last executing test programs: 2.568775813s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 2.476326202s ago: executing program 0 (id=1): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 2.185291111s ago: executing program 1 (id=6): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) 2.077864685s ago: executing program 0 (id=7): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 1.623412066s ago: executing program 2 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.603307975s ago: executing program 0 (id=9): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 1.383756573s ago: executing program 1 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r0}, &(0x7f00000008c0), &(0x7f0000000940)='%pS \x00'}, 0x20) 1.284472652s ago: executing program 2 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa32"], 0xfdef) 1.211324478s ago: executing program 1 (id=12): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', r0}, 0x18) 1.089114052s ago: executing program 1 (id=13): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 1.082092616s ago: executing program 2 (id=14): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 916.226162ms ago: executing program 1 (id=15): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) 879.581404ms ago: executing program 2 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r2) 811.458364ms ago: executing program 0 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 555.932823ms ago: executing program 2 (id=18): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xffffd6c0}, 0x38) close(0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'veth1_to_hsr\x00', @random='\x00\x00\x00 \x00'}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 154.993449ms ago: executing program 0 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff09, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={0x0, r0}, 0x18) 60.403382ms ago: executing program 2 (id=20): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback, 0x35, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = syz_clone(0x40000, &(0x7f0000000580)="8d235416707d7bb8096586a1825ce713a7faaa588c55e10c9c2b81cb23a9350cb9542bc10f18cc91e4605a4111ee6c268910d747adfc271e729101c898c894f35998d6cc4ce2c80d55598f5249bcb2c02cdbeaac3f91b7a8148a0a886bdb586f17ab0e6c2ee7b381dba8cf8bd61adb50268bde38ef6ec5225107f33a3a1bbf237ccc3212ed8df12b10e6252aec3457fc04d735845c9f97b6d69a96faa1265b9dd730dd30f03171eb3cea6b0f7695ba26c8220d260340de3ec46a7b6fcd537a8ce0a8d601e25bdd5aee66787fcd3509b2aa2c53cfa45c82d60a84de91814d00cefac6f4a0530b29064c38060e", 0xec, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000680)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x10, 0x6, 0xb, 0xd, 0x0, 0x7, 0x840, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000300), 0x1}, 0x10, 0x8001, 0x7, 0x0, 0x10000, 0xac3, 0x200, 0x0, 0x8001, 0x0, 0xc}, r2, 0x7, r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 0 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 65.502131][ T5211] cgroup: Unknown subsys name 'net' [ 65.629273][ T5211] cgroup: Unknown subsys name 'cpuset' [ 65.637783][ T5211] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.135379][ T5211] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.206261][ T5225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.214815][ T5225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.225419][ T5225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.233670][ T5225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.245528][ T5225] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.252890][ T5225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.335280][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.355524][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.363453][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.406452][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.432564][ T4618] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.440238][ T4618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.449608][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.457815][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.467209][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.484209][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.487026][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.499762][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.508232][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.510350][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.519250][ T4618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.523417][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.530902][ T4618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.545216][ T4618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.553103][ T4618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.561046][ T5225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.586510][ T5225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.594789][ T5225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.602531][ T5225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.610823][ T5225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.797194][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 70.033543][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.047874][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.055595][ T5221] bridge_slave_0: entered allmulticast mode [ 70.062513][ T5221] bridge_slave_0: entered promiscuous mode [ 70.071344][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 70.098920][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 70.112371][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.119700][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.126961][ T5221] bridge_slave_1: entered allmulticast mode [ 70.133650][ T5221] bridge_slave_1: entered promiscuous mode [ 70.176183][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 70.228351][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.241103][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.281016][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.288470][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.296169][ T5229] bridge_slave_0: entered allmulticast mode [ 70.302906][ T5229] bridge_slave_0: entered promiscuous mode [ 70.345251][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.352561][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.360093][ T5229] bridge_slave_1: entered allmulticast mode [ 70.366757][ T5229] bridge_slave_1: entered promiscuous mode [ 70.376156][ T5221] team0: Port device team_slave_0 added [ 70.386100][ T5221] team0: Port device team_slave_1 added [ 70.454596][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.461993][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.469751][ T5227] bridge_slave_0: entered allmulticast mode [ 70.477071][ T5227] bridge_slave_0: entered promiscuous mode [ 70.502256][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.525932][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.533618][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.540983][ T5233] bridge_slave_0: entered allmulticast mode [ 70.547706][ T5233] bridge_slave_0: entered promiscuous mode [ 70.556271][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.563356][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.571566][ T5227] bridge_slave_1: entered allmulticast mode [ 70.578452][ T5227] bridge_slave_1: entered promiscuous mode [ 70.598158][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.613218][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.620609][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.647218][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.660629][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.668675][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.695379][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.711798][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.719178][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.727032][ T5233] bridge_slave_1: entered allmulticast mode [ 70.733814][ T5233] bridge_slave_1: entered promiscuous mode [ 70.752249][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.774459][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 70.800597][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.820877][ T5229] team0: Port device team_slave_0 added [ 70.855823][ T5229] team0: Port device team_slave_1 added [ 70.878226][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.931514][ T5221] hsr_slave_0: entered promiscuous mode [ 70.938169][ T5221] hsr_slave_1: entered promiscuous mode [ 70.947153][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.962359][ T5227] team0: Port device team_slave_0 added [ 70.970090][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.980636][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.006750][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.037849][ T5227] team0: Port device team_slave_1 added [ 71.044105][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.051423][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.077810][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.146972][ T5233] team0: Port device team_slave_0 added [ 71.160431][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.167811][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.194012][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.218525][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.225883][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.233138][ T5236] bridge_slave_0: entered allmulticast mode [ 71.241410][ T5236] bridge_slave_0: entered promiscuous mode [ 71.250621][ T5233] team0: Port device team_slave_1 added [ 71.266130][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.273198][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.300173][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.314848][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.323067][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.323129][ T5234] Bluetooth: hci0: command tx timeout [ 71.335892][ T5236] bridge_slave_1: entered