last executing test programs: 6.169935916s ago: executing program 2 (id=232): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x804) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0xfffffdef) 3.957168071s ago: executing program 2 (id=241): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.537047069s ago: executing program 2 (id=250): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x1, 0x0, 0xae}, 0x50) 3.381243755s ago: executing program 2 (id=253): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000f2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 3.379142806s ago: executing program 0 (id=255): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d", @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640), 0x0, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)=ANY=[], 0x1000f) 3.26560841s ago: executing program 2 (id=256): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8ff89ce8001) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) unshare(0x64000600) syz_usbip_server_init(0x2) 3.248154551s ago: executing program 0 (id=257): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x109801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 3.169206025s ago: executing program 3 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0307e804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.903681326s ago: executing program 3 (id=261): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 2.737578143s ago: executing program 3 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3, r1}, 0xc) 2.526070522s ago: executing program 3 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000016, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.369845479s ago: executing program 3 (id=270): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.228195205s ago: executing program 0 (id=272): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) 2.001192214s ago: executing program 0 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.000844054s ago: executing program 1 (id=275): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 1.928084018s ago: executing program 4 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.738320486s ago: executing program 4 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r4, 0x0, 0x24040884) 1.577171943s ago: executing program 1 (id=278): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 896.107642ms ago: executing program 1 (id=279): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d", @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640), 0x0, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)=ANY=[], 0x1000f) 780.935477ms ago: executing program 4 (id=280): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) gettid() 653.473962ms ago: executing program 1 (id=281): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 609.135764ms ago: executing program 3 (id=282): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x109801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 602.622274ms ago: executing program 4 (id=283): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000c40)=r4, 0x12) 500.307659ms ago: executing program 0 (id=284): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x41c902, 0xa6, 0x9}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) 249.22941ms ago: executing program 4 (id=285): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r0, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 228.255051ms ago: executing program 1 (id=286): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 97.287666ms ago: executing program 0 (id=287): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 74.331087ms ago: executing program 2 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x14}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000294700850000001b000000b700000000000000850000000e00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) 594.45µs ago: executing program 4 (id=289): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 0s ago: executing program 1 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r4, 0x0, 0x24040884) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 52.483525][ T4254] cgroup: Unknown subsys name 'net' [ 52.596646][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.776237][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.102202][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.111044][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.114154][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.119111][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.128102][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.133150][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.140318][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.147449][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.154796][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.160944][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.167924][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.175284][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.181883][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.188975][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.196541][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.204174][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.210039][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.216711][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.230848][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.231626][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.238736][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.245474][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.252744][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.259614][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.266808][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.273408][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.281114][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.287405][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.294572][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.343623][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.725873][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 55.775630][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 55.848883][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 55.870343][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 55.912797][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 55.973121][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.980783][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.989033][ T4265] device bridge_slave_0 entered promiscuous mode [ 56.019499][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.026683][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.034612][ T4265] device bridge_slave_1 entered promiscuous mode [ 