last executing test programs: 1m8.777008686s ago: executing program 2 (id=77): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x4, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r2, @ANYRES64=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000018010000696c6c2500000000002020207b1af8ff00000000030000000000000007010000f8ffffffb702000008000000b7030000ff0f000085000000060000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e0000000c000000040000008b000000a4900000", @ANYRES32=r2, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r3, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000005e2e95a9d64802000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6}, 0x38) 1m7.207293246s ago: executing program 2 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc) 1m7.03132023s ago: executing program 2 (id=82): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x44148, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x5, 0x40000000005, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a907c5"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 1m6.358069463s ago: executing program 2 (id=84): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1m6.052773048s ago: executing program 2 (id=85): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a1, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001400"/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007d000000bf0900000000000066090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000008000037010000f8ffffffb702000008008000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, 0x0, &(0x7f00000001c0)=r11}, 0x20) 1m5.055195988s ago: executing program 2 (id=87): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 56.699192491s ago: executing program 1 (id=119): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xd5e93709d453f02a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x5f}, 0x1e) 56.530876444s ago: executing program 1 (id=120): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 56.143274851s ago: executing program 1 (id=122): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[], 0x0, 0xfc5f}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000001c0), 0x4) 55.903230286s ago: executing program 0 (id=125): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0xfffffffffffffe51, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110c230000) 55.791055008s ago: executing program 0 (id=126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x709000, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 55.349151177s ago: executing program 0 (id=127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 55.199706179s ago: executing program 0 (id=128): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa02}, 0x0, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0x0, 0xfc5f, 0x0, 0xfffffffd, 0x80000000}, 0x28) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x8, r0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1000, 0x3e, &(0x7f0000000180)=""/62, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x1, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r0, 0xffffffffffffffff, r0, r0, r0, r3, r0, r2], &(0x7f0000000440)=[{0x0, 0x3, 0xa, 0x3}, {0x1, 0x5, 0x8, 0x2}], 0x10, 0x5}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 54.865308296s ago: executing program 1 (id=130): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) 54.622895621s ago: executing program 0 (id=131): syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 54.382871815s ago: executing program 1 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) 54.15746857s ago: executing program 0 (id=133): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x12) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x6, 0x12) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000b400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300), 0x12}, 0x1d10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='thermal_power_allocator_pid\x00', r3, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 53.740223608s ago: executing program 32 (id=133): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x12) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x6, 0x12) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000b400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300), 0x12}, 0x1d10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='thermal_power_allocator_pid\x00', r3, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 53.699230589s ago: executing program 1 (id=135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) 53.699084859s ago: executing program 33 (id=135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) 50.04247821s ago: executing program 34 (id=87): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 5.439445264s ago: executing program 6 (id=519): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 5.383243165s ago: executing program 4 (id=520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x7, 0x5, 0x2, 0xffffffffffffffff, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 5.232047558s ago: executing program 4 (id=521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.063274272s ago: executing program 6 (id=523): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3b60, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 4.963154273s ago: executing program 5 (id=524): unlink(&(0x7f0000000000)='./file1\x00') r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<\t\t') 4.855392206s ago: executing program 6 (id=525): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000340)=""/144, 0x90}], 0x6}, 0x0) 4.388616935s ago: executing program 5 (id=528): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x100400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x4000000000000000, 0xffffffffffffffff, 0x2) 4.388375115s ago: executing program 6 (id=529): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x0) 4.279446167s ago: executing program 4 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r5 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f0000000900)=r4, 0x4) 4.0991517s ago: executing program 3 (id=532): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 3.879307414s ago: executing program 5 (id=533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a80016000800014009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) 3.879132105s ago: executing program 6 (id=534): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.62250417s ago: executing program 6 (id=535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.371300604s ago: executing program 5 (id=536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) 2.971209112s ago: executing program 4 (id=537): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f0ffffff0000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[], 0xfdef) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) 2.970987702s ago: executing program 3 (id=538): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{r0}, &(0x7f0000001580), &(0x7f00000015c0)}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x400000000000}, 0x0, 0x4, 0x0, 0x0, 0x504, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x40047440, 0xf0ff1f00000000) 2.754994687s ago: executing program 4 (id=539): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x38, 0x7d, 0x2, 0x6, 0x0, 0x5432, 0x12122, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3f5a24a, 0x1, @perf_config_ext={0xa4, 0x6}, 0x110083, 0x3, 0x48, 0x7, 0x1ff, 0x4301ee08, 0x7, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 898.092172ms ago: executing program 5 (id=540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000300)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 755.182305ms ago: executing program 3 (id=541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000010008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000001c0)='mm_lru_insertion\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 754.814065ms ago: executing program 4 (id=542): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='spmi_write_end\x00', r0, 0x0, 