last executing test programs: 1.848025416s ago: executing program 2 (id=3): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1418d, 0x2e, 0xfffffc01, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x12, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000780)="f1", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x15, 0x5, 0x0) close(r4) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xfa, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xe2, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x2, 0x5, 0x80000001, 0x740, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xa}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r10) write$cgroup_type(r10, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x4d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x100, 0x78, &(0x7f0000000400)=""/120, 0x40f00, 0x8, '\x00', r7, 0x1b, r8, 0x8, &(0x7f00000007c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x4, 0x5a, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r9, r10], &(0x7f0000000900)=[{0x2, 0x2, 0x7, 0x8}, {0x4, 0x3, 0xf, 0x6}], 0x10, 0x3}, 0x94) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x3, 0x4}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="03", 0x1}], 0x1}, 0x4804) 1.352337818s ago: executing program 1 (id=2): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800220000000000000000000000000063010000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x801, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x29, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x142) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40fd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000fb190000d9d6015f1801000020646c250000000000202010316a580e96c4d7fbba3d6e7eca676f207b1af8ff00000000000080000000000007010000f8ffffffb702000008000000b757dca4fc458f8b043bf19e7e8104273daaf28b00"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x8804, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x35, 0xfffffbff, 0x3, 0x8001, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x3, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 1.246575038s ago: executing program 0 (id=1): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800ebf33ac8e6fd792dc4c5ad1f00000220000000000000ce074f9d49e54af4030000000200000000000000000000000000000a04004000000000000000000300000000030000000200000003000000040059856b7eeac8541a7f71a88b84c4a43b34923ff544baed73c8b7ecdafc19d22ce07b34734e17d42b398e51c68d12450a49b0af4a0278ee526aacb0685ea248562e686a82125f70be465ae0555c6513f4f1863597135ade486205497940b52318735e6b0c"], 0x0, 0x62}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') mkdir(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xae6}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x2, 0x0, 0x10, 0x0, 0x9c, 0x80020, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x4}, 0x40, 0x0, 0xfff, 0x8, 0xb, 0x1, 0x4, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f00000000c0)='%d:\xfa\xbc%j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="ada68a2f96c6"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3}, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 1.184437419s ago: executing program 2 (id=6): r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x4000000000aea}, 0x14105, 0x2c, 0xfffffbff, 0x4, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff0100000000000000", 0x1f}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)}, 0x1) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab0700110005", @ANYRES16=r1, @ANYRES16=r0, @ANYRES64], 0xfe33) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa0001, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x8}, 0x8) r9 = socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000300)=ANY=[@ANYRESDEC=r6], 0xa) sendmsg$kcm(r9, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1}, 0x41) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 3 (id=4): r0 = socket$kcm(0x25, 0x1, 0x0) sendmsg(r0, 0x0, 0x4) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tcp_probe\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x30044889) sendmsg$sock(0xffffffffffffffff, 0x0, 0x241) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113182605900000000008510000002000000ad865000ea0f9460a6a37d0000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x101) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff07, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='THAWED\x00', 0x7) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [ 83.964619][ T5834] cgroup: Unknown subsys name 'net' [ 84.180652][ T5834] cgroup: Unknown subsys name 'cpuset' [ 84.190240][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.890399][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.224218][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.232399][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.237215][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.242102][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.247074][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.255208][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.261170][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.269161][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.275009][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.289601][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.289816][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.298324][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.304828][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.311788][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.327772][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.336041][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.343717][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.352581][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.407657][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.419494][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.427515][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.431309][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.442630][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.451321][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.459521][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.976886][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 