56.054439][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.061562][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.069871][ T4270] device bridge_slave_0 entered promiscuous mode [ 56.088054][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.095295][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.104461][ T4278] device bridge_slave_0 entered promiscuous mode [ 56.115041][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.122208][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.129924][ T4270] device bridge_slave_1 entered promiscuous mode [ 56.155337][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.162642][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.170385][ T4278] device bridge_slave_1 entered promiscuous mode [ 56.191652][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.201131][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.209119][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.217470][ T4264] device bridge_slave_0 entered promiscuous mode [ 56.247465][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.256787][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.264808][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.272640][ T4264] device bridge_slave_1 entered promiscuous mode [ 56.296510][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.326493][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.335886][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.344133][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.352265][ T4266] device bridge_slave_0 entered promiscuous mode [ 56.360640][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.380064][ T4265] team0: Port device team_slave_0 added [ 56.394157][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.412442][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.419586][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.427415][ T4266] device bridge_slave_1 entered promiscuous mode [ 56.440769][ T4265] team0: Port device team_slave_1 added [ 56.456005][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.467356][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.490748][ T4270] team0: Port device team_slave_0 added [ 56.509849][ T4278] team0: Port device team_slave_0 added [ 56.519042][ T4278] team0: Port device team_slave_1 added [ 56.530650][ T4270] team0: Port device team_slave_1 added [ 56.539041][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.546107][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.572362][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.585313][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.592363][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.618591][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.646497][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.674150][ T4264] team0: Port device team_slave_0 added [ 56.689667][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.708927][ T4264] team0: Port device team_slave_1 added [ 56.715204][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.722361][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.748327][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.768287][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.775339][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.801361][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.826575][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.833838][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.860475][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.879984][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.887014][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.913041][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.944121][ T4265] device hsr_slave_0 entered promiscuous mode [ 56.950706][ T4265] device hsr_slave_1 entered promiscuous mode [ 56.964263][ T4266] team0: Port device team_slave_0 added [ 56.970938][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.978284][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.004499][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.034909][ T4266] team0: Port device team_slave_1 added [ 57.041051][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.048121][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.074249][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.118417][ T4270] device hsr_slave_0 entered promiscuous mode [ 57.125356][ T4270] device hsr_slave_1 entered promiscuous mode [ 57.132224][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.139993][ T4270] Cannot create hsr debugfs directory [ 57.148670][ T4278] device hsr_slave_0 entered promiscuous mode [ 57.155643][ T4278] device hsr_slave_1 entered promiscuous mode [ 57.162607][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.170169][ T4278] Cannot create hsr debugfs directory [ 57.183199][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.190157][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.216131][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.231057][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.238141][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.264506][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.332528][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 57.338824][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 57.371027][ T4264] device hsr_slave_0 entered promiscuous mode [ 57.377625][ T4264] device hsr_slave_1 entered promiscuous mode [ 57.384693][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.392605][ T4264] Cannot create hsr debugfs directory [ 57.411683][ T4266] device hsr_slave_0 entered promiscuous mode [ 57.418046][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 57.422314][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 57.425009][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 57.432314][ T4266] device hsr_slave_1 entered promiscuous mode [ 57.443138][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.450697][ T4266] Cannot create hsr debugfs directory [ 57.695616][ T4265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.706865][ T4265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.716823][ T4265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.726427][ T4265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.785068][ T4270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.794592][ T4270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.817319][ T4270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.827527][ T4270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.866046][ T4278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.876754][ T4278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.890523][ T4278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.908895][ T4278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.982298][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.006799][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.038103][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.049004][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.068066][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.078999][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.087303][ T4266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.096772][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.105318][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.123395][ T4266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.141350][ T4266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.151541][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.160482][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.171554][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.178794][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.187452][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.196695][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.205369][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.212482][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.220008][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.230628][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.239393][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.246507][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.255510][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.263925][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.271893][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.280406][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.288985][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.296112][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.310787][ T4264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.321180][ T4264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.330437][ T4266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.354788][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.364712][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.373849][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.386509][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.396087][ T4264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.405345][ T4264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.430291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.439580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.449398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.458056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.468982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.477504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.486698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.515515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.524811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.534125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.543045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.552760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.560993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.569592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.579445][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.589114][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.615158][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.634725][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.646317][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.669582][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.680168][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.749927][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.780374][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.819982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.829744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.847750][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.873970][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.883147][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.896303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.926225][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.957674][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.978034][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.985217][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.000175][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.019557][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.029671][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.043732][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.059608][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.066769][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.075998][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.083818][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.103441][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.111526][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.120925][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.131115][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.138256][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.147873][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.156887][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.165709][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.172846][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.180972][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.196831][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.215526][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.225836][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.234593][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.247761][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.256432][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.264573][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.273072][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.281591][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.290811][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.303262][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.316869][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.343263][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.351624][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.360230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.369832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.379396][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.386779][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.395138][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.403993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.412473][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 59.413234][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.418485][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 