last executing test programs: 1.804420693s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.744547764s ago: executing program 2 (id=18): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 1.630207944s ago: executing program 3 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x20) 1.538724098s ago: executing program 1 (id=21): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2018, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x50) 1.464600824s ago: executing program 2 (id=22): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020703400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x45) 1.387411123s ago: executing program 0 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) 1.386017129s ago: executing program 4 (id=24): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x4) 1.366329989s ago: executing program 3 (id=25): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x48, &(0x7f0000000580)}, 0x60) 1.23662739s ago: executing program 1 (id=26): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40850) 1.236362439s ago: executing program 2 (id=27): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b030231a6080c000af32c00009dfff1fc0000f800250f02000f00e5aa000017d34460bc24cdb556bd05251e6182949a2756f475ce36c2ed100000000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e66575", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.160471963s ago: executing program 0 (id=28): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.08842987s ago: executing program 1 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfffa, 0x0, &(0x7f0000000680)="bf1ea0e3c19ed614ebadb3161741", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.087600245s ago: executing program 4 (id=30): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) 1.004559957s ago: executing program 3 (id=31): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x6, 0x0, 0x44) 986.409595ms ago: executing program 2 (id=32): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30006001) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, 0x0, 0x0) 893.200738ms ago: executing program 1 (id=33): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4582, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffffffffffffffff, 0xffffffffffffffff}, 0x400, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000380)="9f", 0x1}], 0x1}, 0x3e8) 828.46356ms ago: executing program 0 (id=34): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @link_local}) 783.51816ms ago: executing program 3 (id=35): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001b00)=@nfc_llcp={0xa, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, "0900938b07bde305cbe1656b587ae97d775dfa00dcddf90004773506d96096728b8d71cbf4000040000000000015002800", 0x14}, 0x80, 0x0}, 0x20000000) 729.2052ms ago: executing program 2 (id=36): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x29, 0x0, 0x0) 568.633792ms ago: executing program 3 (id=37): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x11}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x4}, 0x38) 549.068548ms ago: executing program 1 (id=38): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 489.305295ms ago: executing program 3 (id=39): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x16023, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa24, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000035000b50d25a80648c0a94f90724fc60", 0x14}], 0x1}, 0x840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @restrict]}}, 0x0, 0x3a}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000100000000000000000000004d030000000000a00ce2880a0f7da36e2e53d37199f8acff6a71f8c34f0000bc38fe7c4eec921c00481b595e062b24dc69902fec80419885bac78029ae0ef69508b0533cadfdce6149e84a2d5cb4fc1c08bbaed4f3c914a66840abb23378dd4daad14aba6f8de9f21e0c75d041dc85942540db371f707dea4e8b8a010000107a434b5ccd185ebccde7bf17288ab8104dd6028a3567cb8470195898fae51a4f7579d4defc7e9db61b3c42ec210343e9985c1d9d7a6bcaa23a98f8c5b3c5ed125c3bb8b5593e84e25e721a1b464da04a1a29584e890eb9eb6d0c7dcd925a380a6c441c"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000100), 0x0}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x1, 0x5}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000200)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000005f00000000000000180000000000000000000000000000009500000000000000950000f1"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 391.405455ms ago: executing program 4 (id=40): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 390.409769ms ago: executing program 0 (id=41): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 272.382855ms ago: executing program 2 (id=42): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002440)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 231.596484ms ago: executing program 0 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 135.509974ms ago: executing program 1 (id=44): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0xb269e0b9bec3d220, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000003c0)="223258b413da4402bf8f1d9fdb0ec10c4535233440ef1adacd2e3483580775586966e9151cbbc6cf4aae416027fd76095abb4c35e07015530d38744b97c6037052036ab7") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x5}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4010}, 0x18) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 16.47039ms ago: executing program 0 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=46): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x80000000}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. [ 72.043540][ T5819] cgroup: Unknown subsys name 'net' [ 72.162596][ T5819] cgroup: Unknown subsys name 