last executing test programs: 1.538258687s ago: executing program 0 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) 1.393845989s ago: executing program 0 (id=853): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000e47f00000100000042"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.30686658s ago: executing program 2 (id=856): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) 1.226396632s ago: executing program 0 (id=857): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) 1.166039433s ago: executing program 2 (id=859): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @struct]}}, &(0x7f0000000140)=""/226, 0x32, 0xe2, 0x1}, 0x28) 1.158152973s ago: executing program 3 (id=860): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.098446944s ago: executing program 0 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.063839294s ago: executing program 2 (id=863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.005048695s ago: executing program 0 (id=864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r1}, 0x38) 938.402056ms ago: executing program 3 (id=865): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000e47f00000100000042"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 935.477546ms ago: executing program 0 (id=866): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff"], 0x3e) 923.257936ms ago: executing program 2 (id=867): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 821.654908ms ago: executing program 3 (id=868): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000100), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 753.701989ms ago: executing program 2 (id=869): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f0000000300)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 691.68584ms ago: executing program 3 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 664.487561ms ago: executing program 2 (id=873): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 594.023342ms ago: executing program 3 (id=874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r1}, 0x38) 541.302292ms ago: executing program 3 (id=875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2308217f01"], 0xffdd) 282.417836ms ago: executing program 1 (id=879): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c00000042"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) 259.201116ms ago: executing program 1 (id=880): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000100), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 199.052657ms ago: executing program 1 (id=881): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f0000000300)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 139.249478ms ago: executing program 1 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 65.225289ms ago: executing program 1 (id=883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, 0x0, &(0x7f00000006c0), 0x3, r1}, 0x38) 0s ago: executing program 1 (id=884): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 63.520604][ T5774] cgroup: Unknown subsys name 'net' [ 63.668940][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.064715][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.422836][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.430814][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.438929][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.446769][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.448862][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.463421][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.463635][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.471853][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.478450][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.486483][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.492672][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.498906][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.506945][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.512857][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.520193][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.526883][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.541766][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.549250][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.557599][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.575721][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.584382][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.588274][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.600614][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.608161][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.051551][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 67.076755][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 67.121329][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 67.165744][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 67.294368][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.301535][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.308950][ T5788] bridge_slave_0: entered allmulticast mode [ 67.315665][ T5788] bridge_slave_0: entered promiscuous mode [ 67.324498][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.331610][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.339665][ T5788] bridge_slave_1: entered allmulticast mode [ 67.347661][ T5788] bridge_slave_1: entered promiscuous mode [ 67.354692][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.361793][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.369150][ T5787] bridge_slave_0: entered allmulticast mode [ 67.375804][ T5787] bridge_slave_0: entered promiscuous mode [ 67.383322][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.390475][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.397746][ T5787] bridge_slave_1: entered allmulticast mode [ 67.404979][ T5787] bridge_slave_1: entered promiscuous mode [ 67.436400][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.443557][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.450673][ T5784] bridge_slave_0: entered allmulticast mode [ 67.457769][ T5784] bridge_slave_0: entered promiscuous mode [ 67.506155][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.513393][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.520486][ T5784] bridge_slave_1: entered