59.427033][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.440716][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.449782][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.473328][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.482160][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.490639][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.492376][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 59.497756][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.511509][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 59.514808][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.517805][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 59.526771][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.540515][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.549237][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.558065][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.567164][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.576728][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.595241][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.604068][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.623488][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.637299][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.647523][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.660347][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.669323][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.678324][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.709630][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.742266][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.767231][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.779788][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.798677][ T4265] device veth0_vlan entered promiscuous mode [ 59.806637][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.816509][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.829921][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.840935][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.854978][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.864004][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.872342][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.880598][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.890508][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.899074][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.908388][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.916361][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.924123][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.932427][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.967270][ T4265] device veth1_vlan entered promiscuous mode [ 60.058692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.073014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.112942][ T4265] device veth0_macvtap entered promiscuous mode [ 60.139139][ T4265] device veth1_macvtap entered promiscuous mode [ 60.214832][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.245563][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.273555][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.288704][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.298930][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.308696][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.317436][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.327223][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.341225][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.363046][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.383847][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.402521][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.455034][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.473102][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.484885][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.582650][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.597891][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.640393][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.648776][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.664901][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.674560][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.683115][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.690836][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.727516][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.740476][ T4278] device veth0_vlan entered promiscuous mode [ 60.746926][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.748549][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.764918][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.774289][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.782689][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.790108][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.806733][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.815765][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.831517][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.843302][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.850403][ T4270] device veth0_vlan entered promiscuous mode [ 60.861180][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.869399][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.879933][ T4278] device veth1_vlan entered promiscuous mode [ 60.910648][ T4270] device veth1_vlan entered promiscuous mode [ 60.924266][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.932846][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.941592][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.952442][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.984200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.994681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.004438][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.014197][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.024422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.033312][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.041538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.050072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.058533][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.068528][ T4278] device veth0_macvtap entered promiscuous mode [ 61.079504][ T4278] device veth1_macvtap entered promiscuous mode [ 61.110307][ T4264] device veth0_vlan entered promiscuous mode [ 61.117624][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.126816][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.138871][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.148299][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.170222][ T4270] device veth0_macvtap entered promiscuous mode [ 61.183834][ T4266] device veth0_vlan entered promiscuous mode [ 