allmulticast mode [ 71.342659][ T5236] bridge_slave_1: entered promiscuous mode [ 71.361818][ T5229] hsr_slave_0: entered promiscuous mode [ 71.368605][ T5229] hsr_slave_1: entered promiscuous mode [ 71.374894][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.382924][ T5229] Cannot create hsr debugfs directory [ 71.413877][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.421183][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.447724][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.473718][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.483500][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.490941][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.517285][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.549562][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.555766][ T5234] Bluetooth: hci1: command tx timeout [ 71.556204][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.578260][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.625479][ T5234] Bluetooth: hci2: command tx timeout [ 71.625487][ T5225] Bluetooth: hci3: command tx timeout [ 71.642787][ T5227] hsr_slave_0: entered promiscuous mode [ 71.649287][ T5227] hsr_slave_1: entered promiscuous mode [ 71.656105][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.663701][ T5227] Cannot create hsr debugfs directory [ 71.705546][ T5225] Bluetooth: hci4: command tx timeout [ 71.722035][ T5236] team0: Port device team_slave_0 added [ 71.734693][ T5233] hsr_slave_0: entered promiscuous mode [ 71.741626][ T5233] hsr_slave_1: entered promiscuous mode [ 71.748043][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.756139][ T5233] Cannot create hsr debugfs directory [ 71.778058][ T5236] team0: Port device team_slave_1 added [ 71.874709][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.885271][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.911642][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.967865][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.974861][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.001177][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.088683][ T5221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.102637][ T5221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.118264][ T5236] hsr_slave_0: entered promiscuous mode [ 72.124857][ T5236] hsr_slave_1: entered promiscuous mode [ 72.131093][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.138778][ T5236] Cannot create hsr debugfs directory [ 72.157185][ T5221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.173124][ T5221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.271036][ T5227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.290460][ T5227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.337684][ T5227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.368511][ T5227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.384300][ T5229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.395353][ T5229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.412240][ T5229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.450704][ T5229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.528505][ T5233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.539840][ T5233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.554699][ T5233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.574450][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.612798][ T5233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.623513][ T5236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.637237][ T5236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.659630][ T5236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.689723][ T5236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.720687][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.733919][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.741219][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.758162][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.778672][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.785812][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.822128][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.862099][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.869244][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.893153][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.900330][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.973741][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.060443][ T5227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.079204][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.117120][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.134173][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.181537][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.208570][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.215768][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.261016][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.280534][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.287741][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.343670][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.359405][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.369739][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.376941][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.388175][ T5225] Bluetooth: hci0: command tx timeout [ 73.394037][ T5229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.405381][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.434003][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.486822][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.494075][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.509505][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.516671][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.546772][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.553992][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.628086][ T5225] Bluetooth: hci1: command tx timeout [ 73.677888][ T5221] veth0_vlan: entered promiscuous mode [ 73.700701][ T5227] veth0_vlan: entered promiscuous mode [ 73.705305][ T5225] Bluetooth: hci3: command tx timeout [ 73.712222][ T5225] Bluetooth: hci2: command tx timeout [ 73.741402][ T5221] veth1_vlan: entered promiscuous mode [ 73.760111][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.773785][ T5236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.786572][ T5225] Bluetooth: hci4: command tx timeout [ 73.792999][ T5236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.813180][ T5227] veth1_vlan: entered promiscuous mode [ 73.911991][ T5221] veth0_macvtap: entered promiscuous mode [ 73.968941][ T5227] veth0_macvtap: entered promiscuous mode [ 73.987803][ T5221] veth1_macvtap: entered promiscuous mode [ 74.001605][ T5227] veth1_macvtap: entered promiscuous mode [ 74.022613][ T5229] veth0_vlan: entered promiscuous mode [ 74.059879][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.074778][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.090614][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.102164][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.113729][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.131555][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.143098][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.155378][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.163885][ T5229] veth1_vlan: entered promiscuous mode [ 74.175503][ T5221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.184399][ T5221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.193657][ T5221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.202826][ T5221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.219673][ T5227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.228794][ T5227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.237921][ T5227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.247540][ T5227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.267658][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.291793][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.361761][ T5229] veth0_macvtap: entered promiscuous mode [ 74.371769][ T5229] veth1_macvtap: entered promiscuous mode [ 74.452282][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.473077][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.483093][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.493740][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.508291][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.537156][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.553994][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.564728][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.581455][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.593837][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.649696][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.658279][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.667568][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.670609][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.697759][ T5229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.707051][ T5229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.716294][ T5229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.727085][ T5229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.808737][ T5303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.830125][ T5303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.841132][ T5236] veth0_vlan: entered promiscuous mode [ 74.849819][ T5303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.859533][ T5303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.863823][ T5233] veth0_vlan: entered promiscuous mode [ 74.880869][ T5236] veth1_vlan: entered promiscuous mode [ 74.926577][ T5233] veth1_vlan: entered promiscuous mode [ 74.962531][ T5221] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.009089][ T5233] veth0_macvtap: entered promiscuous mode [ 75.063372][ T5233] veth1_macvtap: entered promiscuous mode [ 75.094367][ T5236] veth0_macvtap: entered promiscuous mode [ 75.101486][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.109536][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.173099][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.181945][ T5305] pim6reg1: entered promiscuous mode [ 75.187371][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.187395][ T5305] pim6reg1: entered allmulticast mode [ 75.234187][ T5236] veth1_macvtap: entered promiscuous mode [ 75.253419][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.270151][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.280150][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.290813][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.300766][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.311369][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.322577][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.340002][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.351234][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.364529][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.379980][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.393573][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.406562][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.419951][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.431566][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.444439][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.453552][ T5307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.461181][ T5307] IPv6: NLM_F_CREATE should be set when creating new route [ 75.467812][ T5225] Bluetooth: hci0: command tx timeout [ 75.468527][ T5307] IPv6: NLM_F_CREATE should be set when creating new route [ 75.481130][ T5307] IPv6: NLM_F_CREATE should be set when creating new route [ 75.505553][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.521928][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.532822][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.544415][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.562360][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.564118][ T5310] syz.1.6[5310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.575044][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.599832][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.614467][ T5310] syz.1.6[5310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.614582][ T5310] syz.1.6[5310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.629458][ C1] hrtimer: interrupt took 66487 ns [ 75.644763][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.654046][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.674544][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.685523][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.696229][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.707065][ T5225] Bluetooth: hci1: command tx timeout [ 75.713102][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.734416][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.753321][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.763696][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.774536][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.786734][ T5225] Bluetooth: hci2: command tx timeout [ 75.790216][ T5234] Bluetooth: hci3: command tx timeout [ 75.801303][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.819238][ T5310] bridge_slave_1: left allmulticast mode [ 75.827675][ T5310] bridge_slave_1: left promiscuous mode [ 75.834332][ T5310] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.865869][ T5234] Bluetooth: hci4: command tx timeout [ 75.926200][ T5310] bridge_slave_0: left allmulticast mode [ 75.931924][ T5310] bridge_slave_0: left promiscuous mode [ 75.938871][ T5310] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.952262][ T5312] syz.0.7 (5312) used greatest stack depth: 17784 bytes left [ 76.070499][ T5233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.081221][ T5233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.093168][ T5233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.107199][ T5233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.143325][ T5318] veth0_vlan: entered allmulticast mode [ 76.377757][ T5236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.395081][ T5236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.404042][ T5236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.419117][ T5236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.464938][ T5319] veth0_vlan: left promiscuous mode [ 76.503793][ T5319] veth0_vlan: entered promiscuous mode [ 77.221570][ T2904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.245720][ T2904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.340569][ T5303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.360511][ T5303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.545249][ T5234] Bluetooth: hci0: command tx timeout [ 77.779093][ T930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.897672][ T930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.906191][ T5234] Bluetooth: hci1: command tx timeout [ 77.911710][ T5234] Bluetooth: hci2: command tx timeout [ 77.917853][ T5234] Bluetooth: hci3: command tx timeout [ 77.972691][ T5225] Bluetooth: hci4: command tx timeout [ 78.116921][ T5354] [ 78.119274][ T5354] ====================================================== [ 78.126298][ T5354] WARNING: possible circular locking dependency detected [ 78.133349][ T5354] 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 Not tainted [ 78.140128][ T5354] ------------------------------------------------------ [ 78.147161][ T5354] syz.0.21/5354 is trying to acquire lock: [ 78.152983][ T5354] ffffffff8f0ac628 (pool_lock#2){-.