91.170639][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 91.250800][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 91.368183][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 91.454325][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.462417][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.470633][ T5850] bridge_slave_0: entered allmulticast mode [ 91.481177][ T5850] bridge_slave_0: entered promiscuous mode [ 91.525121][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.532508][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.540509][ T5850] bridge_slave_1: entered allmulticast mode [ 91.547936][ T5850] bridge_slave_1: entered promiscuous mode [ 91.555434][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 91.580485][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.588220][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.595436][ T5845] bridge_slave_0: entered allmulticast mode [ 91.603219][ T5845] bridge_slave_0: entered promiscuous mode [ 91.675780][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.683724][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.691482][ T5845] bridge_slave_1: entered allmulticast mode [ 91.704020][ T5845] bridge_slave_1: entered promiscuous mode [ 91.762572][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.819243][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.828677][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.835818][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.844573][ T5846] bridge_slave_0: entered allmulticast mode [ 91.852210][ T5846] bridge_slave_0: entered promiscuous mode [ 91.862386][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.919699][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.927007][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.934180][ T5846] bridge_slave_1: entered allmulticast mode [ 91.941869][ T5846] bridge_slave_1: entered promiscuous mode [ 91.965530][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.990952][ T56] cfg80211: failed to load regulatory.db [ 92.030807][ T5850] team0: Port device team_slave_0 added [ 92.064019][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.071752][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.079271][ T5847] bridge_slave_0: entered allmulticast mode [ 92.087210][ T5847] bridge_slave_0: entered promiscuous mode [ 92.110755][ T5850] team0: Port device team_slave_1 added [ 92.133602][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.149245][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.161048][ T5845] team0: Port device team_slave_0 added [ 92.170196][ T5845] team0: Port device team_slave_1 added [ 92.191001][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.198297][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.205459][ T5847] bridge_slave_1: entered allmulticast mode [ 92.213846][ T5847] bridge_slave_1: entered promiscuous mode [ 92.225787][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.233427][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.241143][ T5858] bridge_slave_0: entered allmulticast mode [ 92.250310][ T5858] bridge_slave_0: entered promiscuous mode [ 92.338973][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.346255][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.353516][ T5858] bridge_slave_1: entered allmulticast mode [ 92.361384][ T5858] bridge_slave_1: entered promiscuous mode [ 92.369461][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.377261][ T5851] Bluetooth: hci3: command tx timeout [ 92.378082][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.409207][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.423885][ T5846] team0: Port device team_slave_0 added [ 92.431243][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.438367][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.456851][ T5851] Bluetooth: hci4: command tx timeout [ 92.464910][ T5865] Bluetooth: hci0: command tx timeout [ 92.470117][ T5851] Bluetooth: hci1: command tx timeout [ 92.475600][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.494331][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.501464][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.527827][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.542166][ T5851] Bluetooth: hci2: command tx timeout [ 92.542196][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.574512][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.581836][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.608100][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.622085][ T5846] team0: Port device team_slave_1 added [ 92.637398][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.727120][ T5847] team0: Port device team_slave_0 added [ 92.736288][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.762195][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.769761][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.795875][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.809191][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.816299][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.842836][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.869165][ T5847] team0: Port device team_slave_1 added [ 92.895148][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.960766][ T5850] hsr_slave_0: entered promiscuous mode [ 92.967982][ T5850] hsr_slave_1: entered promiscuous mode [ 92.992522][ T5845] hsr_slave_0: entered promiscuous mode [ 92.999312][ T5845] hsr_slave_1: entered promiscuous mode [ 93.005490][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.013959][ T5845] Cannot create hsr debugfs directory [ 93.035784][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.042870][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.068890][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.084835][ T5858] team0: Port device team_slave_0 added [ 93.093912][ T5858] team0: Port device team_slave_1 added [ 93.131247][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.138912][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.165171][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.233511][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.240571][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.266633][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.308187][ T5846] hsr_slave_0: entered promiscuous mode [ 93.314743][ T5846] hsr_slave_1: entered promiscuous mode [ 93.321726][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.329493][ T5846] Cannot create hsr debugfs directory [ 93.352482][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.359653][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.385824][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.513330][ T5847] hsr_slave_0: entered promiscuous mode [ 93.521101][ T5847] hsr_slave_1: entered promiscuous mode [ 93.527898][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.535727][ T5847] Cannot create hsr debugfs directory [ 93.661433][ T5858] hsr_slave_0: entered promiscuous mode [ 93.668022][ T5858] hsr_slave_1: entered promiscuous mode [ 93.674155][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.683058][ T5858] Cannot create hsr debugfs directory [ 94.054595][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.069736][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.104195][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.141048][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.208925][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.242222][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.255818][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.267816][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.351400][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.396487][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.421028][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.449605][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.457880][ T5851] Bluetooth: hci3: command tx timeout [ 94.537520][ T5851] Bluetooth: hci0: command tx timeout [ 94.538292][ T5865] Bluetooth: hci4: command tx timeout [ 94.543069][ T5851] Bluetooth: hci1: command tx timeout [ 94.557133][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.580494][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.591694][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.613623][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.620692][ T5851] Bluetooth: hci2: command tx timeout [ 94.690572][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.720235][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.732161][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.750816][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.790060][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.806281][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.822306][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.862956][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.870407][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.901532][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.908727][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.953958][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.019996][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.027209][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.053786][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.074126][ T4071] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.081798][ T4071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.102740][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.161433][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.213795][ T4071] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.221109][ T4071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.240036][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.294349][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.301628][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.324948][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.332231][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.342950][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.350203][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.474274][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.585439][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.611905][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.619145][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.716997][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.724221][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.774672][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.095361][ T5850] veth0_vlan: entered promiscuous