last executing test programs: 40.621480452s ago: executing program 1 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='mm_page_alloc\x00', r1, 0x0, 0x7}, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) 40.0649147s ago: executing program 1 (id=423): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10, 0x0}, 0x200088d0) close(r0) 39.633010993s ago: executing program 1 (id=430): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0, 0x0, 0x0, 0x0, 0xeaff}, 0x0) 39.290965382s ago: executing program 1 (id=437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="2e0000003c000511d25a80698c6394b9027c92b47795140d0124fc600700000000000000001eb69d3d07a9e71f24", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 39.034762568s ago: executing program 1 (id=444): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 38.841827206s ago: executing program 1 (id=447): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff9e3}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 23.760781056s ago: executing program 32 (id=447): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff9e3}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.645540876s ago: executing program 5 (id=896): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x1, 0x400141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x62, 0x0, 0x1c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.452422456s ago: executing program 5 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.452251668s ago: executing program 3 (id=902): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000000000000000304001ac00800120004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48054) 2.278824271s ago: executing program 0 (id=904): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643c4e8d41cdb7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6659f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac1223331f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed80000010000000000e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000e72, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.271906435s ago: executing program 4 (id=905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xffffffff}, 0x80, 0x0}, 0x0) 2.238221835s ago: executing program 2 (id=906): syz_clone(0x4000000, &(0x7f00000005c0)="f392a17ea3ef3235b74f31a7afb1eac2e38eaaa4ba9815699cd57a771a829d85a62be538c8534020c1a280d954d85c56e9b06fe4ca2cdbd713aacdd61725532bb9def64ff0cdd866f3c78156f5731bf72e63a05e58951633533ec0f2189e07b737a932324a6a836d1660c92937183e856ad1ae2f410d8513c0d770ba24c6011e59c13c776d82b19f8e27c9292ae6eb88071bdea7628f90cdb02cb03d3e3c0be17c54b1bfbff540733dd84388c8e58e0f2488d91901e28c5a69895932bd072a42c2fafb5866d29cd79afeef2eee0d033f69d47e6d2c67ed5167fe", 0xda, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 2.177670449s ago: executing program 3 (id=907): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x40, 0x0, 0xfd, 0x0, 0x5d31, 0xd003c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x5, 0x3, 0x4, 0x8, 0xfffffffc, 0x2, 0x0, 0x5}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 2.054968734s ago: executing program 5 (id=908): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000300100007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000100850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0x8}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) 2.054692357s ago: executing program 4 (id=909): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24000801) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000001c0)=r1, 0x4) 1.944855329s ago: executing program 4 (id=910): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="603b429ee6d5"}) 1.939884547s ago: executing program 3 (id=911): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.8572341s ago: executing program 0 (id=912): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fe1eb7aebb29590b00008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.856476699s ago: executing program 5 (id=913): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x27, 0xe40, 0x0, &(0x7f0000000740)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.787013505s ago: executing program 4 (id=914): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ffdd934517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.786231111s ago: executing program 2 (id=915): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) 1.666890047s ago: executing program 3 (id=916): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x28, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xff}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) 1.597073705s ago: executing program 2 (id=917): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x202, 0x12) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) 1.53727172s ago: executing program 0 (id=918): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x87, 0x0, &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837", 0x5dc}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:23'], 0xa) 1.447026869s ago: executing program 2 (id=919): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x200000, 0x1, 0x1ff, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002"], 0xa4}}, 0x0) 1.254935083s ago: executing program 3 (id=920): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 1.254680628s ago: executing program 0 (id=921): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001c80)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.253076374s ago: executing program 5 (id=922): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 903.78018ms ago: executing program 2 (id=923): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00037300005b686158bbcfe8875a060300000022ffe000000000000000000000ac1414"], 0xfdef) 903.533069ms ago: executing program 5 (id=924): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 338.530691ms ago: executing program 2 (id=925): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0xa4b}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) 329.391313ms ago: executing program 0 (id=926): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 255.335869ms ago: executing program 4 (id=927): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 185.387493ms ago: executing program 3 (id=928): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7deb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) 993.479µs ago: executing program 4 (id=929): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4800000000000009, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x2, 0x1, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) 0s ago: executing program 0 (id=930): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14500, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000540)="764e00cbc223139ba59bbd02000000", 0x0, 0x804002, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 71.666277][ T5851] cgroup: Unknown subsys name 'net' [ 71.840592][ T5851] cgroup: Unknown subsys name 'cpuset' [ 71.850151][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.251557][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.692820][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.706738][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.715264][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.716770][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.725197][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.731566][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.738707][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.752665][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.760518][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.768938][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.768954][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.769436][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.793888][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.803112][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.804630][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.810430][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.811086][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.819210][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.825938][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.846818][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.854277][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.854335][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.871273][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.914231][ T5879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.930925][ T5879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.508014][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 76.543948][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 76.658849][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 76.759541][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.767950][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.775582][ T5861] bridge_slave_0: entered allmulticast mode [ 76.783199][ T5861] bridge_slave_0: entered promiscuous mode [ 76.824788][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.834651][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.842394][ T5861] bridge_slave_1: entered allmulticast mode [ 76.851431][ T5861] bridge_slave_1: entered promiscuous mode [ 76.932744][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.942282][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 76.958595][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 76.999032][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.058143][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.065343][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.073257][ T5875] bridge_slave_0: entered allmulticast mode [ 77.081827][ T5875] bridge_slave_0: entered promiscuous mode [ 77.113928][ T5861] team0: Port device team_slave_0 added [ 77.142811][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.150079][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.158874][ T5875] bridge_slave_1: entered allmulticast mode [ 77.165886][ T5875] bridge_slave_1: entered promiscuous mode [ 77.175409][ T5861] team0: Port device team_slave_1 added [ 77.222158][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.229472][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.236675][ T5870] bridge_slave_0: entered allmulticast mode [ 77.244654][ T5870] bridge_slave_0: entered promiscuous mode [ 77.292958][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.302557][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.311803][ T5870] bridge_slave_1: entered allmulticast mode [ 77.320067][ T5870] bridge_slave_1: entered promiscuous mode [ 77.339568][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.346541][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.373282][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.426284][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.436410][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.443877][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.470912][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.495632][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.507357][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.554458][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.620392][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.628304][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.635530][ T5871] bridge_slave_0: entered allmulticast mode [ 77.643569][ T5871] bridge_slave_0: entered promiscuous mode [ 77.681791][ T5875] team0: Port device team_slave_0 added [ 77.691106][ T5870] team0: Port device team_slave_0 added [ 77.697189][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.705431][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.713305][ T5862] bridge_slave_0: entered allmulticast mode [ 77.722093][ T5862] bridge_slave_0: entered promiscuous mode [ 77.729459][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.736594][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.744256][ T5871] bridge_slave_1: entered allmulticast mode [ 77.751539][ T5871] bridge_slave_1: entered promiscuous mode [ 77.773823][ T5875] team0: Port device team_slave_1 added [ 77.793216][ T5870] team0: Port device team_slave_1 added [ 77.800238][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.808042][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.815274][ T5862] bridge_slave_1: entered allmulticast mode [ 77.822928][ T5862] bridge_slave_1: entered promiscuous mode [ 77.848254][ T5872] Bluetooth: hci2: command tx timeout [ 77.929328][ T5872] Bluetooth: hci1: command tx timeout [ 77.934693][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.935004][ T5872] Bluetooth: hci0: command tx timeout [ 77.951986][ T5861] hsr_slave_0: entered promiscuous mode [ 77.960008][ T5861] hsr_slave_1: entered promiscuous mode [ 77.966867][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.974117][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.000336][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.011317][ T5879] Bluetooth: hci4: command tx timeout [ 78.017134][ T5872] Bluetooth: hci3: command tx timeout [ 78.041526][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.054292][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.065822][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.090726][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.097926][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.123882][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.135485][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.142954][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.169025][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.226331][ T5871] team0: Port device team_slave_0 added [ 78.232958][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.242414][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.268924][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.294779][ T5862] team0: Port device team_slave_0 added [ 78.303453][ T5871] team0: Port device team_slave_1 added [ 78.351338][ T5862] team0: Port device team_slave_1 added [ 78.376760][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.384093][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.410523][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.423708][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.430775][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.456753][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.542324][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.549674][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.578119][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.619885][ T5870] hsr_slave_0: entered promiscuous mode [ 78.626313][ T5870] hsr_slave_1: entered promiscuous mode [ 78.633200][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 78.639845][ T5870] Cannot create hsr debugfs directory [ 78.660795][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.668566][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.694929][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.712068][ T5875] hsr_slave_0: entered promiscuous mode [ 78.718430][ T5875] hsr_slave_1: entered promiscuous mode [ 78.724466][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 78.731015][ T5875] Cannot create hsr debugfs directory [ 78.810243][ T5871] hsr_slave_0: entered promiscuous mode [ 78.816565][ T5871] hsr_slave_1: entered promiscuous mode [ 78.823069][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 78.828843][ T5871] Cannot create hsr debugfs directory [ 78.968116][ T5862] hsr_slave_0: entered promiscuous mode [ 78.974455][ T5862] hsr_slave_1: entered promiscuous mode [ 78.981004][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 78.986741][ T5862] Cannot create hsr debugfs directory [ 79.392244][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.414639][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.425726][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.461927][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.549697][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.561710][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.574621][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.585430][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.670702][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.683551][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.695903][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.719001][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.834726][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.846217][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.858999][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.871697][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.927748][ T5872] Bluetooth: hci2: command tx timeout [ 79.980534][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.008027][ T5879] Bluetooth: hci1: command tx timeout [ 80.013527][ T5872] Bluetooth: hci0: command tx timeout [ 80.017972][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.032008][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.059024][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.087548][ T5879] Bluetooth: hci4: command tx timeout [ 80.093093][ T5872] Bluetooth: hci3: command tx timeout [ 