last executing test programs: 869.74399ms ago: executing program 0 (id=1): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x5e7, 0x7, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x8}, 0x8080, 0xfffffffffffffffe, 0x0, 0x0, 0x7fffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000340)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000c80)=[{0xe0, 0x0, 0x3, "cd9cca44ab14f05bd8153a65f6151f2520e74516febc99cf5432835c999cc28b9556f69f4d546dc3558e9fa1ef4104f82f4f1f2156b8e1de97ac529075362f999d1de239ca54aaa1c02c5818a3b882406dd49434e0ccdd6b3ca58b232cb7f4b0d2f87d9b9da47c2b968563b6497120548e63200e74cf31f853b0e3dc850845cef810f9589ec138dcb152013cd68be8675b55c65cb556e1cb7c780fd1b3e3fa6551e013f229c7ae8736532a8f33c03f1e38dcf9334f7395f96e7f81d3e1a7aac8f2c103547e367054d5ccd878a923ee27"}], 0xe0}, 0x41) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e80), 0x4) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000c0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f0000000500)="b4", &(0x7f0000000400)=""/198}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000580)=""/65, 0x41}], 0x2}, 0x10002) 490.643283ms ago: executing program 1 (id=2): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000bcc2a3c31f32d31b0fb54b7bdb0f7b262000000000000000000000000007919a800000000009500000000000000600697b224fbbd7eb6d0d9f6de9119d400cbb75600ae6c4840c65c5909518b02a882546fbb0127248740092d6b43010a7118b39d47b7c8d6d64b3a7271354c30d5eaca5fd42b208287ccfcbc5f5befc556874e1e52354cbcffbb847638d0e04fbac6116bd07f804634b24785daf5762700c60ace7f1df16230a513cf970aaf14c3938d1cfb10fec93a13c49a599458bc21a31421fafb4252100c98032573d64d2afb"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001500)=""/4073, 0xfe9}, {&(0x7f0000001180)=""/192, 0xc0}, {&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f0000003640)=""/4103, 0x1007}, {&(0x7f00000013c0)=""/247, 0xf7}], 0x5}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4460, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x3, 0x8001}, 0x101000, 0x2d, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xfffffffa, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8941, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) 367.649893ms ago: executing program 2 (id=3): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6, 0x0, 0x100}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xbf24319a19d91240) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10001, 0x800000008}, 0x0, 0xc8, 0x0, 0x7, 0x0, 0x0, 0x770a}, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0xc) syz_clone(0x40000000, &(0x7f0000001880)="e1b59301412c202a67914d76ff85e7696262db6aa88627370c0260846c7de54f762cf260f5d82bc12bd1b69e226d049f236ade818ac9544b2fa19a346e10579362d8a228aa1e9a498e31631375a48fcabb480db26436648187ff9e87730e92f956f46443db76c2dc694f219ec394dc8edda0ed6bb7bff3741460aab417ab990cf8033a26860e8639c83728480d71ec779d1d80edf68575c2d44e40188b18b6e907e3782a0ec46b63bfffbb84651bef02ffa5cdbf19e29414b696fb24ff313e032a81f902a04b9f0cfd5db2c1f3ab3fd6d3ee17a03732a4371b85236e7b766c96b6d6f73c5a168b0572", 0xe9, &(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)="f250c9cb753fbb39a165fc1d72d3b5c4543191f50716ffb1de3b93359127f4c06ffdce60b61eee0728bad64652ea788afce08f823ea3a90fb4eaa0c81f75bb43404437d20a03b272b1c86ac1206f84424e31b29a45c44f036e27a41efd23f53ef7a6525f60") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200000001ff0000aa00000000000000007fc5f603ff"], 0xfdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) socket$kcm(0x2, 0x5, 0x84) r6 = gettid() perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x210e, 0x148b0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_config_ext={0xf, 0x2}, 0x14505, 0x32, 0xcb9, 0x3, 0x2, 0xb, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x1}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r7}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xb) 0s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000cf2ddd710c0486c408000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000500000008040000cd0000000140a3005d54d4d60d325e8e9fc6e90e13c6cbd1a6371d7a1a4df6b575f73a465daa56d6b8d427568238c7ec8a8ec08f87de0bf8f907efbe96db4ead379d39780e78bdc0e6628936d668195d17d285ce29845e0c03a95e236a1a90c18a9366382981636e66feaa8e6d23779bbc7ab2500ab56fc7c24e8b2b795623367eeef043993dfc19bbab8eb6f814b56f2d21c52eeab72e5eac6f8fae39868056368aa621204d0bbfc505381b51efe570d5a5df31b54bc840834ba7413ed6d9135fbb7337", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/139}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4, @perf_bp={0x0}, 0x4, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7498, 0x0, 0x1000000000000}, 0x0, 0x7fc, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x408, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6680, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12) r8 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x0, 0x0, 0xcf, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0xf, '\x00', r9, 0xffffffffffffffff, 0x3, 0x4}, 0x50) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000000000000"], 0x18}, 0x41) close(r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[], 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 