-.}-{2:2}, at: stack_depot_save_flags+0x240/0x830 [ 78.162547][ T5354] [ 78.162547][ T5354] but task is already holding lock: [ 78.169922][ T5354] ffff8880312e6a00 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 78.178815][ T5354] [ 78.178815][ T5354] which lock already depends on the new lock. [ 78.178815][ T5354] [ 78.189238][ T5354] [ 78.189238][ T5354] the existing dependency chain (in reverse order) is: [ 78.198261][ T5354] [ 78.198261][ T5354] -> #1 (&trie->lock){-.-.}-{2:2}: [ 78.205573][ T5354] lock_acquire+0x1ed/0x550 [ 78.210610][ T5354] _raw_spin_lock_irqsave+0xd5/0x120 [ 78.216436][ T5354] trie_delete_elem+0x96/0x6a0 [ 78.221748][ T5354] bpf_prog_d46ba5bef82912c0+0x46/0x4a [ 78.227756][ T5354] bpf_trace_run2+0x2ec/0x540 [ 78.232968][ T5354] trace_contention_end+0x114/0x140 [ 78.238696][ T5354] __pv_queued_spin_lock_slowpath+0xb7e/0xdb0 [ 78.245297][ T5354] queued_spin_lock_slowpath+0x42/0x50 [ 78.251289][ T5354] do_raw_spin_lock+0x272/0x370 [ 78.256674][ T5354] _raw_spin_lock_irqsave+0xe1/0x120 [ 78.262485][ T5354] stack_depot_save_flags+0x240/0x830 [ 78.268395][ T5354] save_stack+0x109/0x1f0 [ 78.273247][ T5354] __set_page_owner+0x92/0x800 [ 78.278534][ T5354] post_alloc_hook+0x1f3/0x230 [ 78.283830][ T5354] get_page_from_freelist+0x3045/0x3190 [ 78.289902][ T5354] __alloc_pages_noprof+0x256/0x6c0 [ 78.295623][ T5354] alloc_pages_mpol_noprof+0x3e8/0x680 [ 78.301609][ T5354] alloc_slab_page+0x6a/0x120 [ 78.306822][ T5354] allocate_slab+0x5a/0x2f0 [ 78.311848][ T5354] ___slab_alloc+0xcd1/0x14b0 [ 78.317057][ T5354] __slab_alloc+0x58/0xa0 [ 78.321916][ T5354] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 78.327989][ T5354] debug_objects_fill_pool+0x58f/0x9f0 [ 78.333980][ T5354] debug_object_assert_init+0x12e/0x440 [ 78.340059][ T5354] __mod_timer+0x10d/0xeb0 [ 78.345024][ T5354] queue_delayed_work_on+0x1ca/0x390 [ 78.350882][ T5354] process_scheduled_works+0xa63/0x1850 [ 78.356970][ T5354] worker_thread+0x870/0xd30 [ 78.362103][ T5354] kthread+0x2f0/0x390 [ 78.366783][ T5354] ret_from_fork+0x4b/0x80 [ 78.371735][ T5354] ret_from_fork_asm+0x1a/0x30 [ 78.377057][ T5354] [ 78.377057][ T5354] -> #0 (pool_lock#2){-.-.}-{2:2}: [ 78.384370][ T5354] validate_chain+0x18ef/0x5920 [ 78.389753][ T5354] __lock_acquire+0x1384/0x2050 [ 78.395138][ T5354] lock_acquire+0x1ed/0x550 [ 78.400182][ T5354] _raw_spin_lock_irqsave+0xd5/0x120 [ 78.405996][ T5354] stack_depot_save_flags+0x240/0x830 [ 78.411907][ T5354] save_stack+0x109/0x1f0 [ 78.416766][ T5354] __set_page_owner+0x92/0x800 [ 78.422055][ T5354] post_alloc_hook+0x1f3/0x230 [ 78.427349][ T5354] get_page_from_freelist+0x3045/0x3190 [ 78.433505][ T5354] __alloc_pages_noprof+0x256/0x6c0 [ 78.439229][ T5354] ___kmalloc_large_node+0x8b/0x1d0 [ 78.445039][ T5354] __kmalloc_large_node_noprof+0x1a/0x80 [ 78.451194][ T5354] __kmalloc_node_noprof+0x2d2/0x440 [ 78.457003][ T5354] bpf_map_kmalloc_node+0xd3/0x1c0 [ 78.462634][ T5354] trie_update_elem+0x1cd/0xc00 [ 78.468034][ T5354] bpf_map_update_value+0x4d3/0x540 [ 78.473877][ T5354] map_update_elem+0x534/0x6e0 [ 78.479166][ T5354] __sys_bpf+0x76f/0x810 [ 78.483931][ T5354] __x64_sys_bpf+0x7c/0x90 [ 78.488877][ T5354] do_syscall_64+0xf3/0x230 [ 78.493906][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.500326][ T5354] [ 78.500326][ T5354] other info that might help us debug this: [ 78.500326][ T5354] [ 78.510664][ T5354] Possible unsafe locking scenario: [ 78.510664][ T5354] [ 78.518111][ T5354] CPU0 CPU1 [ 78.523472][ T5354] ---- ---- [ 78.528833][ T5354] lock(&trie->lock); [ 78.532918][ T5354] lock(pool_lock#2); [ 78.539515][ T5354] lock(&trie->lock); [ 78.546103][ T5354] lock(pool_lock#2); [ 78.550269][ T5354] [ 78.550269][ T5354] *** DEADLOCK *** [ 78.550269][ T5354] [ 78.558407][ T5354] 2 locks held by syz.0.21/5354: [ 78.563338][ T5354] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540 [ 78.573305][ T5354] #1: ffff8880312e6a00 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 78.582633][ T5354] [ 78.582633][ T5354] stack backtrace: [ 78.588541][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.21 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 78.598704][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 78.608772][ T5354] Call Trace: [ 78.612053][ T5354] [ 78.614987][ T5354] dump_stack_lvl+0x241/0x360 [ 78.619679][ T5354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.624919][ T5354] ? __pfx__printk+0x10/0x10 [ 78.629528][ T5354] print_circular_bug+0x13a/0x1b0 [ 78.634560][ T5354] check_noncircular+0x36a/0x4a0 [ 78.639509][ T5354] ? unwind_next_frame+0x18e6/0x22d0 [ 78.644804][ T5354] ? deref_stack_reg+0x17c/0x210 [ 78.649753][ T5354] ? __pfx_check_noncircular+0x10/0x10 [ 78.655220][ T5354] ? lockdep_lock+0x123/0x2b0 [ 78.659909][ T5354] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 78.666070][ T5354] ? kernel_text_address+0xa7/0xe0 [ 78.671188][ T5354] validate_chain+0x18ef/0x5920 [ 78.676054][ T5354] ? stack_trace_save+0x118/0x1d0 [ 78.681090][ T5354] ? check_noncircular+0x259/0x4a0 [ 78.686210][ T5354] ? __pfx_validate_chain+0x10/0x10 [ 78.691413][ T5354] ? __bfs+0x368/0x6f0 [ 78.695487][ T5354] ? mark_lock+0x9a/0x360 [ 78.699827][ T5354] ? __lock_acquire+0x1384/0x2050 [ 78.704883][ T5354] ? mark_lock+0x9a/0x360 [ 78.709213][ T5354] __lock_acquire+0x1384/0x2050 [ 78.714077][ T5354] lock_acquire+0x1ed/0x550 [ 78.718590][ T5354] ? stack_depot_save_flags+0x240/0x830 [ 78.724156][ T5354] ? 0xffffffffa0001fa0 [ 78.728315][ T5354] ? __pfx_lock_acquire+0x10/0x10 [ 78.733363][ T5354] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 78.739517][ T5354] ? kernel_text_address+0xa7/0xe0 [ 78.744630][ T5354] ? __kernel_text_address+0xd/0x40 [ 78.749829][ T5354] ? unwind_get_return_address+0x4d/0x90 [ 78.755474][ T5354] ? arch_stack_walk+0xfd/0x150 [ 78.760327][ T5354] _raw_spin_lock_irqsave+0xd5/0x120 [ 78.765647][ T5354] ? stack_depot_save_flags+0x240/0x830 [ 78.771246][ T5354] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 78.777147][ T5354] ? stack_trace_save+0x118/0x1d0 [ 78.782182][ T5354] ? __pfx_stack_trace_save+0x10/0x10 [ 78.787564][ T5354] stack_depot_save_flags+0x240/0x830 [ 78.792954][ T5354] save_stack+0x109/0x1f0 [ 78.797288][ T5354] ? __pfx_lock_acquire+0x10/0x10 [ 78.802327][ T5354] ? __pfx_save_stack+0x10/0x10 [ 78.807181][ T5354] ? post_alloc_hook+0x1f3/0x230 [ 78.812128][ T5354] ? get_page_from_freelist+0x3045/0x3190 [ 78.817881][ T5354] ? __alloc_pages_noprof+0x256/0x6c0 [ 78.823252][ T5354] ? ___kmalloc_large_node+0x8b/0x1d0 [ 78.828638][ T5354] ? __kmalloc_large_node_noprof+0x1a/0x80 [ 78.834462][ T5354] ? __kmalloc_node_noprof+0x2d2/0x440 [ 78.839925][ T5354] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 78.845217][ T5354] ? trie_update_elem+0x1cd/0xc00 [ 78.850247][ T5354] ? bpf_map_update_value+0x4d3/0x540 [ 78.855645][ T5354] ? map_update_elem+0x534/0x6e0 [ 78.860591][ T5354] ? __sys_bpf+0x76f/0x810 [ 78.865035][ T5354] ? __x64_sys_bpf+0x7c/0x90 [ 78.869624][ T5354] ? do_syscall_64+0xf3/0x230 [ 78.874302][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.880387][ T5354] __set_page_owner+0x92/0x800 [ 78.885160][ T5354] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 78.891783][ T5354] ? do_raw_spin_unlock+0x13c/0x8b0 [ 78.896994][ T5354] ? __pfx___set_page_owner+0x10/0x10 [ 78.902375][ T5354] post_alloc_hook+0x1f3/0x230 [ 78.907164][ T5354] get_page_from_freelist+0x3045/0x3190 [ 78.912719][ T5354] ? count_memcg_event_mm+0x94/0x420 [ 78.918028][ T5354] __alloc_pages_noprof+0x256/0x6c0 [ 78.923273][ T5354] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 78.929002][ T5354] ? bpf_map_get_memcg+0x4e/0x5c0 [ 78.934118][ T5354] ? __pfx_lock_release+0x10/0x10 [ 78.939157][ T5354] ? do_raw_spin_lock+0x14f/0x370 [ 78.944194][ T5354] ? __lock_acquire+0x1384/0x2050 [ 78.949244][ T5354] ___kmalloc_large_node+0x8b/0x1d0 [ 78.954541][ T5354] __kmalloc_large_node_noprof+0x1a/0x80 [ 78.960186][ T5354] __kmalloc_node_noprof+0x2d2/0x440 [ 78.965483][ T5354] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 78.970777][ T5354] bpf_map_kmalloc_node+0xd3/0x1c0 [ 78.975986][ T5354] trie_update_elem+0x1cd/0xc00 [ 78.980875][ T5354] bpf_map_update_value+0x4d3/0x540 [ 78.986108][ T5354] map_update_elem+0x534/0x6e0 [ 78.990884][ T5354] __sys_bpf+0x76f/0x810 [ 78.995134][ T5354] ? __pfx___sys_bpf+0x10/0x10 [ 78.999995][ T5354] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.006014][ T5354] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.012356][ T5354] ? do_syscall_64+0x100/0x230 [ 79.017135][ T5354] __x64_sys_bpf+0x7c/0x90 [ 79.021560][ T5354] do_syscall_64+0xf3/0x230 [ 79.026076][ T5354] ? clear_bhb_loop+0x35/0x90 [ 79.030763][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.036675][ T5354] RIP: 0033:0x7fd50417def9 [ 79.041098][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.060714][ T5354] RSP: 002b:00007fd503bde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.069239][ T5354] RAX: ffffffffffffffda RBX: 00007fd504336130 RCX: 00007fd50417def9 [ 79.077224][ T5354] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000002 [ 79.085197][ T5354] RBP: 00007fd5041f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 79.093169][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.101161][ T5354] R13: 0000000000000000 R14: 00007fd504336130 R15: 00007fff248f73a8 [ 79.109144][ T5354] [ 79.293375][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.303032][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.795885][ T25] cfg80211: failed to load regulatory.db