last executing test programs: 9.346742891s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c00000042000000400000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000200), 0x2cc00000, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) 8.596570458s ago: executing program 3 (id=13): socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 5.303502009s ago: executing program 0 (id=33): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x74, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d329", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e71133"], 0xffdd) 2.221068534s ago: executing program 0 (id=45): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000000000)={'xfrm0\x00', @local}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_clone(0xa1dd4dd888ea68b3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) syz_clone(0x1c48c9600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xa1, 0x1, 0x0, 0x80, 0x0, 0x4000000000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x20000004}, 0x8000, 0x0, 0x5fad5952, 0x9, 0x0, 0x7, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.828332934s ago: executing program 1 (id=49): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.805101355s ago: executing program 4 (id=50): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111000000000000731a0300000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x3}, 0x10, 0xffffffffffffffff}, 0x4c) 1.779071434s ago: executing program 2 (id=51): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.444068013s ago: executing program 4 (id=52): r0 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x7, 0x3c, 0xff, 0x0, 0x9, 0x284b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb3, 0x4, @perf_bp={&(0x7f0000000300), 0x8}, 0x1, 0x77f6, 0x6, 0x1, 0x7, 0x2, 0x3, 0x0, 0xa69, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x20000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x10, 0x800, 0xffffffff, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) 1.409844539s ago: executing program 1 (id=53): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000102010100000000000000000a00000006000740000000003c0001802c000180140003"], 0x58}}, 0x0) 1.362599472s ago: executing program 2 (id=54): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0x417, 0x5) 1.229978957s ago: executing program 4 (id=55): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 1.128474186s ago: executing program 1 (id=56): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.128069556s ago: executing program 2 (id=57): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESDEC=r0], 0x8b) 929.151146ms ago: executing program 2 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) 917.226833ms ago: executing program 4 (id=59): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 836.028976ms ago: executing program 0 (id=60): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f757465", @ANYRES8], 0x1ac}}, 0x0) 715.353855ms ago: executing program 1 (id=61): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 550.530657ms ago: executing program 1 (id=62): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000000)="b9e403c629394d5aa000000000003897827792", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 549.946151ms ago: executing program 4 (id=63): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000090000000a"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0xfffffdcb, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) sendmsg$inet(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000cc0)=[{0x0}], 0x1, &(0x7f0000000d00)}, 0x10000800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0x1, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2f, &(0x7f0000000200), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x72}, 0x94) ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 510.650831ms ago: executing program 0 (id=64): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x401}, 0x0, 0xc8, 0x0, 0x1, 0x5, 0x0, 0x770a}, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22110000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2"], 0xfdef) 280.44068ms ago: executing program 2 (id=65): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x7101}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) 279.73203ms ago: executing program 4 (id=66): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xa00, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$unix(r2, 0x0, 0x0) close(r3) 279.279798ms ago: executing program 0 (id=67): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)}, 0x4004881) close(0x3) perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x2, 0x2, 0x8, 0x0, 0x647, 0xb6885, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000300), 0x5}, 0x4000, 0x4, 0x77, 0x1, 0xffff, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x7f}, r1, 0x5, r1, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0xf3d972653af21e81, 0x80, 0x5, 0x4, 0x7, 0x3, 0x0, 0x0, 0x20000, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x12000000000000}, 0x414, 0x4, 0xe8, 0x2, 0x1, 0x7, 0x61f, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x7) close(r0) 99.12191ms ago: executing program 3 (id=68): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_config_ext={0x2e, 0x272}, 0x80, 0x0, 0x0, 0x9, 0x6, 0xd, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000340)=r1}, 0x20) 75.228086ms ago: executing program 0 (id=69): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 435.105µs ago: executing program 1 (id=70): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 0s ago: executing program 2 (id=71): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x800}, 0x1080, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='mm_page_alloc\x00', r1, 0x0, 0x7}, 