0x10000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6f3bbdaa2617e6b1b8a8ca4dc57fb039f48d035928ef07e158a", &(0x7f0000000900)=""/170, &(0x7f0000000c40)="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", &(0x7f0000000a40)="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", 0x80000001}, 0x38) mkdirat$cgroup(r5, &(0x7f0000000b80)='syz0\x00', 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 559.420529ms ago: executing program 3 (id=543): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x400, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 433.062291ms ago: executing program 5 (id=544): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, 0x0, &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) syz_clone(0x46085300, 0x0, 0xfffffffffffffda0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x44, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0xffffff83, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 79.211638ms ago: executing program 3 (id=545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000bc0)={r0, &(0x7f0000000a00), 0x0}, 0x20) 0s ago: executing program 3 (id=546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000003c0), &(0x7f0000000500)='%pB \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. syzkaller login: [ 82.944191][ T5773] cgroup: Unknown subsys name 'net' [ 83.083849][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.858565][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.607332][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.623542][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.636881][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.646748][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.646868][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.663480][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.672646][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.674574][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.682263][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.695035][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.695347][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.705277][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.711281][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.718614][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.724859][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.733786][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.743116][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.750581][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.755938][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.762315][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.768981][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.785042][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.792487][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.811715][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.256701][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 87.533866][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 87.556973][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 87.574244][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.584330][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.593486][ T5785] bridge_slave_0: entered allmulticast mode [ 87.602799][ T5785] bridge_slave_0: entered promiscuous mode [ 87.622431][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 87.674051][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.685153][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.693057][ T5785] bridge_slave_1: entered allmulticast mode [ 87.707478][ T5785] bridge_slave_1: entered promiscuous mode [ 87.872017][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.891681][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.945961][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.953559][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.962049][ T5782] bridge_slave_0: entered allmulticast mode [ 87.975070][ T5782] bridge_slave_0: entered promiscuous mode [ 88.048922][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.056600][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.063851][ T5782] bridge_slave_1: entered allmulticast mode [ 88.071794][ T5782] bridge_slave_1: entered promiscuous mode [ 88.081908][ T5785] team0: Port device team_slave_0 added [ 88.091766][ T5785] team0: Port device team_slave_1 added [ 88.098347][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.106124][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.114067][ T5783] bridge_slave_0: entered allmulticast mode [ 88.121423][ T5783] bridge_slave_0: entered promiscuous mode [ 88.129941][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.137839][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.145176][ T5783] bridge_slave_1: entered allmulticast mode [ 88.152416][ T5783] bridge_slave_1: entered promiscuous mode [ 88.173675][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.181514][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.191026][ T5784] bridge_slave_0: entered allmulticast mode [ 88.199602][ T5784] bridge_slave_0: entered promiscuous mode [ 88.268417][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.275720][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.282941][ T5784] bridge_slave_1: entered allmulticast mode [ 88.291550][ T5784] bridge_slave_1: entered promiscuous mode [ 88.319367][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.347748][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.355893][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.382335][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.399413][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.424840][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.435697][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.443299][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.471159][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.492387][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.571590][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.585576][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.612066][ T5782] team0: Port device team_slave_0 added [ 88.623061][ T5782] team0: Port device team_slave_1 added [ 88.633221][ T5783] team0: Port device team_slave_0 added [ 88.671055][ T5785] hsr_slave_0: entered promiscuous mode [ 88.678776][ T5785] hsr_slave_1: entered promiscuous mode [ 88.704013][ T5783] team0: Port device team_slave_1 added [ 88.741475][ T5784] team0: Port device team_slave_0 added [ 88.792294][ T5784] team0: Port device team_slave_1 added [ 88.813992][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.821924][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.851031][ T5788] Bluetooth: hci3: command tx timeout [ 88.851061][ T5797] Bluetooth: hci1: command tx timeout [ 88.857671][ T5788] Bluetooth: hci2: command tx timeout [ 88.865673][ T5790] Bluetooth: hci0: command tx timeout [ 88.873327][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.891103][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.899629][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.930331][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.944525][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.952691][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.982030][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.013441][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.021022][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.049174][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.101602][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.108848][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.137094][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.212526][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.220220][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.248233][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.265161][ T5782] hsr_slave_0: entered promiscuous mode [ 89.272018][ T5782] hsr_slave_1: entered promiscuous mode [ 89.279229][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.288064][ T5782] Cannot create hsr debugfs directory [ 89.310897][ T5783] hsr_slave_0: entered promiscuous mode [ 89.318002][ T5783] hsr_slave_1: entered promiscuous mode [ 89.325231][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.333196][ T5783] Cannot create hsr debugfs directory [ 89.479064][ T5784] hsr_slave_0: entered promiscuous mode [ 89.486207][ T5784] hsr_slave_1: entered promiscuous mode [ 89.493538][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.501515][ T5784] Cannot create hsr debugfs directory [ 89.795144][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.813649][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.844224][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.856126][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.966073][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.986459][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.000132][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.012321][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.109997][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.124088][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.150370][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.175934][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.279579][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.292431][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.318525][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.331169][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.356826][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.440104][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.477004][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.484884][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.527706][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.550559][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.558957][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.640100][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.672371][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.724457][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.731811][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.742785][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.750072][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.780213][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.809959][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.848281][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.856062][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.889716][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.897126][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.925718][ T5797] Bluetooth: hci0: command tx timeout [ 90.925735][ T5788] Bluetooth: hci1: command tx timeout [ 90.925770][ T5788] Bluetooth: hci3: command tx timeout [ 90.931907][ T5790] Bluetooth: hci2: command tx timeout [ 91.014048][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.104352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.112204][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.148348][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.156066][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.181757][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.390740][ T5785] veth0_vlan: entered promiscuous mode [ 91.449711][ T5785] veth1_vlan: entered promiscuous mode [ 91.528203][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.579561][ T5785] veth0_macvtap: entered promiscuous mode [ 91.622391][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.650512][ T5785] veth1_macvtap: entered promiscuous mode [ 91.688414][ T5784] veth0_vlan: entered promiscuous mode [ 91.734213][ T5784] veth1_vlan: entered promiscuous mode [ 91.776533][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.823852][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.851931][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.862282][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.873792][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.882907][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.904479][ T5782] veth0_vlan: entered promiscuous mode [ 91.954282][ T5782] veth1_vlan: entered promiscuous mode [ 91.987844][ T5784] veth0_macvtap: entered promiscuous mode [ 92.017440][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.041419][ T5784] veth1_macvtap: entered promiscuous mode [ 92.109110][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.116901][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.131612][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.140334][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.152398][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.167903][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.178735][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.190682][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.251505][ T5782] veth0_macvtap: entered promiscuous mode [ 92.261133][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.263166][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.274809][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.285146][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.296206][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.310939][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.333702][ T5782] veth1_macvtap: entered promiscuous mode [ 92.423538][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.436873][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.447581][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.461109][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.473989][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.555318][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.567465][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.577849][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.589112][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.602738][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.616001][ T5783] veth0_vlan: entered promiscuous mode [ 92.627673][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.642102][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.653339][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.663509][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.686630][ C1] hrtimer: interrupt took 104686 ns [ 92.820242][ T5783] veth1_vlan: entered promiscuous mode [ 92.895705][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.907419][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.005746][ T5790] Bluetooth: hci3: command tx timeout [ 93.006605][ T5788] Bluetooth: hci2: command tx timeout [ 93.011567][ T5790] Bluetooth: hci0: command tx timeout [ 93.019893][ T5788] Bluetooth: hci1: command tx timeout [ 93.063212][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.096944][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.137787][ T5783] veth0_macvtap: entered promiscuous mode [ 93.166327][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.189802][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.256825][ T5783] veth1_macvtap: entered promiscuous mode [ 93.306178][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.325247][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.368261][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.385372][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.402216][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.418777][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.443349][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.470155][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.499130][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.551131][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.603733][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.664655][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.708174][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.718561][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.730517][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.743086][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.802409][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.911205][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.047621][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.141031][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.085401][ T5790] Bluetooth: hci0: command tx timeout [ 95.087691][ T5797] Bluetooth: hci1: command tx timeout [ 95.090998][ T5790] Bluetooth: hci2: command tx timeout [ 95.096844][ T5788] Bluetooth: hci3: command tx timeout [ 96.193782][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.212350][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.691394][ T9] cfg80211: failed to load regulatory.db [ 98.216534][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.239024][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.746915][ T5910] veth0_vlan: entered allmulticast mode [ 100.886296][ T5912] veth0_vlan: left promiscuous mode [ 100.979104][ T5912] veth0_vlan: entered promiscuous mode [ 103.072904][ T5918] ´: renamed from team_slave_1 (while UP) [ 107.163246][ T5932] wg2: entered promiscuous mode [ 107.194596][ T5932] wg2: entered allmulticast mode [ 110.034814][ T5971] wg2: entered promiscuous mode [ 110.040463][ T5971] wg2: entered allmulticast mode [ 110.527683][ T5975] ´: renamed from team_slave_1 (while UP) [ 112.109571][ T5985] veth0_vlan: entered allmulticast mode [ 112.300217][ T5986] veth0_vlan: left promiscuous mode [ 112.523290][ T5986] veth0_vlan: entered promiscuous mode [ 118.194838][ T6002] wg2: entered promiscuous mode [ 118.200270][ T6002] wg2: entered allmulticast mode [ 119.729491][ T6027] veth0_vlan: entered allmulticast mode [ 119.969005][ T6031] ´: renamed from team_slave_1 (while UP) [ 120.167752][ T6032] veth0_vlan: left promiscuous mode [ 120.291018][ T6032] veth0_vlan: entered promiscuous mode [ 133.492637][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.500232][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.274662][ T6079] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 141.348155][ T6147] syzkaller0: entered promiscuous mode [ 147.614224][ T6198] pim6reg1: entered promiscuous mode [ 147.626904][ T6198] pim6reg1: entered allmulticast mode [ 151.520798][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.529350][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.560336][ T6252] bridge0: entered allmulticast mode [ 152.969077][ T135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.117258][ T135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.274758][ T135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.329349][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.346347][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.355200][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.363686][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.381827][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.392747][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.413639][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.444651][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.452601][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.456050][ T135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.476815][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.496075][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.504153][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.779837][ T6274] syzkaller0: entered promiscuous mode [ 153.791426][ T6274] syzkaller0: entered allmulticast mode [ 154.123121][ T135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.291925][ T135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.452129][ T135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.522946][ T6267] chnl_net:caif_netlink_parms(): no params data found [ 154.638720][ T135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.918734][ T6269] chnl_net:caif_netlink_parms(): no params data found [ 155.013052][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.033525][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.047534][ T6267] bridge_slave_0: entered allmulticast mode [ 155.059576][ T6267] bridge_slave_0: entered promiscuous mode [ 155.133410][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.157211][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.170713][ T6267] bridge_slave_1: entered allmulticast mode [ 155.193058][ T6267] bridge_slave_1: entered promiscuous mode [ 155.335160][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.371490][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.485141][ T5797] Bluetooth: hci2: command tx timeout [ 155.505414][ T6267] team0: Port device team_slave_0 added [ 155.565334][ T5797] Bluetooth: hci3: command tx timeout [ 155.600279][ T6267] team0: Port device team_slave_1 added [ 155.819429][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.831619][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.842694][ T6269] bridge_slave_0: entered allmulticast mode [ 155.854147][ T6269] bridge_slave_0: entered promiscuous mode [ 156.079675][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.087637][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.096922][ T6269] bridge_slave_1: entered allmulticast mode [ 156.104953][ T6269] bridge_slave_1: entered promiscuous mode [ 156.133451][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.140902][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.167362][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.308288][ T6269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.327720][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.351036][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.410874][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.568509][ T6269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.809919][ T6269] team0: Port device team_slave_0 added [ 156.908005][ T6269] team0: Port device team_slave_1 added [ 156.991609][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.001970][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.019403][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.040963][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.053162][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.061583][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.161387][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.179255][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.261271][ T6269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.297576][ T6267] hsr_slave_0: entered promiscuous mode [ 157.304785][ T6267] hsr_slave_1: entered promiscuous mode [ 157.317230][ T6267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.336105][ T6267] Cannot create hsr debugfs directory [ 157.425930][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.432964][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.484203][ T6269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.565274][ T5788] Bluetooth: hci2: command tx timeout [ 157.654945][ T5788] Bluetooth: hci3: command tx timeout [ 157.759378][ T6269] hsr_slave_0: entered promiscuous mode [ 157.768712][ T6269] hsr_slave_1: entered promiscuous mode [ 157.776088][ T6269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.783690][ T6269] Cannot create hsr debugfs directory [ 158.970135][ T6375] netlink: 180 bytes leftover after parsing attributes in process `syz.3.160'. [ 159.020784][ T135] hsr_slave_0: left promiscuous mode [ 159.043529][ T135] hsr_slave_1: left promiscuous mode [ 159.065080][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.072608][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.085167][ T5788] Bluetooth: hci4: command tx timeout [ 159.095259][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.102744][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.124043][ T135] bridge_slave_1: left allmulticast mode [ 159.134435][ T135] bridge_slave_1: left promiscuous mode [ 159.163397][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.197357][ T135] bridge_slave_0: left allmulticast mode [ 159.203071][ T135] bridge_slave_0: left promiscuous mode [ 159.224721][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.261250][ T135] hsr_slave_0: left promiscuous mode [ 159.270687][ T135] hsr_slave_1: left promiscuous mode [ 