last executing test programs: 17.598464071s ago: executing program 1 (id=2): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40000102) 17.280620867s ago: executing program 1 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff000000000000850000000300000095", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu&\t\t') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 12.44379265s ago: executing program 1 (id=24): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4da40e1a7b530e0c, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESHEX=0x0], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a0000000400000042008087f6e14d92134cc314b3e5dd3561ca06a675963cd3f1da8bafbba23f5fe941dcc506e31f8fd716c2cb46020bc468d463eac976624da3a04aeb83edd51647ee522cc1be5c8b1871fd0309c8f414675b8e9830e1db254aa9bba68d33214a53801f855e3cf23cc5b8ea8c6ef5b65b12ba1c905d45b3fa2006ca2e5a4d984dee5cadc5701b2471f8887444d3f0ae60e045bf78ba0bb74e9945d2b46ccc29d1aaf55b0f5a05de69124fa1e1351cf9fd5ba69e6e95", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="665b9c6c49e2151dc8fae8e8868cb61bb83a0cda2624b581a531d8dcf5e81121749f11b43b4c65276ac77cd058609210c68c25b9ce8759687ca71e3a9de38374610f082e64586fc17fcd5d805059f9aa", &(0x7f0000000080), 0x1003, r2}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x1, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r4, 0x0, 0x20000000}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000640)='console\x00', r5}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8=r6, @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0)='FREEZING\x00', 0x9) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r9}, 0x38) 12.304024552s ago: executing program 3 (id=26): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40000102) 12.135416165s ago: executing program 3 (id=27): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x71, &(0x7f0000000000)=r3, 0x8) 11.009892002s ago: executing program 1 (id=28): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x50) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.009545242s ago: executing program 3 (id=29): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 10.783088266s ago: executing program 3 (id=30): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea608641602f36504001a00381931a0e69ee517d344", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f0000000e00)=""/208, 0xd0}, {&(0x7f0000003980)=""/4043, 0xfcb}, {&(0x7f0000000f00)=""/212, 0xd4}, {&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000001780)=""/4093, 0xffd}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000b00)=""/225, 0xe1}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000040)=""/12, 0xc}], 0xb}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 9.772742001s ago: executing program 3 (id=31): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000f1ffffffffffffff", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x7, 0x0, 0x10000003, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.633987323s ago: executing program 0 (id=32): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.583648649s ago: executing program 0 (id=34): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4008744b, 0x0) 8.186789775s ago: executing program 2 (id=36): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x71, &(0x7f0000000000)=r3, 0x8) 8.182154345s ago: executing program 2 (id=37): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x300}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 7.035095113s ago: executing program 0 (id=38): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 6.895213625s ago: executing program 2 (id=39): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea608641602f36504001a00381931a0e69ee517d344", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f0000000e00)=""/208, 0xd0}, {&(0x7f0000003980)=""/4043, 0xfcb}, {&(0x7f0000000f00)=""/212, 0xd4}, {&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000001780)=""/4093, 0xffd}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000b00)=""/225, 0xe1}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000040)=""/12, 0xc}], 0xb}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 6.692350948s ago: executing program 0 (id=40): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000180), &(0x7f0000000300)=r2}, 0x20) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 3.538037166s ago: executing program 3 (id=41): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='xprt_transmit\x00', 0xffffffffffffffff, 0x0, 0x8001}, 0x18) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000180), &(0x7f0000000300)=r5}, 0x20) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_procs(r7, 0x0, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7c, 0x6}]}) perf_event_open$cgroup(&(0x7f00000007c0)={0x4, 0x80, 0xc, 0x2, 0x4, 0x8, 0x0, 0x800, 0x3, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x2, 0x8}, 0x340, 0x1, 0x6, 0x4, 0xc, 0x4, 0x7f, 0x0, 0x3ff, 0x0, 0x2}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x4) write$cgroup_pid(r8, 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.499452796s ago: executing program 0 (id=49): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300076004000300eab556a705251e618294ff0051f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.28782389s ago: executing program 2 (id=50): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305839, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000a1009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000001e3eae4bbf52563ca45a91656b1d3862e8dc66cbded43e68bc0cbbefb5b80479467ebd9df841a4b8a9dab59e67b368e202000000000000ec47d0fbf84d36d824b4aa750b9f79c4a33b70c72800beee6ae2c2e8713d58a7b369763ab77ad50e17f2efa834871c2d9425606700000000c1dd3bb88c80a27f05ee3b79824f380ebeabe31fd71496303b68c36fdc45d44158a98a9277796da599f0c5ad4d386538e0ad284549c25759a22c35", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000b0640000007911000000000000000000005e954000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800001dedb42e0080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) syz_clone(0x80020000, &(0x7f0000000340)="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", 