allmulticast mode [ 67.527282][ T5784] bridge_slave_1: entered promiscuous mode [ 67.557935][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.578899][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.586127][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.594095][ T5792] bridge_slave_0: entered allmulticast mode [ 67.600742][ T5792] bridge_slave_0: entered promiscuous mode [ 67.623315][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.645240][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.657430][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.666730][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.674292][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.681401][ T5792] bridge_slave_1: entered allmulticast mode [ 67.688230][ T5792] bridge_slave_1: entered promiscuous mode [ 67.705231][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.757425][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.780201][ T5788] team0: Port device team_slave_0 added [ 67.789567][ T5787] team0: Port device team_slave_0 added [ 67.798653][ T5787] team0: Port device team_slave_1 added [ 67.806601][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.820851][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.840115][ T5788] team0: Port device team_slave_1 added [ 67.868514][ T5784] team0: Port device team_slave_0 added [ 67.909082][ T5784] team0: Port device team_slave_1 added [ 67.925957][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.933091][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.959354][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.973817][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.980760][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.006774][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.021209][ T5792] team0: Port device team_slave_0 added [ 68.039661][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.046658][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.072560][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.097970][ T5792] team0: Port device team_slave_1 added [ 68.127346][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.134440][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.160738][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.173513][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.180599][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.210997][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.250238][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.257282][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.283643][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.317875][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.325029][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.351515][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.364247][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.371197][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.397881][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.444354][ T5787] hsr_slave_0: entered promiscuous mode [ 68.450816][ T5787] hsr_slave_1: entered promiscuous mode [ 68.479445][ T5784] hsr_slave_0: entered promiscuous mode [ 68.485711][ T5784] hsr_slave_1: entered promiscuous mode [ 68.491680][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.499821][ T5784] Cannot create hsr debugfs directory [ 68.509547][ T5788] hsr_slave_0: entered promiscuous mode [ 68.517503][ T5788] hsr_slave_1: entered promiscuous mode [ 68.523630][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.531171][ T5788] Cannot create hsr debugfs directory [ 68.597724][ T5791] Bluetooth: hci0: command tx timeout [ 68.599140][ T5792] hsr_slave_0: entered promiscuous mode [ 68.610488][ T5792] hsr_slave_1: entered promiscuous mode [ 68.618928][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.626549][ T5792] Cannot create hsr debugfs directory [ 68.673033][ T5791] Bluetooth: hci3: command tx timeout [ 68.676474][ T50] Bluetooth: hci1: command tx timeout [ 68.678610][ T5797] Bluetooth: hci2: command tx timeout [ 68.973956][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.985986][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.998332][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.009673][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.069610][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.083329][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.093980][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.107254][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.211931][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.227013][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.243739][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.253238][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.322869][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.340956][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.351825][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.383369][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.404202][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.418481][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.432808][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.440117][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.477268][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.484431][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.563437][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.612176][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.630075][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.655371][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.662502][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.685800][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.692982][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.749059][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.814578][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.841779][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.859267][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.871914][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.879078][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.919087][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.926270][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.968642][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.975796][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.036353][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.051415][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.058616][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.085249][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.214500][ T5787] veth0_vlan: entered promiscuous mode [ 70.228442][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.241925][ T5787] veth1_vlan: entered promiscuous mode [ 70.342235][ T5792] veth0_vlan: entered promiscuous mode [ 70.390928][ T5792] veth1_vlan: entered promiscuous mode [ 70.418903][ T5787] veth0_macvtap: entered promiscuous mode [ 70.460220][ T5787] veth1_macvtap: entered promiscuous mode [ 70.480883][ T5792] veth0_macvtap: entered promiscuous mode [ 70.528118][ T5792] veth1_macvtap: entered promiscuous mode [ 70.557358][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.570786][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.579407][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.590754][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.607189][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.626550][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.639854][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.655854][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.666686][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.679045][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.679998][ T5791] Bluetooth: hci0: command tx timeout [ 70.706410][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.715715][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.725624][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.734402][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.752095][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.761755][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.766771][ T5797] Bluetooth: hci2: command tx timeout [ 70.771120][ T50] Bluetooth: hci1: command tx timeout [ 70.775837][ T5791] Bluetooth: hci3: command tx timeout [ 70.775979][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.795898][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.854465][ T5788] veth0_vlan: entered promiscuous mode [ 70.879033][ T5788] veth1_vlan: entered promiscuous mode [ 70.990030][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.006471][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.018564][ T5784] veth0_vlan: entered promiscuous mode [ 71.056897][ T5788] veth0_macvtap: entered promiscuous mode [ 71.071073][ T5788] veth1_macvtap: entered promiscuous mode [ 71.081072][ T5784] veth1_vlan: entered promiscuous mode [ 71.103069][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.116962][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.166917][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.177740][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.188695][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.199311][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.211034][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.232043][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.237425][ T2118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.243454][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.259952][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.266742][ T2118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.274709][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.274727][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.274739][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.276075][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.328977][ T5784] veth0_macvtap: entered promiscuous mode [ 71.356712][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.366229][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.375205][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.384363][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.416687][ T5784] veth1_macvtap: entered promiscuous mode [ 71.484838][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.494536][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.561073][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.579417][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.591736][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.615667][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.630577][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.641654][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.654529][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.671651][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.688538][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.699487][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.711239][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.722574][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.733483][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.747218][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.799700][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.809212][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.818211][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.827625][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.863190][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.871661][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.991947][ T2118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.008605][ T2118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.042114][ T5883] netlink: 'syz.2.6': attribute type 39 has an invalid length. [ 72.058459][ T5883] veth0_macvtap: left promiscuous mode [ 72.102748][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.152986][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.307714][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.344703][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.754517][ T5797] Bluetooth: hci0: command tx timeout [ 72.832586][ T5797] Bluetooth: hci3: command tx timeout [ 72.844182][ T5797] Bluetooth: hci2: command tx timeout [ 72.849612][ T5797] Bluetooth: hci1: command tx timeout [ 73.944076][ T5897] warning: `syz.1.