159.285242][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.294317][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.304281][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.314111][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.322445][ T135] bridge_slave_1: left allmulticast mode [ 159.337440][ T135] bridge_slave_1: left promiscuous mode [ 159.343340][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.353283][ T135] bridge_slave_0: left allmulticast mode [ 159.359242][ T135] bridge_slave_0: left promiscuous mode [ 159.365096][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.438385][ T135] veth1_macvtap: left promiscuous mode [ 159.444687][ T135] veth0_macvtap: left promiscuous mode [ 159.450381][ T135] veth1_vlan: left promiscuous mode [ 159.456358][ T135] veth0_vlan: left promiscuous mode [ 159.468392][ T135] veth1_macvtap: left promiscuous mode [ 159.474009][ T135] veth0_macvtap: left promiscuous mode [ 159.480279][ T135] veth1_vlan: left promiscuous mode [ 159.486028][ T135] veth0_vlan: left promiscuous mode [ 159.644963][ T5788] Bluetooth: hci2: command tx timeout [ 159.724616][ T5788] Bluetooth: hci3: command tx timeout [ 160.293988][ T135] team0 (unregistering): Port device ´ removed [ 160.343768][ T135] team0 (unregistering): Port device team_slave_0 removed [ 160.393995][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.445943][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.933448][ T135] bond0 (unregistering): Released all slaves [ 161.164625][ T5788] Bluetooth: hci4: command tx timeout [ 161.520418][ T135] team0 (unregistering): Port device ´ removed [ 161.569680][ T135] team0 (unregistering): Port device team_slave_0 removed [ 161.652648][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.722429][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.732873][ T5788] Bluetooth: hci2: command tx timeout [ 161.810442][ T5788] Bluetooth: hci3: command tx timeout [ 162.162463][ T135] bond0 (unregistering): Released all slaves [ 162.487393][ T6267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.542574][ T6267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.575896][ T6267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.823209][ T6267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.029532][ T6269] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.075331][ T6269] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.092814][ T6333] chnl_net:caif_netlink_parms(): no params data found [ 163.127935][ T6269] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.176066][ T6269] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.245129][ T5788] Bluetooth: hci4: command tx timeout [ 163.531056][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.541175][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.551572][ T6333] bridge_slave_0: entered allmulticast mode [ 163.575117][ T6333] bridge_slave_0: entered promiscuous mode [ 163.609843][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.617220][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.625433][ T6333] bridge_slave_1: entered allmulticast mode [ 163.632882][ T6333] bridge_slave_1: entered promiscuous mode [ 163.699135][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.731861][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.795537][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.860967][ T6333] team0: Port device team_slave_0 added [ 163.875947][ T6333] team0: Port device team_slave_1 added [ 163.948984][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.957734][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.993511][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.030219][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.050746][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.077387][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.098250][ T6267] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.251517][ T135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.315849][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.323042][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.374611][ T135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.421070][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.428413][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.466915][ T135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.521391][ T6333] hsr_slave_0: entered promiscuous mode [ 164.537046][ T6333] hsr_slave_1: entered promiscuous mode [ 164.562460][ T6269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.636716][ T135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.870239][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.916060][ T6267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.106254][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.114005][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.233494][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.240769][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.331360][ T5788] Bluetooth: hci4: command tx timeout [ 165.890617][ T6333] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.907844][ T6333] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 165.919809][ T6333] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.009638][ T6333] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.120898][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.272490][ T6269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.742951][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.902450][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.956538][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.963878][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.100763][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.108025][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.185354][ T135] hsr_slave_0: left promiscuous mode [ 167.191670][ T135] hsr_slave_1: left promiscuous mode [ 167.207084][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.219017][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.229645][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.238971][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.248993][ T135] bridge_slave_1: left allmulticast mode [ 167.255640][ T135] bridge_slave_1: left promiscuous mode [ 167.261502][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.272247][ T135] bridge_slave_0: left allmulticast mode [ 167.279109][ T135] bridge_slave_0: left promiscuous mode [ 167.285950][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.326216][ T135] veth1_macvtap: left promiscuous mode [ 167.331842][ T135] veth0_macvtap: left promiscuous mode [ 167.339220][ T135] veth1_vlan: left promiscuous mode [ 167.346826][ T135] veth0_vlan: left promiscuous mode [ 167.899067][ T135] team0 (unregistering): Port device ´ removed [ 167.939639][ T135] team0 (unregistering): Port device team_slave_0 removed [ 167.980250][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.022923][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.436772][ T135] bond0 (unregistering): Released all slaves [ 168.673933][ T6267] veth0_vlan: entered promiscuous mode [ 168.748338][ T6267] veth1_vlan: entered promiscuous mode [ 168.863532][ T6269] veth0_vlan: entered promiscuous mode [ 168.975812][ T6267] veth0_macvtap: entered promiscuous mode [ 168.992425][ T6269] veth1_vlan: entered promiscuous mode [ 169.020160][ T6267] veth1_macvtap: entered promiscuous mode [ 169.089784][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.114666][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.136825][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.186660][ T6269] veth0_macvtap: entered promiscuous mode [ 169.220666][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.232130][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.244940][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.262865][ T6269] veth1_macvtap: entered promiscuous mode [ 169.282506][ T6267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.292908][ T6267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.302676][ T6267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.311770][ T6267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.360764][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.373058][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.390345][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.402017][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.420460][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.461258][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.473418][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.489379][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.500472][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.517315][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.567962][ T6269] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.592400][ T6269] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.601433][ T6269] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.612372][ T6269] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.636582][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.882924][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.910449][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.983674][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.016141][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.068816][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.124543][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.287018][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.308409][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.587816][ T6333] veth0_vlan: entered promiscuous mode [ 170.634147][ T6333] veth1_vlan: entered promiscuous mode [ 170.673453][ T6561] IPv6: Can't replace route, no match found [ 170.867715][ T6333] veth0_macvtap: entered promiscuous mode [ 170.918089][ T6333] veth1_macvtap: entered promiscuous mode [ 171.026291][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.050484][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.094492][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.131698][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.142175][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.182389][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.201001][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.217600][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.257149][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.287630][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.337888][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.381294][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.395053][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.438428][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.562154][ T6333] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.616031][ T6333] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.642489][ T6333] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.662054][ T6333] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.792479][ T6593] netlink: 'syz.4.203': attribute type 21 has an invalid length. [ 171.815957][ T6593] netlink: 132 bytes leftover after parsing attributes in process `syz.4.203'. [ 172.096233][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.104121][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.197263][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.216516][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.972598][ T6632] netlink: 'syz.6.216': attribute type 21 has an invalid length. [ 172.991332][ T6632] netlink: 128 bytes leftover after parsing attributes in process `syz.6.216'. [ 173.012962][ T6632] netlink: 'syz.6.216': attribute type 5 has an invalid length. [ 173.032214][ T6632] netlink: 'syz.6.216': attribute type 6 has an invalid length. [ 173.067762][ T6632] netlink: 3 bytes leftover after parsing attributes in process `syz.6.216'. [ 175.019107][ T6693] netlink: 'syz.3.239': attribute type 10 has an invalid length. [ 175.041613][ T6693] team0: Device dummy0 is up. Set it down before adding it as a team port [ 176.890124][ T6743] pim6reg1: entered promiscuous mode [ 176.913756][ T6743] pim6reg1: entered allmulticast mode [ 177.541876][ T6771] netlink: 'syz.6.264': attribute type 10 has an invalid length. [ 177.586878][ T6771] macvlan1: entered allmulticast mode [ 177.610222][ T6771] veth1_vlan: entered allmulticast mode [ 177.646649][ T6771] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 178.172561][ T6790] syz.6.272[6790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.172703][ T6790] syz.6.272[6790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.923332][ T6847] IPv6: Can't replace route, no match found [ 180.048670][ T6849] IPv6: Can't replace route, no match found [ 185.605855][ T6992] IPv6: Can't replace route, no match found [ 187.201101][ T7054] syz.5.372: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 187.244806][ T7054] CPU: 0 PID: 7054 Comm: syz.5.372 Not tainted syzkaller #0 [ 187.252179][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.262294][ T7054] Call Trace: [ 187.265692][ T7054] [ 187.268672][ T7054] dump_stack_lvl+0x16c/0x230 [ 187.273407][ T7054] ? show_regs_print_info+0x20/0x20 [ 187.278701][ T7054] ? load_image+0x3b0/0x3b0 [ 187.283250][ T7054] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 187.289710][ T7054] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 187.296244][ T7054] warn_alloc+0x210/0x300 [ 187.300601][ T7054] ? stack_trace_save+0x9c/0xe0 [ 187.305477][ T7054] ? zone_watermark_ok_safe+0x230/0x230 [ 187.311059][ T7054] ? kasan_set_track+0x5f/0x70 [ 187.315844][ T7054] ? kasan_set_track+0x4e/0x70 [ 187.320625][ T7054] ? __kasan_kmalloc+0x8f/0xa0 [ 187.325411][ T7054] ? xsk_init_queue+0xb0/0x110 [ 187.330207][ T7054] ? xsk_setsockopt+0x4db/0x6f0 [ 187.335083][ T7054] ? do_sock_setsockopt+0x175/0x1a0 [ 187.340320][ T7054] ? __x64_sys_setsockopt+0x184/0x200 [ 187.345733][ T7054] __vmalloc_node_range+0x126/0x1320 [ 187.351073][ T7054] ? free_vm_area+0x50/0x50 [ 187.355616][ T7054] vmalloc_user+0x74/0x80 [ 187.359978][ T7054] ? xskq_create+0xbf/0x170 [ 187.364498][ T7054] xskq_create+0xbf/0x170 [ 187.368844][ T7054] xsk_init_queue+0xb0/0x110 [ 187.373493][ T7054] xsk_setsockopt+0x4db/0x6f0 [ 187.378190][ T7054] ? xsk_poll+0x670/0x670 [ 187.382540][ T7054] ? __fget_files+0x28/0x4d0 [ 187.387160][ T7054] ? aa_sock_opt_perm+0x74/0x100 [ 187.392124][ T7054] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 187.397689][ T7054] ? security_socket_setsockopt+0x7e/0xa0 [ 187.403426][ T7054] ? xsk_poll+0x670/0x670 [ 187.407775][ T7054] do_sock_setsockopt+0x175/0x1a0 [ 187.412825][ T7054] ? __fdget+0x180/0x210 [ 187.417108][ T7054] __x64_sys_setsockopt+0x184/0x200 [ 187.422336][ T7054] do_syscall_64+0x55/0xb0 [ 187.426778][ T7054] ? clear_bhb_loop+0x40/0x90 [ 187.431471][ T7054] ? clear_bhb_loop+0x40/0x90 [ 187.436345][ T7054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.442265][ T7054] RIP: 0033:0x7f4611f8ebe9 [ 187.446711][ T7054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.466344][ T7054] RSP: 002b:00007f46101f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.474778][ T7054] RAX: ffffffffffffffda RBX: 00007f46121c5fa0 RCX: 00007f4611f8ebe9 [ 187.482769][ T7054] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 187.490760][ T7054] RBP: 00007f4612011e19 R08: 0000000000000004 R09: 0000000000000000 [ 187.498746][ T7054] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 187.506734][ T7054] R13: 00007f46121c6038 R14: 00007f46121c5fa0 R15: 00007ffc9b674ff8 [ 187.514738][ T7054] [ 187.594456][ T7054] Mem-Info: [ 187.597646][ T7054] active_anon:6058 inactive_anon:0 isolated_anon:0 [ 187.597646][ T7054] active_file:10824 inactive_file:39878 isolated_file:0 [ 187.597646][ T7054] unevictable:768 dirty:34 writeback:0 [ 187.597646][ T7054] slab_reclaimable:10217 slab_unreclaimable:95556 [ 187.597646][ T7054] mapped:24053 shmem:1392 pagetables:601 [ 187.597646][ T7054] sec_pagetables:0 bounce:0 [ 187.597646][ T7054] kernel_misc_reclaimable:0 [ 187.597646][ T7054] free:1350083 free_pcp:9138 free_cma:0 [ 187.714721][ T7054] Node 0 active_anon:24332kB inactive_anon:0kB active_file:43296kB inactive_file:159308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96212kB dirty:132kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11320kB pagetables:2304kB