last executing test programs: 5.553108174s ago: executing program 1 (id=5): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x9) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x9, 0x0, 0x3c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8919, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, @perf_config_ext={0x7a1b, 0x45}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x5}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="270502000a0014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x20000001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 3.814589822s ago: executing program 1 (id=8): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 3.69689308s ago: executing program 3 (id=4): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3f, 0x8b9c731400bf8d08, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0), 0x8}, 0x18852, 0x8, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0xe4, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1c00, 0xffffffffffffffff, 0x6}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x8000) sendmsg$sock(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x400c804) sendmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)='EO', 0x2}], 0x1, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r4, 0x4004743b, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x60, 0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d8000000180081064e81f782db4cb904021d080006007ce6e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d603000000d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cce4cff83bb5c466f11fe6f808511a", 0xe6}], 0x1}, 0x40) sendmsg$inet(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)='t', 0x1}], 0x1}, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000180), 0x43) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000100)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xf, 0x0, &(0x7f0000000500)="c7a751900acf81658badb5d287b4d0", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.335337752s ago: executing program 1 (id=10): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xf, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x9, 0xff, 0x7, 0x0, 0x62, 0xdb71b, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x6, 0x8}, 0x14001, 0x0, 0x3, 0x0, 0x200000000081, 0x8, 0x7fff, 0x0, 0x2cb, 0x0, 0x101}, 0x0, 0x40000400e, 0xffffffffffffffff, 0x9) r1 = getpid() r2 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 2.639724716s ago: executing program 1 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x51, 0x71, 0x10, 0x1a}}, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0xfffffffffffffe00}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7fffffff, 0xb}, 0x11000, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x383f5c1d7387a1de}, 0x114244, 0x0, 0xafe8, 0x4, 0x6, 0x7fffffff, 0x3, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x444, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a0000000200000006500000ff"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x8, 0x7f}], "44942d"}, @datasec={0x9, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x44, 0x2, 0x1}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e202e001080fe00ba80013ffa85f59a0000005a8c3774fa0af3dc59a933c1e6a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f", 0x67}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x4, &(0x7f0000000600)=[{0x15, 0x0, 0x2, 0x2}, {0x3d}, {0x2, 0x0, 0xd, 0x7}, {0x6}]}) 2.537703582s ago: executing program 2 (id=17): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 2.439961298s ago: executing program 3 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x40, 0x20000000, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x6) 2.438642878s ago: executing program 0 (id=26): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x6, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55", 0x1b}], 0x1}, 0x4) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) 2.171393605s ago: executing program 2 (id=19): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 1.91870884s ago: executing program 3 (id=20): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.269735301s ago: executing program 3 (id=21): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x100}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x7fffffff, 0x0, 0x2, 0xfffff271, 0xfffb, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x88100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_config_ext={0x0, 0x4}, 0x200, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.268503061s ago: executing program 2 (id=30): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 787.189861ms ago: executing program 0 (id=22): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 786.998581ms ago: executing program 2 (id=23): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/27], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) bpf$ITER_CREATE(0xb, 0x0, 0x0) 585.122344ms ago: executing program 0 (id=24): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 531.302167ms ago: executing program 0 (id=25): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x1, 0x84) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r2], 0x9a) 467.883991ms ago: executing program 1 (id=27): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x822cb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a0091"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) 413.257434ms ago: executing program 3 (id=28): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 412.424245ms ago: executing program 2 (id=37): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/27], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 176.585049ms ago: executing program 3 (id=29): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8510, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) r7 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 159.52707ms ago: executing program 2 (id=31): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xf, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x9, 0xff, 0x7, 0x0, 0x62, 0xdb71b, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x6, 0x8}, 0x14001, 0x0, 0x3, 0x0, 0x200000000081, 0x8, 0x7fff, 0x0, 0x2cb, 0x0, 0x101}, 0x0, 0x40000400e, 0xffffffffffffffff, 0x9) r1 = getpid() r2 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 155.425201ms ago: executing program 0 (id=32): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@bloom_filter={0x1e, 0x0, 0x8000000, 0x81, 0xa000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0xe}, 0x50) 155.971µs ago: executing program 1 (id=33): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbcdba8607ca8e729}, 0x106901, 0x4, 0x0, 0x4, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r13) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 0s ago: executing program 0 (id=34): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18003d3cd53c5a9cce7300000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 76.085571][ T5756] cgroup: Unknown subsys name 'net' [ 76.234585][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.955010][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.395455][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.403719][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.411941][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.422169][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.430113][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.437987][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.507940][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.516451][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.525517][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.546617][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.560243][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.567649][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.575088][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.577817][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.590123][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.599416][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.617516][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.625451][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.625485][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.640625][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.641631][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.655122][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.655714][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.671223][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.060319][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 80.132214][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 80.191058][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 80.257690][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 80.270335][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.279476][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.287282][ T5768] bridge_slave_0: entered allmulticast mode [ 80.294380][ T5768] bridge_slave_0: entered promiscuous mode [ 80.304764][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.312094][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.319392][ T5768] bridge_slave_1: entered allmulticast mode [ 80.326284][ T5768] bridge_slave_1: entered promiscuous mode [ 80.416812][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.468532][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.522626][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.530171][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.538067][ T5776] bridge_slave_0: entered allmulticast mode [ 80.544864][ T5776] bridge_slave_0: entered promiscuous mode [ 80.568442][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.575590][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.583036][ T5771] bridge_slave_0: entered allmulticast mode [ 80.590200][ T5771] bridge_slave_0: entered promiscuous mode [ 80.601543][ T5768] team0: Port device team_slave_0 added [ 80.608082][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.615340][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.623463][ T5771] bridge_slave_1: entered allmulticast mode [ 80.630772][ T5771] bridge_slave_1: entered promiscuous mode [ 80.648274][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.655545][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.663140][ T5776] bridge_slave_1: entered allmulticast mode [ 80.670768][ T5776] bridge_slave_1: entered promiscuous mode [ 