61.224436][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.237393][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.256650][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.267596][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.276278][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.284935][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.293789][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.305362][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.316104][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.328625][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.346314][ T4270] device veth1_macvtap entered promiscuous mode [ 61.360396][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.372951][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.384154][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.392547][ T4264] device veth1_vlan entered promiscuous mode [ 61.406670][ T4266] device veth1_vlan entered promiscuous mode [ 61.420772][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.431650][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.444873][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.455500][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.467666][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.475753][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.484231][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.492430][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 61.493530][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.498433][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 61.507131][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.520970][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.529815][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.539262][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.552541][ T4278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.561253][ T4278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.570510][ T4278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.579780][ T4278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.579986][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 61.594804][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 61.600822][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 61.619301][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.630126][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.640532][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.652952][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.664072][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.676019][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.686956][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.696114][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.705262][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.722479][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.730870][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.739588][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.750660][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.801327][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.810469][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.844686][ T4264] device veth0_macvtap entered promiscuous mode [ 61.854034][ T4266] device veth0_macvtap entered promiscuous mode [ 61.865858][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.874321][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.883837][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.912492][ T4264] device veth1_macvtap entered promiscuous mode [ 61.922038][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.954308][ T4266] device veth1_macvtap entered promiscuous mode [ 62.015553][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.027676][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.039317][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.051400][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.073161][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.094596][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.111654][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.127333][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.138774][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.168782][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.179959][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.195655][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.206200][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.216867][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.227464][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.245799][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.262275][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.271046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.279747][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.296095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.313969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.326729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.347850][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.359270][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.370080][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.381351][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.391395][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.402371][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.417758][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.427218][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.440593][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.443355][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.469028][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.479071][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.495848][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.507136][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.518225][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.530148][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.546358][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.558352][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.581092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.608670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.621435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.637121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.684202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.698763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.729737][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.746951][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.756730][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.766410][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.784263][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.799423][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.808199][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.817077][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.882964][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.893396][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.914408][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.929779][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.950399][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.089457][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.090020][ T4400] loop4: detected capacity change from 0 to 256 [ 63.572337][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 63.572867][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 63.657409][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 63.657425][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 63.657458][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 63.842073][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.870181][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.965008][ T4411] loop1: detected capacity change from 0 to 1024 [ 63.992906][ T4411] ======================================================= [ 63.992906][ T4411] WARNING: The mand mount option has been deprecated and [ 63.992906][ T4411] and is ignored by this kernel. Remove the mand [ 63.992906][ T4411] option from the mount to silence this warning. [ 63.992906][ T4411] ======================================================= [ 64.070282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.117545][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.126614][ T4411] EXT4-fs: Ignoring removed bh option [ 64.162550][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.173756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.217643][ T4411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.230042][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.231341][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.246177][ T26] audit: type=1326 audit(1763751043.010:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0df8f749 code=0x7ffc0000 [ 64.254463][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.271280][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.300465][ T26] audit: type=1326 audit(1763751043.010:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb0df8f749 code=0x7ffc0000 [ 64.376576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.412414][ T26] audit: type=1326 audit(1763751043.010:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0df8f749 code=0x7ffc0000 [ 64.434945][ T26] audit: type=1326 audit(1763751043.010:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0df8f749 code=0x7ffc0000 [ 64.435354][ T4411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.457853][ T26] audit: type=1326 audit(1763751043.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb0df8f749 code=0x7ffc0000 [ 64.478464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.501228][ T26] audit: type=1326 audit(1763751043.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0df8f749 code=0x7ffc0000 [ 64.574258][ T26] audit: type=1326 audit(1763751043.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0df8f749 code=0x7ffc0000 [ 64.647865][ T4411] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.2: Allocating blocks 385-513 which overlap fs metadata [ 64.706617][ T26] audit: type=1326 audit(1763751043.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb0df8f749 code=0x7ffc0000 [ 64.789951][ T4411] EXT4-fs (loop1): pa ffff8880753bf8c0: logic 16, phys. 129, len 24 [ 64.798438][ T4411] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 64.822262][ T26] audit: type=1326 audit(1763751043.060:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0df8f749 code=0x7ffc0000 [ 64.861292][ T4430] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 64.876823][ T4431] Zero length message leads to an empty skb [ 64.888246][ T26] audit: type=1326 audit(1763751043.060:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4415 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ffb0df8f749 code=0x7ffc0000 [ 65.030261][ T4432] loop4: detected capacity change from 0 to 2048 [ 65.119564][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 65.120820][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 65.390416][ T4443] Cannot find add_set index 0 as target [ 65.440903][ T4440] loop1: detected capacity change from 0 to 1024 [ 65.483784][ T4440] EXT4-fs: Ignoring removed orlov option [ 65.560254][ T4440] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 65.785207][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 65.792826][ T4456] loop2: detected capacity change from 0 to 512 [ 65.878288][ T4456] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 65.921953][ T4456] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.958879][ T3637] loop4: unable to read partition table [ 65.987788][ T4454] loop0: detected capacity change from 0 to 8192 [ 66.004913][ T3637] loop4: partition table beyond EOD, truncated [ 66.099316][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 66.466978][ T4477] loop1: detected capacity change from 0 to 1024 [ 66.564029][ T4477] ext4: Bad value for 'barrier' [ 66.599368][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 66.643573][ T4477] netlink: 660 bytes leftover after parsing attributes in process `syz.1.36'. [ 67.137367][ T4477] infiniband syû: set active [ 67.155343][ T4477] infiniband syû: added bond_slave_0 [ 67.383816][ T4477] RDS/IB: syû: added [ 67.388365][ T4477] smc: adding ib device syû with port count 1 [ 67.432116][ T4477] smc: ib device syû port 1 has pnetid [ 70.709528][ T4643] device sit0 entered promiscuous mode [ 71.256076][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.263240][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.011527][ T4665] device pim6reg1 entered promiscuous mode [ 72.316364][ T4685] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 72.792611][ T4701] loop3: detected capacity change from 0 to 2048 [ 72.898802][ T4701] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.042013][ T4701] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #12: comm syz.3.129: corrupted in-inode xattr [ 73.925199][ T4715] vhci_hcd vhci_hcd.0: failed to lookup sock [ 74.012564][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 74.207899][ T4728] syz.3.134[4728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.207998][ T4728] syz.3.134[4728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.253307][ T4728] pimreg: tun_chr_ioctl cmd 1074812117 [ 74.270690][ T4728] pimreg: tun_chr_ioctl cmd 1074025673 [ 74.293294][ T4729] syz.4.136[4729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.293419][ T4729] syz.4.136[4729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.956828][ T4749] loop2: detected capacity change from 0 to 1024 [ 76.039919][ T4749] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 76.076782][ T4749] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.141: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 76.265584][ T4749] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.141: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 76.347251][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 76.367567][ T4749] netlink: 'syz.2.141': attribute type 11 has an invalid length. [ 76.380571][ T14] cfg80211: failed to load regulatory.db [ 76.688801][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 77.548743][ T4774] syz.4.150[4774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.548839][ T4774] syz.4.150[4774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.019406][ T4784] syz.2.154[4784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.062021][ T4784] syz.2.154[4784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.113484][ T4784] pimreg: tun_chr_ioctl cmd 1074812117 [ 78.131082][ T4784] pimreg: tun_chr_ioctl cmd 1074025673 [ 79.054308][ T4792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 79.081532][ T4792] netlink: 'syz.4.158': attribute type 11 has an invalid length. [ 79.318785][ T4806] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 79.325657][ T4806] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 79.333917][ T4806] vhci_hcd vhci_hcd.0: Device attached [ 79.398813][ T4807] vhci_hcd: connection closed [ 79.400958][ T4351] vhci_hcd: stop threads [ 79.414944][ T4351] vhci_hcd: release socket [ 79.419425][ T4351] vhci_hcd: disconnect device [ 80.487047][ T4830] syz.1.168[4830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.487140][ T4830] syz.1.168[4830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.513476][ T4830] pimreg: tun_chr_ioctl cmd 1074812117 [ 80.530710][ T4830] pimreg: tun_chr_ioctl cmd 1074025673 [ 81.389230][ T4839] syz.4.173[4839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.389323][ T4839] syz.4.173[4839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.398133][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 83.425451][ T4874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 83.437154][ T4874] netlink: 'syz.0.186': attribute type 11 has an invalid length. [ 83.463030][ T4871] device pim6reg1 entered promiscuous mode [ 84.434769][ T4885] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 84.441341][ T4885] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 84.449195][ T4885] vhci_hcd vhci_hcd.0: Device attached [ 84.456493][ T4886] vhci_hcd: connection closed [ 84.459661][ T51] vhci_hcd: stop threads [ 84.482377][ T51] vhci_hcd: release socket [ 84.499528][ T51] vhci_hcd: disconnect device [ 84.565030][ T4894] syz.1.193[4894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.565131][ T4894] syz.1.193[4894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.605582][ T4894] pimreg: tun_chr_ioctl cmd 1074812117 [ 84.622869][ T4894] pimreg: tun_chr_ioctl cmd 1074025673 [ 84.850675][ T4902] syz.0.196[4902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.850767][ T4902] syz.0.196[4902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.140828][ T4902] pimreg: tun_chr_ioctl cmd 1074812117 [ 85.159242][ T4902] pimreg: tun_chr_ioctl cmd 1074025673 [ 86.055066][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 86.079887][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 86.121892][ T4919] netlink: 'syz.3.203': attribute type 11 has an invalid length. [ 86.192464][ T4925] device pim6reg1 entered promiscuous mode [ 86.293319][ T4929] device pim6reg1 entered promiscuous mode [ 87.446882][ T4940] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 87.453452][ T4940] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.461147][ T4941] vhci_hcd: connection closed [ 87.462149][ T4940] vhci_hcd vhci_hcd.0: Device attached [ 87.483438][ T4739] vhci_hcd: stop threads [ 87.511876][ T4739] vhci_hcd: release socket [ 87.518233][ T4739] vhci_hcd: disconnect device [ 87.749823][ T4953] syz.2.214[4953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.749912][ T4953] syz.2.214[4953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.463732][ T4953] pimreg: tun_chr_ioctl cmd 1074812117 [ 88.480908][ T4953] pimreg: tun_chr_ioctl cmd 1074025673 [ 89.077356][ T4978] syz.0.224[4978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.077461][ T4978] syz.0.224[4978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.082839][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 89.135818][ T4979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 89.145251][ T4979] netlink: 'syz.2.223': attribute type 11 has an invalid length. [ 89.472350][ T4988] syz.1.230[4988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.472443][ T4988] syz.1.230[4988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.526110][ T4988] pimreg: tun_chr_ioctl cmd 1074812117 [ 89.544982][ T4988] pimreg: tun_chr_ioctl cmd 1074025673 [ 90.882594][ T5006] syz.4.233[5006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.882690][ T5006] syz.4.233[5006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.577122][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 91.618081][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 91.634590][ T5018] netlink: 'syz.1.238': attribute type 11 has an invalid length. [ 92.496230][ T5060] syz.0.257[5060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.496324][ T5060] syz.0.257[5060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.528815][ T5060] pimreg: tun_chr_ioctl cmd 1074812117 [ 92.546238][ T5060] pimreg: tun_chr_ioctl cmd 1074025673 [ 92.975294][ T5076] device wg2 entered promiscuous mode [ 92.976642][ T5073] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 92.987234][ T5073] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 93.044601][ T5073] vhci_hcd vhci_hcd.0: Device attached [ 93.233474][ T14] vhci_hcd: vhci_device speed not set [ 93.325843][ T14] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 93.421888][ T5075] vhci_hcd: connection reset by peer [ 93.435244][ T9] vhci_hcd: stop threads [ 93.439686][ T9] vhci_hcd: release socket [ 93.458197][ T9] vhci_hcd: disconnect device [ 94.171537][ T5113] syz.1.278[5113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.172294][ T5113] syz.1.278[5113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.115195][ T5127] syz.3.282[5127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.115554][ T5123] syz.1.281[5123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.150681][ T5127] syz.3.282[5127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.194909][ T5127] pimreg: tun_chr_ioctl cmd 1074812117 [ 95.195990][ T5123] syz.1.281[5123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.212405][ T5127] pimreg: tun_chr_ioctl cmd 1074025673 [ 95.668766][ T4363] [ 95.671134][ T4363] ====================================================== [ 95.678139][ T4363] WARNING: possible circular locking dependency detected [ 95.685156][ T4363] syzkaller #0 Not tainted [ 95.689551][ T4363] ------------------------------------------------------ [ 95.696634][ T4363] kworker/u4:7/4363 is trying to acquire lock: [ 95.702764][ T4363] ffff8880b8e281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870 [ 95.711374][ T4363] [ 95.711374][ T4363] but task is already holding lock: [ 95.718718][ T4363] ffff8880b8e28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 95.727571][ T4363] [ 95.727571][ T4363] which lock already depends on the new lock. [ 95.727571][ T4363] [ 95.737954][ T4363] [ 95.737954][ T4363] the existing dependency chain (in reverse order) is: [ 95.746949][ T4363] [ 95.746949][ T4363] -> #1 (&base->lock){-.