0xd) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 87.396317][ T5848] cgroup: Unknown subsys name 'net' [ 87.508860][ T5848] cgroup: Unknown subsys name 'cpuset' [ 87.518218][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.360254][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.412446][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.421338][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.429162][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.437647][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.446139][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.499197][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.507264][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.515989][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.524436][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.532320][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.563634][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.574705][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.582278][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.591200][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.599538][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.622424][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.631221][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.640159][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.650705][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.665648][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.674594][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.716055][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.725579][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.736125][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.746625][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.084534][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 94.347168][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.354742][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.362215][ T5863] bridge_slave_0: entered allmulticast mode [ 94.370339][ T5863] bridge_slave_0: entered promiscuous mode [ 94.424372][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.431562][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.454684][ T5863] bridge_slave_1: entered allmulticast mode [ 94.463270][ T5863] bridge_slave_1: entered promiscuous mode [ 94.563903][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.585950][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 94.606664][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.641674][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 94.760586][ T5863] team0: Port device team_slave_0 added [ 94.793591][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 94.821564][ T5863] team0: Port device team_slave_1 added [ 94.968025][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.976796][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.002864][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.060502][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.068134][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.094251][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.175211][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 95.189283][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.197101][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.205100][ T5859] bridge_slave_0: entered allmulticast mode [ 95.213231][ T5859] bridge_slave_0: entered promiscuous mode [ 95.246175][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.253349][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.260745][ T5868] bridge_slave_0: entered allmulticast mode [ 95.269678][ T5868] bridge_slave_0: entered promiscuous mode [ 95.285407][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.292642][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.300255][ T5859] bridge_slave_1: entered allmulticast mode [ 95.308105][ T5859] bridge_slave_1: entered promiscuous mode [ 95.345134][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.352364][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.360200][ T5868] bridge_slave_1: entered allmulticast mode [ 95.368545][ T5868] bridge_slave_1: entered promiscuous mode [ 95.416608][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.423802][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.431454][ T5867] bridge_slave_0: entered allmulticast mode [ 95.439410][ T5867] bridge_slave_0: entered promiscuous mode [ 95.497501][ T5863] hsr_slave_0: entered promiscuous mode [ 95.505069][ T51] Bluetooth: hci0: command tx timeout [ 95.509800][ T5863] hsr_slave_1: entered promiscuous mode [ 95.517458][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.525486][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.532671][ T5867] bridge_slave_1: entered allmulticast mode [ 95.540357][ T5867] bridge_slave_1: entered promiscuous mode [ 95.571218][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.583350][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.599685][ T51] Bluetooth: hci1: command tx timeout [ 95.620952][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.650312][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.664966][ T51] Bluetooth: hci4: command tx timeout [ 95.731728][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.745888][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.780439][ T5868] team0: Port device team_slave_0 added [ 95.789702][ T5868] team0: Port device team_slave_1 added [ 95.824368][ T5874] Bluetooth: hci3: command tx timeout [ 95.830255][ T51] Bluetooth: hci2: command tx timeout [ 95.909707][ T5859] team0: Port device team_slave_0 added [ 95.918247][ T5867] team0: Port device team_slave_0 added [ 