80.688913][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.696169][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.703481][ T5777] bridge_slave_0: entered allmulticast mode [ 80.711040][ T5777] bridge_slave_0: entered promiscuous mode [ 80.720166][ T5768] team0: Port device team_slave_1 added [ 80.726254][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.733545][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.741031][ T5777] bridge_slave_1: entered allmulticast mode [ 80.748420][ T5777] bridge_slave_1: entered promiscuous mode [ 80.814400][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.827259][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.846223][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.853726][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.879928][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.894415][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.915445][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.928618][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.940004][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.950342][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.957819][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.983931][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.048308][ T5777] team0: Port device team_slave_0 added [ 81.057802][ T5777] team0: Port device team_slave_1 added [ 81.074343][ T5771] team0: Port device team_slave_0 added [ 81.082557][ T5771] team0: Port device team_slave_1 added [ 81.134111][ T5776] team0: Port device team_slave_0 added [ 81.172849][ T5776] team0: Port device team_slave_1 added [ 81.183540][ T5768] hsr_slave_0: entered promiscuous mode [ 81.191688][ T5768] hsr_slave_1: entered promiscuous mode [ 81.201532][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.208781][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.235258][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.248698][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.255686][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.283158][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.305475][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.312570][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.338842][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.362768][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.370034][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.396415][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.452747][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.460426][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.487383][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.497641][ T52] Bluetooth: hci0: command tx timeout [ 81.500774][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.511126][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.537456][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.626932][ T5771] hsr_slave_0: entered promiscuous mode [ 81.633702][ T5771] hsr_slave_1: entered promiscuous mode [ 81.640147][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.649168][ T5771] Cannot create hsr debugfs directory [ 81.656742][ T52] Bluetooth: hci1: command tx timeout [ 81.686231][ T5777] hsr_slave_0: entered promiscuous mode [ 81.693593][ T5777] hsr_slave_1: entered promiscuous mode [ 81.700411][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.708381][ T5777] Cannot create hsr debugfs directory [ 81.741691][ T52] Bluetooth: hci3: command tx timeout [ 81.741710][ T5775] Bluetooth: hci2: command tx timeout [ 81.747697][ T5776] hsr_slave_0: entered promiscuous mode [ 81.759888][ T5776] hsr_slave_1: entered promiscuous mode [ 81.766207][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.774291][ T5776] Cannot create hsr debugfs directory [ 82.129792][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.154972][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.165702][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.179081][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.284134][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.300260][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.312247][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.323285][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.450786][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.462755][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.482315][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.494315][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.515980][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.581834][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.603767][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.628685][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.636079][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.645871][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.683133][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.690467][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.742044][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.750469][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.757664][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.817827][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.850217