75.441431][ T5835] cgroup: Unknown subsys name 'net' [ 75.533278][ T5835] cgroup: Unknown subsys name 'cpuset' [ 75.542079][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.941956][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.824974][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.833641][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.855175][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.863666][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.863980][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.878111][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.879858][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.885835][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.894175][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.907831][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.917892][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.927171][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.935649][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.943040][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.945850][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.952070][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.967888][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.975920][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.984132][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.006713][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.006906][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.014888][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.021739][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.037173][ T5168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.041592][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.716949][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 81.770324][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 81.916715][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 82.008796][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 82.139921][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 82.168286][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.175562][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.184752][ T5846] bridge_slave_0: entered allmulticast mode [ 82.192186][ T5846] bridge_slave_0: entered promiscuous mode [ 82.241685][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.251864][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.259527][ T5846] bridge_slave_1: entered allmulticast mode [ 82.266521][ T5846] bridge_slave_1: entered promiscuous mode [ 82.313161][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.320807][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.328430][ T5852] bridge_slave_0: entered allmulticast mode [ 82.335419][ T5852] bridge_slave_0: entered promiscuous mode [ 82.395462][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.403969][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.411598][ T5852] bridge_slave_1: entered allmulticast mode [ 82.419655][ T5852] bridge_slave_1: entered promiscuous mode [ 82.442602][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.452196][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.459555][ T5848] bridge_slave_0: entered allmulticast mode [ 82.466597][ T5848] bridge_slave_0: entered promiscuous mode [ 82.489722][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.496954][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.504284][ T5845] bridge_slave_0: entered allmulticast mode [ 82.511872][ T5845] bridge_slave_0: entered promiscuous mode [ 82.535598][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.552573][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.560497][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.567997][ T5848] bridge_slave_1: entered allmulticast mode [ 82.575017][ T5848] bridge_slave_1: entered promiscuous mode [ 82.582152][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.589621][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.596807][ T5845] bridge_slave_1: entered allmulticast mode [ 82.604011][ T5845] bridge_slave_1: entered promiscuous mode [ 82.625554][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.636766][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.698870][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.746661][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.760002][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.782157][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.828265][ T5846] team0: Port device team_slave_0 added [ 82.846669][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.854537][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.862807][ T5854] bridge_slave_0: entered allmulticast mode [ 82.870857][ T5854] bridge_slave_0: entered promiscuous mode [ 82.905438][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.918539][ T5852] team0: Port device team_slave_0 added [ 82.926154][ T5846] team0: Port device team_slave_1 added [ 82.944631][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.951855][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.959633][ T5854] bridge_slave_1: entered allmulticast mode [ 82.966651][ T5854] bridge_slave_1: entered promiscuous mode [ 82.976576][ T5848] team0: Port device team_slave_0 added [ 82.986297][ T5848] team0: Port device team_slave_1 added [ 83.022788][ T5852] team0: Port device team_slave_1 added [ 83.042517][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.050028][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.058269][ T5853] Bluetooth: hci1: command tx timeout [ 83.076470][ T5168] Bluetooth: hci0: command tx timeout [ 83.081946][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.125683][ T5845] team0: Port device team_slave_0 added [ 83.137527][ T5168] Bluetooth: hci2: command tx timeout [ 83.137623][ T5849] Bluetooth: hci3: command tx timeout [ 83.149034][ T5853] Bluetooth: hci4: command tx timeout [ 83.172137][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.179270][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.205792][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.253678][ T5845] team0: Port device team_slave_1 added [ 83.260228][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.268177][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.294482][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.307131][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.314200][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.340186][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.363197][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.377642][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.389125][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.396119][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.424012][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.463772][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.471131][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.497231][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.520203][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.527175][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.554176][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.584821][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.592631][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.618925][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.694259][ T5846] hsr_slave_0: entered promiscuous mode [ 83.701244][ T5846] hsr_slave_1: entered promiscuous mode [ 83.712591][ T5854] team0: Port device team_slave_0 added [ 83.724145][ T5852] hsr_slave_0: entered promiscuous mode [ 83.731490][ T5852] hsr_slave_1: entered promiscuous mode [ 83.737992][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.745826][ T5852] Cannot create hsr debugfs directory [ 83.799184][ T5854] team0: Port device team_slave_1 added [ 83.902422][ T5848] hsr_slave_0: entered promiscuous mode [ 83.909196][ T5848] hsr_slave_1: entered promiscuous mode [ 83.915217][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.922830][ T5848] Cannot create hsr debugfs directory [ 83.930281][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.937241][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.963736][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.986228][ T5845] hsr_slave_0: entered promiscuous mode [ 83.992522][ T5845] hsr_slave_1: entered promiscuous mode [ 83.999370][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.006953][ T5845] Cannot create hsr debugfs directory [ 84.041492][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.048729][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.075780][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.254865][ T5854] hsr_slave_0: entered promiscuous mode [ 84.261988][ T5854] hsr_slave_1: entered promiscuous mode [ 84.270133][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.277902][ T5854] Cannot create hsr debugfs directory [ 84.705948][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.733135][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.751452][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.769405][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.801934][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.832696][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.844017][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.856003][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.927040][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.947970][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.959093][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.989198][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.084353][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.114722][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.138324][ T5853] Bluetooth: hci1: command tx timeout [ 85.143850][ T5849] Bluetooth: hci0: command tx timeout [ 85.147634][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.186637][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.204376][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.217836][ T5849] Bluetooth: hci2: command tx timeout [ 85.223298][ T5849] Bluetooth: hci3: command tx timeout [ 85.227727][ T5853] Bluetooth: hci4: command tx timeout [ 85.229254][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.245873][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.257169][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.384735][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.468883][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.480226][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.499628][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.529480][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.536865][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.546962][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.554158][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.588430][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.614484][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.632283][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.639421][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.670631][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.680971][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.688106][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.700753][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.707946][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.724130][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.731427][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.840545][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.871337][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.894741][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.901976][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.912051][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.919329][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.940322][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.003012][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.095906][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.103198][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.126922][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.134156][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.283536][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.569677][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.596937][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.783816][ T5846] veth0_vlan: entered promiscuous mode [ 86.822742][ T1208] cfg80211: failed to load regulatory.db [ 86.834352][ T5848] veth0_vlan: entered promiscuous mode [ 86.871589][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.887187][ T5846] veth1_vlan: entered promiscuous mode [ 86.925383][ T5848] veth1_vlan: entered promiscuous mode [ 86.980290][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.013340][ T5845] veth0_vlan: entered promiscuous mode [ 87.054121][ T5846] veth0_macvtap: entered promiscuous mode [ 87.065792][ T5846] veth1_macvtap: entered promiscuous mode [ 87.077119][ T5845] veth1_vlan: entered promiscuous mode [ 87.124180][ T5854] veth0_vlan: entered promiscuous mode [ 87.143661][ T5848] veth0_macvtap: entered promiscuous mode [ 87.157031][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.173316][ T5854] veth1_vlan: entered promiscuous mode [ 87.195891][ T5848] veth1_macvtap: entered promiscuous mode [ 87.215171][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.223041][ T5853] Bluetooth: hci1: command tx timeout [ 87.223138][ T5168] Bluetooth: hci0: command tx timeout [ 87.244703][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.254588][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.264368][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.273760][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.298774][ T5168] Bluetooth: hci4: command tx timeout [ 87.304235][ T5168] Bluetooth: hci3: command tx timeout [ 87.310164][ T5853] Bluetooth: hci2: command tx timeout [ 87.318924][ T5845] veth0_macvtap: entered promiscuous mode [ 87.338710][ T5854] veth0_macvtap: entered promiscuous mode [ 87.366887][ T5845] veth1_macvtap: entered promiscuous mode [ 87.383084][ T5854] veth1_macvtap: entered promiscuous mode [ 87.396791][ T5852] veth0_vlan: entered promiscuous mode [ 87.409007][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.434989][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.452909][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.483163][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.492614][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.502577][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.511453][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.520231][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.534295][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.547231][ T5852] veth1_vlan: entered promiscuous mode [ 