95.925947][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.933184][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.941604][ T5869] bridge_slave_0: entered allmulticast mode [ 95.949283][ T5869] bridge_slave_0: entered promiscuous mode [ 95.982520][ T5859] team0: Port device team_slave_1 added [ 95.990464][ T5867] team0: Port device team_slave_1 added [ 96.012170][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.019851][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.027293][ T5869] bridge_slave_1: entered allmulticast mode [ 96.035251][ T5869] bridge_slave_1: entered promiscuous mode [ 96.065148][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.072149][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.098386][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.179979][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.187248][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.213575][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.232578][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.239982][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.266659][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.288438][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.295931][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.321938][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.337437][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.379142][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.386725][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.412829][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.425627][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.432620][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.459295][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.480535][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.621433][ T5868] hsr_slave_0: entered promiscuous mode [ 96.628830][ T5868] hsr_slave_1: entered promiscuous mode [ 96.635512][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 96.641376][ T5868] Cannot create hsr debugfs directory [ 96.677279][ T5869] team0: Port device team_slave_0 added [ 96.690508][ T5859] hsr_slave_0: entered promiscuous mode [ 96.697230][ T5859] hsr_slave_1: entered promiscuous mode [ 96.703425][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 96.709615][ T5859] Cannot create hsr debugfs directory [ 96.737049][ T5869] team0: Port device team_slave_1 added [ 96.751251][ T5867] hsr_slave_0: entered promiscuous mode [ 96.757985][ T5867] hsr_slave_1: entered promiscuous mode [ 96.767516][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 96.773317][ T5867] Cannot create hsr debugfs directory [ 96.884632][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.891671][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.918230][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.933546][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.940714][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.967259][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.192515][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.243498][ T5869] hsr_slave_0: entered promiscuous mode [ 97.250189][ T5869] hsr_slave_1: entered promiscuous mode [ 97.257721][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 97.263501][ T5869] Cannot create hsr debugfs directory [ 97.277462][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.329224][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.352888][ T9] cfg80211: failed to load regulatory.db [ 97.397558][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.584541][ T51] Bluetooth: hci0: command tx timeout [ 97.656404][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.666182][ T51] Bluetooth: hci1: command tx timeout [ 97.692108][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.721537][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.744352][ T51] Bluetooth: hci4: command tx timeout [ 97.752696][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.836792][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.852383][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.863937][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.902950][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.909933][ T51] Bluetooth: hci2: command tx timeout [ 97.909988][ T51] Bluetooth: hci3: command tx timeout [ 97.958550][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.042082][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.057345][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.069251][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.082084][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.097381][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.104686][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.151138][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.169041][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.176274][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.274194][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.286534][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.298422][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.310994][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.486282][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.588490][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.619247][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.670282][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.695633][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.702858][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.722641][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.756060][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.763272][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