][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.857424][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.871357][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.878529][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.000513][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.084572][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.110615][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.163023][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.170378][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.190165][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.197419][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.222878][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.271868][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.279061][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.304367][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.311532][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.443987][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.539415][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.578257][ T52] Bluetooth: hci0: command tx timeout [ 83.610302][ T5768] veth0_vlan: entered promiscuous mode [ 83.626029][ T5768] veth1_vlan: entered promiscuous mode [ 83.734363][ T5777] veth0_vlan: entered promiscuous mode [ 83.736865][ T52] Bluetooth: hci1: command tx timeout [ 83.780715][ T5768] veth0_macvtap: entered promiscuous mode [ 83.806220][ T5768] veth1_macvtap: entered promiscuous mode [ 83.818795][ T52] Bluetooth: hci3: command tx timeout [ 83.822266][ T5777] veth1_vlan: entered promiscuous mode [ 83.830340][ T52] Bluetooth: hci2: command tx timeout [ 83.863721][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.915524][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.954282][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.964763][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.978393][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.987802][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.032799][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.045718][ T5777] veth0_macvtap: entered promiscuous mode [ 84.067304][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.116425][ T5777] veth1_macvtap: entered promiscuous mode [ 84.175351][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.184594][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.230653][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.244511][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.257210][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.305087][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.316420][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.328403][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.337832][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.346040][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.349109][ T5771] veth0_vlan: entered promiscuous mode [ 84.391764][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.401022][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.410271][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.419310][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.462223][ T5776] veth0_vlan: entered promiscuous mode [ 84.489987][ T5771] veth1_vlan: entered promiscuous mode [ 84.530941][ T5776] veth1_vlan: entered promiscuous mode [ 84.649392][ T5771] veth0_macvtap: entered promiscuous mode [ 84.718583][ T5771] veth1_macvtap: entered promiscuous mode [ 84.743591][ T5776] veth0_macvtap: entered promiscuous mode [ 84.754196][ T5829] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 84.762507][ T5829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.796518][ C0] hrtimer: interrupt took 47396 ns [ 85.676827][ T52] Bluetooth: hci0: command tx timeout [ 85.816918][ T52] Bluetooth: hci1: command tx timeout [ 85.936787][ T52] Bluetooth: hci2: command tx timeout [ 85.942268][ T52] Bluetooth: hci3: command tx timeout [ 87.559802][ T5829] team0: Port device geneve0 added [ 87.595288][ T5776] veth1_macvtap: entered promiscuous mode [ 87.610934][ T5829] syz.1.2 (5829) used greatest stack depth: 19688 bytes left [ 87.642637][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.666666][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.696838][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.736677][ T52] Bluetooth: hci0: command tx timeout [ 87.746749][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.807736][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.816667][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.824642][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.896993][ T52] Bluetooth: hci1: command tx timeout [ 87.911613][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.941019][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.967923][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.986969][ T5775] Bluetooth: hci2: command tx timeout [ 87.992631][ T52] Bluetooth: hci3: command tx timeout [ 