mode [ 96.109696][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.134836][ T5850] veth1_vlan: entered promiscuous mode [ 96.213067][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.265144][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.332294][ T5850] veth0_macvtap: entered promiscuous mode [ 96.358628][ T5845] veth0_vlan: entered promiscuous mode [ 96.383124][ T5850] veth1_macvtap: entered promiscuous mode [ 96.402507][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.437910][ T5845] veth1_vlan: entered promiscuous mode [ 96.470739][ T5846] veth0_vlan: entered promiscuous mode [ 96.493702][ T5847] veth0_vlan: entered promiscuous mode [ 96.525363][ T5846] veth1_vlan: entered promiscuous mode [ 96.536816][ T5851] Bluetooth: hci3: command tx timeout [ 96.544071][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.571164][ T5847] veth1_vlan: entered promiscuous mode [ 96.598370][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.618043][ T5851] Bluetooth: hci4: command tx timeout [ 96.618071][ T5859] Bluetooth: hci1: command tx timeout [ 96.626141][ T5845] veth0_macvtap: entered promiscuous mode [ 96.629236][ T5865] Bluetooth: hci0: command tx timeout [ 96.650525][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.661435][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.676154][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.685245][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.696807][ T5865] Bluetooth: hci2: command tx timeout [ 96.756486][ T5846] veth0_macvtap: entered promiscuous mode [ 96.794453][ T5845] veth1_macvtap: entered promiscuous mode [ 96.835127][ T5846] veth1_macvtap: entered promiscuous mode [ 96.883842][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.899799][ T5847] veth0_macvtap: entered promiscuous mode [ 96.912877][ T5847] veth1_macvtap: entered promiscuous mode [ 96.925632][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.970035][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.981908][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.994228][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.003535][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.012488][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.038538][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.077107][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.100019][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.116167][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.137768][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.138686][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.156009][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.166293][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.177740][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.203660][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.214014][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.223600][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.233495][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.272360][ T5858] veth0_vlan: entered promiscuous mode [ 97.334931][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.335478][ T5858] veth1_vlan: entered promiscuous mode [ 97.346660][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.447970][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.460010][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.482935][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.523692][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.542815][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.554457][ T5858] veth0_macvtap: entered promiscuous mode [ 97.612872][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.623333][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.638937][ T5858] veth1_macvtap: entered promiscuous mode [ 97.650108][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.692587][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.741135][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.777661][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.031827][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.060859][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.086027][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.102315][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.122434][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.126648][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.135673][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.152424][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.256260][ T5968] Zero length message leads to an empty skb [ 98.316501][ C0] hrtimer: interrupt took 83457 ns [ 98.561801][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.587265][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.636708][ T5865] Bluetooth: hci3: command tx timeout [ 98.698613][ T5865] Bluetooth: hci0: command tx timeout [ 98.704150][ T5865] Bluetooth: hci1: command tx timeout [ 98.716637][ T5865] Bluetooth: hci4: command tx timeout [ 98.742294][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.755235][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.800322][ T5859] Bluetooth: hci2: command tx timeout [ 99.435951][ T5975] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6'. [ 99.488055][ T9] ------------[ cut here ]------------ [ 99.493730][ T9] WARNING: CPU: 0 PID: 9 at kernel/cgroup/rstat.c:314 css_rstat_flush+0x76f/0x1fa0 [ 99.503171][ T9] Modules linked in: [ 99.507268][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 99.518599][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.528698][ T9] Workqueue: cgroup_destroy css_free_rwork_fn [ 99.534921][ T9] RIP: 0010:css_rstat_flush+0x76f/0x1fa0 [ 99.540586][ T9] Code: df 80 3c 08 00 74 08 4c 89 e7 e8 3c a1 6a 00 49 8b 1c 24 48 3b 5c 24 38 74 22 e8 9c 1e 07 00 e9 72 ff ff ff e8 92 1e 07 00 90 <0f> 0b 90 eb bd e8 87 1e 07 00 45 31 e4 e9 bb 03 00 00 e8 7a 1e 07 [ 99.540636][ T9] RSP: 0018:ffffc900000e7780 EFLAGS: 00010093 [ 99.540658][ T9] RAX: ffffffff81b9400e RBX: ffff88807ce8b000 RCX: ffff88801d2a0000 [ 99.574533][ T9] RDX: 0000000000000000 RSI: ffffffff8be28f20 RDI: ffffffff8be28ee0 [ 99.578316][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.582526][ T9] RBP: ffffc900000e79b8 R08: ffffffff8fa1d6f7 R09: 1ffffffff1f43ade [ 99.598384][ T9] R10: dffffc0000000000 R11: fffffbfff1f43adf R12: ffffe8ffffc67b30 [ 99.600661][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.606386][ T9] R13: ffff88807ce8b000 R14: ffffffff8dbbcc60 R15: ffff888125c1f008 [ 99.606409][ T9] FS: 0000000000000000(0000) GS:ffff888125c1f000(0000) knlGS:0000000000000000 [ 99.606427][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.606440][ T9] CR2: 0000001b30f20008 CR3: 0000000026d04000 CR4: 00000000003526f0 [ 99.606458][ T9] Call Trace: [ 99.606468][ T9] [ 99.606483][ T9] ? check_path+0x21/0x40 [ 99.606547][ T9] ? __pfx_css_rstat_flush+0x10/0x10 [ 99.606578][ T9] ? __lock_acquire+0xab9/0xd20 [ 99.606611][ T9] css_rstat_exit+0xa9/0x320 [ 99.606634][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 99.606658][ T9] ? percpu_ref_exit+0xc5/0x1c0 [ 99.606683][ T9] css_free_rwork_fn+0x8b/0xc50 [ 99.606703][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 99.606726][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 99.606752][ T9] process_scheduled_works+0xade/0x17b0 [ 99.606804][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.606847][ T9] worker_thread+0x8a0/0xda0 [ 99.606901][ T9] kthread+0x70e/0x8a0 [ 99.606935][ T9] ? __pfx_worker_thread+0x10/0x10 [ 99.606960][ T9] ? __pfx_kthread+0x10/0x10 [ 99.606992][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.607023][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.607052][ T9] ? __pfx_kthread+0x10/0x10 [ 99.607083][ T9] ret_from_fork+0x3fc/0x770 [ 99.607109][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 99.607139][ T9] ? __switch_to_asm+0x39/0x70 [ 99.607166][ T9] ? __switch_to_asm+0x33/0x70 [ 99.607192][ T9] ? __pfx_kthread+0x10/0x10 [ 99.607222][ T9] ret_from_fork_asm+0x1a/0x30 [ 99.607266][ T9] [ 99.607278][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.607294][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc4-syzkaller-gbf4807c89d8f #0 PREEMPT(full) [ 99.607318][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.607332][ T9] Workqueue: cgroup_destroy css_free_rwork_fn [ 99.607354][ T9] Call Trace: [ 99.607370][ T9] [ 99.607379][ T9] dump_stack_lvl+0x99/0x250 [ 99.607405][ T9] ? __asan_memcpy+0x40/0x70 [ 99.607427][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.607452][ T9] ? __pfx__printk+0x10/0x10 [ 99.607495][ T9] panic+0x2db/0x790 [ 99.607525][ T9] ? __pfx_panic+0x10/0x10 [ 99.607545][ T9] ? show_trace_log_lvl+0x4fb/0x550 [ 99.607580][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 99.607613][ T9] __warn+0x31b/0x4b0 [ 99.607635][ T9] ? css_rstat_flush+0x76f/0x1fa0 [ 99.607661][ T9] ? css_rstat_flush+0x76f/0x1fa0 [ 99.607684][ T9] report_bug+0x2be/0x4f0 [ 99.607714][ T9] ? css_rstat_flush+0x76f/0x1fa0 [ 99.607739][ T9] ? css_rstat_flush+0x76f/0x1fa0 [ 99.607760][ T9] ? css_rstat_flush+0x771/0x1fa0 [ 99.607786][ T9] handle_bug+0x84/0x160 [ 99.607812][ T9] exc_invalid_op+0x1a/0x50 [ 99.607839][ T9] asm_exc_invalid_op+0x1a/0x20 [ 99.607863][ T9] RIP: 0010:css_rstat_flush+0x76f/0x1fa0 [ 99.607891][ T9] Code: df 80 3c 08 00 74 08 4c 89 e7 e8 3c a1 6a 00 49 8b 1c 24 48 3b 5c 24 38 74 22 e8 9c 1e 07 00 e9 72 ff ff ff e8 92 1e 07 00 90 <0f> 0b 90 eb bd e8 87 1e 07 00 45 31 e4 e9 bb 03 00 00 e8 7a 1e 07 [ 99.607912][ T9] RSP: 0018:ffffc900000e7780 EFLAGS: 00010093 [ 99.607933][ T9] RAX: ffffffff81b9400e RBX: ffff88807ce8b000 RCX: ffff88801d2a0000 [ 99.607951][ T9] RDX: 0000000000000000 RSI: ffffffff8be28f20 RDI: ffffffff8be28ee0 [ 99.607968][ T9] RBP: ffffc900000e79b8 R08: ffffffff8fa1d6f7 R09: 1ffffffff1f43ade [ 99.607985][ T9] R10: dffffc0000000000 R11: fffffbfff1f43adf R12: ffffe8ffffc67b30 [ 99.608003][ T9] R13: ffff88807ce8b000 R14: ffffffff8dbbcc60 R15: ffff888125c1f008 [ 99.608031][ T9] ? css_rstat_flush+0x76e/0x1fa0 [ 99.608075][ T9] ? check_path+0x21/0x40 [ 99.608145][ T9] ? __pfx_css_rstat_flush+0x10/0x10 [ 99.608176][ T9] ? __lock_acquire+0xab9/0xd20 [ 99.608212][ T9] css_rstat_exit+0xa9/0x320 [ 99.608239][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 99.608266][ T9] ? percpu_ref_exit+0xc5/0x1c0 [ 99.608294][ T9] css_free_rwork_fn+0x8b/0xc50 [ 99.608317][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 99.608341][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 99.608381][ T9] process_scheduled_works+0xade/0x17b0 [ 99.608445][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.608494][ T9] worker_thread+0x8a0/0xda0 [ 99.608555][ T9] kthread+0x70e/0x8a0 [ 99.608593][ T9] ? __pfx_worker_thread+0x10/0x10 [ 99.608619][ T9] ? __pfx_kthread+0x10/0x10 [ 99.608655][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.608689][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.608721][ T9] ? __pfx_kthread+0x10/0x10 [ 99.608755][ T9] ret_from_fork+0x3fc/0x770 [ 99.608784][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 99.608817][ T9] ? __switch_to_asm+0x39/0x70 [ 99.608846][ T9] ? __switch_to_asm+0x33/0x70 [ 99.608875][ T9] ? __pfx_kthread+0x10/0x10 [ 99.608909][ T9] ret_from_fork_asm+0x1a/0x30 [ 99.608960][ T9] [ 99.615199][ T9] Kernel Offset: disabled