last executing test programs: 1.596149823s ago: executing program 3 (id=4): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0x0, 0x5c, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x6}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 1.380863203s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xff, 0x60000000, 0x2b, 0xff1f, 0x0, 0x0, 0xb, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x10e900, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000071120e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4008744b, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00"/13], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 1.220903751s ago: executing program 0 (id=1): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c24f7b36aec9"}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f00000002c0)='/dev/ppp\x00'}, 0x30) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) openat$cgroup_int(r2, 0x0, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r1) 1.072059908s ago: executing program 2 (id=5): perf_event_open(&(0x7f0000000200)={0x2, 0xfffffdb1, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40828, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x84, 0x0, 0xfffffffe, 0x3, 0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000080)=0x7fffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x4, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x8002, 0x100003, 0x4, 0xfe8d42e69ac4daf8, 0xfff, 0xffffffff, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r6, 0x4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18002100000000e7ff0000000000000061121c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.02584742s ago: executing program 3 (id=6): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000709000000000000", @ANYRES32=r0], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000009, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000380)={&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/1, 0x1}], 0x1}, 0x10000) 949.491434ms ago: executing program 1 (id=2): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x57, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xf0, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1ff, 0x101}, 0x1a2d, 0x0, 0x3ff, 0x6, 0x9, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6e, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x500}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x1, 0x6, &(0x7f0000000140)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback, r3, 0x7, 0x2, r5, @void, @value=r3}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r5, 0x5, '\x00', 0x0, r6, 0x1, 0x1, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x7, 0x34, &(0x7f0000000400)=""/52, 0x41100, 0x60, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x4, 0x4, 0xc}, 0x10, 0x1ba76, r2, 0x1, 0x0, &(0x7f00000007c0)=[{0x4, 0x3, 0x0, 0x6}], 0x10, 0x4}, 0x94) 455.173178ms ago: executing program 1 (id=7): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0x4, 0x4}, 0x50) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104a, 0x10000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) 83.153045ms ago: executing program 0 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 82.432745ms ago: executing program 1 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r2) 0s ago: executing program 2 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 83.418753][ T5766] cgroup: Unknown subsys name 'net' [ 83.554938][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.249383][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.899650][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.913454][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.927321][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.937380][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.947965][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.960697][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.968548][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.979382][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.006212][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.026529][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.046063][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.059839][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.068589][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.077272][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.084656][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.092822][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.101223][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.110223][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.134317][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.157654][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.165837][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.181769][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.211212][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.225926][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.652537][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 