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.107646][ T5903] netlink: 'syz.1.10': attribute type 6 has an invalid length. [ 74.675044][ T5925] netlink: 'syz.1.30': attribute type 39 has an invalid length. [ 74.730723][ T5925] veth0_macvtap: left promiscuous mode [ 74.832896][ T5797] Bluetooth: hci0: command tx timeout [ 74.913714][ T5797] Bluetooth: hci1: command tx timeout [ 74.919909][ T50] Bluetooth: hci2: command tx timeout [ 74.925319][ T5928] netlink: 'syz.2.23': attribute type 6 has an invalid length. [ 74.928668][ T5791] Bluetooth: hci3: command tx timeout [ 75.830070][ T5798] udevd[5798]: failed to send result of seq 10665 to main daemon: Connection refused [ 75.903283][ T5962] netlink: 'syz.3.37': attribute type 39 has an invalid length. [ 75.932989][ T5962] veth0_macvtap: left promiscuous mode [ 76.268969][ T5984] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 81.718540][ T1961] cfg80211: failed to load regulatory.db [ 97.510799][ T7198] syz.3.639[7198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.511027][ T7198] syz.3.639[7198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.637621][ T7373] wg2: entered promiscuous mode [ 102.682444][ T7373] wg2: entered allmulticast mode [ 103.057731][ T7423] veth1_macvtap: left promiscuous mode [ 103.068730][ T7423] macsec0: entered promiscuous mode [ 103.697347][ T7451] syzkaller0: entered promiscuous mode [ 103.703033][ T7451] syzkaller0: entered allmulticast mode [ 107.292496][ T7613] pim6reg1: entered promiscuous mode [ 107.297837][ T7613] pim6reg1: entered allmulticast mode [ 108.233839][ T7669] wg2: entered promiscuous mode [ 108.238749][ T7669] wg2: entered allmulticast mode [ 109.333569][ T7720] [ 109.335930][ T7720] ============================================ [ 109.342058][ T7720] WARNING: possible recursive locking detected [ 109.348192][ T7720] 6.6.95-syzkaller #0 Not tainted [ 109.353193][ T7720] -------------------------------------------- [ 109.359316][ T7720] syz.1.884/7720 is trying to acquire lock: [ 109.365182][ T7720] ffff88802623aa38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 109.374081][ T7720] [ 109.374081][ T7720] but task is already holding lock: [ 109.381434][ T7720] ffff888078ba5a38 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 109.390292][ T7720] [ 109.390292][ T7720] other info that might help us debug this: [ 109.398339][ T7720] Possible unsafe locking scenario: [ 109.398339][ T7720] [ 109.405771][ T7720] CPU0 [ 109.409031][ T7720] ---- [ 109.412301][ T7720] lock(&trie->lock); [ 109.416360][ T7720] lock(&trie->lock); [ 109.420413][ T7720] [ 109.420413][ T7720] *** DEADLOCK *** [ 109.420413][ T7720] [ 109.428535][ T7720] May be due to missing lock nesting notation [ 109.428535][ T7720] [ 109.436832][ T7720] 3 locks held by syz.1.884/7720: [ 109.441832][ T7720] #0: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x439/0x740 [ 109.451734][ T7720] #1: ffff888078ba5a38 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 109.461020][ T7720] #2: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 109.470308][ T7720] [ 109.470308][ T7720] stack backtrace: [ 109.476200][ T7720] CPU: 1 PID: 7720 Comm: syz.1.884 Not tainted 6.6.95-syzkaller #0 [ 109.484085][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.494143][ T7720] Call Trace: [ 109.497413][ T7720] [ 109.500333][ T7720] dump_stack_lvl+0x16c/0x230 [ 109.505007][ T7720] ? show_regs_print_info+0x20/0x20 [ 109.510203][ T7720] ? print_deadlock_bug+0x435/0x5d0 [ 109.515395][ T7720] __lock_acquire+0x5d40/0x7c80 [ 109.520241][ T7720] ? mark_lock+0x94/0x320 [ 109.524560][ T7720] ? verify_lock_unused+0x140/0x140 [ 109.529770][ T7720] ? __lock_acquire+0x1260/0x7c80 [ 109.534803][ T7720] lock_acquire+0x197/0x410 [ 109.539303][ T7720] ? trie_delete_elem+0x96/0x6a0 [ 109.544237][ T7720] ? verify_lock_unused+0x140/0x140 [ 109.549421][ T7720] ? page_counter_try_charge+0x293/0x2c0 [ 109.555040][ T7720] ? read_lock_is_recursive+0x20/0x20 [ 109.560399][ T7720] ? try_charge_memcg+0x1342/0x1810 [ 109.565595][ T7720] _raw_spin_lock_irqsave+0xa8/0xf0 [ 109.570794][ T7720] ? trie_delete_elem+0x96/0x6a0 [ 109.575735][ T7720] ? _raw_spin_lock+0x40/0x40 [ 109.580431][ T7720] trie_delete_elem+0x96/0x6a0 [ 109.585184][ T7720] ? __cant_sleep+0x210/0x210 [ 109.589853][ T7720] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 109.595299][ T7720] bpf_trace_run4+0x1f9/0x420 [ 109.599969][ T7720] ? bpf_trace_run4+0xfd/0x420 [ 109.604727][ T7720] ? bpf_trace_run3+0x400/0x400 [ 109.609564][ T7720] ? percpu_ref_put+0xef/0x180 [ 109.614316][ T7720] ? __memcg_kmem_charge_page+0x264/0x380 [ 109.620024][ T7720] __alloc_pages+0x429/0x460 [ 109.624607][ T7720] ? zone_statistics+0x170/0x170 [ 109.629539][ T7720] ? bpf_map_get_memcg+0x4e/0x4e0 [ 109.634554][ T7720] ? __lock_acquire+0x7c80/0x7c80 [ 109.639563][ T7720] ? __rwlock_init+0x150/0x150 [ 109.644315][ T7720] __kmalloc_large_node+0x8c/0x1e0 [ 109.649411][ T7720] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 109.654717][ T7720] __kmalloc_node+0x10f/0x230 [ 109.659381][ T7720] ? _raw_spin_lock+0x40/0x40 [ 109.664046][ T7720] bpf_map_kmalloc_node+0xbc/0x1b0 [ 109.669150][ T7720] trie_update_elem+0x166/0xea0 [ 109.673995][ T7720] ? asm_exc_page_fault+0x26/0x30 [ 109.679007][ T7720] bpf_map_update_value+0x67c/0x740 [ 109.684197][ T7720] map_update_elem+0x57b/0x700 [ 109.688949][ T7720] __sys_bpf+0x652/0x800 [ 109.693180][ T7720] ? bpf_link_show_fdinfo+0x350/0x350 [ 109.698541][ T7720] ? lock_chain_count+0x20/0x20 [ 109.703378][ T7720] __x64_sys_bpf+0x7c/0x90 [ 109.707778][ T7720] do_syscall_64+0x55/0xb0 [ 109.712179][ T7720] ? clear_bhb_loop+0x40/0x90 [ 109.716840][ T7720] ? clear_bhb_loop+0x40/0x90 [ 109.721515][ T7720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.727404][ T7720] RIP: 0033:0x7fbe9038e929 [ 109.731811][ T7720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.751405][ T7720] RSP: 002b:00007fbe91134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.759809][ T7720] RAX: ffffffffffffffda RBX: 00007fbe905b5fa0 RCX: 00007fbe9038e929 [ 109.767769][ T7720] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000002 [ 109.775730][ T7720] RBP: 00007fbe90410b39 R08: 0000000000000000 R09: 0000000000000000 [ 109.783688][ T7720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.791648][ T7720] R13: 0000000000000000 R14: 00007fbe905b5fa0 R15: 00007ffd05df6158 [ 109.799613][ T7720]