0xfb, &(0x7f00000004c0), &(0x7f0000000580), &(0x7f00000005c0)="0a6be910a7eadbc64e7f152ec2144f1a11fe2b0ec48d064de5232a5886f61c4b6e9c6891e68ae3d8") r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000ec170000001800000002000000000000000000000300"/50], 0x0, 0x32}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2791, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x258f}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x3}, 0xd806, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 3.138351462s ago: executing program 0 (id=42): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108600000000000700000002000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd0, &(0x7f0000000680)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x1e498, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xfffffffc}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x418000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="660a00000000000061114e0000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1.429714508s ago: executing program 2 (id=43): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 0s ago: executing program 2 (id=44): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40000102) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. syzkaller login: [ 80.938286][ T5775] cgroup: Unknown subsys name 'net' [ 81.103451][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.804467][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.412790][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.422805][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.430801][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.439569][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.448180][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.457523][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.459140][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.468739][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.482192][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.482735][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.497732][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.497786][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.516037][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.526055][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.533228][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.541469][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.544423][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.550167][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.565814][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.567439][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.586217][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.604490][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.618786][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.626393][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.068792][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 85.147494][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 85.231632][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 85.341888][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.349546][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.357459][ T5787] bridge_slave_0: entered allmulticast mode [ 85.365020][ T5787] bridge_slave_0: entered promiscuous mode [ 85.384939][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 85.403257][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.410823][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.418246][ T5787] bridge_slave_1: entered allmulticast mode [ 85.425782][ T5787] bridge_slave_1: entered promiscuous mode [ 85.523918][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.531605][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.538935][ T5784] bridge_slave_0: entered allmulticast mode [ 85.547130][ T5784] bridge_slave_0: entered promiscuous mode [ 85.555599][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.562764][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.570678][ T5784] bridge_slave_1: entered allmulticast mode [ 85.578152][ T5784] bridge_slave_1: entered promiscuous mode [ 85.587948][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.600739][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.652670][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.660166][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.667946][ T5788] bridge_slave_0: entered allmulticast mode [ 85.676264][ T5788] bridge_slave_0: entered promiscuous mode [ 85.713930][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.721481][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.728836][ T5788] bridge_slave_1: entered allmulticast mode [ 85.736465][ T5788] bridge_slave_1: entered promiscuous mode [ 85.751632][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.766165][ T5787] team0: Port device team_slave_0 added [ 85.810024][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.836492][ T5787] team0: Port device team_slave_1 added [ 85.868952][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.876470][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.883809][ T5794] bridge_slave_0: entered allmulticast mode [ 85.892135][ T5794] bridge_slave_0: entered promiscuous mode [ 85.914384][ T5784] team0: Port device team_slave_0 added [ 85.923058][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.936271][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.958250][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.965586][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.972782][ T5794] bridge_slave_1: entered allmulticast mode [ 85.980203][ T5794] bridge_slave_1: entered promiscuous mode [ 86.013718][ T5784] team0: Port device team_slave_1 added [ 86.053056][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.060408][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.087006][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.115987][ T5788] team0: Port device team_slave_0 added [ 