87.913903][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.927259][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.935207][ T5783] bridge_slave_0: entered allmulticast mode [ 87.967791][ T5783] bridge_slave_0: entered promiscuous mode [ 87.993447][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 88.010473][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.019101][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.026645][ T5783] bridge_slave_1: entered allmulticast mode [ 88.034336][ T5783] bridge_slave_1: entered promiscuous mode [ 88.112898][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.123202][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 88.141380][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 88.155272][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.261054][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.268513][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.276218][ T5777] bridge_slave_0: entered allmulticast mode [ 88.283321][ T5777] bridge_slave_0: entered promiscuous mode [ 88.297253][ T5783] team0: Port device team_slave_0 added [ 88.321980][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.329259][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.336822][ T5777] bridge_slave_1: entered allmulticast mode [ 88.344331][ T5777] bridge_slave_1: entered promiscuous mode [ 88.352879][ T5783] team0: Port device team_slave_1 added [ 88.431000][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.438142][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.464493][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.481633][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.494880][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.529906][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.537003][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.563980][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.638564][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.645981][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.653199][ T5782] bridge_slave_0: entered allmulticast mode [ 88.661444][ T5782] bridge_slave_0: entered promiscuous mode [ 88.669314][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.677158][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.684430][ T5781] bridge_slave_0: entered allmulticast mode [ 88.691841][ T5781] bridge_slave_0: entered promiscuous mode [ 88.719990][ T5777] team0: Port device team_slave_0 added [ 88.726924][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.734090][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.741509][ T5782] bridge_slave_1: entered allmulticast mode [ 88.749716][ T5782] bridge_slave_1: entered promiscuous mode [ 88.756839][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.763987][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.772097][ T5781] bridge_slave_1: entered allmulticast mode [ 88.779557][ T5781] bridge_slave_1: entered promiscuous mode [ 88.814786][ T5783] hsr_slave_0: entered promiscuous mode [ 88.821296][ T5783] hsr_slave_1: entered promiscuous mode [ 88.832243][ T5777] team0: Port device team_slave_1 added [ 88.883956][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.918894][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.926197][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.952922][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.967660][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.982486][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.994440][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.026221][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.033234][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.059782][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.098467][ T5782] team0: Port device team_slave_0 added [ 89.133156][ T5782] team0: Port device team_slave_1 added [ 89.142002][ T5781] team0: Port device team_slave_0 added [ 89.151622][ T5781] team0: Port device team_slave_1 added [ 89.200987][ T5784] Bluetooth: hci2: command tx timeout [ 89.201005][ T5791] Bluetooth: hci0: command tx timeout [ 89.201338][ T5791] Bluetooth: hci3: command tx timeout [ 89.250144][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.257369][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.283521][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.283810][ T5791] Bluetooth: hci1: command tx timeout [ 89.312026][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.319498][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.345911][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.358927][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.366149][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.392426][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.418999][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.427727][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.454283][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.471946][ T5777] hsr_slave_0: entered promiscuous mode [ 89.479148][ T5777] hsr_slave_1: entered promiscuous mode [ 89.486069][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.493939][ T5777] Cannot create hsr debugfs directory [ 89.644917][ T5781] hsr_slave_0: entered promiscuous mode [ 89.652469][ T5781] hsr_slave_1: entered promiscuous mode [ 89.659555][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.667943][ T5781] Cannot create hsr debugfs directory [ 89.738143][ T5782] hsr_slave_0: entered promiscuous mode [ 89.744643][ T5782] hsr_slave_1: entered promiscuous mode [ 89.751776][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.759752][ T5782] Cannot create hsr debugfs directory [ 90.062545][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.075339][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.100027][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.111428][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.206416][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.219288][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.248332][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.262069][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.318864][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.360173][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.401138][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.412646][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.444877][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.458635][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.481863][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.494170][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.567005][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.641708][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.698576][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.706033][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.743988][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.751192][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.769484][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.801322][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.821255][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.865174][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.872402][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.894071][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.921498][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.928721][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.941293][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.948810][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.976585][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.998599][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.006571][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.113791][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.188200][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.195471][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.212313][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.219595][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.277230][ T5791] Bluetooth: hci2: command tx timeout [ 91.277634][ T5788] Bluetooth: hci0: command tx timeout [ 91.290098][ T5791] Bluetooth: hci3: command tx timeout [ 91.355949][ T5791] Bluetooth: hci1: command tx timeout [ 91.710718][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.814845][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.858672][ T5783] veth0_vlan: entered promiscuous mode [ 91.900631][ T5783] veth1_vlan: entered promiscuous mode [ 91.937853][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.957183][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.982701][ T5777] veth0_vlan: entered promiscuous mode [ 92.033926][ T5777] veth1_vlan: entered promiscuous mode [ 92.064849][ T5783] veth0_macvtap: entered promiscuous mode [ 92.101257][ T5783] veth1_macvtap: entered promiscuous mode [ 92.117183][ T5781] veth0_vlan: entered promiscuous mode [ 92.140297][ T5782] veth0_vlan: entered promiscuous mode [ 92.159709][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.173472][ T5781] veth1_vlan: entered promiscuous mode [ 92.202861][ T5782] veth1_vlan: entered promiscuous mode [ 92.224785][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.245122][ T5777] veth0_macvtap: entered promiscuous mode [ 92.267508][ T5777] veth1_macvtap: entered promiscuous mode [ 92.283578][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.292825][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.302373][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.311801][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.367377][ T5782] veth0_macvtap: entered promiscuous mode [ 92.390049][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.401592][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.415304][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.429006][ T5782] veth1_macvtap: entered promiscuous mode [ 92.440199][ T5781] veth0_macvtap: entered promiscuous mode [ 92.468263][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.481729][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.494419][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.507820][ T5781] veth1_macvtap: entered promiscuous mode [ 92.529685][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.538590][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.550522][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.560873][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.598454][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.617122][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.628956][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.646572][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.660427][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.733866][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.749254][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.765196][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.776361][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.790040][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.800694][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.816422][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.827112][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.839132][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.849743][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.863005][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.875155][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.888698][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.899354][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.909635][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.921140][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.931066][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.942716][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.954559][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.978142][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.987063][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.997463][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.006871][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.021479][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.029608][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.029669][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.029700][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.029731][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.079087][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.208525][ T4816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.225154][ T4816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.253748][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.264420][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.337072][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.344964][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.358757][ T5791] Bluetooth: hci3: command tx timeout [ 93.364257][ T5791] Bluetooth: hci2: command tx timeout [ 93.371505][ T5791] Bluetooth: hci0: command tx timeout [ 93.430823][ T4816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.449268][ T4816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.456932][ T5791] Bluetooth: hci1: command tx timeout [ 93.597124][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.605178][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.743291][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.780745][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.908291][ T4816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.920294][ T4816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.185532][ C1] hrtimer: interrupt took 46839 ns [ 94.251977][ T5852] tap0: tun_chr_ioctl cmd 1074025675 [ 94.263303][ T5852] tap0: persist enabled [ 94.271756][ T5854] warning: `syz.2.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.907032][ T5852] tap0: tun_chr_ioctl cmd 2147767520 [ 95.294616][ T5881] ------------[ cut here ]------------ [ 95.300874][ T5881] backtracing misuse [ 95.301589][ T5881] WARNING: CPU: 0 PID: 5881 at kernel/bpf/verifier.c:4381 __mark_chain_precision+0x59c2/0x60f0 [ 95.316712][ T5881] Modules linked in: [ 95.321058][ T5881] CPU: 0 PID: 5881 Comm: syz.2.10 Not tainted syzkaller #0 [ 95.331890][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.343413][ T5881] RIP: 0010:__mark_chain_precision+0x59c2/0x60f0 [ 95.350288][ T5881] Code: 8c 07 ff ff ff 4c 89 ff e8 bb fb 47 00 e9 fa fe ff ff e8 51 6f ef ff c6 05 1a 96 de 0c 01 48 c7 c7 c0 a6 d0 8a e8 3e 33 b9 ff <0f> 0b b8 f2 ff ff ff e9 25 f4 ff ff e8 2d 6f ef ff e9 19 f4 ff ff [ 95.370715][ T5881] RSP: 0018:ffffc90004a4ed00 EFLAGS: 00010246 [ 95.377275][ T5881] RAX: 7c7a3808ffb8f600 RBX: 0000000000000006 