80.108805][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.142424][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.166288][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.195786][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.234695][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.246730][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.254617][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.288612][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.295746][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.327390][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.334651][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.350371][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.357640][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.378769][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.442679][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.449823][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.491050][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.498232][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.561843][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.604353][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.670529][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.696870][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.715415][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.722743][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.773060][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.780284][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.889729][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.896899][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.962441][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.969643][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.118937][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.136187][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.318162][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.327159][ T5861] veth0_vlan: entered promiscuous mode [ 81.386989][ T5861] veth1_vlan: entered promiscuous mode [ 81.506467][ T5871] veth0_vlan: entered promiscuous mode [ 81.553227][ T5861] veth0_macvtap: entered promiscuous mode [ 81.567891][ T5871] veth1_vlan: entered promiscuous mode [ 81.576409][ T5861] veth1_macvtap: entered promiscuous mode [ 81.600793][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.616960][ T5870] veth0_vlan: entered promiscuous mode [ 81.635571][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.704411][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.722291][ T5870] veth1_vlan: entered promiscuous mode [ 81.753923][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.836121][ T5871] veth0_macvtap: entered promiscuous mode [ 81.901527][ T1162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.911096][ T1162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.923439][ T5875] veth0_vlan: entered promiscuous mode [ 81.937489][ T1162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.947280][ T5871] veth1_macvtap: entered promiscuous mode [ 81.958875][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.971363][ T5870] veth0_macvtap: entered promiscuous mode [ 82.014174][ T5875] veth1_vlan: entered promiscuous mode [ 82.020122][ T5872] Bluetooth: hci2: command tx timeout [ 82.075863][ T5870] veth1_macvtap: entered promiscuous mode [ 82.088427][ T5872] Bluetooth: hci0: command tx timeout [ 82.093869][ T5872] Bluetooth: hci1: command tx timeout [ 82.125552][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.168241][ T5872] Bluetooth: hci3: command tx timeout [ 82.173691][ T5872] Bluetooth: hci4: command tx timeout [ 82.195227][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.314207][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.326044][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.342402][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.354787][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.360719][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.377598][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.382208][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.395218][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.442884][ T5862] veth0_vlan: entered promiscuous mode [ 82.452171][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.491802][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.500745][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.527671][ T5862] veth1_vlan: entered promiscuous mode [ 82.534382][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.544776][ T5875] veth0_macvtap: entered promiscuous mode [ 82.564027][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.579083][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.621930][ T5875] veth1_macvtap: entered promiscuous mode [ 82.633623][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.648608][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.683205][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.687213][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.776967][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.804232][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.830421][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.896498][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.908768][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.937108][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.937267][ C0] hrtimer: interrupt took 37051 ns [ 82.966816][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.979844][ T5862] veth0_macvtap: entered promiscuous mode [ 82.989911][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.060032][ T5862] veth1_macvtap: entered promiscuous mode [ 83.074143][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.233977][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.264481][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.275932][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.320313][ T5991] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 83.382303][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.387675][ T5992] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 83.430573][ T5991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.439835][ T5992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7'. [ 83.444619][ T5991] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 83.468789][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.487030][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.505134][ T3176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.520222][ T5992] batadv0: entered promiscuous mode [ 83.525640][ T5992] batadv0: entered allmulticast