'cpuset' [ 72.171783][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.523714][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.365326][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.371514][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.373510][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.386821][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.387804][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.395006][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.402749][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.415577][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.416754][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.431676][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.431787][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.439141][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.454172][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.461895][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.470649][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.476726][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.485883][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.493729][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.502039][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.509763][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.549551][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.557925][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.566081][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.574123][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.581927][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.088720][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 78.200224][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 78.331873][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 78.414589][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 78.455470][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 78.528256][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.535929][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.547240][ T5840] bridge_slave_0: entered allmulticast mode [ 78.554792][ T5840] bridge_slave_0: entered promiscuous mode [ 78.606267][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.615424][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.622882][ T5832] bridge_slave_0: entered allmulticast mode [ 78.630605][ T5832] bridge_slave_0: entered promiscuous mode [ 78.637682][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.644837][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.652514][ T5840] bridge_slave_1: entered allmulticast mode [ 78.659850][ T5840] bridge_slave_1: entered promiscuous mode [ 78.691848][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.699299][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.706520][ T5832] bridge_slave_1: entered allmulticast mode [ 78.713554][ T5832] bridge_slave_1: entered promiscuous mode [ 78.782206][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.794250][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.830157][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.855420][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.864798][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.874297][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.882109][ T5830] bridge_slave_0: entered allmulticast mode [ 78.889152][ T5830] bridge_slave_0: entered promiscuous mode [ 78.951077][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.958256][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.966115][ T5830] bridge_slave_1: entered allmulticast mode [ 78.973882][ T5830] bridge_slave_1: entered promiscuous mode [ 79.024046][ T5832] team0: Port device team_slave_0 added [ 79.057564][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.065097][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.072595][ T5829] bridge_slave_0: entered allmulticast mode [ 79.080740][ T5829] bridge_slave_0: entered promiscuous mode [ 79.088720][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.095963][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.104016][ T5829] bridge_slave_1: entered allmulticast mode [ 79.111227][ T5829] bridge_slave_1: entered promiscuous mode [ 79.118413][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.125731][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.133140][ T5846] bridge_slave_0: entered allmulticast mode [ 79.140632][ T5846] bridge_slave_0: entered promiscuous mode [ 79.149823][ T5832] team0: Port device team_slave_1 added [ 79.158594][ T5840] team0: Port device team_slave_0 added [ 79.167759][ T5840] team0: Port device team_slave_1 added [ 79.176392][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.189151][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.208982][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.216365][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.224604][ T5846] bridge_slave_1: entered allmulticast mode [ 79.232596][ T5846] bridge_slave_1: entered promiscuous mode [ 79.317422][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.324896][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.351407][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.389445][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.409900][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.416891][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.442894][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.454586][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.464044][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.492415][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.506344][ T5830] team0: Port device team_slave_0 added [ 79.514846][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.528309][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.540424][ T5838] Bluetooth: hci3: command tx timeout [ 79.546090][ T5838] Bluetooth: hci2: command tx timeout [ 79.551661][ T5152] Bluetooth: hci1: command tx timeout [ 79.551678][ T51] Bluetooth: hci0: command tx timeout [ 79.557422][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.570732][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.596983][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.610292][ T5830] team0: Port device team_slave_1 added [ 79.622784][ T5838] Bluetooth: hci4: command tx timeout [ 79.633108][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.718281][ T5846] team0: Port device team_slave_0 added [ 79.728050][ T5846] team0: Port device team_slave_1 added [ 79.735016][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.742244][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.768896][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.782744][ T5829] team0: Port device team_slave_0 added [ 79.828379][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.835650][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.862005][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.875772][ T5829] team0: Port device team_slave_1 added [ 79.911427][ T5832] hsr_slave_0: entered promiscuous mode [ 79.917808][ T5832] hsr_slave_1: entered promiscuous mode [ 79.957838][ T5840] hsr_slave_0: entered promiscuous mode [ 79.964237][ T5840] hsr_slave_1: entered promiscuous mode [ 79.971147][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.978864][ T5840] Cannot create hsr debugfs directory [ 80.003901][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.011362][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.037728][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.051624][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.058618][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.084861][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.182568][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.189797][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.215971][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.227996][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.235107][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.261319][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.311417][ T5830] hsr_slave_0: entered promiscuous mode [ 80.317690][ T5830] hsr_slave_1: entered promiscuous mode [ 80.324423][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.332171][ T5830] Cannot create hsr debugfs directory [ 80.466856][ T5846] hsr_slave_0: entered promiscuous mode [ 80.473250][ T5846] hsr_slave_1: entered promiscuous mode [ 80.480624][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.488222][ T5846] Cannot create hsr debugfs directory [ 80.602043][ T5829] hsr_slave_0: entered promiscuous mode [ 80.608533][ T5829] hsr_slave_1: entered promiscuous mode [ 80.615740][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.623473][ T5829] Cannot create hsr debugfs directory [ 80.926122][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.963520][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.002324][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.036331][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.101027][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.113701][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.143106][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.155150][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.232128][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.252117][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.264443][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.293517][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.387757][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.405938][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.435079][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.446633][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.586611][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.603279][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.619913][ T5838] Bluetooth: hci2: command tx timeout [ 81.625361][ T5838] Bluetooth: hci1: command tx timeout [ 81.631487][ T5152] Bluetooth: hci0: command tx timeout [ 81.631492][ T5841] Bluetooth: hci3: command tx timeout [ 81.650676][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.678267][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.696994][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.704266][ T5152] Bluetooth: hci4: command tx timeout [ 