last executing test programs: 16.307051516s ago: executing program 0 (id=1533): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone(0x10ef20e100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 11.123951298s ago: executing program 0 (id=1554): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x86dd, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.064509059s ago: executing program 3 (id=1555): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000000c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000400)=""/94}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000001700), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10.793497626s ago: executing program 3 (id=1556): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x0, 0x46}, 0x28) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x28, 0x1, 0x5, 0xfffff038}, {0x6, 0x0, 0x0, 0xfffffffc}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, 0x0, 0x0) getpid() sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)='l', 0x1}], 0x1, &(0x7f0000000240), 0x0, 0x10}, 0x4ccd4) 8.727747134s ago: executing program 0 (id=1558): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6971100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 8.645324636s ago: executing program 3 (id=1560): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x80000000, 0x8}, 0x0, 0x2, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(0x3) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) close(0x3) 8.459791041s ago: executing program 3 (id=1563): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone(0x10ef20e100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 8.45847974s ago: executing program 0 (id=1571): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x6b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_clone(0xc10a4400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 4.549195943s ago: executing program 2 (id=1575): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x24) r1 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 4.260974819s ago: executing program 0 (id=1578): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073"], 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="200000000988"}) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x1}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000280)="6b81ad", 0x3}], 0x2}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.901231398s ago: executing program 3 (id=1579): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x86dd, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.535894257s ago: executing program 2 (id=1581): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) 3.239797164s ago: executing program 2 (id=1582): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x80000000, 0x8}, 0x0, 0x2, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(0x3) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) close(0x3) 2.641515847s ago: executing program 1 (id=1584): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x1, 0x7, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x28}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.403437703s ago: executing program 1 (id=1585): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x104f64, 0xc77, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd, 0x8000000000000000}, 0x0, 0x5, 0xfffffffb, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000000800000000, 0x4}, 0x10000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f0000000080), 0x4) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffe1c}, 0x40000140) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000095ce58d730867720f36900000000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1a5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f3757f0086dd6317ce800000000000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="971d03b20f08a36a00000000", @ANYRES32, @ANYBLOB="0000008f748df6bfeaf0c7000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) write$cgroup_freezer_state(r0, 0x0, 0x0) 713.438293ms ago: executing program 3 (id=1586): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) 664.078694ms ago: executing program 2 (id=1587): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 663.700794ms ago: executing program 1 (id=1588): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000c00000004", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000300000200"/25], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780), 0x0, 0xdd, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = perf_event_open$cgroup(&(0x7f00000008c0)={0x4, 0x80, 0x2, 0x9, 0xa, 0x6, 0x0, 0x9, 0x4000, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x9}, 0x100, 0x5, 0x200, 0x4, 0x3, 0x88, 0x0, 0x0, 0xe3a5, 0x0, 0x8}, 0xffffffffffffffff, 0xf, r0, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200828500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8a40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18, 0xcc, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80080000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa85}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x6, 0xfe, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305828, &(0x7f0000000040)=0x20000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) 662.938744ms ago: executing program 0 (id=1589): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext, 0x100540, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfe6d, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0xa, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8920, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 508.717268ms ago: executing program 1 (id=1590): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r4) 219.206804ms ago: executing program 2 (id=1591): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000300)=@raw=[@alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 195.362065ms ago: executing program 1 (id=1592): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x2}, 0x100540, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x9a15, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x12) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x11) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.10794ms ago: executing program 2 (id=1593): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0xd, 0xe, 0x1, 0xc, 0x0, 0x4, 0x92208, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x45ad}, 0x201, 0x0, 0x9, 0x7, 0x10, 0x474f9910, 0x7ff, 0x0, 0x2, 0x0, 0xf51}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xf7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)="434781", &(0x7f0000000280), 0xca, r1}, 0x38) 0s ago: executing program 1 (id=1594): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x86dd, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 73.553718][ T5760] cgroup: Unknown subsys name 'net' [ 