mode [ 83.546799][ T5992] bond0: (slave batadv0): Releasing backup interface [ 83.570698][ T5992] bridge0: port 3(batadv0) entered blocking state [ 83.609519][ T5992] bridge0: port 3(batadv0) entered disabled state [ 83.641355][ T3176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.650337][ T3176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.699627][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 83.709117][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 83.757436][ T3176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.865590][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.888277][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.090115][ T5872] Bluetooth: hci2: command tx timeout [ 84.131944][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.167845][ T5872] Bluetooth: hci1: command tx timeout [ 84.173317][ T5879] Bluetooth: hci0: command tx timeout [ 84.196845][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.247889][ T5879] Bluetooth: hci3: command tx timeout [ 84.253555][ T5872] Bluetooth: hci4: command tx timeout [ 84.284236][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.358496][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.434707][ T6022] netlink: del zone limit has 4 unknown bytes [ 85.545098][ T6027] Zero length message leads to an empty skb [ 85.588534][ T6027] netlink: 'syz.3.20': attribute type 13 has an invalid length. [ 85.596305][ T6027] netlink: 'syz.3.20': attribute type 4 has an invalid length. [ 85.611030][ T6027] netlink: 116 bytes leftover after parsing attributes in process `syz.3.20'. [ 85.623876][ T6029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21'. [ 85.692962][ T6035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22'. [ 86.745849][ T6056] netlink: 184 bytes leftover after parsing attributes in process `syz.1.31'. [ 86.900045][ T10] cfg80211: failed to load regulatory.db [ 87.092084][ C0] Illegal XDP return value 16128 on prog (id 13) dev veth1_to_team, expect packet loss! [ 87.330899][ T6073] warning: `syz.3.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.483966][ T6080] netlink: 'syz.0.40': attribute type 29 has an invalid length. [ 87.524501][ T6080] netlink: 'syz.0.40': attribute type 29 has an invalid length. [ 87.571350][ T6080] netlink: 'syz.0.40': attribute type 29 has an invalid length. [ 88.912916][ T6121] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.68'. [ 89.245891][ T6131] openvswitch: netlink: Multiple metadata blocks provided [ 89.717559][ T6144] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 89.758350][ T6144] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 89.766046][ T6144] netlink: 199756 bytes leftover after parsing attributes in process `syz.0.69'. [ 89.928625][ T6149] netlink: 'syz.2.71': attribute type 29 has an invalid length. [ 89.954656][ T6149] netlink: 'syz.2.71': attribute type 29 has an invalid length. [ 90.009170][ T6149] netlink: 'syz.2.71': attribute type 29 has an invalid length. [ 93.042906][ T6161] netlink: 'syz.0.76': attribute type 9 has an invalid length. [ 93.107628][ T6161] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.76'. [ 93.279085][ T6165] C: renamed from team_slave_0 (while UP) [ 93.352267][ T6165] netlink: 'syz.3.78': attribute type 3 has an invalid length. [ 93.377782][ T6165] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 93.396826][ T6165] netlink: 116 bytes leftover after parsing attributes in process `syz.3.78'. [ 93.447480][ T6170] netlink: 60 bytes leftover after parsing attributes in process `syz.1.77'. [ 93.456512][ T6171] netlink: 60 bytes leftover after parsing attributes in process `syz.2.79'. [ 93.497630][ T6164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.77'. [ 93.506768][ T6174] netlink: 60 bytes leftover after parsing attributes in process `syz.1.77'. [ 93.565272][ T6169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.79'. [ 93.587661][ T6175] netlink: 60 bytes leftover after parsing attributes in process `syz.2.79'. [ 93.821263][ T6189] netlink: 'syz.2.88': attribute type 27 has an invalid length. [ 93.841164][ T6191] netlink: 'syz.3.89': attribute type 13 has an invalid length. [ 94.330349][ T6204] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.95'. [ 94.342664][ T6196] delete_channel: no stack [ 94.369696][ T6204] nbd: couldn't find device at index 16 [ 94.498475][ T6208] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 94.528352][ T6208] syzkaller1: linktype set to 778 [ 94.857683][ T6221] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 94.884538][ T6221] syzkaller1: linktype set to 0 [ 95.093274][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 95.138119][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.110'. [ 95.203784][ T6241] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.112'. [ 97.140535][ T6287] tap0: tun_chr_ioctl cmd 2148553947 [ 97.900892][ T6325] validate_nla: 3 callbacks suppressed [ 97.900910][ T6325] netlink: 'syz.2.148': attribute type 46 has an invalid length. [ 97.944074][ T6325] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.148'. [ 98.010160][ T6328] netlink: 'syz.4.151': attribute type 39 has an invalid length. [ 99.034366][ T6364] netlink: 60 bytes leftover after parsing attributes in process `syz.1.166'. [ 99.074777][ T6361] netlink: 60 bytes leftover after parsing attributes in process `syz.1.166'. [ 99.115767][ T6364] netlink: 60 bytes leftover after parsing attributes in process `syz.1.166'. [ 99.159784][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 99.455186][ T6378] netlink: 60 bytes leftover after parsing attributes in process `syz.2.171'. [ 99.498184][ T6374] netlink: 60 bytes leftover after parsing attributes in process `syz.2.171'. [ 99.532693][ T6378] netlink: 60 bytes leftover after parsing attributes in process `syz.2.171'. [ 99.552498][ T6380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.804808][ T6388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.178'. [ 99.848343][ T6388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.178'. [ 