81.715477][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.728092][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.754775][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.762124][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.825740][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.854180][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.861379][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.927455][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.934701][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.018857][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.031145][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.038334][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.062528][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.149007][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.178791][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.241443][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.248745][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.263850][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.271156][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.428909][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.458844][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.498273][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.505428][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.546317][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.564835][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.572031][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.611253][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.701683][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.737060][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.755933][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.763163][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.821870][ T5846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.847547][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.884608][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.891824][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.036393][ T5840] veth0_vlan: entered promiscuous mode [ 83.056459][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.097019][ T5840] veth1_vlan: entered promiscuous mode [ 83.207491][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.314033][ T5840] veth0_macvtap: entered promiscuous mode [ 83.377579][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.386950][ T5832] veth0_vlan: entered promiscuous mode [ 83.399957][ T5840] veth1_macvtap: entered promiscuous mode [ 83.448876][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.495045][ T5832] veth1_vlan: entered promiscuous mode [ 83.507080][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.566272][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.609859][ T5846] veth0_vlan: entered promiscuous mode [ 83.646099][ T5846] veth1_vlan: entered promiscuous mode [ 83.658491][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.675285][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.684065][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.692989][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.702094][ T5152] Bluetooth: hci0: command tx timeout [ 83.702137][ T5152] Bluetooth: hci1: command tx timeout [ 83.702182][ T5152] Bluetooth: hci2: command tx timeout [ 83.709575][ T5838] Bluetooth: hci3: command tx timeout [ 83.765400][ T5832] veth0_macvtap: entered promiscuous mode [ 83.780625][ T5838] Bluetooth: hci4: command tx timeout [ 83.809988][ T5832] veth1_macvtap: entered promiscuous mode [ 83.872866][ T5829] veth0_vlan: entered promiscuous mode [ 83.885872][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.901284][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.943755][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.953533][ T5846] veth0_macvtap: entered promiscuous mode [ 83.975584][ T5829] veth1_vlan: entered promiscuous mode [ 83.985852][ T5846] veth1_macvtap: entered promiscuous mode [ 84.006002][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.025940][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.034369][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.049921][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.066651][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.077684][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.088143][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.097320][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.108291][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.131541][ T5830] veth0_vlan: entered promiscuous mode [ 84.143352][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.153057][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.164184][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.173470][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.218998][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.268721][ T5830] veth1_vlan: entered promiscuous mode [ 84.366386][ T5829] veth0_macvtap: entered promiscuous mode [ 84.400769][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.408729][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.425283][ T5830] veth0_macvtap: entered promiscuous mode [ 84.438679][ T5829] veth1_macvtap: entered promiscuous mode [ 84.455711][ T5830] veth1_macvtap: entered promiscuous mode [ 84.537186][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.570988][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.575331][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.597862][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.611026][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.645419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.656417][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682299][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.689289][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.696486][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.708301][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.741462][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.793685][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.807199][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.818690][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.853590][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.902790][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.941938][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.042668][ T5956] Illegal XDP return value 3399117342 on prog (id 2) dev N/A, expect packet loss! [ 85.184701][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.210743][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.268795][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.285878][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.465576][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.482801][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.491326][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.493175][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.781143][ T5838] Bluetooth: hci3: command tx timeout [ 85.786623][ T5838] Bluetooth: hci2: command tx timeout [ 85.792697][ T5838] Bluetooth: hci1: command tx timeout [ 85.798149][ T5838] Bluetooth: hci0: command tx timeout [ 85.870016][ T5841] Bluetooth: hci4: command tx timeout [ 86.904741][ T43] cfg80211: failed to load regulatory.db [ 86.971297][ T6018] warning: `syz.0.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.404412][ C0] hrtimer: interrupt took 27320 ns [ 87.661666][ T6043] ------------[ cut here ]------------ [ 87.667204][ T6043] verifier bug: expected array map for tail call(1) [ 87.716257][ T6043] WARNING: CPU: 0 PID: 6043 at kernel/bpf/verifier.c:11084 record_func_key+0x2d6/0x490 [ 87.726368][ T6043] Modules linked in: [ 87.730415][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.0.45 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 87.741950][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.752164][ T6043] RIP: 0010:record_func_key+0x2d6/0x490 [ 87.757757][ T6043] Code: 09 cc e8 cd 64 e3 ff 80 3d 78 15 ae 0d 01 74 ba e8 bf 64 e3 ff c6 05 6a 15 ae 0d 01 90 48 c7 c7 e0 e3 91 8b e8 bb 07 a7 ff 90 <0f> 0b 90 90 eb 9f e8 9f 64 e3 ff eb 05 e8 98 64 e3 ff 48 8b 5c 24 [ 87.777704][ T6043] RSP: 0018:ffffc9000452ec70 EFLAGS: 00010246 [ 87.784054][ T6043] RAX: 37a22c7e117b0e00 RBX: dffffc0000000000 RCX: 0000000000080000 [ 87.794506][ T6043] RDX: ffffc90004c82000 RSI: 0000000000004d94 RDI: 0000000000004d95 [ 87.804014][ T6043] RBP: 000000000000000a R08: 0000000000000003 R09: 0000000000000004 [ 87.814878][ T6043] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888030cb6000 [ 87.823595][ T6043] R13: ffff88802f630000 R14: ffff888029e38000 R15: 1ffff110053c7006 [ 87.832668][ T6043] FS: 00007f9cb427f6c0(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 87.842539][ T6043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.849927][ T6043] CR2: 00007f5d54448f98 CR3: 000000007d7d6000 CR4: 00000000003526f0 [ 87.857955][ T6043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.867463][ T6043] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.876108][ T6043] Call Trace: [ 87.879556][ T6043] [ 87.883292][ T6043] check_helper_call+0x2fb8/0x6b60 [ 87.888538][ T6043] ? __pfx_check_helper_call+0x10/0x10 [ 87.894797][ T6043] ? tnum_const+0xd/0x20 [ 87.899100][ T6043] ? __mark_reg_known+0x79/0x240 [ 87.904211][ T6043] do_check+0x95ec/0xe080 [ 87.908588][ T6043] ? unwind_get_return_address+0x4d/0x90 [ 87.914557][ T6043] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 87.920955][ T6043] ? bpf_prog_load+0x1318/0x1930 [ 87.925945][ T6043] ? __x64_sys_bpf+0x7c/0x90 [ 87.930653][ T6043] ? do_syscall_64+0xfa/0x3b0 [ 87.935446][ T6043] ? __pfx_do_check+0x10/0x10 [ 87.940859][ T6043] ? __asan_memset+0x22/0x50 [ 87.945519][ T6043] ? init_func_state+0x1ddf/0x2d20 [ 87.951235][ T6043] do_check_common+0x188f/0x23f0 [ 87.956293][ T6043] bpf_check+0x10252/0x1a5d0 [ 87.961115][ T6043] ? __lock_acquire+0xab9/0xd20 [ 87.966079][ T6043] ? is_bpf_text_address+0x26/0x2b0 [ 87.971401][ T6043] ? is_bpf_text_address+0x292/0x2b0 [ 87.976733][ T6043] ? is_bpf_text_address+0x26/0x2b0 [ 87.982106][ T6043] ? __kernel_text_address+0xd/0x40 [ 87.988072][ T6043] ? unwind_get_return_address+0x4d/0x90 [ 87.994661][ T6043] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 88.000972][ T6043] ? __pfx_bpf_check+0x10/0x10 [ 88.005808][ T6043] ? __lock_acquire+0xab9/0xd20 [ 88.010805][ T6043] ? __pfx___mutex_trylock_common+0x10/0x10 [ 88.016739][ T6043] ? css_rstat_updated+0x1a5/0xca0 [ 88.023142][ T6043] ? __lock_acquire+0xab9/0xd20 [ 88.028081][ T6043] ? ktime_get_with_offset+0x8c/0x2a0 [ 88.033820][ T6043] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 88.040167][ T6043] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.045402][ T6043] ? ktime_get_with_offset+0x8c/0x2a0 [ 88.050922][ T6043] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 88.057215][ T6043] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 88.064071][ T6043] ? bpf_obj_name_cpy+0x194/0x1e0 [ 88.069131][ T6043] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 88.074449][ T6043] ? security_bpf_prog_load+0x7f/0x310 [ 88.080026][ T6043] bpf_prog_load+0x1318/0x1930 [ 88.084879][ T6043] ? __pfx_bpf_prog_load+0x10/0x10 [ 88.091049][ T6043] ? bpf_lsm_bpf+0x9/0x20 [ 88.095427][ T6043] ? security_bpf+0x7e/0x300 [ 88.101306][ T6043] __sys_bpf+0x5f1/0x860 [ 88.105627][ T6043] ? __pfx___sys_bpf+0x10/0x10 [ 88.110657][ T6043] ? rcu_is_watching+0x15/0xb0 [ 88.115494][ T6043] __x64_sys_bpf+0x7c/0x90 [ 88.120088][ T6043] do_syscall_64+0xfa/0x3b0 [ 88.124713][ T6043] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.130018][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.136118][ T6043] ? clear_bhb_loop+0x60/0xb0 [ 88.140883][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.146812][ T6043] RIP: 0033:0x7f9cb338e929 [ 88.151365][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.171159][ T6043] RSP: 002b:00007f9cb427f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.180565][ T6043] RAX: ffffffffffffffda RBX: 00007f9cb35b5fa0 RCX: 00007f9cb338e929 [ 88.189717][ T6043] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 88.197733][ T6043] RBP: 00007f9cb3410b39 R08: 0000000000000000 R09: 0000000000000000 [ 88.206410][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.214477][ T6043] R13: 0000000000000000 R14: 00007f9cb35b5fa0 R15: 00007fff8ee1f7f8 [ 88.222608][ T6043] [ 88.225664][ T6043] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.232973][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.0.45 Not tainted 6.16.0-rc3-syzkaller-gcce3fee729ee #0 PREEMPT(full) [ 88.244286][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.254377][ T6043] Call Trace: [ 88.257689][ T6043] [ 88.260645][ T6043] dump_stack_lvl+0x99/0x250 [ 88.265278][ T6043] ? __asan_memcpy+0x40/0x70 [ 88.269920][ T6043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.275160][ T6043] ? __pfx__printk+0x10/0x10 [ 88.279788][ T6043] panic+0x2db/0x790 [ 88.283730][ T6043] ? __pfx_panic+0x10/0x10 [ 88.288181][ T6043] __warn+0x31b/0x4b0 [ 88.292179][ T6043] ? record_func_key+0x2d6/0x490 [ 88.297143][ T6043] ? record_func_key+0x2d6/0x490 [ 88.302108][ T6043] report_bug+0x2be/0x4f0 [ 88.306482][ T6043] ? record_func_key+0x2d6/0x490 [ 88.311440][ T6043] ? record_func_key+0x2d6/0x490 [ 88.316391][ T6043] ? record_func_key+0x2d8/0x490 [ 88.321351][ T6043] handle_bug+0x84/0x160 [ 88.325614][ T6043] exc_invalid_op+0x1a/0x50 [ 88.330128][ T6043] asm_exc_invalid_op+0x1a/0x20 [ 88.334989][ T6043] RIP: 0010:record_func_key+0x2d6/0x490 [ 88.340553][ T6043] Code: 09 cc e8 cd 64 e3 ff 80 3d 78 15 ae 0d 01 74 ba e8 bf 64 e3 ff c6 05 6a 15 ae 0d 01 90 48 c7 c7 e0 e3 91 8b e8 bb 07 a7 ff 90 <0f> 0b 90 90 eb 9f e8 9f 64 e3 ff eb 05 e8 98 64 e3 ff 48 8b 5c 24 [ 88.360176][ T6043] RSP: 0018:ffffc9000452ec70 EFLAGS: 00010246 [ 88.366267][ T6043] RAX: 37a22c7e117b0e00 RBX: dffffc0000000000 RCX: 0000000000080000 [ 88.374248][ T6043] RDX: ffffc90004c82000 RSI: 0000000000004d94 RDI: 0000000000004d95 [ 88.382236][ T6043] RBP: 000000000000000a R08: 0000000000000003 R09: 0000000000000004 [ 88.390214][ T6043] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888030cb6000 [ 88.398210][ T6043] R13: ffff88802f630000 R14: ffff888029e38000 R15: 1ffff110053c7006 [ 88.406218][ T6043] check_helper_call+0x2fb8/0x6b60 [ 88.411370][ T6043] ? __pfx_check_helper_call+0x10/0x10 [ 88.416862][ T6043] ? tnum_const+0xd/0x20 [ 88.421119][ T6043] ? __mark_reg_known+0x79/0x240 [ 88.426093][ T6043] do_check+0x95ec/0xe080 [ 88.430627][ T6043] ? unwind_get_return_address+0x4d/0x90 [ 88.436276][ T6043] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 88.442474][ T6043] ? bpf_prog_load+0x1318/0x1930 [ 88.447427][ T6043] ? __x64_sys_bpf+0x7c/0x90 [ 88.452023][ T6043] ? do_syscall_64+0xfa/0x3b0 [ 88.456759][ T6043] ? __pfx_do_check+0x10/0x10 [ 88.461468][ T6043] ? __asan_memset+0x22/0x50 [ 88.466251][ T6043] ? init_func_state+0x1ddf/0x2d20 [ 88.471387][ T6043] do_check_common+0x188f/0x23f0 [ 88.476361][ T6043] bpf_check+0x10252/0x1a5d0 [ 88.480990][ T6043] ? __lock_acquire+0xab9/0xd20 [ 88.485911][ T6043] ? is_bpf_text_address+0x26/0x2b0 [ 88.491140][ T6043] ? is_bpf_text_address+0x292/0x2b0 [ 88.496446][ T6043] ? is_bpf_text_address+0x26/0x2b0 [ 88.501678][ T6043] ? __kernel_text_address+0xd/0x40 [ 88.506897][ T6043] ? unwind_get_return_address+0x4d/0x90 [ 88.512554][ T6043] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 88.518733][ T6043] ? __pfx_bpf_check+0x10/0x10 [ 88.523514][ T6043] ? __lock_acquire+0xab9/0xd20 [ 88.528388][ T6043] ? __pfx___mutex_trylock_common+0x10/0x10 [ 88.534297][ T6043] ? css_rstat_updated+0x1a5/0xca0 [ 88.539440][ T6043] ? __lock_acquire+0xab9/0xd20 [ 88.544313][ T6043] ? ktime_get_with_offset+0x8c/0x2a0 [ 88.549789][ T6043] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 88.556042][ T6043] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.561254][ T6043] ? ktime_get_with_offset+0x8c/0x2a0 [ 88.566723][ T6043] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 88.573006][ T6043] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 88.579623][ T6043] ? bpf_obj_name_cpy+0x194/0x1e0 [ 88.584678][ T6043] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 88.589896][ T6043] ? security_bpf_prog_load+0x7f/0x310 [ 88.595373][ T6043] bpf_prog_load+0x1318/0x1930 [ 88.600163][ T6043] ? __pfx_bpf_prog_load+0x10/0x10 [ 88.605311][ T6043] ? bpf_lsm_bpf+0x9/0x20 [ 88.609644][ T6043] ? security_bpf+0x7e/0x300 [ 88.614244][ T6043] __sys_bpf+0x5f1/0x860 [ 88.618501][ T6043] ? __pfx___sys_bpf+0x10/0x10 [ 88.623637][ T6043] ? rcu_is_watching+0x15/0xb0 [ 88.628420][ T6043] __x64_sys_bpf+0x7c/0x90 [ 88.632846][ T6043] do_syscall_64+0xfa/0x3b0 [ 88.637373][ T6043] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.642666][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.648744][ T6043] ? clear_bhb_loop+0x60/0xb0 [ 88.653427][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.659327][ T6043] RIP: 0033:0x7f9cb338e929 [ 88.663752][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.683369][ T6043] RSP: 002b:00007f9cb427f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.691792][ T6043] RAX: ffffffffffffffda RBX: 00007f9cb35b5fa0 RCX: 00007f9cb338e929 [ 88.699775][ T6043] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 88.707755][ T6043] RBP: 00007f9cb3410b39 R08: 0000000000000000 R09: 0000000000000000 [ 88.715742][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.723730][ T6043] R13: 0000000000000000 R14: 00007f9cb35b5fa0 R15: 00007fff8ee1f7f8 [ 88.731821][ T6043] [ 88.735163][ T6043] Kernel Offset: disabled [ 88.739493][ T6043] Rebooting in 86400 seconds..