73.664805][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.022262][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.459878][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.462391][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.468579][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.482705][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.483566][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.498644][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.498741][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.507207][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.516878][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.522205][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.528109][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.534547][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.542381][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.551074][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.563419][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.588302][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.608203][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.621068][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.628559][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.642623][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.652041][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.669912][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.679404][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.686868][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.006123][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 77.150014][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 77.175237][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 77.192733][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 77.255093][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.262983][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.270987][ T5771] bridge_slave_0: entered allmulticast mode [ 77.277928][ T5771] bridge_slave_0: entered promiscuous mode [ 77.309848][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.316972][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.324502][ T5771] bridge_slave_1: entered allmulticast mode [ 77.331301][ T5771] bridge_slave_1: entered promiscuous mode [ 77.395915][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.408058][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.455656][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.462902][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.471088][ T5776] bridge_slave_0: entered allmulticast mode [ 77.478038][ T5776] bridge_slave_0: entered promiscuous mode [ 77.521802][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.529065][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.536220][ T5776] bridge_slave_1: entered allmulticast mode [ 77.543917][ T5776] bridge_slave_1: entered promiscuous mode [ 77.551420][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.559056][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.566329][ T5770] bridge_slave_0: entered allmulticast mode [ 77.576257][ T5770] bridge_slave_0: entered promiscuous mode [ 77.586436][ T5771] team0: Port device team_slave_0 added [ 77.593687][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.600901][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.608403][ T5772] bridge_slave_0: entered allmulticast mode [ 77.615070][ T5772] bridge_slave_0: entered promiscuous mode [ 77.632279][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.639618][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.646784][ T5770] bridge_slave_1: entered allmulticast mode [ 77.656390][ T5770] bridge_slave_1: entered promiscuous mode [ 77.664351][ T5771] team0: Port device team_slave_1 added [ 77.680507][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.687824][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.695102][ T5772] bridge_slave_1: entered allmulticast mode [ 77.703003][ T5772] bridge_slave_1: entered promiscuous mode [ 77.736365][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.777382][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.789150][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.802609][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.812748][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.822416][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.848877][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.862663][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.894868][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.904687][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.914192][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.940439][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.989162][ T5776] team0: Port device team_slave_0 added [ 78.004372][ T5776] team0: Port device team_slave_1 added [ 78.013365][ T5770] team0: Port device team_slave_0 added [ 78.022387][ T5770] team0: Port device team_slave_1 added [ 78.031037][ T5772] team0: Port device team_slave_0 added [ 78.058175][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.065146][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.091706][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.122702][ T5772] team0: Port device team_slave_1 added [ 78.149119][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.156088][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.187120][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.234390][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.241740][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.268376][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.281947][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.289228][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.315379][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.339061][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.346011][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.374513][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.395033][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.402113][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.430702][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.446488][ T5770] hsr_slave_0: entered promiscuous mode [ 78.453834][ T5770] hsr_slave_1: entered promiscuous mode [ 78.473718][ T5771] hsr_slave_0: entered promiscuous mode [ 78.480179][ T5771] hsr_slave_1: entered promiscuous mode [ 78.486216][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.494607][ T5771] Cannot create hsr debugfs directory [ 78.579580][ T5776] hsr_slave_0: entered promiscuous mode [ 78.586050][ T5776] hsr_slave_1: entered promiscuous mode [ 78.592243][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.601343][ T5776] Cannot create hsr debugfs directory [ 78.625655][ T5772] hsr_slave_0: entered promiscuous mode [ 78.632068][ T5772] hsr_slave_1: entered promiscuous mode [ 78.638473][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.646034][ T5772] Cannot create hsr debugfs directory [ 78.658527][ T5778] Bluetooth: hci1: command tx timeout [ 78.664339][ T5774] Bluetooth: hci0: command tx timeout [ 78.742041][ T5778] Bluetooth: hci2: command tx timeout [ 78.748196][ T5774] Bluetooth: hci3: command tx timeout [ 79.011720][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.026813][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.041286][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.055949][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.144523][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.162137][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.185093][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.195141][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.249443][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.280130][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.308989][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.319505][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.374135][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.385105][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.402492][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.419159][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.472851][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.530839][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.567684][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.575046][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.615683][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.630510][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.637709][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.689343][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.714517][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.741556][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.748860][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.788539][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.803308][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.812489][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.819655][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.863963][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.871999][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.946403][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.955570][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.962821][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.007003][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.014207][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.054181][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.061378][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.146317][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.227510][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.326813][ T5770] veth0_vlan: entered promiscuous mode [ 80.371140][ T5770] veth1_vlan: entered promiscuous mode [ 80.454425][ T5770] veth0_macvtap: entered promiscuous mode [ 80.483707][ T5770] veth1_macvtap: entered promiscuous mode [ 80.514777][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.545008][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.575745][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.615154][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.625144][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.636036][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.645079][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.670210][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.738091][ T5778] Bluetooth: hci0: command tx timeout [ 80.738753][ T5774] Bluetooth: hci1: command tx timeout [ 80.791709][ T5771] veth0_vlan: entered promiscuous mode [ 80.813677][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.829280][ T5774] Bluetooth: hci2: command tx timeout [ 80.829295][ T5778] Bluetooth: hci3: command tx timeout [ 80.869387][ T5776] veth0_vlan: entered promiscuous mode [ 80.882180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.882439][ T5776] veth1_vlan: entered promiscuous mode [ 80.912786][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.934429][ T5771] veth1_vlan: entered promiscuous mode [ 80.996887][ T5776] veth0_macvtap: entered promiscuous mode [ 81.010386][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.020965][ T5776] veth1_macvtap: entered promiscuous mode [ 81.032874][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.055232][ T5772] veth0_vlan: entered promiscuous mode [ 81.101872][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.114112][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.127503][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.139453][ T5771] veth0_macvtap: entered promiscuous mode [ 81.162199][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.177099][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.191737][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.207466][ T5772] veth1_vlan: entered promiscuous mode [ 81.236720][ T5771] veth1_macvtap: entered promiscuous mode [ 81.281042][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.291292][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.306232][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.315220][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.348948][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.360245][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.374928][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.388415][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.400642][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.459332][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.475385][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.485855][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.497181][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.516208][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.526276][ C1] hrtimer: interrupt took 55986 ns [ 81.534903][ T5772] veth0_macvtap: entered promiscuous mode [ 81.564880][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.583773][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.592745][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.603203][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.623448][ T5772] veth1_macvtap: entered promiscuous mode [ 81.634217][ T5836] bridge0: port 3(veth0_to_bond) entered blocking state [ 81.645870][ T5836] bridge0: port 3(veth0_to_bond) entered disabled state [ 81.675041][ T5836] veth0_to_bond: entered allmulticast mode [ 81.713924][ T5836] veth0_to_bond: entered promiscuous mode [ 81.773352][ T5836] bridge0: port 3(veth0_to_bond) entered blocking state [ 81.780917][ T5836] bridge0: port 3(veth0_to_bond) entered forwarding state [ 81.890823][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.911362][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.930896][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.947344][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.964260][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.975166][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.990771][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.002878][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.026128][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.080662][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.098777][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.110354][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.122179][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.133114][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.144029][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.160740][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.172876][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.195670][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.200620][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.221542][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.235040][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.244004][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.357089][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.370953][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.466532][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.492839][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.570058][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.612607][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.786662][ T5847] veth0_vlan: entered allmulticast mode [ 82.820331][ T5778] Bluetooth: hci0: command tx timeout [ 82.822638][ T5774] Bluetooth: hci1: command tx timeout [ 82.898078][ T5774] Bluetooth: hci2: command tx timeout [ 82.966570][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.983244][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.006628][ T5853] veth0_vlan: left promiscuous mode [ 83.083947][ T5853] veth0_vlan: entered promiscuous mode [ 84.657914][ T5774] Bluetooth: hci3: command tx timeout [ 84.688177][ T5882] bridge0: port 3(veth0_to_bond) entered blocking state [ 84.718050][ T5882] bridge0: port 3(veth0_to_bond) entered disabled state [ 84.758017][ T5882] veth0_to_bond: entered allmulticast mode [ 84.900709][ T5774] Bluetooth: hci0: command tx timeout [ 84.977742][ T5774] Bluetooth: hci2: command tx timeout [ 85.250567][ T5882] veth0_to_bond: entered promiscuous mode [ 85.348098][ T5882] bridge0: port 3(veth0_to_bond) entered blocking state [ 85.356262][ T5882] bridge0: port 3(veth0_to_bond) entered forwarding state [ 87.027853][ T5902] veth0_vlan: entered allmulticast mode [ 87.118015][ T5904] veth0_vlan: left promiscuous mode [ 87.143517][ T5904] veth0_vlan: entered promiscuous mode [ 87.406902][ T5913] syzkaller0: entered promiscuous mode [ 87.418387][ T5913] syzkaller0: entered allmulticast mode [ 91.104247][ T5974] bridge0: port 3(veth0_to_bond) entered blocking state [ 91.158950][ T5974] bridge0: port 3(veth0_to_bond) entered disabled state [ 91.172532][ T5974] veth0_to_bond: entered allmulticast mode [ 91.291040][ T5974] veth0_to_bond: entered promiscuous mode [ 91.327140][ T5974] bridge0: port 3(veth0_to_bond) entered blocking state [ 91.335956][ T5974] bridge0: port 3(veth0_to_bond) entered forwarding state [ 92.115765][ T5991] veth0_vlan: entered allmulticast mode [ 92.279067][ T23] cfg80211: failed to load regulatory.db [ 94.723377][ T6055] veth0_vlan: left promiscuous mode [ 94.775274][ T6055] veth0_vlan: entered promiscuous mode [ 96.792434][ T6098] veth0_vlan: entered allmulticast mode [ 97.173236][ T6102] veth0_vlan: left promiscuous mode [ 97.211789][ T6102] veth0_vlan: entered promiscuous mode [ 98.245606][ T6138] veth0_vlan: left promiscuous mode [ 98.286171][ T6138] veth0_vlan: entered promiscuous mode [ 99.598775][ T6182] sit0: entered allmulticast mode [ 99.887557][ T6176] veth0_vlan: left promiscuous mode [ 99.928523][ T6176] veth0_vlan: entered promiscuous mode [ 102.505058][ T6229] veth0_vlan: left promiscuous mode [ 102.597572][ T6229] veth0_vlan: entered promiscuous mode [ 103.871436][ T6245] veth0_vlan: left promiscuous mode [ 103.917252][ T6245] veth0_vlan: entered promiscuous mode [ 103.972347][ T6246] tap0: tun_chr_ioctl cmd 1074025692 [ 105.034246][ T6268] veth0_vlan: left promiscuous mode [ 105.113214][ T6268] veth0_vlan: entered promiscuous mode [ 105.389652][ T6281] syzkaller0: entered promiscuous mode [ 105.402763][ T6281] syzkaller0: entered allmulticast mode [ 107.242647][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.251255][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.266097][ T6296] bridge0: entered allmulticast mode [ 107.450316][ T6304] bridge_slave_1: left allmulticast mode [ 107.456010][ T6304] bridge_slave_1: left promiscuous mode [ 107.468169][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.496066][ T6304] bridge_slave_0: left allmulticast mode [ 107.506646][ T6304] bridge_slave_0: left promiscuous mode [ 107.515671][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.205728][ T6322] veth0_vlan: left promiscuous mode [ 108.250083][ T6322] veth0_vlan: entered promiscuous mode [ 109.747709][ T6356] veth0_vlan: left promiscuous mode [ 109.799557][ T6356] veth0_vlan: entered promiscuous mode [ 112.931738][ T6394] veth0_vlan: left promiscuous mode [ 113.052256][ T6394] veth0_vlan: entered promiscuous mode [ 113.500641][ T6407] ipvlan1: entered promiscuous mode [ 113.506649][ T6407] ipvlan1: entered allmulticast mode [ 114.487523][ T5774] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 115.794498][ T6441] veth0_vlan: left promiscuous mode [ 115.879685][ T6441] veth0_vlan: entered promiscuous mode [ 116.145798][ T6451] tap0: tun_chr_ioctl cmd 1074025675 [ 116.151986][ T6451] tap0: persist enabled [ 116.162366][ T6447] tap0: tun_chr_ioctl cmd 1074025675 [ 116.187812][ T6447] tap0: persist disabled [ 116.204910][ T6447] tap0: tun_chr_ioctl cmd 2147767521 [ 116.475878][ T5774] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 116.945471][ T6472] veth0_vlan: left promiscuous mode [ 117.040027][ T6472] veth0_vlan: entered promiscuous mode [ 118.499894][ T5774] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 118.508906][ T5774] Bluetooth: hci1: Injecting HCI hardware error event [ 118.517778][ T5778] Bluetooth: hci1: hardware error 0x00 [ 119.126688][ T6505] veth0_vlan: left promiscuous mode [ 119.186992][ T6505] veth0_vlan: entered promiscuous mode [ 119.877860][ T5774] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 120.267941][ T5774] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 120.407239][ T6543] veth0_vlan: left promiscuous mode [ 120.459818][ T6543] veth0_vlan: entered promiscuous mode [ 120.521377][ T5774] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 120.530678][ T5774] Bluetooth: hci0: Injecting HCI hardware error event [ 120.538797][ T5781] Bluetooth: hci0: hardware error 0x00 [ 120.659152][ T5778] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 121.039243][ T6554] syzkaller0: entered promiscuous mode [ 121.044757][ T6554] syzkaller0: entered allmulticast mode [ 122.661339][ T5781] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 123.464023][ T6590] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 126.276843][ T6648] syzkaller0: entered promiscuous mode [ 126.291894][ T6648] syzkaller0: entered allmulticast mode [ 130.409843][ T6746] syzkaller1: tun_chr_ioctl cmd 1074025688 [ 130.431580][ T6746] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 130.767036][ T6761] Driver unsupported XDP return value 0 on prog (id 164) dev N/A, expect packet loss! [ 131.357420][ T6787] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 131.365939][ T6787] syzkaller1: tun_chr_ioctl cmd 1074025688 [ 133.221648][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.230791][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.677398][ T6897] syzkaller0: create flow: hash 2900851521 index 2 [ 134.738637][ T3463] syzkaller0: tun_net_xmit 76 [ 134.743869][ T3463] syzkaller0: tun_net_xmit 48 [ 134.777945][ T5808] syzkaller0: tun_net_xmit 76 [ 135.017862][ T5838] syzkaller0: tun_net_xmit 76 [ 135.034305][ T6897] syzkaller0: delete flow: hash 2900851521 index 2 [ 138.332881][ T6990] syzkaller0: create flow: hash 2900851521 index 2 [ 138.436938][ T6996] syzkaller0: delete flow: hash 2900851521 index 2 [ 141.825417][ T7027] : renamed from bond_slave_0 (while UP) [ 144.649224][ T7073] veth0_vlan: left promiscuous mode [ 144.655132][ T7073] veth0_vlan: entered promiscuous mode [ 145.564769][ T7113] veth0_vlan: left promiscuous mode [ 145.573308][ T7113] veth0_vlan: entered promiscuous mode [ 146.451944][ T7139] veth0_vlan: left promiscuous mode [ 146.504279][ T7139] veth0_vlan: entered promiscuous mode [ 147.995317][ T7178] veth0_vlan: left promiscuous mode [ 148.040598][ T7178] veth0_vlan: entered promiscuous mode [ 149.128957][ T7209] veth0_vlan: left promiscuous mode [ 149.203827][ T7209] veth0_vlan: entered promiscuous mode [ 149.896272][ T7232] netlink: 'syz.0.538': attribute type 10 has an invalid length. [ 149.949492][ T7232] netlink: 3531 bytes leftover after parsing attributes in process `syz.0.538'. [ 150.513681][ T7243] veth0_vlan: left promiscuous mode [ 150.615651][ T7243] veth0_vlan: entered promiscuous mode [ 151.051669][ T7263] syz.1.549 uses obsolete (PF_INET,SOCK_PACKET) [ 156.944977][ T7403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.608'. [ 156.975176][ T7403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.608'. [ 157.008673][ T7408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.608'. [ 157.035624][ T7403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.608'. [ 157.055882][ T7403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.608'. [ 157.243869][ T7416] netlink: 'syz.1.615': attribute type 2 has an invalid length. [ 157.280114][ T7416] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.615'. [ 158.152833][ T7442] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 158.169844][ T7442] netlink: 2 bytes leftover after parsing attributes in process `syz.1.624'. [ 158.198462][ T7442] hsr0: entered promiscuous mode [ 161.461367][ T7483] netlink: 'syz.3.643': attribute type 2 has an invalid length. [ 161.493188][ T7483] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.643'. [ 161.943026][ T7506] netlink: 56 bytes leftover after parsing attributes in process `syz.1.650'. [ 164.283379][ T7511] bridge0: port 3(veth0_to_bond) entered disabled state [ 164.290702][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.298427][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.311953][ T7511] bridge0: entered allmulticast mode [ 164.411864][ T7518] netlink: 'syz.2.653': attribute type 10 has an invalid length. [ 164.429455][ T7518] geneve0: entered promiscuous mode [ 164.467286][ T7518] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 164.478624][ T7511] veth0_to_bond: left allmulticast mode [ 164.484326][ T7511] veth0_to_bond: left promiscuous mode [ 164.493872][ T7511] bridge0: port 3(veth0_to_bond) entered disabled state [ 164.507343][ T7511] bridge_slave_1: left allmulticast mode [ 164.516609][ T7511] bridge_slave_1: left promiscuous mode [ 164.524052][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.539854][ T7511] bridge_slave_0: left allmulticast mode [ 164.547455][ T7511] bridge_slave_0: left promiscuous mode [ 164.554264][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.687454][ T7517] veth0_vlan: left promiscuous mode [ 164.740842][ T7517] veth0_vlan: entered promiscuous mode [ 168.821241][ T7555] veth0_vlan: left promiscuous mode [ 168.847761][ T7555] veth0_vlan: entered promiscuous mode [ 171.992342][ T7588] netlink: 'syz.0.685': attribute type 2 has an invalid length. [ 172.008337][ T7588] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.685'. [ 172.100033][ T7592] bridge0: port 3(veth0_to_bond) entered disabled state [ 172.107494][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.115135][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.147942][ T7592] bridge0: entered allmulticast mode [ 172.192144][ T7598] veth0_to_bond: left allmulticast mode [ 172.202534][ T7598] veth0_to_bond: left promiscuous mode [ 172.216570][ T7598] bridge0: port 3(veth0_to_bond) entered disabled state [ 172.303832][ T7598] bridge_slave_1: left allmulticast mode [ 172.312138][ T7598] bridge_slave_1: left promiscuous mode [ 172.357002][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.417490][ T7598] bridge_slave_0: left allmulticast mode [ 172.457106][ T7598] bridge_slave_0: left promiscuous mode [ 172.483706][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.717472][ T7618] veth0_vlan: left promiscuous mode [ 175.784720][ T7618] veth0_vlan: entered promiscuous mode [ 176.382044][ T7639] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.705'. [ 179.562494][ T7663] veth0_vlan: left promiscuous mode [ 179.587219][ T7663] veth0_vlan: entered promiscuous mode [ 180.303980][ T7679] warning: `syz.1.720' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 183.226958][ T7703] veth0_vlan: left promiscuous mode [ 183.299192][ T7703] veth0_vlan: entered promiscuous mode [ 186.528569][ T7744] veth0_vlan: left promiscuous mode [ 186.629227][ T7744] veth0_vlan: entered promiscuous mode [ 192.878980][ T7774] netlink: 'syz.1.757': attribute type 2 has an invalid length. [ 192.903376][ T7774] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.757'. [ 194.664347][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.676718][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.816449][ T7797] veth0_vlan: left promiscuous mode [ 195.836835][ T7797] veth0_vlan: entered promiscuous mode [ 195.907312][ T7802] netlink: 'syz.2.768': attribute type 2 has an invalid length. [ 195.916039][ T7802] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.768'. [ 196.040705][ T7806] IPv6: Can't replace route, no match found [ 199.373128][ T7824] veth0_vlan: left promiscuous mode [ 199.389899][ T7828] netlink: 'syz.1.780': attribute type 2 has an invalid length. [ 199.416624][ T7828] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.780'. [ 199.424869][ T7824] veth0_vlan: entered promiscuous mode [ 199.684046][ T7830] netlink: 132 bytes leftover after parsing attributes in process `syz.1.781'. [ 200.989809][ T7849] netlink: 'syz.3.789': attribute type 2 has an invalid length. [ 201.011413][ T7849] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.789'. [ 201.091284][ T7856] netlink: 'syz.1.792': attribute type 29 has an invalid length. [ 201.127030][ T7853] netlink: 132 bytes leftover after parsing attributes in process `syz.2.791'. [ 201.167933][ T7856] netlink: 'syz.1.792': attribute type 29 has an invalid length. [ 201.197625][ T7851] veth0_vlan: left promiscuous mode [ 201.282751][ T7851] veth0_vlan: entered promiscuous mode [ 201.563364][ T7858] netlink: 'syz.1.792': attribute type 29 has an invalid length. [ 201.858292][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 201.858543][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 202.164128][ T7885] veth0_vlan: left promiscuous mode [ 202.194506][ T7885] veth0_vlan: entered promiscuous mode [ 205.184284][ T7923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.191585][ T7923] IPv6: NLM_F_CREATE should be set when creating new route [ 205.198902][ T7923] IPv6: NLM_F_CREATE should be set when creating new route [ 205.206134][ T7923] IPv6: NLM_F_CREATE should be set when creating new route [ 205.241667][ T7922] veth0_vlan: left promiscuous mode [ 205.278849][ T7922] veth0_vlan: entered promiscuous mode [ 212.753583][ T8019] Zero length message leads to an empty skb [ 216.097910][ T8054] veth0_vlan: left promiscuous mode [ 216.107415][ T8054] veth0_vlan: entered promiscuous mode [ 216.143824][ T8063] netlink: 'syz.0.881': attribute type 21 has an invalid length. [ 216.168706][ T8063] netlink: 'syz.0.881': attribute type 7 has an invalid length. [ 219.645908][ T8088] veth0_vlan: left promiscuous mode [ 219.653484][ T8088] veth0_vlan: entered promiscuous mode [ 219.851844][ T5778] Bluetooth: hci2: unknown advertising packet type: 0x0e [ 219.851928][ T5778] Bluetooth: hci2: Malformed LE Event: 0x02 [ 223.279212][ T8119] veth0_vlan: left promiscuous mode [ 223.309703][ T8119] veth0_vlan: entered promiscuous mode [ 226.424023][ T8151] veth0_vlan: left promiscuous mode [ 226.456489][ T8151] veth0_vlan: entered promiscuous mode [ 230.055521][ T8181] veth0_vlan: left promiscuous mode [ 230.070197][ T8181] veth0_vlan: entered promiscuous mode [ 235.774191][ T8222] veth0_vlan: left promiscuous mode [ 235.782689][ T8222] veth0_vlan: entered promiscuous mode [ 235.805303][ T8224] sit0: entered allmulticast mode [ 236.177392][ T5778] Bluetooth: hci2: adv larger than maximum supported [ 236.177420][ T5778] Bluetooth: hci2: Malformed LE Event: 0x0d [ 239.281108][ T8256] veth0_vlan: left promiscuous mode [ 239.313506][ T8256] veth0_vlan: entered promiscuous mode [ 242.175637][ T8293] veth0_vlan: left promiscuous mode [ 242.191780][ T8293] veth0_vlan: entered promiscuous mode [ 242.444302][ T5778] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 242.461022][ T5778] Bluetooth: hci3: unexpected event 0x09 length: 151 > 3 [ 256.101343][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.114814][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.080787][ T5778] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 264.820577][ T8507] syz.0.1058 (8507) used obsolete PPPIOCDETACH ioctl [ 274.295684][ T8631] syzkaller0: entered promiscuous mode [ 274.307012][ T8631] syzkaller0: entered allmulticast mode [ 283.313821][ T8767] syzkaller0: entered promiscuous mode [ 283.327031][ T8767] syzkaller0: entered allmulticast mode [ 288.731657][ T8813] syzkaller0: entered promiscuous mode [ 288.737328][ T8813] syzkaller0: entered allmulticast mode [ 298.574480][ T5778] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6 [ 298.818083][ T8937] syzkaller0: entered promiscuous mode [ 298.850630][ T8937] syzkaller0: entered allmulticast mode [ 300.761553][ T8989] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 (while UP) [ 311.222960][ T1101] wlan1: Trigger new scan to find an IBSS to join [ 316.268057][ T39] wlan1: Trigger new scan to find an IBSS to join [ 317.183487][ T3463] wlan1: Creating new IBSS network, BSSID 92:07:c1:65:03:01 [ 317.218290][ T2977] wlan1: Trigger new scan to find an IBSS to join [ 317.547163][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.553701][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.272539][ T11] wlan1: Trigger new scan to find an IBSS to join [ 324.055367][ T2977] wlan1: Creating new IBSS network, BSSID 4e:96:34:09:e5:a7 [ 325.947400][ T9306] syzkaller0: entered promiscuous mode [ 325.974455][ T9306] syzkaller0: entered allmulticast mode [ 347.228119][ T39] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 354.088535][ T7612] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 357.802245][ T9579] syzkaller0: entered promiscuous mode [ 357.807872][ T9579] syzkaller0: entered allmulticast mode [ 363.208003][ T9642] syzkaller0: entered promiscuous mode [ 363.219067][ T9642] syzkaller0: entered allmulticast mode [ 365.219888][ T9681] pimreg: tun_chr_ioctl cmd 2147767517 [ 366.940541][ T9703] syzkaller0: entered promiscuous mode [ 366.959873][ T9703] syzkaller0: entered allmulticast mode [ 367.795755][ T9725] syzkaller0: entered promiscuous mode [ 367.842583][ T9725] syzkaller0: entered allmulticast mode [ 370.715986][ T9759] syzkaller0: entered promiscuous mode [ 370.721661][ T9759] syzkaller0: entered allmulticast mode [ 378.153048][ T1101] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 379.018280][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.024667][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.525673][ T7612] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 386.097247][ T9925] ================================================================== [ 386.105418][ T9925] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 386.113335][ T9925] Write of size 48 at addr ffff88805a11fc10 by task syz.3.1586/9925 [ 386.121311][ T9925] [ 386.123712][ T9925] CPU: 0 PID: 9925 Comm: syz.3.1586 Not tainted syzkaller #0 [ 386.131126][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.141187][ T9925] Call Trace: [ 386.144546][ T9925] [ 386.147539][ T9925] dump_stack_lvl+0x18c/0x250 [ 386.152358][ T9925] ? read_lock_is_recursive+0x20/0x20 [ 386.157794][ T9925] ? show_regs_print_info+0x20/0x20 [ 386.162989][ T9925] ? load_image+0x420/0x420 [ 386.167500][ T9925] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 386.173020][ T9925] ? __virt_addr_valid+0x10c/0x380 [ 386.178145][ T9925] ? __virt_addr_valid+0x10c/0x380 [ 386.183250][ T9925] ? __virt_addr_valid+0x10c/0x380 [ 386.188359][ T9925] print_report+0xa8/0x210 [ 386.192773][ T9925] ? __bpf_get_stackid+0x6c7/0x900 [ 386.197886][ T9925] kasan_report+0x117/0x150 [ 386.202438][ T9925] ? __bpf_get_stackid+0x6c7/0x900 [ 386.207551][ T9925] kasan_check_range+0x241/0x290 [ 386.212485][ T9925] ? __bpf_get_stackid+0x6c7/0x900 [ 386.217597][ T9925] __asan_memcpy+0x40/0x70 [ 386.222019][ T9925] __bpf_get_stackid+0x6c7/0x900 [ 386.226965][ T9925] bpf_get_stackid_pe+0x343/0x410 [ 386.231990][ T9925] bpf_prog_52ee0099233a1ca4+0x29/0x39 [ 386.237541][ T9925] bpf_overflow_handler+0x1fc/0x510 [ 386.242754][ T9925] ? bpf_overflow_handler+0xde/0x510 [ 386.248045][ T9925] ? tp_perf_event_destroy+0x20/0x20 [ 386.253332][ T9925] ? __perf_event_account_interrupt+0x187/0x280 [ 386.259573][ T9925] __perf_event_overflow+0x461/0x660 [ 386.264861][ T9925] perf_swevent_event+0x319/0x570 [ 386.269898][ T9925] ? perf_tp_event+0x1550/0x1550 [ 386.274830][ T9925] ? __lock_acquire+0x1336/0x7d80 [ 386.279852][ T9925] ___perf_sw_event+0x4ab/0x730 [ 386.284697][ T9925] ? ___perf_sw_event+0x19e/0x730 [ 386.289717][ T9925] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 386.296133][ T9925] ? __lock_acquire+0x1336/0x7d80 [ 386.301157][ T9925] ? __put_user_4+0x11/0x20 [ 386.305697][ T9925] ? perf_unpin_context+0x70/0x70 [ 386.310717][ T9925] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 386.316692][ T9925] ? lock_chain_count+0x20/0x20 [ 386.321540][ T9925] __perf_sw_event+0x139/0x270 [ 386.326322][ T9925] do_user_addr_fault+0x1242/0x12d0 [ 386.331522][ T9925] ? rcu_is_watching+0x15/0xb0 [ 386.336284][ T9925] exc_page_fault+0x64/0x100 [ 386.340879][ T9925] asm_exc_page_fault+0x26/0x30 [ 386.345828][ T9925] RIP: 0010:__put_user_4+0x11/0x20 [ 386.350992][ T9925] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 386.370656][ T9925] RSP: 0018:ffffc9000b7cfc58 EFLAGS: 00050246 [ 386.376719][ T9925] RAX: 00000000000003cd RBX: 0000000000000000 RCX: 0000000000000000 [ 386.384682][ T9925] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 386.392651][ T9925] RBP: ffffc9000b7cfd90 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 386.400617][ T9925] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: 1ffff920016f9f94 [ 386.408586][ T9925] R13: dffffc0000000000 R14: 0000000040100000 R15: 00000000000003cd [ 386.416558][ T9925] kernel_clone+0x36c/0x8a0 [ 386.421087][ T9925] ? create_io_thread+0x190/0x190 [ 386.426108][ T9925] ? do_futex+0x35d/0x3e0 [ 386.430450][ T9925] __x64_sys_clone+0x1b7/0x230 [ 386.435209][ T9925] ? __ia32_sys_vfork+0x140/0x140 [ 386.440231][ T9925] ? lock_chain_count+0x20/0x20 [ 386.445078][ T9925] ? lockdep_hardirqs_on+0x98/0x150 [ 386.450305][ T9925] do_syscall_64+0x55/0xb0 [ 386.454738][ T9925] ? clear_bhb_loop+0x40/0x90 [ 386.459609][ T9925] ? clear_bhb_loop+0x40/0x90 [ 386.464293][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.470186][ T9925] RIP: 0033:0x7f9670d9e159 [ 386.474727][ T9925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.494491][ T9925] RSP: 002b:00007f9671ca1fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 386.502909][ T9925] RAX: ffffffffffffffda RBX: 00007f9671025fa0 RCX: 00007f9670d9e159 [ 386.510878][ T9925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040100000 [ 386.518840][ T9925] RBP: 00007f9670e3503b R08: 0000000000000000 R09: 0000000000000000 [ 386.526802][ T9925] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 386.534767][ T9925] R13: 00007f9671026038 R14: 00007f9671025fa0 R15: 00007fff93380dc8 [ 386.542740][ T9925] [ 386.545750][ T9925] [ 386.548066][ T9925] Allocated by task 9925: [ 386.552461][ T9925] kasan_set_track+0x4e/0x70 [ 386.557056][ T9925] __kasan_kmalloc+0x8f/0xa0 [ 386.561638][ T9925] __kmalloc_node+0xb6/0x240 [ 386.566246][ T9925] bpf_map_area_alloc+0x5e/0x110 [ 386.571180][ T9925] prealloc_elems_and_freelist+0x86/0x1c0 [ 386.576897][ T9925] stack_map_alloc+0x32b/0x4b0 [ 386.581654][ T9925] map_create+0x877/0x12f0 [ 386.586062][ T9925] __sys_bpf+0x651/0x890 [ 386.590294][ T9925] __x64_sys_bpf+0x7c/0x90 [ 386.594700][ T9925] do_syscall_64+0x55/0xb0 [ 386.599110][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.604999][ T9925] [ 386.607313][ T9925] Last potentially related work creation: [ 386.613011][ T9925] kasan_save_stack+0x3e/0x60 [ 386.617683][ T9925] __kasan_record_aux_stack+0xaf/0xc0 [ 386.623049][ T9925] call_rcu+0x153/0x900 [ 386.627199][ T9925] nf_unregister_net_hooks+0xcb/0x130 [ 386.632684][ T9925] cleanup_net+0x707/0xbb0 [ 386.637117][ T9925] process_scheduled_works+0xa60/0x1600 [ 386.642656][ T9925] worker_thread+0xa5e/0xfe0 [ 386.647241][ T9925] kthread+0x2fa/0x390 [ 386.651306][ T9925] ret_from_fork+0x48/0x80 [ 386.655726][ T9925] ret_from_fork_asm+0x11/0x20 [ 386.660532][ T9925] [ 386.662846][ T9925] Second to last potentially related work creation: [ 386.669475][ T9925] kasan_save_stack+0x3e/0x60 [ 386.674150][ T9925] __kasan_record_aux_stack+0xaf/0xc0 [ 386.679517][ T9925] kvfree_call_rcu+0xee/0x780 [ 386.684189][ T9925] trie_update_elem+0x953/0xd60 [ 386.689037][ T9925] 0xffffffffa0000a37 [ 386.693007][ T9925] bpf_test_run+0x2df/0x870 [ 386.697505][ T9925] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 386.702875][ T9925] bpf_prog_test_run+0x31f/0x390 [ 386.707807][ T9925] __sys_bpf+0x49d/0x890 [ 386.712040][ T9925] __x64_sys_bpf+0x7c/0x90 [ 386.716445][ T9925] do_syscall_64+0x55/0xb0 [ 386.720870][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.726764][ T9925] [ 386.729079][ T9925] The buggy address belongs to the object at ffff88805a11fc00 [ 386.729079][ T9925] which belongs to the cache kmalloc-cg-64 of size 64 [ 386.743244][ T9925] The buggy address is located 16 bytes inside of [ 386.743244][ T9925] allocated 40-byte region [ffff88805a11fc00, ffff88805a11fc28) [ 386.757284][ T9925] [ 386.759606][ T9925] The buggy address belongs to the physical page: [ 386.766074][ T9925] page:ffffea00016847c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a11f [ 386.776220][ T9925] memcg:ffff888024e97c01 [ 386.780451][ T9925] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 386.787993][ T9925] page_type: 0xffffffff() [ 386.792321][ T9925] raw: 00fff00000000800 ffff888017c4da00 ffffea0001370380 0000000000000004 [ 386.800898][ T9925] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888024e97c01 [ 386.809467][ T9925] page dumped because: kasan: bad access detected [ 386.815870][ T9925] page_owner tracks the page as allocated [ 386.821581][ T9925] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 8542, tgid 8540 (syz.3.1074), ts 267509018440, free_ts 267495239396 [ 386.841297][ T9925] post_alloc_hook+0x1c1/0x200 [ 386.846089][ T9925] get_page_from_freelist+0x2181/0x22a0 [ 386.851646][ T9925] __alloc_pages+0x1f0/0x460 [ 386.856234][ T9925] alloc_slab_page+0x5d/0x180 [ 386.860912][ T9925] new_slab+0x87/0x2d0 [ 386.864973][ T9925] ___slab_alloc+0xc5c/0x12f0 [ 386.869645][ T9925] __kmem_cache_alloc_node+0x11f/0x250 [ 386.875105][ T9925] __kmalloc_node+0xa6/0x240 [ 386.879694][ T9925] bpf_map_kmalloc_node+0xbc/0x1b0 [ 386.884801][ T9925] trie_update_elem+0x172/0xd60 [ 386.889644][ T9925] 0xffffffffa0000a37 [ 386.893613][ T9925] bpf_test_run+0x2df/0x870 [ 386.898109][ T9925] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 386.903474][ T9925] bpf_prog_test_run+0x31f/0x390 [ 386.908405][ T9925] __sys_bpf+0x49d/0x890 [ 386.912657][ T9925] __x64_sys_bpf+0x7c/0x90 [ 386.917080][ T9925] page last free stack trace: [ 386.921746][ T9925] free_unref_page_prepare+0x7d7/0x8f0 [ 386.927205][ T9925] free_unref_page+0x32/0x2e0 [ 386.931876][ T9925] __unfreeze_partials+0x1cf/0x210 [ 386.936978][ T9925] put_cpu_partial+0x17c/0x250 [ 386.941742][ T9925] __slab_free+0x319/0x400 [ 386.946148][ T9925] qlist_free_all+0x75/0xd0 [ 386.950650][ T9925] kasan_quarantine_reduce+0x143/0x160 [ 386.956109][ T9925] __kasan_slab_alloc+0x22/0x80 [ 386.960956][ T9925] slab_post_alloc_hook+0x6a/0x4d0 [ 386.966073][ T9925] kmem_cache_alloc+0x17e/0x2c0 [ 386.970922][ T9925] getname_flags+0xbb/0x500 [ 386.975437][ T9925] user_path_at_empty+0x2c/0x60 [ 386.980277][ T9925] __se_sys_inotify_add_watch+0x19d/0x1070 [ 386.986103][ T9925] do_syscall_64+0x55/0xb0 [ 386.990511][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.996398][ T9925] [ 386.998713][ T9925] Memory state around the buggy address: [ 387.004389][ T9925] ffff88805a11fb00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 387.012438][ T9925] ffff88805a11fb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 387.020488][ T9925] >ffff88805a11fc00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 387.028540][ T9925] ^ [ 387.033895][ T9925] ffff88805a11fc80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 387.041944][ T9925] ffff88805a11fd00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 387.049997][ T9925] ================================================================== [ 387.058052][ T9925] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 387.065254][ T9925] CPU: 0 PID: 9925 Comm: syz.3.1586 Not tainted syzkaller #0 [ 387.072617][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.082666][ T9925] Call Trace: [ 387.085936][ T9925] [ 387.088857][ T9925] dump_stack_lvl+0x18c/0x250 [ 387.093538][ T9925] ? show_regs_print_info+0x20/0x20 [ 387.098730][ T9925] ? load_image+0x420/0x420 [ 387.103231][ T9925] panic+0x2ca/0x720 [ 387.107123][ T9925] ? __lock_acquire+0x7d80/0x7d80 [ 387.112141][ T9925] ? bpf_jit_dump+0xd0/0xd0 [ 387.116641][ T9925] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 387.122529][ T9925] ? _raw_spin_unlock+0x40/0x40 [ 387.127376][ T9925] ? __bpf_get_stackid+0x6c7/0x900 [ 387.132482][ T9925] check_panic_on_warn+0x84/0xa0 [ 387.137421][ T9925] ? __bpf_get_stackid+0x6c7/0x900 [ 387.142529][ T9925] end_report+0x6f/0x130 [ 387.146764][ T9925] kasan_report+0x128/0x150 [ 387.151262][ T9925] ? __bpf_get_stackid+0x6c7/0x900 [ 387.156377][ T9925] kasan_check_range+0x241/0x290 [ 387.161310][ T9925] ? __bpf_get_stackid+0x6c7/0x900 [ 387.166420][ T9925] __asan_memcpy+0x40/0x70 [ 387.170842][ T9925] __bpf_get_stackid+0x6c7/0x900 [ 387.175778][ T9925] bpf_get_stackid_pe+0x343/0x410 [ 387.180802][ T9925] bpf_prog_52ee0099233a1ca4+0x29/0x39 [ 387.186255][ T9925] bpf_overflow_handler+0x1fc/0x510 [ 387.191454][ T9925] ? bpf_overflow_handler+0xde/0x510 [ 387.196738][ T9925] ? tp_perf_event_destroy+0x20/0x20 [ 387.202022][ T9925] ? __perf_event_account_interrupt+0x187/0x280 [ 387.208258][ T9925] __perf_event_overflow+0x461/0x660 [ 387.213543][ T9925] perf_swevent_event+0x319/0x570 [ 387.218578][ T9925] ? perf_tp_event+0x1550/0x1550 [ 387.223508][ T9925] ? __lock_acquire+0x1336/0x7d80 [ 387.228529][ T9925] ___perf_sw_event+0x4ab/0x730 [ 387.233374][ T9925] ? ___perf_sw_event+0x19e/0x730 [ 387.238392][ T9925] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 387.244801][ T9925] ? __lock_acquire+0x1336/0x7d80 [ 387.249823][ T9925] ? __put_user_4+0x11/0x20 [ 387.254329][ T9925] ? perf_unpin_context+0x70/0x70 [ 387.259350][ T9925] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 387.265338][ T9925] ? lock_chain_count+0x20/0x20 [ 387.270196][ T9925] __perf_sw_event+0x139/0x270 [ 387.274964][ T9925] do_user_addr_fault+0x1242/0x12d0 [ 387.280165][ T9925] ? rcu_is_watching+0x15/0xb0 [ 387.284928][ T9925] exc_page_fault+0x64/0x100 [ 387.289521][ T9925] asm_exc_page_fault+0x26/0x30 [ 387.294373][ T9925] RIP: 0010:__put_user_4+0x11/0x20 [ 387.299487][ T9925] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 387.319086][ T9925] RSP: 0018:ffffc9000b7cfc58 EFLAGS: 00050246 [ 387.325160][ T9925] RAX: 00000000000003cd RBX: 0000000000000000 RCX: 0000000000000000 [ 387.333121][ T9925] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 387.341082][ T9925] RBP: ffffc9000b7cfd90 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 387.349047][ T9925] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: 1ffff920016f9f94 [ 387.357011][ T9925] R13: dffffc0000000000 R14: 0000000040100000 R15: 00000000000003cd [ 387.364988][ T9925] kernel_clone+0x36c/0x8a0 [ 387.369504][ T9925] ? create_io_thread+0x190/0x190 [ 387.374527][ T9925] ? do_futex+0x35d/0x3e0 [ 387.378852][ T9925] __x64_sys_clone+0x1b7/0x230 [ 387.383609][ T9925] ? __ia32_sys_vfork+0x140/0x140 [ 387.388633][ T9925] ? lock_chain_count+0x20/0x20 [ 387.393482][ T9925] ? lockdep_hardirqs_on+0x98/0x150 [ 387.398686][ T9925] do_syscall_64+0x55/0xb0 [ 387.403098][ T9925] ? clear_bhb_loop+0x40/0x90 [ 387.407944][ T9925] ? clear_bhb_loop+0x40/0x90 [ 387.412619][ T9925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.418505][ T9925] RIP: 0033:0x7f9670d9e159 [ 387.422913][ T9925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.442511][ T9925] RSP: 002b:00007f9671ca1fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 387.450916][ T9925] RAX: ffffffffffffffda RBX: 00007f9671025fa0 RCX: 00007f9670d9e159 [ 387.458880][ T9925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040100000 [ 387.466843][ T9925] RBP: 00007f9670e3503b R08: 0000000000000000 R09: 0000000000000000 [ 387.474805][ T9925] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 387.482770][ T9925] R13: 00007f9671026038 R14: 00007f9671025fa0 R15: 00007fff93380dc8 [ 387.490743][ T9925] [ 387.494004][ T9925] Kernel Offset: disabled [ 387.498311][ T9925] Rebooting in 86400 seconds..