86.136824][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.149516][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.159734][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.168323][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.194600][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.207590][ T5788] team0: Port device team_slave_1 added [ 86.220656][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.227766][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.253909][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.315556][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.322559][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.349469][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.362330][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.369408][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.395500][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.408049][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.415401][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.441465][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.461640][ T5794] team0: Port device team_slave_0 added [ 86.470640][ T5794] team0: Port device team_slave_1 added [ 86.521800][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.529552][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.555644][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.567244][ T50] Bluetooth: hci0: command tx timeout [ 86.595642][ T5787] hsr_slave_0: entered promiscuous mode [ 86.602354][ T5787] hsr_slave_1: entered promiscuous mode [ 86.610124][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.617517][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.643527][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.644416][ T5792] Bluetooth: hci1: command tx timeout [ 86.664106][ T50] Bluetooth: hci3: command tx timeout [ 86.729647][ T5784] hsr_slave_0: entered promiscuous mode [ 86.736676][ T50] Bluetooth: hci2: command tx timeout [ 86.742858][ T5784] hsr_slave_1: entered promiscuous mode [ 86.749768][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.758361][ T5784] Cannot create hsr debugfs directory [ 86.768864][ T5788] hsr_slave_0: entered promiscuous mode [ 86.775711][ T5788] hsr_slave_1: entered promiscuous mode [ 86.781940][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.789714][ T5788] Cannot create hsr debugfs directory [ 86.942019][ T5794] hsr_slave_0: entered promiscuous mode [ 86.948690][ T5794] hsr_slave_1: entered promiscuous mode [ 86.956509][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.964429][ T5794] Cannot create hsr debugfs directory [ 87.467659][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.506336][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.528426][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.552924][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.592581][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.603448][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.626549][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.648156][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.715255][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.733526][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.770012][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.780808][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.888875][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.917848][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.930116][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.959911][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.998415][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.081703][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.099574][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.137691][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.145219][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.157680][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.164929][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.205868][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.236752][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.244036][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.283413][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.290769][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.321571][ T5788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.332702][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.357248][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.453333][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.509677][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.516999][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.540261][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.572221][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.579537][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.615290][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.645046][ T50] Bluetooth: hci0: command tx timeout [ 88.655673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.662894][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.726767][ T50] Bluetooth: hci3: command tx timeout [ 88.729197][ T5792] Bluetooth: hci1: command tx timeout [ 88.753309][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.760578][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.804748][ T5792] Bluetooth: hci2: command tx timeout [ 88.811929][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.052228][ T5788] veth0_vlan: entered promiscuous mode [ 89.082665][ T5788] veth1_vlan: entered promiscuous mode [ 89.196567][ T5788] veth0_macvtap: entered promiscuous mode [ 89.212320][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.249431][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.258459][ T5788] veth1_macvtap: entered promiscuous mode [ 89.353365][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.377240][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.401564][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.411477][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.420714][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.431094][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.462644][ T5784] veth0_vlan: entered promiscuous mode [ 89.479011][ T5784] veth1_vlan: entered promiscuous mode [ 89.512342][ T5794] veth0_vlan: entered promiscuous mode [ 89.536443][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.573098][ T5794] veth1_vlan: entered promiscuous mode [ 89.650384][ T5794] veth0_macvtap: entered promiscuous mode [ 89.690036][ T5784] veth0_macvtap: entered promiscuous mode [ 89.703176][ T5794] veth1_macvtap: entered promiscuous mode [ 89.760195][ T5784] veth1_macvtap: entered promiscuous mode [ 89.785306][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.793424][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.807075][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.818734][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.831430][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.856315][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.869227][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.882435][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.912784][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.916014][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.921381][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.938033][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.950449][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.960960][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.972550][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.982213][ T5787] veth0_vlan: entered promiscuous mode [ 90.020258][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.029452][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.047358][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.056221][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.082379][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.093684][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.107683][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.119373][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.136377][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.166631][ T5787] veth1_vlan: entered promiscuous mode [ 90.176929][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.186113][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.196937][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.205807][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.304324][ T5787] veth0_macvtap: entered promiscuous mode [ 90.374940][ T5787] veth1_macvtap: entered promiscuous mode [ 90.456191][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.470630][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.537115][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.551772][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.570645][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.582271][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.596838][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.609258][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.626705][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.628100][ T5879] Zero length message leads to an empty skb [ 90.642292][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.649567][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.662929][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.673044][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.674902][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.691805][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.703210][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.715280][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.727920][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.735366][ T5792] Bluetooth: hci0: command tx timeout [ 90.765154][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.773924][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.782910][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.792150][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.804388][ T50] Bluetooth: hci3: command tx timeout [ 90.811000][ T5792] Bluetooth: hci1: command tx timeout [ 90.821616][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.829971][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.887115][ T5792] Bluetooth: hci2: command tx timeout [ 90.928030][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.936871][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.091118][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.122730][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.209760][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.236042][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.652751][ C1] hrtimer: interrupt took 67522 ns [ 92.117141][ T1186] cfg80211: failed to load regulatory.db [ 92.812049][ T5901] veth1_macvtap: left promiscuous mode [ 92.815111][ T5792] Bluetooth: hci0: command tx timeout [ 92.855088][ T5901] macsec0: entered promiscuous mode [ 92.908224][ T50] Bluetooth: hci3: command tx timeout [ 92.913833][ T5792] Bluetooth: hci1: command tx timeout [ 92.964855][ T5792] Bluetooth: hci2: command tx timeout [ 101.792438][ T5988] syz.2.37 (5988) used greatest stack depth: 20840 bytes left [ 109.783740][ T6006] ------------[ cut here ]------------ [ 109.789379][ T6006] WARNING: CPU: 0 PID: 6006 at kernel/events/core.c:6792 perf_pending_task+0x35c/0x470 [ 109.801176][ T6006] Modules linked in: [ 109.805323][ T6006] CPU: 0 PID: 6006 Comm: syz.0.42 Not tainted 6.6.98-syzkaller #0 [ 109.813189][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.823714][ T6006] RIP: 0010:perf_pending_task+0x35c/0x470 [ 109.829560][ T6006] Code: ff 84 db 75 14 e8 64 e2 d4 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 e2 d4 ff e8 fb d7 4f ff eb e5 e8 44 e2 d4 ff <0f> 0b e9 f3 fe ff ff e8 38 e2 d4 ff 48 c7 c7 50 f0 dc 8c 4c 89 f6 [ 109.849769][ T6006] RSP: 0018:ffffc90004dd7a00 EFLAGS: 00010293 [ 109.855983][ T6006] RAX: ffffffff81b0c42c RBX: ffff88807c9adfd0 RCX: ffff888031e90000 [ 109.864057][ T6006] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 