-.}-{2:2}: [ 95.754227][ T4363] _raw_spin_lock_irqsave+0xa4/0xf0 [ 95.759934][ T4363] lock_timer_base+0x123/0x270 [ 95.765204][ T4363] __mod_timer+0xfe/0xd00 [ 95.770037][ T4363] queue_delayed_work_on+0x126/0x1e0 [ 95.775827][ T4363] kvfree_call_rcu+0x4cb/0x870 [ 95.781094][ T4363] rtnl_register_internal+0x489/0x590 [ 95.786967][ T4363] rtnl_register+0x2e/0x70 [ 95.791887][ T4363] ip_rt_init+0x323/0x3b5 [ 95.796718][ T4363] ip_init+0xa/0x14 [ 95.801027][ T4363] inet_init+0x2bd/0x3cf [ 95.805770][ T4363] do_one_initcall+0x214/0x7a0 [ 95.811038][ T4363] do_initcall_level+0x137/0x1e4 [ 95.816480][ T4363] do_initcalls+0x4b/0x8a [ 95.821314][ T4363] kernel_init_freeable+0x3fa/0x5ac [ 95.827016][ T4363] kernel_init+0x19/0x1b0 [ 95.831850][ T4363] ret_from_fork+0x1f/0x30 [ 95.836773][ T4363] [ 95.836773][ T4363] -> #0 (krc.lock){..-.}-{2:2}: [ 95.843786][ T4363] __lock_acquire+0x2cf8/0x7c50 [ 95.849139][ T4363] lock_acquire+0x1b4/0x490 [ 95.854145][ T4363] _raw_spin_lock+0x2a/0x40 [ 95.859166][ T4363] kvfree_call_rcu+0x184/0x870 [ 95.864433][ T4363] trie_delete_elem+0x52d/0x690 [ 95.869788][ T4363] bpf_prog_41385012b43a9f2e+0x40/0x44 [ 95.875765][ T4363] bpf_trace_run3+0x1e3/0x400 [ 95.880946][ T4363] enqueue_timer+0x411/0x5c0 [ 95.886037][ T4363] __mod_timer+0x911/0xd00 [ 95.890957][ T4363] queue_delayed_work_on+0x126/0x1e0 [ 95.896747][ T4363] process_one_work+0x898/0x1160 [ 95.902185][ T4363] worker_thread+0xaa2/0x1250 [ 95.907361][ T4363] kthread+0x29d/0x330 [ 95.911933][ T4363] ret_from_fork+0x1f/0x30 [ 95.916852][ T4363] [ 95.916852][ T4363] other info that might help us debug this: [ 95.916852][ T4363] [ 95.927056][ T4363] Possible unsafe locking scenario: [ 95.927056][ T4363] [ 95.934484][ T4363] CPU0 CPU1 [ 95.939826][ T4363] ---- ---- [ 95.945171][ T4363] lock(&base->lock); [ 95.949221][ T4363] lock(krc.lock); [ 95.955530][ T4363] lock(&base->lock); [ 95.962098][ T4363] lock(krc.lock); [ 95.965885][ T4363] [ 95.965885][ T4363] *** DEADLOCK *** [ 95.965885][ T4363] [ 95.974006][ T4363] 4 locks held by kworker/u4:7/4363: [ 95.979272][ T4363] #0: ffff88814c63d138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 95.989952][ T4363] #1: ffffc9000472fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 96.002460][ T4363] #2: ffff8880b8e28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 96.011773][ T4363] #3: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf0/0x400 [ 96.021076][ T4363] [ 96.021076][ T4363] stack backtrace: [ 96.026961][ T4363] CPU: 0 PID: 4363 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 96.034489][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.044532][ T4363] Workqueue: bat_events batadv_nc_worker [ 96.050173][ T4363] Call Trace: [ 96.053443][ T4363] [ 96.056361][ T4363] dump_stack_lvl+0x168/0x22e [ 96.061026][ T4363] ? load_image+0x3b0/0x3b0 [ 96.065532][ T4363] ? show_regs_print_info+0x12/0x12 [ 96.070725][ T4363] ? print_circular_bug+0x12b/0x1a0 [ 96.075913][ T4363] check_noncircular+0x274/0x310 [ 96.080844][ T4363] ? add_chain_block+0x940/0x940 [ 96.085770][ T4363] ? lockdep_lock+0xdc/0x1e0 [ 96.090352][ T4363] ? _find_first_zero_bit+0xcf/0x100 [ 96.095626][ T4363] __lock_acquire+0x2cf8/0x7c50 [ 96.100465][ T4363] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 96.106378][ T4363] ? verify_lock_unused+0x140/0x140 [ 96.111558][ T4363] ? kasan_save_stack+0x4c/0x60 [ 96.116393][ T4363] ? kasan_save_stack+0x3a/0x60 [ 96.121226][ T4363] ? __kasan_record_aux_stack+0xb2/0xc0 [ 96.126760][ T4363] ? kvfree_call_rcu+0x108/0x870 [ 96.131681][ T4363] ? trie_delete_elem+0x52d/0x690 [ 96.136689][ T4363] ? bpf_prog_41385012b43a9f2e+0x40/0x44 [ 96.142303][ T4363] ? bpf_trace_run3+0x1e3/0x400 [ 96.147140][ T4363] ? enqueue_timer+0x411/0x5c0 [ 96.151890][ T4363] ? __mod_timer+0x911/0xd00 [ 96.156466][ T4363] ? queue_delayed_work_on+0x126/0x1e0 [ 96.161906][ T4363] ? process_one_work+0x898/0x1160 [ 96.167001][ T4363] ? worker_thread+0xaa2/0x1250 [ 96.171835][ T4363] ? kthread+0x29d/0x330 [ 96.176060][ T4363] ? ret_from_fork+0x1f/0x30 [ 96.180640][ T4363] lock_acquire+0x1b4/0x490 [ 96.185127][ T4363] ? kvfree_call_rcu+0x184/0x870 [ 96.190055][ T4363] ? read_lock_is_recursive+0x10/0x10 [ 96.195413][ T4363] ? __phys_addr+0xb6/0x170 [ 96.199901][ T4363] _raw_spin_lock+0x2a/0x40 [ 96.204391][ T4363] ? kvfree_call_rcu+0x184/0x870 [ 96.209311][ T4363] kvfree_call_rcu+0x184/0x870 [ 96.214061][ T4363] ? rcu_leak_callback+0x10/0x10 [ 96.218984][ T4363] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 96.224860][ T4363] ? _raw_spin_unlock+0x40/0x40 [ 96.229699][ T4363] trie_delete_elem+0x52d/0x690 [ 96.234536][ T4363] bpf_prog_41385012b43a9f2e+0x40/0x44 [ 96.239974][ T4363] bpf_trace_run3+0x1e3/0x400 [ 96.244637][ T4363] ? do_raw_spin_unlock+0x11d/0x230 [ 96.249818][ T4363] ? bpf_trace_run3+0xf0/0x400 [ 96.254581][ T4363] ? bpf_trace_run2+0x3b0/0x3b0 [ 96.259426][ T4363] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 96.265312][ T4363] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 96.270675][ T4363] ? _raw_spin_lock+0x40/0x40 [ 96.275352][ T4363] enqueue_timer+0x411/0x5c0 [ 96.279931][ T4363] __mod_timer+0x911/0xd00 [ 96.284338][ T4363] ? queue_delayed_work_on+0xc8/0x1e0 [ 96.289699][ T4363] queue_delayed_work_on+0x126/0x1e0 [ 96.294972][ T4363] ? delayed_work_timer_fn+0x80/0x80 [ 96.300241][ T4363] ? batadv_nc_process_nc_paths+0xba/0x390 [ 96.306035][ T4363] ? __msecs_to_jiffies+0x1a/0x40 [ 96.311040][ T4363] ? batadv_nc_worker+0x4f4/0x600 [ 96.316057][ T4363] ? process_one_work+0x7a1/0x1160 [ 96.321147][ T4363] process_one_work+0x898/0x1160 [ 96.326072][ T4363] ? worker_detach_from_pool+0x240/0x240 [ 96.331684][ T4363] ? _raw_spin_lock_irq+0xab/0xe0 [ 96.336695][ T4363] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 96.342052][ T4363] ? kthread_data+0x4b/0xc0 [ 96.346540][ T4363] worker_thread+0xaa2/0x1250 [ 96.351208][ T4363] ? __kthread_parkme+0x162/0x1c0 [ 96.356218][ T4363] kthread+0x29d/0x330 [ 96.360271][ T4363] ? worker_clr_flags+0x1a0/0x1a0 [ 96.365277][ T4363] ? kthread_blkcg+0xd0/0xd0 [ 96.369849][ T4363] ret_from_fork+0x1f/0x30 [ 96.374253][ T4363] [ 98.462053][ T14] vhci_hcd: vhci_device speed not set