RCX: 0000000000080000 [ 95.385648][ T5881] RDX: ffffc9000d2bc000 RSI: 0000000000005b96 RDI: 0000000000005b97 [ 95.394048][ T5881] RBP: ffffc90004a4eef0 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 95.402665][ T5881] R10: dffffc0000000000 R11: ffffed10171c518b R12: 0000000000000001 [ 95.411563][ T5881] R13: dffffc0000000000 R14: ffff888024720550 R15: 0000000000000001 [ 95.420309][ T5881] FS: 00007faf312646c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 95.434853][ T5881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.442892][ T5881] CR2: 000000110c34c66b CR3: 000000007ac04000 CR4: 00000000003506f0 [ 95.451816][ T5881] Call Trace: [ 95.455421][ T5881] [ 95.458885][ T5881] ? mark_chain_precision+0x20/0x20 [ 95.464514][ T5881] ? lockdep_hardirqs_on+0x98/0x150 [ 95.470309][ T5881] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 95.476511][ T5881] ? print_verifier_state+0x2e70/0x2e70 [ 95.482478][ T5881] ? mark_chain_precision+0x20/0x20 [ 95.488277][ T5881] ? update_loop_inline_state+0x1c2/0x530 [ 95.494409][ T5881] check_helper_call+0x42d3/0x6340 [ 95.500041][ T5881] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 95.506458][ T5881] ? check_kfunc_call+0x4ca0/0x4ca0 [ 95.508865][ T5791] Bluetooth: hci0: command tx timeout [ 95.512185][ T5881] ? verbose+0x11e/0x1a0 [ 95.517449][ T5791] Bluetooth: hci2: command tx timeout [ 95.517502][ T5791] Bluetooth: hci3: command tx timeout [ 95.517546][ T5791] Bluetooth: hci1: command tx timeout [ 95.543228][ T5881] ? bpf_vlog_reset+0x299/0x330 [ 95.548596][ T5881] ? print_insn_state+0x100/0x160 [ 95.554031][ T5881] do_check+0x87fb/0xd0a0 [ 95.558930][ T5881] ? __stack_depot_save+0x1f/0x660 [ 95.565229][ T5881] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 95.571980][ T5881] ? init_func_state+0x2d10/0x2d10 [ 95.577613][ T5881] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 95.583625][ T5881] ? print_verifier_state+0x2e70/0x2e70 [ 95.590427][ T5881] ? btf_check_subprog_arg_match+0x216/0x2a0 [ 95.602572][ T5881] do_check_common+0xacc/0x1410 [ 95.608178][ T5881] bpf_check+0x65df/0xec40 [ 95.613119][ T5881] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 95.620110][ T5881] ? bpf_get_btf_vmlinux+0x20/0x20 [ 95.626147][ T5881] ? __lock_acquire+0x1262/0x7d80 [ 95.631704][ T5881] ? mark_lock+0x94/0x320 [ 95.641512][ T5881] ? __lock_acquire+0x1336/0x7d80 [ 95.647694][ T5881] ? verify_lock_unused+0x140/0x140 [ 95.653442][ T5881] ? verify_lock_unused+0x140/0x140 [ 95.659527][ T5881] ? verify_lock_unused+0x140/0x140 [ 95.665181][ T5881] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 95.671698][ T5881] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 95.685369][ T5881] ? lock_chain_count+0x20/0x20 [ 95.690861][ T5881] ? lock_chain_count+0x20/0x20 [ 95.696250][ T5881] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 95.702907][ T5881] ? lockdep_hardirqs_on+0x98/0x150 [ 95.708966][ T5881] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 95.715671][ T5881] ? bpf_map_new_fd+0x61/0x70 [ 95.720850][ T5881] ? bpf_obj_name_cpy+0x32/0x1e0 [ 95.726316][ T5881] ? memset+0x20/0x20 [ 95.730730][ T5881] ? bpf_obj_name_cpy+0x194/0x1e0 [ 95.740343][ T5881] bpf_prog_load+0x10fa/0x1610 [ 95.746142][ T5881] ? map_freeze+0x420/0x420 [ 95.751250][ T5881] ? __might_fault+0xaa/0x120 [ 95.763229][ T5881] ? __might_fault+0xc6/0x120 [ 95.768788][ T5881] ? __might_fault+0xaa/0x120 [ 95.773942][ T5881] ? bpf_lsm_bpf+0x9/0x10 [ 95.778712][ T5881] ? security_bpf+0x7e/0xa0 [ 95.783793][ T5881] __sys_bpf+0x5ba/0x890 [ 95.788596][ T5881] ? bpf_link_show_fdinfo+0x560/0x560 [ 95.795105][ T5881] ? lock_chain_count+0x20/0x20 [ 95.800569][ T5881] __x64_sys_bpf+0x7c/0x90 [ 95.805315][ T5881] do_syscall_64+0x55/0xb0 [ 95.810327][ T5881] ? clear_bhb_loop+0x40/0x90 [ 95.815289][ T5881] ? clear_bhb_loop+0x40/0x90 [ 95.820307][ T5881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.826697][ T5881] RIP: 0033:0x7faf3039e159 [ 95.831446][ T5881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.857885][ T5881] RSP: 002b:00007faf31264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.866762][ T5881] RAX: ffffffffffffffda RBX: 00007faf30625fa0 RCX: 00007faf3039e159 [ 95.875013][ T5881] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 95.883676][ T5881] RBP: 00007faf3043506b R08: 0000000000000000 R09: 0000000000000000 [ 95.892218][ T5881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.900477][ T5881] R13: 00007faf30626038 R14: 00007faf30625fa0 R15: 00007ffe5b4a02a8 [ 95.908968][ T5881] [ 95.912245][ T5881] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.919590][ T5881] CPU: 0 PID: 5881 Comm: syz.2.10 Not tainted syzkaller #0 [ 95.926835][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.937036][ T5881] Call Trace: [ 95.940361][ T5881] [ 95.943339][ T5881] dump_stack_lvl+0x18c/0x250 [ 95.948087][ T5881] ? show_regs_print_info+0x20/0x20 [ 95.953436][ T5881] ? load_image+0x420/0x420 [ 95.958005][ T5881] panic+0x2ca/0x720 [ 95.962012][ T5881] ? bpf_jit_dump+0xd0/0xd0 [ 