109.872081][ T6006] RBP: 0000000000000001 R08: ffffffff8e4a936f R09: 1ffffffff1c9526d [ 109.880336][ T6006] R10: dffffc0000000000 R11: fffffbfff1c9526e R12: ffff888031e90000 [ 109.888554][ T6006] R13: ffff8880233a8930 R14: ffff88807c9add90 R15: 1ffff1100f935bb2 [ 109.897669][ T6006] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 109.907015][ T6006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.913662][ T6006] CR2: 00007fae9fc19990 CR3: 000000002daa6000 CR4: 00000000003506f0 [ 109.921767][ T6006] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.929859][ T6006] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 109.937961][ T6006] Call Trace: [ 109.941283][ T6006] [ 109.944328][ T6006] task_work_run+0x1ce/0x250 [ 109.948983][ T6006] ? task_work_cancel+0x240/0x240 [ 109.954151][ T6006] do_exit+0x90b/0x23c0 [ 109.958375][ T6006] ? lock_chain_count+0x20/0x20 [ 109.963275][ T6006] ? put_task_struct+0xc0/0xc0 [ 109.968215][ T6006] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.974454][ T6006] ? lockdep_hardirqs_on+0x98/0x150 [ 109.979696][ T6006] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.985957][ T6006] do_group_exit+0x21b/0x2d0 [ 109.990604][ T6006] ? _raw_spin_unlock_irq+0x29/0x50 [ 109.995943][ T6006] get_signal+0x12fc/0x1400 [ 110.001529][ T6006] arch_do_signal_or_restart+0x96/0x780 [ 110.007740][ T6006] ? get_sigframe_size+0x20/0x20 [ 110.012769][ T6006] exit_to_user_mode_loop+0x70/0x110 [ 110.018193][ T6006] exit_to_user_mode_prepare+0xb1/0x140 [ 110.023804][ T6006] syscall_exit_to_user_mode+0x1a/0x50 [ 110.029430][ T6006] do_syscall_64+0x61/0xb0 [ 110.033907][ T6006] ? clear_bhb_loop+0x40/0x90 [ 110.038715][ T6006] ? clear_bhb_loop+0x40/0x90 [ 110.043447][ T6006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.049483][ T6006] RIP: 0033:0x7fae9ed8e929 [ 110.054017][ T6006] Code: Unable to access opcode bytes at 0x7fae9ed8e8ff. [ 110.061088][ T6006] RSP: 002b:00007fae9fc18fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 110.069798][ T6006] RAX: fffffffffffffff4 RBX: 00007fae9efb5fa0 RCX: 00007fae9ed8e929 [ 110.077890][ T6006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000043001000 [ 110.086347][ T6006] RBP: 00007fae9ee10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 110.094415][ T6006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 110.103437][ T6006] R13: 0000000000000000 R14: 00007fae9efb5fa0 R15: 00007ffe92699de8 [ 110.111790][ T6006] [ 110.114929][ T6006] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.122235][ T6006] CPU: 0 PID: 6006 Comm: syz.0.42 Not tainted 6.6.98-syzkaller #0 [ 110.130070][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.140151][ T6006] Call Trace: [ 110.143441][ T6006] [ 110.146385][ T6006] dump_stack_lvl+0x16c/0x230 [ 110.151101][ T6006] ? show_regs_print_info+0x20/0x20 [ 110.156318][ T6006] ? load_image+0x3b0/0x3b0 [ 110.160857][ T6006] panic+0x2c0/0x710 [ 110.164770][ T6006] ? bpf_jit_dump+0xd0/0xd0 [ 110.169302][ T6006] __warn+0x2e0/0x470 [ 110.173310][ T6006] ? perf_pending_task+0x35c/0x470 [ 110.178458][ T6006] ? perf_pending_task+0x35c/0x470 [ 110.183591][ T6006] report_bug+0x2be/0x4f0 [ 110.188038][ T6006] ? perf_pending_task+0x35c/0x470 [ 110.193170][ T6006] ? perf_pending_task+0x35c/0x470 [ 110.198301][ T6006] ? perf_pending_task+0x35e/0x470 [ 110.203437][ T6006] handle_bug+0xcf/0x120 [ 110.207707][ T6006] exc_invalid_op+0x1a/0x50 [ 110.212241][ T6006] asm_exc_invalid_op+0x1a/0x20 [ 110.217115][ T6006] RIP: 0010:perf_pending_task+0x35c/0x470 [ 110.222855][ T6006] Code: ff 84 db 75 14 e8 64 e2 d4 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 e2 d4 ff e8 fb d7 4f ff eb e5 e8 44 e2 d4 ff <0f> 0b e9 f3 fe ff ff e8 38 e2 d4 ff 48 c7 c7 50 f0 dc 8c 4c 89 f6 [ 110.242479][ T6006] RSP: 0018:ffffc90004dd7a00 EFLAGS: 00010293 [ 110.248569][ T6006] RAX: ffffffff81b0c42c RBX: ffff88807c9adfd0 RCX: ffff888031e90000 [ 110.256645][ T6006] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 110.264630][ T6006] RBP: 0000000000000001 R08: ffffffff8e4a936f R09: 1ffffffff1c9526d [ 110.272622][ T6006] R10: dffffc0000000000 R11: fffffbfff1c9526e R12: ffff888031e90000 [ 110.280610][ T6006] R13: ffff8880233a8930 R14: ffff88807c9add90 R15: 1ffff1100f935bb2 [ 110.288610][ T6006] ? perf_pending_task+0x35c/0x470 [ 110.293752][ T6006] task_work_run+0x1ce/0x250 [ 110.298367][ T6006] ? task_work_cancel+0x240/0x240 [ 110.303433][ T6006] do_exit+0x90b/0x23c0 [ 110.307640][ T6006] ? lock_chain_count+0x20/0x20 [ 110.312617][ T6006] ? put_task_struct+0xc0/0xc0 [ 110.317410][ T6006] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.323584][ T6006] ? lockdep_hardirqs_on+0x98/0x150 [ 110.328796][ T6006] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.334984][ T6006] do_group_exit+0x21b/0x2d0 [ 110.339620][ T6006] ? _raw_spin_unlock_irq+0x29/0x50 [ 110.344868][ T6006] get_signal+0x12fc/0x1400 [ 110.349413][ T6006] arch_do_signal_or_restart+0x96/0x780 [ 110.354993][ T6006] ? get_sigframe_size+0x20/0x20 [ 110.359972][ T6006] exit_to_user_mode_loop+0x70/0x110 [ 110.365282][ T6006] exit_to_user_mode_prepare+0xb1/0x140 [ 110.370870][ T6006] syscall_exit_to_user_mode+0x1a/0x50 [ 110.376433][ T6006] do_syscall_64+0x61/0xb0 [ 110.380866][ T6006] ? clear_bhb_loop+0x40/0x90 [ 110.385556][ T6006] ? clear_bhb_loop+0x40/0x90 [ 110.390251][ T6006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.396178][ T6006] RIP: 0033:0x7fae9ed8e929 [ 110.400602][ T6006] Code: Unable to access opcode bytes at 0x7fae9ed8e8ff. [ 110.407828][ T6006] RSP: 002b:00007fae9fc18fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 110.416450][ T6006] RAX: fffffffffffffff4 RBX: 00007fae9efb5fa0 RCX: 00007fae9ed8e929 [ 110.424439][ T6006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000043001000 [ 110.432418][ T6006] RBP: 00007fae9ee10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 110.440405][ T6006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 110.448388][ T6006] R13: 0000000000000000 R14: 00007fae9efb5fa0 R15: 00007ffe92699de8 [ 110.456381][ T6006] [ 110.459786][ T6006] Kernel Offset: disabled [ 110.464155][ T6006] Rebooting in 86400 seconds..