87.603912][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.604357][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.619634][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.631521][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.640572][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.649386][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.669689][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.732386][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.741500][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.750951][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.759705][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.790545][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.800073][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.873599][ T5852] veth0_macvtap: entered promiscuous mode [ 87.900244][ T5852] veth1_macvtap: entered promiscuous mode [ 87.927198][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.981237][ T2120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.985289][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.001273][ T2120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.013187][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.073010][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.082370][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.092593][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.101933][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.144426][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.167674][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.211689][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.221171][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.329438][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.343575][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.366147][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.389004][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.546893][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.557581][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.566956][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.602248][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.617378][ C1] hrtimer: interrupt took 66349 ns [ 88.713285][ T2120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.726790][ T5979] pim6reg: tun_chr_ioctl cmd 1074025680 [ 88.735954][ T2120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.019628][ C1] ================================================================== [ 89.027749][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x677/0xcf0 [ 89.035599][ C1] Write of size 8 at addr ffff888143fd0a58 by task syz.1.2/5975 [ 89.043251][ C1] [ 89.045634][ C1] CPU: 1 UID: 0 PID: 5975 Comm: syz.1.2 Not tainted 6.16.0-rc6-syzkaller-g5345e64760d3 #0 PREEMPT(full) [ 89.045662][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.045682][ C1] Call Trace: [ 89.045689][ C1] [ 89.045698][ C1] dump_stack_lvl+0x189/0x250 [ 89.045725][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 89.045749][ C1] ? rcu_is_watching+0x15/0xb0 [ 89.045770][ C1] ? __kasan_check_byte+0x12/0x40 [ 89.045790][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.045812][ C1] ? rcu_is_watching+0x15/0xb0 [ 89.045832][ C1] ? lock_release+0x4b/0x3e0 [ 89.045853][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 89.045877][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 89.045901][ C1] print_report+0xca/0x230 [ 89.045919][ C1] ? __bpf_get_stackid+0x677/0xcf0 [ 89.045939][ C1] kasan_report+0x118/0x150 [ 89.045959][ C1] ? __bpf_get_stackid+0x677/0xcf0 [ 89.045981][ C1] ? sysvec_apic_timer_interrupt+0xe/0xc0 [ 89.046006][ C1] __bpf_get_stackid+0x677/0xcf0 [ 89.046032][ C1] ? bpf_prog_b724608cae728045+0x27/0x2f [ 89.046054][ C1] bpf_get_stackid_raw_tp+0x196/0x210 [ 89.046081][ C1] bpf_prog_b724608cae728045+0x27/0x2f [ 89.046096][ C1] bpf_trace_run2+0x284/0x4b0 [ 89.046120][ C1] ? irqentry_exit+0x74/0x90 [ 89.046142][ C1] ? bpf_trace_run2+0x186/0x4b0 [ 89.046167][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 89.046192][ C1] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 89.046229][ C1] ? rcu_core+0xc34/0x1710 [ 89.046248][ C1] ? rcu_core+0xc34/0x1710 [ 89.046264][ C1] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 89.046289][ C1] kfree+0x3a0/0x440 [ 89.046307][ C1] ? rcu_core+0xc34/0x1710 [ 89.046326][ C1] slab_free_after_rcu_debug+0x60/0x2a0 [ 89.046350][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 89.046374][ C1] ? rcu_core+0xc34/0x1710 [ 89.046392][ C1] rcu_core+0xca8/0x1710 [ 89.046418][ C1] ? __pfx_rcu_core+0x10/0x10 [ 89.046437][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 89.046459][ C1] ? sched_clock_cpu+0x74/0x430 [ 89.046478][ C1] ? ktime_get+0x3e/0x1f0 [ 89.046501][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 89.046525][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 89.046543][ C1] ? __local_bh_disable_ip+0xf1/0x190 [ 89.046564][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 89.046590][ C1] handle_softirqs+0x283/0x870 [ 89.046612][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 89.046635][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 89.046660][ C1] __irq_exit_rcu+0xca/0x1f0 [ 89.046680][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 89.046705][ C1] irq_exit_rcu+0x9/0x30 [ 89.046723][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 89.046745][ C1] [ 89.046752][ C1] [ 89.046759][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.046781][ C1] RIP: 0010:kasan_check_range+0x9f/0x2c0 [ 89.046802][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 89.046819][ C1] RSP: 0018:ffffc900044dee68 EFLAGS: 00000246 [ 89.046837][ C1] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff8215d67f [ 89.046851][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0000c7f634 [ 89.046863][ C1] RBP: 0000000000000000 R08: ffffea0000c7f637 R09: 1ffffd400018fec6 [ 89.046877][ C1] R10: dffffc0000000000 R11: fffff9400018fec6 R12: 0000000000000001 [ 89.046890][ C1] R13: 0000000000000000 R14: fffff9400018fec7 R15: 1ffffd400018fec6 [ 89.046908][ C1] ? set_page_refcounted+0x4f/0x160 [ 89.046935][ C1] set_page_refcounted+0x4f/0x160 [ 89.046957][ C1] alloc_pages_bulk_noprof+0x570/0x710 [ 89.046983][ C1] ? alloc_pages_noprof+0xbe/0x190 [ 89.047005][ C1] kasan_populate_vmalloc+0xba/0x1a0 [ 89.047034][ C1] alloc_vmap_area+0xd51/0x1490 [ 89.047060][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 89.047078][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.047106][ C1] ? bpf_prog_calc_tag+0xb9/0x620 [ 89.047125][ C1] __get_vm_area_node+0x1f8/0x300 [ 89.047147][ C1] __vmalloc_node_range_noprof+0x301/0x12f0 [ 89.047169][ C1] ? bpf_prog_calc_tag+0xb9/0x620 [ 89.047206][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 89.047228][ C1] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 89.047258][ C1] ? bpf_prog_calc_tag+0xb9/0x620 [ 89.047276][ C1] vmalloc_noprof+0xb2/0xf0 [ 89.047295][ C1] ? bpf_prog_calc_tag+0xb9/0x620 [ 89.047314][ C1] bpf_prog_calc_tag+0xb9/0x620 [ 89.047328][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.047353][ C1] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 89.047372][ C1] ? check_btf_info+0x30e/0x22a0 [ 89.047396][ C1] ? check_btf_info+0x315/0x22a0 [ 89.047419][ C1] ? check_btf_info+0x766/0x22a0 [ 89.047440][ C1] ? irqentry_exit+0x74/0x90 [ 89.047463][ C1] resolve_pseudo_ldimm64+0xbc/0xc50 [ 89.047492][ C1] ? __pfx_check_btf_info+0x10/0x10 [ 89.047516][ C1] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 89.047541][ C1] ? check_subprogs+0x5a1/0x670 [ 89.047570][ C1] bpf_check+0x1c58/0x1d2e0 [ 89.047595][ C1] ? perf_tp_event+0x664/0x1380 [ 89.047619][ C1] ? __pfx_perf_tp_event+0x10/0x10 [ 89.047658][ C1] ? irqentry_enter+0x3d/0x60 [ 89.047690][ C1] ? perf_trace_preemptirq_template+0x280/0x340 [ 89.047717][ C1] ? irqentry_enter+0x3d/0x60 [ 89.047741][ C1] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 89.047768][ C1] ? __pfx_bpf_check+0x10/0x10 [ 89.047790][ C1] ? ktime_get_with_offset+0x8c/0x2a0 [ 89.047818][ C1] ? irqentry_exit+0x74/0x90 [ 89.047840][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.047864][ C1] ? __pfx_read_tsc+0x10/0x10 [ 89.047883][ C1] ? __asan_memset+0x22/0x50 [ 89.047907][ C1] ? bpf_obj_name_cpy+0x194/0x1e0 [ 89.047928][ C1] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 89.047945][ C1] ? security_bpf_prog_load+0x7f/0x310 [ 89.047969][ C1] bpf_prog_load+0x1318/0x1930 [ 89.047993][ C1] ? __pfx_bpf_prog_load+0x10/0x10 [ 89.048020][ C1] ? bpf_lsm_bpf+0x9/0x20 [ 89.048034][ C1] ? security_bpf+0x7e/0x300 [ 89.048057][ C1] __sys_bpf+0x528/0x870 [ 89.048074][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 89.048105][ C1] __x64_sys_bpf+0x7c/0x90 [ 89.048130][ C1] do_syscall_64+0xfa/0x3b0 [ 89.048154][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.048172][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.048191][ C1] ? clear_bhb_loop+0x60/0xb0 [ 89.048219][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.048237][ C1] RIP: 0033:0x7f1cabb8e9a9 [ 89.048254][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.048270][ C1] RSP: 002b:00007f1cac9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.048291][ C1] RAX: ffffffffffffffda RBX: 00007f1cabdb5fa0 RCX: 00007f1cabb8e9a9 [ 89.048305][ C1] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 89.048318][ C1] RBP: 00007f1cabc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 89.048330][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.048340][ C1] R13: 0000000000000000 R14: 00007f1cabdb5fa0 R15: 00007ffee0b40348 [ 89.048361][ C1] [ 89.048368][ C1] [ 89.759439][ C1] Allocated by task 5979: [ 89.763757][ C1] kasan_save_track+0x3e/0x80 [ 89.768443][ C1] __kasan_kmalloc+0x93/0xb0 [ 89.773046][ C1] __kmalloc_node_noprof+0x276/0x4e0 [ 89.778339][ C1] bpf_map_area_alloc+0x64/0x180 [ 89.783292][ C1] prealloc_elems_and_freelist+0x86/0x1d0 [ 89.789019][ C1] stack_map_alloc+0x33f/0x4c0 [ 89.793807][ C1] map_create+0xaa0/0x1310 [ 89.798221][ C1] __sys_bpf+0x60f/0x870 [ 89.802457][ C1] __x64_sys_bpf+0x7c/0x90 [ 89.806872][ C1] do_syscall_64+0xfa/0x3b0 [ 89.811373][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.817262][ C1] [ 89.819692][ C1] The buggy address belongs to the object at ffff888143fd0800 [ 89.819692][ C1] which belongs to the cache kmalloc-cg-1k of size 1024 [ 89.834176][ C1] The buggy address is located 24 bytes to the right of [ 89.834176][ C1] allocated 576-byte region [ffff888143fd0800, ffff888143fd0a40) [ 89.848777][ C1] [ 89.851094][ C1] The buggy address belongs to the physical page: [ 89.857507][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x143fd0 [ 89.866363][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.874879][ C1] memcg:ffff88814cb20d01 [ 89.879224][ C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 89.886924][ C1] page_type: f5(slab) [ 89.890934][ C1] raw: 057ff00000000040 ffff88801a44b280 dead000000000122 0000000000000000 [ 89.899642][ C1] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff88814cb20d01 [ 89.908409][ C1] head: 057ff00000000040 ffff88801a44b280 dead000000000122 0000000000000000 [ 89.917075][ C1] head: 0000000000000000 0000000080100010 00000000f5000000 ffff88814cb20d01 [ 89.925741][ C1] head: 057ff00000000003 ffffea00050ff401 00000000ffffffff 00000000ffffffff [ 89.934409][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 89.943083][ C1] page dumped because: kasan: bad access detected [ 89.949498][ C1] page_owner tracks the page as allocated [ 89.955228][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5854, tgid 5854 (syz-executor), ts 88680071975, free_ts 62656261060 [ 89.974768][ C1] post_alloc_hook+0x240/0x2a0 [ 89.979545][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 89.985121][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 89.991030][ C1] allocate_slab+0x65/0x3b0 [ 89.995592][ C1] ___slab_alloc+0xbfc/0x1480 [ 90.000280][ C1] __kmalloc_cache_node_noprof+0x29a/0x3d0 [ 90.006085][ C1] mem_cgroup_css_alloc+0x4b2/0x1f20 [ 90.011370][ C1] cgroup_apply_control_enable+0x3d1/0xa80 [ 90.017352][ C1] cgroup_mkdir+0xc40/0xe60 [ 90.021961][ C1] kernfs_iop_mkdir+0x211/0x350 [ 90.026930][ C1] vfs_mkdir+0x306/0x510 [ 90.031217][ C1] do_mkdirat+0x247/0x590 [ 90.035601][ C1] __x64_sys_mkdirat+0x87/0xa0 [ 90.040388][ C1] do_syscall_64+0xfa/0x3b0 [ 90.044912][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.050817][ C1] page last free pid 5696 tgid 5696 stack trace: [ 90.057139][ C1] __free_frozen_pages+0xc71/0xe70 [ 90.062247][ C1] __put_partials+0x161/0x1c0 [ 90.066941][ C1] put_cpu_partial+0x17c/0x250 [ 90.071716][ C1] __slab_free+0x2f7/0x400 [ 90.076135][ C1] qlist_free_all+0x97/0x140 [ 90.080764][ C1] kasan_quarantine_reduce+0x148/0x160 [ 90.086231][ C1] __kasan_slab_alloc+0x22/0x80 [ 90.091080][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 90.096536][ C1] ptlock_alloc+0x20/0x70 [ 90.100859][ C1] pte_alloc_one+0x7d/0x170 [ 90.105397][ C1] __handle_mm_fault+0x294d/0x5620 [ 90.110518][ C1] handle_mm_fault+0x40a/0x8e0 [ 90.115286][ C1] do_user_addr_fault+0xa81/0x1390 [ 90.120412][ C1] exc_page_fault+0x76/0xf0 [ 90.125024][ C1] asm_exc_page_fault+0x26/0x30 [ 90.129884][ C1] [ 90.132202][ C1] Memory state around the buggy address: [ 90.137824][ C1] ffff888143fd0900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.145882][ C1] ffff888143fd0980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.153943][ C1] >ffff888143fd0a00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 90.162046][ C1] ^ [ 90.168977][ C1] ffff888143fd0a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.177121][ C1] ffff888143fd0b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.185177][ C1] ================================================================== [ 90.193459][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.200685][ C1] CPU: 1 UID: 0 PID: 5975 Comm: syz.1.2 Not tainted 6.16.0-rc6-syzkaller-g5345e64760d3 #0 PREEMPT(full) [ 90.212177][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.222252][ C1] Call Trace: [ 90.225552][ C1] [ 90.228432][ C1] dump_stack_lvl+0x99/0x250 [ 90.233140][ C1] ? __asan_memcpy+0x40/0x70 [ 90.237766][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.243085][ C1] ? __pfx__printk+0x10/0x10 [ 90.247726][ C1] panic+0x2db/0x790 [ 90.251671][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.256907][ C1] ? __pfx_panic+0x10/0x10 [ 90.261366][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 90.267391][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 90.273312][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 90.279677][ C1] ? __bpf_get_stackid+0x677/0xcf0 [ 90.284821][ C1] check_panic_on_warn+0x89/0xb0 [ 90.289800][ C1] ? __bpf_get_stackid+0x677/0xcf0 [ 90.294953][ C1] end_report+0x78/0x160 [ 90.299235][ C1] kasan_report+0x129/0x150 [ 90.303789][ C1] ? __bpf_get_stackid+0x677/0xcf0 [ 90.308935][ C1] ? sysvec_apic_timer_interrupt+0xe/0xc0 [ 90.314730][ C1] __bpf_get_stackid+0x677/0xcf0 [ 90.319715][ C1] ? bpf_prog_b724608cae728045+0x27/0x2f [ 90.325379][ C1] bpf_get_stackid_raw_tp+0x196/0x210 [ 90.330794][ C1] bpf_prog_b724608cae728045+0x27/0x2f [ 90.336283][ C1] bpf_trace_run2+0x284/0x4b0 [ 90.341012][ C1] ? irqentry_exit+0x74/0x90 [ 90.345638][ C1] ? bpf_trace_run2+0x186/0x4b0 [ 90.350533][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 90.355772][ C1] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 90.361532][ C1] ? rcu_core+0xc34/0x1710 [ 90.365990][ C1] ? rcu_core+0xc34/0x1710 [ 90.370436][ C1] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 90.376191][ C1] kfree+0x3a0/0x440 [ 90.380136][ C1] ? rcu_core+0xc34/0x1710 [ 90.384591][ C1] slab_free_after_rcu_debug+0x60/0x2a0 [ 90.390206][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 90.396401][ C1] ? rcu_core+0xc34/0x1710 [ 