95.966607][ T5881] __warn+0x2e0/0x470 [ 95.970693][ T5881] ? __mark_chain_precision+0x59c2/0x60f0 [ 95.976518][ T5881] ? __mark_chain_precision+0x59c2/0x60f0 [ 95.982318][ T5881] report_bug+0x2be/0x4f0 [ 95.986726][ T5881] ? __mark_chain_precision+0x59c2/0x60f0 [ 95.992621][ T5881] ? __mark_chain_precision+0x59c2/0x60f0 [ 95.998413][ T5881] ? __mark_chain_precision+0x59c4/0x60f0 [ 96.004204][ T5881] handle_bug+0xcf/0x120 [ 96.008518][ T5881] exc_invalid_op+0x1a/0x50 [ 96.013108][ T5881] asm_exc_invalid_op+0x1a/0x20 [ 96.018119][ T5881] RIP: 0010:__mark_chain_precision+0x59c2/0x60f0 [ 96.025046][ T5881] Code: 8c 07 ff ff ff 4c 89 ff e8 bb fb 47 00 e9 fa fe ff ff e8 51 6f ef ff c6 05 1a 96 de 0c 01 48 c7 c7 c0 a6 d0 8a e8 3e 33 b9 ff <0f> 0b b8 f2 ff ff ff e9 25 f4 ff ff e8 2d 6f ef ff e9 19 f4 ff ff [ 96.044714][ T5881] RSP: 0018:ffffc90004a4ed00 EFLAGS: 00010246 [ 96.050841][ T5881] RAX: 7c7a3808ffb8f600 RBX: 0000000000000006 RCX: 0000000000080000 [ 96.059201][ T5881] RDX: ffffc9000d2bc000 RSI: 0000000000005b96 RDI: 0000000000005b97 [ 96.067298][ T5881] RBP: ffffc90004a4eef0 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 96.075335][ T5881] R10: dffffc0000000000 R11: ffffed10171c518b R12: 0000000000000001 [ 96.083344][ T5881] R13: dffffc0000000000 R14: ffff888024720550 R15: 0000000000000001 [ 96.091384][ T5881] ? mark_chain_precision+0x20/0x20 [ 96.096629][ T5881] ? lockdep_hardirqs_on+0x98/0x150 [ 96.101862][ T5881] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 96.107446][ T5881] ? print_verifier_state+0x2e70/0x2e70 [ 96.113036][ T5881] ? mark_chain_precision+0x20/0x20 [ 96.118303][ T5881] ? update_loop_inline_state+0x1c2/0x530 [ 96.124077][ T5881] check_helper_call+0x42d3/0x6340 [ 96.129241][ T5881] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 96.134850][ T5881] ? check_kfunc_call+0x4ca0/0x4ca0 [ 96.140116][ T5881] ? verbose+0x11e/0x1a0 [ 96.144406][ T5881] ? bpf_vlog_reset+0x299/0x330 [ 96.149310][ T5881] ? print_insn_state+0x100/0x160 [ 96.154415][ T5881] do_check+0x87fb/0xd0a0 [ 96.158836][ T5881] ? __stack_depot_save+0x1f/0x660 [ 96.164186][ T5881] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.170481][ T5881] ? init_func_state+0x2d10/0x2d10 [ 96.176704][ T5881] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 96.182305][ T5881] ? print_verifier_state+0x2e70/0x2e70 [ 96.187899][ T5881] ? btf_check_subprog_arg_match+0x216/0x2a0 [ 96.193929][ T5881] do_check_common+0xacc/0x1410 [ 96.198830][ T5881] bpf_check+0x65df/0xec40 [ 96.203295][ T5881] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 96.209341][ T5881] ? bpf_get_btf_vmlinux+0x20/0x20 [ 96.214493][ T5881] ? __lock_acquire+0x1262/0x7d80 [ 96.219581][ T5881] ? mark_lock+0x94/0x320 [ 96.223949][ T5881] ? __lock_acquire+0x1336/0x7d80 [ 96.229035][ T5881] ? verify_lock_unused+0x140/0x140 [ 96.234278][ T5881] ? verify_lock_unused+0x140/0x140 [ 96.239513][ T5881] ? verify_lock_unused+0x140/0x140 [ 96.244758][ T5881] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 96.250658][ T5881] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 96.256698][ T5881] ? lock_chain_count+0x20/0x20 [ 96.261612][ T5881] ? lock_chain_count+0x20/0x20 [ 96.266498][ T5881] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.272692][ T5881] ? lockdep_hardirqs_on+0x98/0x150 [ 96.277917][ T5881] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.284135][ T5881] ? bpf_map_new_fd+0x61/0x70 [ 96.288843][ T5881] ? bpf_obj_name_cpy+0x32/0x1e0 [ 96.293806][ T5881] ? memset+0x20/0x20 [ 96.297815][ T5881] ? bpf_obj_name_cpy+0x194/0x1e0 [ 96.302864][ T5881] bpf_prog_load+0x10fa/0x1610 [ 96.307676][ T5881] ? map_freeze+0x420/0x420 [ 96.312225][ T5881] ? __might_fault+0xaa/0x120 [ 96.316956][ T5881] ? __might_fault+0xc6/0x120 [ 96.321666][ T5881] ? __might_fault+0xaa/0x120 [ 96.326382][ T5881] ? bpf_lsm_bpf+0x9/0x10 [ 96.330745][ T5881] ? security_bpf+0x7e/0xa0 [ 96.335275][ T5881] __sys_bpf+0x5ba/0x890 [ 96.339551][ T5881] ? bpf_link_show_fdinfo+0x560/0x560 [ 96.344961][ T5881] ? lock_chain_count+0x20/0x20 [ 96.349850][ T5881] __x64_sys_bpf+0x7c/0x90 [ 96.354303][ T5881] do_syscall_64+0x55/0xb0 [ 96.358757][ T5881] ? clear_bhb_loop+0x40/0x90 [ 96.363466][ T5881] ? clear_bhb_loop+0x40/0x90 [ 96.368180][ T5881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.374140][ T5881] RIP: 0033:0x7faf3039e159 [ 96.378586][ T5881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.399004][ T5881] RSP: 002b:00007faf31264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.407446][ T5881] RAX: ffffffffffffffda RBX: 00007faf30625fa0 RCX: 00007faf3039e159 [ 96.415449][ T5881] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 96.423442][ T5881] RBP: 00007faf3043506b R08: 0000000000000000 R09: 0000000000000000 [ 96.431440][ T5881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.439440][ T5881] R13: 00007faf30626038 R14: 00007faf30625fa0 R15: 00007ffe5b4a02a8 [ 96.447453][ T5881] [ 96.450654][ T5881] Kernel Offset: disabled [ 96.455032][ T5881] Rebooting in 86400 seconds..