87.996688][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.044531][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.057808][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.069141][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.079064][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.089574][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.099741][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.110369][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.122273][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.144747][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.153990][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.163117][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.173079][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.185402][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.188712][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.205089][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.215018][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.224432][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.235330][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.245446][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.263651][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.279140][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.319754][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.332949][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.342234][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.351365][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.585121][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.618415][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.700573][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.722838][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.822323][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.843763][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.926889][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.934793][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.195117][ T5772] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 89.723652][ T5860] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 89.769233][ T5860] team0: Port device netdevsim0 added [ 89.873093][ T5856] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 90.229775][ T5856] team0: Port device netdevsim0 removed [ 90.341085][ T5856] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 90.371550][ T5859] netlink: 'syz.3.4': attribute type 21 has an invalid length. [ 90.409154][ T52] Bluetooth: hci3: unexpected event 0x0f length: 151 > 4 [ 90.603189][ T5856] syz.3.4 (5856) used greatest stack depth: 19624 bytes left [ 90.743390][ T5860] syz.3.4 (5860) used greatest stack depth: 19400 bytes left [ 91.081009][ T5888] netlink: 71 bytes leftover after parsing attributes in process `syz.1.16'. [ 92.267086][ T5885] netlink: 184 bytes leftover after parsing attributes in process `syz.0.26'. [ 92.279955][ T5885] team0: entered allmulticast mode [ 92.285142][ T5885] team_slave_0: entered allmulticast mode [ 92.299394][ T174] cfg80211: failed to load regulatory.db [ 92.303153][ T5885] team_slave_1: entered allmulticast mode [ 92.953034][ T52] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4 [ 93.271656][ T5925] [ 93.281350][ T5925] ====================================================== [ 93.288399][ T5925] WARNING: possible circular locking dependency detected [ 93.295458][ T5925] syzkaller #0 Not tainted [ 93.299904][ T5925] ------------------------------------------------------ [ 93.306960][ T5925] syz.0.34/5925 is trying to acquire lock: [ 93.312790][ T5925] ffff8880b8f37de8 (stock_lock){..-.}-{2:2}, at: obj_cgroup_charge+0xed/0x630 [ 93.321816][ T5925] [ 93.321816][ T5925] but task is already holding lock: [ 93.329230][ T5925] ffff888030eab238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xd60 [ 93.338289][ T5925] [ 93.338289][ T5925] which lock already depends on the new lock. [ 93.338289][ T5925] [ 93.348800][ T5925] [ 93.348800][ T5925] the existing dependency chain (in reverse order) is: [ 93.357914][ T5925] [ 93.357914][ T5925] -> #1 (&trie->lock){-.-.}-{2:2}: [ 93.365383][ T5925] _raw_spin_lock_irqsave+0xb4/0x100 [ 93.371312][ T5925] trie_delete_elem+0x94/0x630 [ 93.376725][ T5925] 0xffffffffa00009ea [ 93.381248][ T5925] trace_call_bpf+0x333/0x6c0 [ 93.386474][ T5925] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 93.392582][ T5925] perf_trace_lock_acquire+0x342/0x400 [ 93.398587][ T5925] lock_acquire+0x3ef/0x420 [ 93.403655][ T5925] mod_objcg_mlstate+0xad/0x320 [ 93.409049][ T5925] drain_obj_stock+0x154/0x3a0 [ 93.414343][ T5925] refill_obj_stock+0x1fc/0x6a0 [ 93.419721][ T5925] memcg_slab_free_hook+0x123/0x200 [ 93.425448][ T5925] kmem_cache_free+0xe1/0x290 [ 93.430680][ T5925] rcu_core+0x9c1/0x17f0 [ 93.435454][ T5925] handle_softirqs+0x27d/0x820 [ 93.440745][ T5925] __irq_exit_rcu+0xd3/0x190 [ 93.445961][ T5925] irq_exit_rcu+0x9/0x20 [ 93.450731][ T5925] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 93.456904][ T5925] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.463501][ T5925] generic_exec_single+0x477/0x4e0 [ 93.469243][ T5925] smp_call_function_single+0x36d/0x5a0 [ 93.475323][ T5925] event_function_call+0x351/0x650 [ 93.480971][ T5925] perf_ioctl+0x201b/0x24b0 [ 93.486016][ T5925] __se_sys_ioctl+0xfd/0x170 [ 93.491328][ T5925] do_syscall_64+0x55/0xb0 [ 93.496282][ T5925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.502706][ T5925] [ 93.502706][ T5925] -> #0 (stock_lock){..