.779879][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.787231][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.817668][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.824890][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.867760][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.916726][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.923984][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.947570][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.990075][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.997312][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.015514][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.109147][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.142921][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.150193][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.194007][ T5867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.210474][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.250455][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.257757][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.435189][ T5863] veth0_vlan: entered promiscuous mode [ 99.540478][ T5863] veth1_vlan: entered promiscuous mode [ 99.637844][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.666780][ T5874] Bluetooth: hci0: command tx timeout [ 99.715737][ T5863] veth0_macvtap: entered promiscuous mode [ 99.744679][ T5874] Bluetooth: hci1: command tx timeout [ 99.790737][ T5863] veth1_macvtap: entered promiscuous mode [ 99.827720][ T5874] Bluetooth: hci4: command tx timeout [ 99.886381][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.919550][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.938368][ T5868] veth0_vlan: entered promiscuous mode [ 99.981464][ T1156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.985166][ T5874] Bluetooth: hci3: command tx timeout [ 99.996392][ T5874] Bluetooth: hci2: command tx timeout [ 100.007315][ T1156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.047448][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.061211][ T1156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.085021][ T5868] veth1_vlan: entered promiscuous mode [ 100.093167][ T1156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.109875][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.296723][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.311038][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.322846][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.329927][ T5868] veth0_macvtap: entered promiscuous mode [ 100.383463][ T5868] veth1_macvtap: entered promiscuous mode [ 100.433385][ T5859] veth0_vlan: entered promiscuous mode [ 100.531529][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.565272][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.573964][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.593234][ T5859] veth1_vlan: entered promiscuous mode [ 100.621461][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.686057][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.689883][ T5958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.714467][ T1156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.736857][ T1156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.746009][ T1156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.820896][ T5869] veth0_vlan: entered promiscuous mode [ 100.856248][ T5869] veth1_vlan: entered promiscuous mode [ 100.916546][ T5859] veth0_macvtap: entered promiscuous mode [ 100.958325][ T5867] veth0_vlan: entered promiscuous mode [ 101.002079][ T5859] veth1_macvtap: entered promiscuous mode [ 101.119813][ T5867] veth1_vlan: entered promiscuous mode [ 101.149435][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.155593][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.180308][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.202268][ T5869] veth0_macvtap: entered promiscuous mode [ 101.249164][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.263242][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 101.284807][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 101.307099][ T5869] veth1_macvtap: entered promiscuous mode [ 101.374065][ T5867] veth0_macvtap: entered promiscuous mode [ 101.383712][ T5958] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.402914][ T5958] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.416020][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.433478][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.459530][ T5867] veth1_macvtap: entered promiscuous mode [ 101.476803][ T5958] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.486678][ T5958] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.518622][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.549922][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.634304][ T1156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.652162][ T1156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.681193][ T1156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.713696][ T1156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.747168][ T51] Bluetooth: hci0: command tx timeout [ 101.770893][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.824313][ T51] Bluetooth: hci1: command tx timeout [ 101.876767][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.893366][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.904613][ T51] Bluetooth: hci4: command tx timeout [ 101.956801][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.074256][ T51] Bluetooth: hci2: command tx timeout [ 102.080561][ T51] Bluetooth: hci3: command tx timeout [ 102.183728][ T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.203770][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.232535][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.277274][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.355181][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.380011][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.490434][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.508001][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.651968][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.671096][ C0] hrtimer: interrupt took 75481 ns [ 102.673882][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.965302][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.973198][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.534047][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.583684][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.849026][ T6011] netlink: 464 bytes leftover after parsing attributes in process `syz.0.1'. [ 104.590833][ T6031] netlink: 232 bytes leftover after parsing attributes in process `syz.0.22'. [ 104.604698][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23'. [ 104.633488][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'. [ 106.050847][ T6055] syzkaller0: entered promiscuous mode [ 106.066492][ T6055] syzkaller0: entered allmulticast mode [ 108.691483][ T6073] bridge0: port 3(bond0) entered blocking state [ 108.698480][ T6073] bridge0: port 3(bond0) entered disabled state [ 108.713584][ T6073] bond0: entered allmulticast mode [ 108.722146][ T6073] bond_slave_0: entered allmulticast mode [ 108.732407][ T6073] bond_slave_1: entered allmulticast mode [ 108.755919][ T6073] bond0: entered promiscuous mode [ 108.761027][ T6073] bond_slave_0: entered promiscuous mode [ 108.801860][ T6073] bond_slave_1: entered promiscuous mode [ 108.821703][ T6073] bridge0: port 3(bond0) entered blocking state [ 108.828364][ T6073] bridge0: port 3(bond0) entered forwarding state [ 108.910926][ T6080] warning: `syz.1.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.832582][ T5996] Set syz1 is full, maxelem 65536 reached [ 111.111508][ T6138] ------------[ cut here ]------------ [ 111.117098][ T6138] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0) [ 111.137508][ T6138] WARNING: CPU: 0 PID: 6138 at kernel/bpf/verifier.c:2733 reg_bounds_sanity_check+0x6e6/0xc20 [ 111.148367][ T6138] Modules linked in: [ 111.152966][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.0.69 Not tainted syzkaller #0 PREEMPT(full) [ 111.162853][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.173749][ T6138] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 111.180623][ T6138] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 111.200408][ T6138] RSP: 0018:ffffc9000ab46f08 EFLAGS: 00010282 [ 111.206600][ T6138] RAX: 4836ba9422c4b200 RBX: 0000000000000000 RCX: 0000000000080000 [ 111.214831][ T6138] RDX: ffffc9000bb49000 RSI: 0000000000006a28 RDI: 0000000000006a29 [ 111.222862][ T6138] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 111.232175][ T6138] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888024cf0348 [ 111.241045][ T6138] R13: ffff888024cf0368 R14: ffff888024cf0380 R15: 0000000000000000 [ 111.249226][ T6138] FS: 00007f64360396c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 111.258317][ T6138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.265077][ T6138] CR2: 0000200000001480 CR3: 0000000031b3a000 CR4: 00000000003526f0 [ 111.273123][ T6138] Call Trace: [ 111.276532][ T6138] [ 111.279599][ T6138] reg_set_min_max+0x264/0x300 [ 111.284495][ T6138] check_cond_jmp_op+0x159b/0x2910 [ 111.289741][ T6138] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 111.295335][ T6138] ? push_jmp_history+0x1dd/0x6f0 [ 111.300471][ T6138] do_check+0x6751/0xe520 [ 111.305049][ T6138] ? __kasan_kmalloc+0x93/0xb0 [ 111.309901][ T6138] ? do_check_common+0x209/0x24f0 [ 111.315291][ T6138] ? __pfx_do_check+0x10/0x10 [ 111.320050][ T6138] ? init_func_state+0x1ddf/0x2d20 [ 111.325316][ T6138] do_check_common+0x1949/0x24f0 [ 111.330382][ T6138] bpf_check+0x1746a/0x1d2e0 [ 111.335064][ T6138] ? is_bpf_text_address+0x26/0x2b0 [ 111.341250][ T6138] ? kernel_text_address+0xa5/0xe0 [ 111.347218][ T6138] ? __kernel_text_address+0xd/0x40 [ 111.352543][ T6138] ? __lock_acquire+0xab9/0xd20 [ 111.357576][ T6138] ? __mutex_trylock_common+0x153/0x260 [ 111.363201][ T6138] ? __pfx___mutex_trylock_common+0x10/0x10 [ 111.369266][ T6138] ? css_rstat_updated+0x23a/0x4f0 [ 111.374522][ T6138] ? __lock_acquire+0xab9/0xd20 [ 111.379566][ T6138] ? __pfx_bpf_check+0x10/0x10 [ 111.384482][ T6138] ? ktime_get_with_offset+0x8c/0x2a0 [ 111.389934][ T6138] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 111.396303][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.401563][ T6138] ? ktime_get_with_offset+0x8c/0x2a0 [ 111.407043][ T6138] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 111.413341][ T6138] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 111.420128][ T6138] ? __asan_memset+0x22/0x50 [ 111.445267][ T6138] ? bpf_obj_name_cpy+0x194/0x1e0 [ 111.450450][ T6138] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 111.457179][ T6138] ? security_bpf_prog_load+0x7f/0x310 [ 111.462725][ T6138] bpf_prog_load+0x1318/0x1930 [ 111.468444][ T6138] ? __pfx_bpf_prog_load+0x10/0x10 [ 111.473746][ T6138] ? bpf_lsm_bpf+0x9/0x20 [ 111.478220][ T6138] ? security_bpf+0x7e/0x300 [ 111.482896][ T6138] __sys_bpf+0x528/0x870 [ 111.487247][ T6138] ? __pfx___sys_bpf+0x10/0x10 [ 111.492132][ T6138] ? rcu_is_watching+0x15/0xb0 [ 111.497052][ T6138] __x64_sys_bpf+0x7c/0x90 [ 111.501544][ T6138] do_syscall_64+0xfa/0x3b0 [ 111.506266][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.511523][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.517686][ T6138] ? clear_bhb_loop+0x60/0xb0 [ 