90.400851][ C1] rcu_core+0xca8/0x1710 [ 90.405141][ C1] ? __pfx_rcu_core+0x10/0x10 [ 90.409863][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 90.415100][ C1] ? sched_clock_cpu+0x74/0x430 [ 90.419990][ C1] ? ktime_get+0x3e/0x1f0 [ 90.424367][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 90.430648][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 90.435965][ C1] ? __local_bh_disable_ip+0xf1/0x190 [ 90.441373][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 90.447230][ C1] handle_softirqs+0x283/0x870 [ 90.452031][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 90.456841][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 90.462400][ C1] __irq_exit_rcu+0xca/0x1f0 [ 90.467034][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 90.472273][ C1] irq_exit_rcu+0x9/0x30 [ 90.476549][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 90.482198][ C1] [ 90.485132][ C1] [ 90.488106][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.494106][ C1] RIP: 0010:kasan_check_range+0x9f/0x2c0 [ 90.499744][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 90.519454][ C1] RSP: 0018:ffffc900044dee68 EFLAGS: 00000246 [ 90.525541][ C1] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff8215d67f [ 90.533637][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0000c7f634 [ 90.541724][ C1] RBP: 0000000000000000 R08: ffffea0000c7f637 R09: 1ffffd400018fec6 [ 90.549691][ C1] R10: dffffc0000000000 R11: fffff9400018fec6 R12: 0000000000000001 [ 90.557748][ C1] R13: 0000000000000000 R14: fffff9400018fec7 R15: 1ffffd400018fec6 [ 90.565840][ C1] ? set_page_refcounted+0x4f/0x160 [ 90.571071][ C1] set_page_refcounted+0x4f/0x160 [ 90.576089][ C1] alloc_pages_bulk_noprof+0x570/0x710 [ 90.581555][ C1] ? alloc_pages_noprof+0xbe/0x190 [ 90.586751][ C1] kasan_populate_vmalloc+0xba/0x1a0 [ 90.592167][ C1] alloc_vmap_area+0xd51/0x1490 [ 90.597030][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 90.602317][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 90.608489][ C1] ? bpf_prog_calc_tag+0xb9/0x620 [ 90.613510][ C1] __get_vm_area_node+0x1f8/0x300 [ 90.618532][ C1] __vmalloc_node_range_noprof+0x301/0x12f0 [ 90.624424][ C1] ? bpf_prog_calc_tag+0xb9/0x620 [ 90.629466][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.635836][ C1] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 90.642427][ C1] ? bpf_prog_calc_tag+0xb9/0x620 [ 90.647455][ C1] vmalloc_noprof+0xb2/0xf0 [ 90.651967][ C1] ? bpf_prog_calc_tag+0xb9/0x620 [ 90.657164][ C1] bpf_prog_calc_tag+0xb9/0x620 [ 90.662017][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.667220][ C1] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 90.672676][ C1] ? check_btf_info+0x30e/0x22a0 [ 90.677623][ C1] ? check_btf_info+0x315/0x22a0 [ 90.682559][ C1] ? check_btf_info+0x766/0x22a0 [ 90.687593][ C1] ? irqentry_exit+0x74/0x90 [ 90.692190][ C1] resolve_pseudo_ldimm64+0xbc/0xc50 [ 90.697497][ C1] ? __pfx_check_btf_info+0x10/0x10 [ 90.702707][ C1] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 90.708618][ C1] ? check_subprogs+0x5a1/0x670 [ 90.713477][ C1] bpf_check+0x1c58/0x1d2e0 [ 90.718025][ C1] ? perf_tp_event+0x664/0x1380 [ 90.722872][ C1] ? __pfx_perf_tp_event+0x10/0x10 [ 90.728007][ C1] ? irqentry_enter+0x3d/0x60 [ 90.732693][ C1] ? perf_trace_preemptirq_template+0x280/0x340 [ 90.738950][ C1] ? irqentry_enter+0x3d/0x60 [ 90.743628][ C1] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 90.750227][ C1] ? __pfx_bpf_check+0x10/0x10 [ 90.755002][ C1] ? ktime_get_with_offset+0x8c/0x2a0 [ 90.760551][ C1] ? irqentry_exit+0x74/0x90 [ 90.765148][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.770692][ C1] ? __pfx_read_tsc+0x10/0x10 [ 90.775366][ C1] ? __asan_memset+0x22/0x50 [ 90.779965][ C1] ? bpf_obj_name_cpy+0x194/0x1e0 [ 90.785075][ C1] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 90.790325][ C1] ? security_bpf_prog_load+0x7f/0x310 [ 90.795787][ C1] bpf_prog_load+0x1318/0x1930 [ 90.800552][ C1] ? __pfx_bpf_prog_load+0x10/0x10 [ 90.805666][ C1] ? bpf_lsm_bpf+0x9/0x20 [ 90.810185][ C1] ? security_bpf+0x7e/0x300 [ 90.814909][ C1] __sys_bpf+0x528/0x870 [ 90.819241][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 90.824064][ C1] __x64_sys_bpf+0x7c/0x90 [ 90.828481][ C1] do_syscall_64+0xfa/0x3b0 [ 90.833193][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.839372][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.845537][ C1] ? clear_bhb_loop+0x60/0xb0 [ 90.850310][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.856212][ C1] RIP: 0033:0x7f1cabb8e9a9 [ 90.860646][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.880455][ C1] RSP: 002b:00007f1cac9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.888967][ C1] RAX: ffffffffffffffda RBX: 00007f1cabdb5fa0 RCX: 00007f1cabb8e9a9 [ 90.896970][ C1] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 90.905046][ C1] RBP: 00007f1cabc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 90.913371][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.921350][ C1] R13: 0000000000000000 R14: 00007f1cabdb5fa0 R15: 00007ffee0b40348 [ 90.929328][ C1] [ 90.932626][ C1] Kernel Offset: disabled [ 90.936981][ C1] Rebooting in 86400 seconds..