-.}-{2:2}: [ 93.509930][ T5925] __lock_acquire+0x37ef/0x7d80 [ 93.515315][ T5925] lock_acquire+0x19e/0x420 [ 93.520351][ T5925] obj_cgroup_charge+0x10a/0x630 [ 93.525819][ T5925] slab_pre_alloc_hook+0x2e2/0x300 [ 93.531466][ T5925] __kmem_cache_alloc_node+0x53/0x250 [ 93.537371][ T5925] __kmalloc_node+0xa6/0x240 [ 93.542496][ T5925] bpf_map_kmalloc_node+0xbc/0x1b0 [ 93.548144][ T5925] trie_update_elem+0x172/0xd60 [ 93.553536][ T5925] bpf_map_update_value+0x64b/0x710 [ 93.559262][ T5925] map_update_elem+0x586/0x710 [ 93.564568][ T5925] __sys_bpf+0x6b5/0x890 [ 93.569429][ T5925] __x64_sys_bpf+0x7c/0x90 [ 93.574373][ T5925] do_syscall_64+0x55/0xb0 [ 93.579322][ T5925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.585748][ T5925] [ 93.585748][ T5925] other info that might help us debug this: [ 93.585748][ T5925] [ 93.596257][ T5925] Possible unsafe locking scenario: [ 93.596257][ T5925] [ 93.603803][ T5925] CPU0 CPU1 [ 93.609191][ T5925] ---- ---- [ 93.614734][ T5925] lock(&trie->lock); [ 93.618950][ T5925] lock(stock_lock); [ 93.625461][ T5925] lock(&trie->lock); [ 93.632058][ T5925] lock(stock_lock); [ 93.636048][ T5925] [ 93.636048][ T5925] *** DEADLOCK *** [ 93.636048][ T5925] [ 93.644198][ T5925] 2 locks held by syz.0.34/5925: [ 93.649146][ T5925] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x408/0x710 [ 93.659079][ T5925] #1: ffff888030eab238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xd60 [ 93.668582][ T5925] [ 93.668582][ T5925] stack backtrace: [ 93.674471][ T5925] CPU: 1 PID: 5925 Comm: syz.0.34 Not tainted syzkaller #0 [ 93.681876][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.692030][ T5925] Call Trace: [ 93.695315][ T5925] [ 93.698258][ T5925] dump_stack_lvl+0x18c/0x250 [ 93.702948][ T5925] ? load_image+0x420/0x420 [ 93.707557][ T5925] ? show_regs_print_info+0x20/0x20 [ 93.712862][ T5925] ? print_circular_bug+0x12b/0x1a0 [ 93.718075][ T5925] check_noncircular+0x2fc/0x400 [ 93.723029][ T5925] ? print_deadlock_bug+0x5d0/0x5d0 [ 93.728506][ T5925] ? lockdep_lock+0xf5/0x230 [ 93.733222][ T5925] ? _find_first_zero_bit+0xd6/0x100 [ 93.738524][ T5925] __lock_acquire+0x37ef/0x7d80 [ 93.743395][ T5925] ? verify_lock_unused+0x140/0x140 [ 93.748705][ T5925] ? verify_lock_unused+0x140/0x140 [ 93.753913][ T5925] ? verify_lock_unused+0x140/0x140 [ 93.759125][ T5925] lock_acquire+0x19e/0x420 [ 93.763641][ T5925] ? obj_cgroup_charge+0xed/0x630 [ 93.768678][ T5925] ? read_lock_is_recursive+0x20/0x20 [ 93.774066][ T5925] obj_cgroup_charge+0x10a/0x630 [ 93.779017][ T5925] ? obj_cgroup_charge+0xed/0x630 [ 93.784058][ T5925] ? get_obj_cgroup_from_current+0xd4/0x280 [ 93.789961][ T5925] ? __lock_acquire+0x7d80/0x7d80 [ 93.794994][ T5925] ? obj_cgroup_charge+0xed/0x630 [ 93.800032][ T5925] ? mod_objcg_mlstate+0x320/0x320 [ 93.805240][ T5925] ? percpu_ref_tryget+0x15/0x180 [ 93.810298][ T5925] ? percpu_ref_tryget+0x15/0x180 [ 93.815348][ T5925] ? get_obj_cgroup_from_current+0xd4/0x280 [ 93.821340][ T5925] slab_pre_alloc_hook+0x2e2/0x300 [ 93.826469][ T5925] ? __rwlock_init+0x150/0x150 [ 93.831253][ T5925] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 93.836559][ T5925] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 93.841897][ T5925] __kmem_cache_alloc_node+0x53/0x250 [ 93.847369][ T5925] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 93.852693][ T5925] __kmalloc_node+0xa6/0x240 [ 93.857289][ T5925] ? _raw_spin_lock+0x40/0x40 [ 93.861986][ T5925] bpf_map_kmalloc_node+0xbc/0x1b0 [ 93.867124][ T5925] trie_update_elem+0x172/0xd60 [ 93.871989][ T5925] ? __lock_acquire+0x7d80/0x7d80 [ 93.877114][ T5925] bpf_map_update_value+0x64b/0x710 [ 93.882431][ T5925] map_update_elem+0x586/0x710 [ 93.887222][ T5925] __sys_bpf+0x6b5/0x890 [ 93.891475][ T5925] ? bpf_link_show_fdinfo+0x390/0x390 [ 93.896882][ T5925] ? lock_chain_count+0x20/0x20 [ 93.901775][ T5925] __x64_sys_bpf+0x7c/0x90 [ 93.906225][ T5925] do_syscall_64+0x55/0xb0 [ 93.910739][ T5925] ? clear_bhb_loop+0x40/0x90 [ 93.915424][ T5925] ? clear_bhb_loop+0x40/0x90 [ 93.920109][ T5925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.926011][ T5925] RIP: 0033:0x7f59a5f9e019 [ 93.930438][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.950138][ T5925] RSP: 002b:00007f59a6f5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.958590][ T5925] RAX: ffffffffffffffda RBX: 00007f59a6225fa0 RCX: 00007f59a5f9e019 [ 93.966569][ T5925] RDX: 0000000000000020 RSI: 00002000000004c0 RDI: 0000000000000002 [ 93.974554][ T5925] RBP: 00007f59a603500c R08: 0000000000000000 R09: 0000000000000000 [ 93.982549][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.990589][ T5925] R13: 00007f59a6226038 R14: 00007f59a6225fa0 R15: 00007fff495b0658 [ 93.998669][ T5925] [ 94.457399][ T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 94.465803][ T52] Bluetooth: hci3: Injecting HCI hardware error event [ 94.473101][ T5775] Bluetooth: hci3: hardware error 0x00 [ 96.536645][ T5775] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 97.016642][ T5775] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 97.025056][ T5775] Bluetooth: hci1: Injecting HCI hardware error event [ 97.034420][ T52] Bluetooth: hci1: hardware error 0x00 [ 99.096602][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110