111.522433][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.528436][ T6138] RIP: 0033:0x7f643518ebe9 [ 111.532908][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.553384][ T6138] RSP: 002b:00007f6436039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.562687][ T6138] RAX: ffffffffffffffda RBX: 00007f64353c5fa0 RCX: 00007f643518ebe9 [ 111.570790][ T6138] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 111.578853][ T6138] RBP: 00007f6435211e19 R08: 0000000000000000 R09: 0000000000000000 [ 111.587069][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.595170][ T6138] R13: 00007f64353c6038 R14: 00007f64353c5fa0 R15: 00007fffe1d95fb8 [ 111.603263][ T6138] [ 111.606381][ T6138] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.613701][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.0.69 Not tainted syzkaller #0 PREEMPT(full) [ 111.622853][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.632929][ T6138] Call Trace: [ 111.636237][ T6138] [ 111.639181][ T6138] dump_stack_lvl+0x99/0x250 [ 111.643796][ T6138] ? __asan_memcpy+0x40/0x70 [ 111.648410][ T6138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.653638][ T6138] ? __pfx__printk+0x10/0x10 [ 111.658272][ T6138] vpanic+0x281/0x750 [ 111.662285][ T6138] ? __pfx__printk+0x10/0x10 [ 111.666894][ T6138] ? __pfx_vpanic+0x10/0x10 [ 111.671415][ T6138] ? is_bpf_text_address+0x26/0x2b0 [ 111.676655][ T6138] panic+0xb9/0xc0 [ 111.680427][ T6138] ? __pfx_panic+0x10/0x10 [ 111.684877][ T6138] __warn+0x31b/0x4b0 [ 111.688879][ T6138] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 111.694539][ T6138] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 111.700192][ T6138] report_bug+0x2be/0x4f0 [ 111.704539][ T6138] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 111.710216][ T6138] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 111.715879][ T6138] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 111.721539][ T6138] handle_bug+0x84/0x160 [ 111.725795][ T6138] exc_invalid_op+0x1a/0x50 [ 111.730310][ T6138] asm_exc_invalid_op+0x1a/0x20 [ 111.735188][ T6138] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 111.741458][ T6138] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 111.761086][ T6138] RSP: 0018:ffffc9000ab46f08 EFLAGS: 00010282 [ 111.767182][ T6138] RAX: 4836ba9422c4b200 RBX: 0000000000000000 RCX: 0000000000080000 [ 111.775168][ T6138] RDX: ffffc9000bb49000 RSI: 0000000000006a28 RDI: 0000000000006a29 [ 111.783148][ T6138] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 111.791134][ T6138] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888024cf0348 [ 111.799125][ T6138] R13: ffff888024cf0368 R14: ffff888024cf0380 R15: 0000000000000000 [ 111.807162][ T6138] reg_set_min_max+0x264/0x300 [ 111.811987][ T6138] check_cond_jmp_op+0x159b/0x2910 [ 111.817151][ T6138] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 111.822645][ T6138] ? push_jmp_history+0x1dd/0x6f0 [ 111.827706][ T6138] do_check+0x6751/0xe520 [ 111.832080][ T6138] ? __kasan_kmalloc+0x93/0xb0 [ 111.836910][ T6138] ? do_check_common+0x209/0x24f0 [ 111.842005][ T6138] ? __pfx_do_check+0x10/0x10 [ 111.846703][ T6138] ? init_func_state+0x1ddf/0x2d20 [ 111.851851][ T6138] do_check_common+0x1949/0x24f0 [ 111.856828][ T6138] bpf_check+0x1746a/0x1d2e0 [ 111.861436][ T6138] ? is_bpf_text_address+0x26/0x2b0 [ 111.866676][ T6138] ? kernel_text_address+0xa5/0xe0 [ 111.871824][ T6138] ? __kernel_text_address+0xd/0x40 [ 111.877071][ T6138] ? __lock_acquire+0xab9/0xd20 [ 111.881957][ T6138] ? __mutex_trylock_common+0x153/0x260 [ 111.887524][ T6138] ? __pfx___mutex_trylock_common+0x10/0x10 [ 111.893446][ T6138] ? css_rstat_updated+0x23a/0x4f0 [ 111.898584][ T6138] ? __lock_acquire+0xab9/0xd20 [ 111.903472][ T6138] ? __pfx_bpf_check+0x10/0x10 [ 111.908265][ T6138] ? ktime_get_with_offset+0x8c/0x2a0 [ 111.913692][ T6138] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 111.919993][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.925240][ T6138] ? ktime_get_with_offset+0x8c/0x2a0 [ 111.930647][ T6138] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 111.936911][ T6138] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 111.943561][ T6138] ? __asan_memset+0x22/0x50 [ 111.948177][ T6138] ? bpf_obj_name_cpy+0x194/0x1e0 [ 111.953242][ T6138] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 111.958470][ T6138] ? security_bpf_prog_load+0x7f/0x310 [ 111.963961][ T6138] bpf_prog_load+0x1318/0x1930 [ 111.968775][ T6138] ? __pfx_bpf_prog_load+0x10/0x10 [ 111.973934][ T6138] ? bpf_lsm_bpf+0x9/0x20 [ 111.978288][ T6138] ? security_bpf+0x7e/0x300 [ 111.982909][ T6138] __sys_bpf+0x528/0x870 [ 111.987176][ T6138] ? __pfx___sys_bpf+0x10/0x10 [ 111.992010][ T6138] ? rcu_is_watching+0x15/0xb0 [ 111.996799][ T6138] __x64_sys_bpf+0x7c/0x90 [ 112.001231][ T6138] do_syscall_64+0xfa/0x3b0 [ 112.005754][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.010974][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.017053][ T6138] ? clear_bhb_loop+0x60/0xb0 [ 112.021746][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.027675][ T6138] RIP: 0033:0x7f643518ebe9 [ 112.032117][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.051747][ T6138] RSP: 002b:00007f6436039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.060194][ T6138] RAX: ffffffffffffffda RBX: 00007f64353c5fa0 RCX: 00007f643518ebe9 [ 112.068197][ T6138] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 112.076201][ T6138] RBP: 00007f6435211e19 R08: 0000000000000000 R09: 0000000000000000 [ 112.084197][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.092183][ T6138] R13: 00007f64353c6038 R14: 00007f64353c5fa0 R15: 00007fffe1d95fb8 [ 112.100191][ T6138] [ 112.103573][ T6138] Kernel Offset: disabled [ 112.107937][ T6138] Rebooting in 86400 seconds..