sec_pagetables:0kB all_unreclaimable? no [ 187.812102][ T7054] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 187.883188][ T7054] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 187.920525][ T7069] netlink: 168 bytes leftover after parsing attributes in process `syz.3.377'. [ 187.964776][ T7054] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 187.994479][ T7054] Node 0 DMA32 free:1487816kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:23888kB inactive_anon:0kB active_file:43296kB inactive_file:157988kB unevictable:1536kB writepending:132kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:18952kB local_pcp:5136kB free_cma:0kB [ 188.100557][ T7054] lowmem_reserve[]: 0 0 1 1 1 [ 188.154388][ T7054] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.226544][ T7054] lowmem_reserve[]: 0 0 0 0 0 [ 188.231378][ T7054] Node 1 Normal free:3897136kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17760kB local_pcp:9792kB free_cma:0kB [ 188.330353][ T7054] lowmem_reserve[]: 0 0 0 0 0 [ 188.355006][ T7054] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 188.405083][ T7054] Node 0 DMA32: 1*4kB (E) 143*8kB (ME) 771*16kB (UME) 391*32kB (UME) 321*64kB (UME) 118*128kB (UM) 18*256kB (UM) 10*512kB (M) 5*1024kB (ME) 7*2048kB (UME) 341*4096kB (M) = 1487564kB [ 188.442383][ T7054] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 188.461288][ T7054] Node 1 Normal: 228*4kB (UME) 56*8kB (UME) 44*16kB (UME) 86*32kB (UME) 16*64kB (UME) 11*128kB (UME) 1*256kB (M) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3897168kB [ 188.480652][ T7054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.491868][ T7054] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.522860][ T7054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.571281][ T7054] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.621234][ T7054] 52095 total pagecache pages [ 188.637025][ T7054] 0 pages in swap cache [ 188.641251][ T7054] Free swap = 124996kB [ 188.667805][ T7054] Total swap = 124996kB [ 188.672046][ T7054] 2097051 pages RAM [ 188.690343][ T7054] 0 pages HighMem/MovableOnly [ 188.699959][ T7054] 416139 pages reserved [ 188.704177][ T7054] 0 pages cma reserved [ 189.895838][ T7128] syz.6.398[7128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.895983][ T7128] syz.6.398[7128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.985027][ T7128] netlink: 132 bytes leftover after parsing attributes in process `syz.6.398'. [ 191.193954][ T7170] netlink: 'syz.3.412': attribute type 10 has an invalid length. [ 191.397965][ T7170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.504947][ T7170] team0: Port device bond0 added [ 191.957432][ T7194] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.419'. [ 192.583099][ T7216] syz.4.426[7216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.583241][ T7216] syz.4.426[7216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.835421][ T7223] macvtap0: refused to change device tx_queue_len [ 192.872826][ T7226] syz.5.429[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.872977][ T7226] syz.5.429[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.929961][ T7228] tun0: tun_chr_ioctl cmd 2147767521 [ 192.964621][ T7226] IPv6: Can't replace route, no match found [ 193.352578][ T7240] netlink: 'syz.4.434': attribute type 21 has an invalid length. [ 193.369771][ T7240] netlink: 132 bytes leftover after parsing attributes in process `syz.4.434'. [ 194.181755][ T7267] pim6reg1: entered promiscuous mode [ 194.214555][ T7267] pim6reg1: entered allmulticast mode [ 194.935918][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.942400][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.520172][ T7306] IPv6: Can't replace route, no match found [ 196.165879][ T7327] netlink: 'syz.6.465': attribute type 10 has an invalid length. [ 196.173682][ T7327] netlink: 40 bytes leftover after parsing attributes in process `syz.6.465'. [ 196.278769][ T7327] batman_adv: batadv0: Adding interface: virt_wifi0 [ 196.339965][ T7327] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.414435][ T7327] batman_adv: batadv0: Interface activated: virt_wifi0 [ 196.436095][ T7331] IPv6: Can't replace route, no match found [ 196.695514][ T7344] netlink: 'syz.5.470': attribute type 10 has an invalid length. [ 196.703423][ T7344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.470'. [ 196.792760][ T7344] dummy0: entered promiscuous mode [ 196.822749][ T7344] bridge0: port 3(dummy0) entered blocking state [ 196.837812][ T7344] bridge0: port 3(dummy0) entered disabled state [ 196.874809][ T7344] dummy0: entered allmulticast mode [ 196.890130][ T7344] bridge0: port 3(dummy0) entered blocking state [ 196.897573][ T7344] bridge0: port 3(dummy0) entered forwarding state [ 197.670923][ T7371] netlink: 'syz.6.482': attribute type 10 has an invalid length. [ 197.784224][ T7371] team0: Port device dummy0 added [ 197.835229][ T7377] netlink: 'syz.6.482': attribute type 10 has an invalid length. [ 197.958041][ T7377] team0: Port device dummy0 removed [ 198.000662][ T7377] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 198.054135][ T7383] netlink: 'syz.5.483': attribute type 21 has an invalid length. [ 198.072672][ T7383] netlink: 132 bytes leftover after parsing attributes in process `syz.5.483'. [ 199.795582][ T7439] netlink: 'syz.4.502': attribute type 21 has an invalid length. [ 202.256954][ T7521] syz.4.531: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 202.321158][ T7521] CPU: 1 PID: 7521 Comm: syz.4.531 Not tainted syzkaller #0 [ 202.328628][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.338726][ T7521] Call Trace: [ 202.342175][ T7521] [ 202.345149][ T7521] dump_stack_lvl+0x16c/0x230 [ 202.349881][ T7521] ? show_regs_print_info+0x20/0x20 [ 202.355149][ T7521] ? load_image+0x3b0/0x3b0 [ 202.359713][ T7521] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 202.366215][ T7521] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 202.372776][ T7521] warn_alloc+0x210/0x300 [ 202.377157][ T7521] ? stack_trace_save+0x9c/0xe0 [ 202.382060][ T7521] ? zone_watermark_ok_safe+0x230/0x230 [ 202.387669][ T7521] ? kasan_set_track+0x5f/0x70 [ 202.392526][ T7521] ? kasan_set_track+0x4e/0x70 [ 202.397338][ T7521] ? __kasan_kmalloc+0x8f/0xa0 [ 202.402141][ T7521] ? xsk_init_queue+0xb0/0x110 [ 202.406947][ T7521] ? xsk_setsockopt+0x4db/0x6f0 [ 202.411840][ T7521] ? do_sock_setsockopt+0x175/0x1a0 [ 202.417090][ T7521] ? __x64_sys_setsockopt+0x184/0x200 [ 202.422514][ T7521] __vmalloc_node_range+0x126/0x1320 [ 202.427882][ T7521] ? free_vm_area+0x50/0x50 [ 202.432448][ T7521] vmalloc_user+0x74/0x80 [ 202.436829][ T7521] ? xskq_create+0xbf/0x170 [ 202.441378][ T7521] xskq_create+0xbf/0x170 [ 202.445755][ T7521] xsk_init_queue+0xb0/0x110 [ 202.450397][ T7521] xsk_setsockopt+0x4db/0x6f0 [ 202.455120][ T7521] ? xsk_poll+0x670/0x670 [ 202.459503][ T7521] ? __fget_files+0x28/0x4d0 [ 202.464137][ T7521] ? aa_sock_opt_perm+0x74/0x100 [ 202.469141][ T7521] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 202.474715][ T7521] ? security_socket_setsockopt+0x7e/0xa0 [ 202.480832][ T7521] ? xsk_poll+0x670/0x670 [ 202.485182][ T7521] do_sock_setsockopt+0x175/0x1a0 [ 202.490263][ T7521] ? __fdget+0x180/0x210 [ 202.494529][ T7521] __x64_sys_setsockopt+0x184/0x200 [ 202.499756][ T7521] do_syscall_64+0x55/0xb0 [ 202.504189][ T7521] ? clear_bhb_loop+0x40/0x90 [ 202.508894][ T7521] ? clear_bhb_loop+0x40/0x90 [ 202.513590][ T7521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.519513][ T7521] RIP: 0033:0x7f9a3e18ebe9 [ 202.523947][ T7521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.543582][ T7521] RSP: 002b:00007f9a3f046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.552020][ T7521] RAX: ffffffffffffffda RBX: 00007f9a3e3c5fa0 RCX: 00007f9a3e18ebe9 [ 202.560012][ T7521] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 202.568001][ T7521] RBP: 00007f9a3e211e19 R08: 0000000000000004 R09: 0000000000000000 [ 202.575994][ T7521] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 202.583999][ T7521] R13: 00007f9a3e3c6038 R14: 00007f9a3e3c5fa0 R15: 00007ffdadeee358 [ 202.592005][ T7521] [ 202.604058][ T7521] Mem-Info: [ 202.609619][ T7521] active_anon:6293 inactive_anon:0 isolated_anon:0 [ 202.609619][ T7521] active_file:10824 inactive_file:39884 isolated_file:0 [ 202.609619][ T7521] unevictable:768 dirty:22 writeback:0 [ 202.609619][ T7521] slab_reclaimable:10189 slab_unreclaimable:94904 [ 202.609619][ T7521] mapped:24062 shmem:1397 pagetables:622 [ 202.609619][ T7521] sec_pagetables:0 bounce:0 [ 202.609619][ T7521] kernel_misc_reclaimable:0 [ 202.609619][ T7521] free:1354100 free_pcp:5961 free_cma:0 [ 202.726058][ T7521] Node 0 active_anon:25472kB inactive_anon:0kB active_file:43296kB inactive_file:159332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96248kB dirty:84kB writeback:0kB shmem:4052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11520kB pagetables:2488kB sec_pagetables:0kB all_unreclaimable? no [ 202.773368][ T7524] netlink: 'syz.5.533': attribute type 21 has an invalid length. [ 202.815712][ T7521] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 202.851178][ T7521] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.874518][ T7524] netlink: 156 bytes leftover after parsing attributes in process `syz.5.533'. [ 202.879371][ T7521] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 202.895737][ T7521] Node 0 DMA32 free:1492756kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:25228kB inactive_anon:0kB active_file:43296kB inactive_file:158012kB unevictable:1536kB writepending:84kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:7532kB local_pcp:5424kB free_cma:0kB [ 202.943190][ T7521] lowmem_reserve[]: 0 0 1 1 1 [ 202.952928][ T7521] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.981405][ T7521] lowmem_reserve[]: 0 0 0 0 0 [ 202.993692][ T7521] Node 1 Normal free:3897680kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:7712kB free_cma:0kB [ 203.027762][ T7521] lowmem_reserve[]: 0 0 0 0 0 [ 203.033378][ T7521] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.057878][ T7521] Node 0 DMA32: 151*4kB (UME) 250*8kB (UME) 450*16kB (UME) 671*32kB (UME) 379*64kB (UME) 55*128kB (UM) 15*256kB (UM) 11*512kB (UM) 6*1024kB (UME) 6*2048kB (ME) 341*4096kB (UM) = 1487212kB [ 203.078125][ T7521] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 203.105843][ T7521] Node 1 Normal: 228*4kB (UME) 56*8kB (UME) 44*16kB (UME) 94*32kB (UME) 20*64kB (UME) 11*128kB (UME) 1*256kB (M) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3897680kB [ 203.149745][ T7521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.184070][ T7521] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.217093][ T7521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.239266][ T7521] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.250596][ T7521] 52105 total pagecache pages [ 203.255718][ T7521] 0 pages in swap cache [ 203.260066][ T7521] Free swap = 124996kB [ 203.269148][ T7521] Total swap = 124996kB [ 203.279148][ T7521] 2097051 pages RAM [ 203.289121][ T7521] 0 pages HighMem/MovableOnly [ 203.300708][ T7521] 416139 pages reserved [ 203.309651][ T7521] 0 pages cma reserved [ 203.545253][ T7536] syzkaller0: entered promiscuous mode [ 203.562783][ T7536] syzkaller0: entered allmulticast mode [ 205.455592][ T7547] pim6reg1: entered promiscuous mode [ 205.460954][ T7547] pim6reg1: entered allmulticast mode [ 206.073697][ T7562] syz.3.543[7562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.073870][ T7562] syz.3.543[7562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.502352][ T7574] [ 206.515954][ T7574] ============================================ [ 206.522130][ T7574] WARNING: possible recursive locking detected [ 206.528318][ T7574] syzkaller #0 Not tainted [ 206.532756][ T7574] -------------------------------------------- [ 206.538934][ T7574] syz.3.546/7574 is trying to acquire lock: [ 206.544856][ T7574] ffff88807bc13a38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 206.553782][ T7574] [ 206.553782][ T7574] but task is already holding lock: [ 206.561155][ T7574] ffff88805be1ca38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 206.570052][ T7574] [ 206.570052][ T7574] other info that might help us debug this: [ 206.578114][ T7574] Possible unsafe locking scenario: [ 206.578114][ T7574] [ 206.585566][ T7574] CPU0 [ 206.588850][ T7574] ---- [ 206.592131][ T7574] lock(&trie->lock); [ 206.596213][ T7574] lock(&trie->lock); [ 206.600313][ T7574] [ 206.600313][ T7574] *** DEADLOCK *** [ 206.600313][ T7574] [ 206.608456][ T7574] May be due to missing lock nesting notation [ 206.608456][ T7574] [ 206.616776][ T7574] 3 locks held by syz.3.546/7574: [ 206.621817][ T7574] #0: ffffffff8cd2fc20 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x41d/0x720 [ 206.631764][ T7574] #1: ffff88805be1ca38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 206.641100][ T7574] #2: ffffffff8cd2fc20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 206.650420][ T7574] [ 206.650420][ T7574] stack backtrace: [ 206.656331][ T7574] CPU: 1 PID: 7574 Comm: syz.3.546 Not tainted syzkaller #0 [ 206.663624][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.673701][ T7574] Call Trace: [ 206.676990][ T7574] [ 206.679936][ T7574] dump_stack_lvl+0x16c/0x230 [ 206.684634][ T7574] ? show_regs_print_info+0x20/0x20 [ 206.689932][ T7574] ? print_deadlock_bug+0x435/0x5d0 [ 206.695141][ T7574] __lock_acquire+0x5d40/0x7c80 [ 206.700011][ T7574] ? mark_lock+0x94/0x320 [ 206.704353][ T7574] ? verify_lock_unused+0x140/0x140 [ 206.709649][ T7574] ? __lock_acquire+0x1260/0x7c80 [ 206.714692][ T7574] lock_acquire+0x197/0x410 [ 206.719205][ T7574] ? trie_delete_elem+0x96/0x6a0 [ 206.724170][ T7574] ? verify_lock_unused+0x140/0x140 [ 206.729374][ T7574] ? page_counter_try_charge+0x293/0x2c0 [ 206.735020][ T7574] ? read_lock_is_recursive+0x20/0x20 [ 206.740408][ T7574] ? try_charge_memcg+0x1342/0x1810 [ 206.745624][ T7574] _raw_spin_lock_irqsave+0xa8/0xf0 [ 206.750841][ T7574] ? trie_delete_elem+0x96/0x6a0 [ 206.755793][ T7574] ? _raw_spin_lock+0x40/0x40 [ 206.760496][ T7574] trie_delete_elem+0x96/0x6a0 [ 206.765271][ T7574] ? __cant_sleep+0x210/0x210 [ 206.769963][ T7574] bpf_prog_8c8ab8634bca3061+0x42/0x4c [ 206.775433][ T7574] bpf_trace_run4+0x1f9/0x420 [ 206.780135][ T7574] ? bpf_trace_run4+0xfd/0x420 [ 206.784935][ T7574] ? bpf_trace_run3+0x400/0x400 [ 206.789819][ T7574] ? percpu_ref_put+0xef/0x180 [ 206.794604][ T7574] ? __memcg_kmem_charge_page+0x264/0x380 [ 206.800340][ T7574] __alloc_pages+0x429/0x460 [ 206.804954][ T7574] ? zone_statistics+0x170/0x170 [ 206.809913][ T7574] ? bpf_map_get_memcg+0x4e/0x4e0 [ 206.814954][ T7574] ? __lock_acquire+0x7c80/0x7c80 [ 206.819991][ T7574] ? __rwlock_init+0x150/0x150 [ 206.824773][ T7574] __kmalloc_large_node+0x8c/0x1e0 [ 206.829907][ T7574] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 206.835210][ T7574] __kmalloc_node+0x10f/0x230 [ 206.839900][ T7574] ? _raw_spin_lock+0x40/0x40 [ 206.844606][ T7574] bpf_map_kmalloc_node+0xbc/0x1b0 [ 206.849732][ T7574] trie_update_elem+0x166/0xea0 [ 206.854606][ T7574] ? asm_exc_page_fault+0x26/0x30 [ 206.859642][ T7574] bpf_map_update_value+0x660/0x720 [ 206.864859][ T7574] map_update_elem+0x57b/0x700 [ 206.869631][ T7574] __sys_bpf+0x652/0x800 [ 206.873879][ T7574] ? bpf_link_show_fdinfo+0x350/0x350 [ 206.879267][ T7574] ? lock_chain_count+0x20/0x20 [ 206.884135][ T7574] __x64_sys_bpf+0x7c/0x90 [ 206.888563][ T7574] do_syscall_64+0x55/0xb0 [ 206.892992][ T7574] ? clear_bhb_loop+0x40/0x90 [ 206.897678][ T7574] ? clear_bhb_loop+0x40/0x90 [ 206.902363][ T7574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.908277][ T7574] RIP: 0033:0x7f435978ebe9 [ 206.912717][ T7574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.932352][ T7574] RSP: 002b:00007f435a679038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.940802][ T7574] RAX: ffffffffffffffda RBX: 00007f43599c5fa0 RCX: 00007f435978ebe9 [ 206.948805][ T7574] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000002 [ 206.956794][ T7574] RBP: 00007f4359811e19 R08: 0000000000000000 R09: 0000000000000000 [ 206.964778][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.972762][ T7574] R13: 00007f43599c6038 R14: 00007f43599c5fa0 R15: 00007ffe4bac47d8 [ 206.980760][ T7574] [ 212.364600][ T5788] Bluetooth: hci0: command 0x0406 tx timeout