65.814594][ T4296] dump_stack_lvl+0x1e3/0x2d0 [ 65.819259][ T4296] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 65.824879][ T4296] ? print_circular_bug+0x12b/0x1a0 [ 65.830065][ T4296] check_noncircular+0x2f8/0x3b0 [ 65.834987][ T4296] ? add_chain_block+0x850/0x850 [ 65.839901][ T4296] ? queued_spin_lock_slowpath+0x42/0x50 [ 65.845515][ T4296] ? lockdep_lock+0x1a7/0x2a0 [ 65.850182][ T4296] validate_chain+0x1649/0x5930 [ 65.855032][ T4296] ? reacquire_held_locks+0x660/0x660 [ 65.860515][ T4296] ? mark_lock+0x98/0x340 [ 65.864839][ T4296] ? __lock_acquire+0x1295/0x1ff0 [ 65.869857][ T4296] ? mark_lock+0x98/0x340 [ 65.874167][ T4296] __lock_acquire+0x1295/0x1ff0 [ 65.879005][ T4296] lock_acquire+0x1db/0x4f0 [ 65.883498][ T4296] ? kvfree_call_rcu+0x1b5/0x8a0 [ 65.888420][ T4296] ? __lock_acquire+0x1ff0/0x1ff0 [ 65.893432][ T4296] ? read_lock_is_recursive+0x10/0x10 [ 65.898784][ T4296] ? do_raw_spin_unlock+0x137/0x8b0 [ 65.903965][ T4296] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 65.909844][ T4296] ? _raw_spin_unlock+0x40/0x40 [ 65.914683][ T4296] ? debug_object_active_state+0x6b/0x380 [ 65.920392][ T4296] _raw_spin_lock+0x2a/0x40 [ 65.924881][ T4296] ? kvfree_call_rcu+0x1b5/0x8a0 [ 65.929803][ T4296] kvfree_call_rcu+0x1b5/0x8a0 [ 65.934572][ T4296] ? _raw_spin_lock_irqsave+0xac/0x120 [ 65.940029][ T4296] ? call_rcu+0xa70/0xa70 [ 65.944351][ T4296] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 65.949799][ T4296] ? _raw_spin_lock+0x40/0x40 [ 65.954480][ T4296] ? longest_prefix_match+0x49b/0x640 [ 65.959863][ T4296] trie_delete_elem+0x520/0x690 [ 65.964708][ T4296] bpf_prog_0968317a0ea44b00+0x3a/0xd9c [ 65.970250][ T4296] bpf_trace_run2+0x19e/0x340 [ 65.974927][ T4296] ? bpf_trace_run1+0x2f0/0x2f0 [ 65.979763][ T4296] ? tomoyo_realpath_from_path+0xcb/0x5e0 [ 65.985471][ T4296] ? tomoyo_realpath_from_path+0xcb/0x5e0 [ 65.991180][ T4296] __bpf_trace_kfree+0x6e/0x90 [ 65.995933][ T4296] ? tomoyo_realpath_from_path+0xcb/0x5e0 [ 66.001639][ T4296] __traceiter_kfree+0x26/0x40 [ 66.006574][ T4296] ? tomoyo_realpath_from_path+0xcb/0x5e0 [ 66.012280][ T4296] kfree+0x22f/0x270 [ 66.016163][ T4296] ? mark_lock+0x98/0x340 [ 66.020489][ T4296] tomoyo_realpath_from_path+0xcb/0x5e0 [ 66.026048][ T4296] tomoyo_path_number_perm+0x225/0x810 [ 66.031496][ T4296] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 66.036947][ T4296] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 66.042925][ T4296] ? d_alloc_parallel+0x125d/0x1390 [ 66.048107][ T4296] tomoyo_path_mknod+0x172/0x1b0 [ 66.053029][ T4296] ? tomoyo_path_symlink+0x110/0x110 [ 66.058296][ T4296] ? d_hash_and_lookup+0x1b0/0x1b0 [ 66.063391][ T4296] security_path_mknod+0xf1/0x150 [ 66.068400][ T4296] path_openat+0xc78/0x2f20 [ 66.072896][ T4296] ? do_filp_open+0x460/0x460 [ 66.077562][ T4296] do_filp_open+0x21c/0x460 [ 66.082046][ T4296] ? vfs_tmpfile+0x2e0/0x2e0 [ 66.086621][ T4296] ? _raw_spin_unlock+0x24/0x40 [ 66.091456][ T4296] ? alloc_fd+0x598/0x630 [ 66.095800][ T4296] do_sys_openat2+0x13b/0x4f0 [ 66.100463][ T4296] ? do_sys_open+0x220/0x220 [ 66.105046][ T4296] ? __sys_bpf+0x468/0x670 [ 66.109452][ T4296] __x64_sys_openat+0x243/0x290 [ 66.114286][ T4296] ? __ia32_sys_open+0x270/0x270 [ 66.119208][ T4296] ? syscall_enter_from_user_mode+0x2e/0x240 [ 66.125174][ T4296] ? lockdep_hardirqs_on+0x94/0x130 [ 66.130363][ T4296] ? syscall_enter_from_user_mode+0x2e/0x240 [ 66.136328][ T4296] do_syscall_64+0x3b/0xb0 [ 66.140727][ T4296] ? clear_bhb_loop+0x15/0x70 [ 66.145394][ T4296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.151280][ T4296] RIP: 0033:0x7f6c491ded29 [ 66.155685][ T4296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.175271][ T4296] RSP: 002b:00007f6c4704f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.183663][ T4296] RAX: ffffffffffffffda RBX: 00007f6c493cefa0 RCX: 00007f6c491ded29 [ 66.191627][ T4296] RDX: 00000000000026e1 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 66.199582][ T4296] RBP: 00007f6c4925ab08 R08: 0000000000000000 R09: 0000000000000000 [ 66.207533][ T4296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.215486][ T4296] R13: 0000000000000000 R14: 00007f6c493cefa0 R15: 00007ffda015e768 [ 66.223443][ T4296] [ 71.213760][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.220149][ T1429] ieee802154 phy1 wpan1: encryption failed: -22