99.888875][ T6388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.178'. [ 99.967390][ T6394] netlink: 'syz.1.180': attribute type 21 has an invalid length. [ 99.975380][ T6394] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 99.987365][ T6394] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.180'. [ 100.173255][ T6401] netlink: 104 bytes leftover after parsing attributes in process `syz.2.186'. [ 100.546186][ T6420] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 100.568578][ T6420] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.192'. [ 100.784264][ T6428] netlink: 4420 bytes leftover after parsing attributes in process `syz.4.196'. [ 100.818370][ T6430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.095493][ T6488] netlink: 'syz.0.223': attribute type 29 has an invalid length. [ 102.599864][ T6512] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.156743][ T6531] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 103.930468][ T6553] netlink: 'syz.4.252': attribute type 21 has an invalid length. [ 103.940053][ T6553] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.960493][ T6553] IPv6: Can't replace route, no match found [ 103.975194][ T6557] netlink: 'syz.3.254': attribute type 33 has an invalid length. [ 104.230151][ T6565] ======================================================= [ 104.230151][ T6565] WARNING: The mand mount option has been deprecated and [ 104.230151][ T6565] and is ignored by this kernel. Remove the mand [ 104.230151][ T6565] option from the mount to silence this warning. [ 104.230151][ T6565] ======================================================= [ 104.399024][ T6569] proc: Unknown parameter 'euid>00000000000000060929' [ 104.569389][ T6574] __nla_validate_parse: 19 callbacks suppressed [ 104.569407][ T6574] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.261'. [ 104.653196][ T6574] netlink: 6316 bytes leftover after parsing attributes in process `syz.4.261'. [ 107.624186][ T6633] netlink: 'syz.4.289': attribute type 2 has an invalid length. [ 107.637396][ T6633] netlink: 132 bytes leftover after parsing attributes in process `syz.4.289'. [ 107.958777][ T6639] netlink: 'syz.1.290': attribute type 17 has an invalid length. [ 108.077449][ T6639] netlink: 'syz.1.290': attribute type 41 has an invalid length. [ 108.181318][ T6639] netlink: 152 bytes leftover after parsing attributes in process `syz.1.290'. [ 109.428079][ T6674] openvswitch: netlink: IP tunnel dst address not specified [ 109.717581][ T6681] tap0: tun_chr_ioctl cmd 1074025677 [ 109.727533][ T6681] tap0: linktype set to 825 [ 109.918798][ T6689] C: renamed from team_slave_0 (while UP) [ 109.990808][ T6689] netlink: 'syz.4.314': attribute type 2 has an invalid length. [ 110.031528][ T6689] netlink: 116 bytes leftover after parsing attributes in process `syz.4.314'. [ 110.052310][ T6689] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 110.820364][ T6716] netlink: 'syz.3.327': attribute type 29 has an invalid length. [ 110.856428][ T6716] netlink: 'syz.3.327': attribute type 29 has an invalid length. [ 110.875378][ T6716] netlink: 'syz.3.327': attribute type 29 has an invalid length. [ 111.377083][ T6728] netlink: 'syz.4.333': attribute type 10 has an invalid length. [ 111.394880][ T6728] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.333'. [ 112.156059][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 112.187667][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 114.392290][ T6826] netlink: 60 bytes leftover after parsing attributes in process `syz.2.371'. [ 114.415610][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 114.431669][ T6820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.371'. [ 114.507744][ T6826] netlink: 60 bytes leftover after parsing attributes in process `syz.2.371'. [ 114.985482][ T6846] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 115.193702][ T6851] syzkaller1: tun_chr_ioctl cmd 21731 [ 117.548088][ T6928] netlink: 'syz.2.421': attribute type 2 has an invalid length. [ 117.893925][ T6940] netlink: 'syz.3.427': attribute type 27 has an invalid length. [ 117.934776][ T6940] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.427'. [ 118.376491][ T6962] netlink: 'syz.2.438': attribute type 6 has an invalid length. [ 118.412663][ T6961] netlink: 22 bytes leftover after parsing attributes in process `syz.1.437'. [ 118.441177][ T6962] netlink: 14573 bytes leftover after parsing attributes in process `syz.2.438'. [ 118.945088][ T6986] netlink: 'syz.3.448': attribute type 29 has an invalid length. [ 119.022606][ T6990] netlink: 'syz.3.448': attribute type 29 has an invalid length. [ 119.045806][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 119.075637][ T6986] netlink: 'syz.3.448': attribute type 29 has an invalid length. [ 120.394826][ T7034] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.468'. [ 120.892244][ T7047] netlink: 'syz.0.474': attribute type 10 has an invalid length. [ 121.612523][ T7062] netlink: 'syz.2.481': attribute type 21 has an invalid length. [ 121.648000][ T7062] netlink: 14565 bytes leftover after parsing attributes in process `syz.2.481'. [ 122.092867][ T7076] netlink: 'syz.2.488': attribute type 9 has an invalid length. [ 122.117469][ T7076] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.488'. [ 122.201190][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 122.300547][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 122.400890][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 122.470340][ T7089] openvswitch: netlink: VXLAN extension message has 10 unknown bytes. [ 124.026188][ T7142] netlink: 124 bytes leftover after parsing attributes in process `syz.3.516'. [ 124.460782][ T7151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.522'. [ 124.766904][ T7161] netlink: 'syz.4.526': attribute type 9 has an invalid length. [ 124.788206][ T7161] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.526'. [ 126.288378][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 126.481058][ T7216] openvswitch: netlink: IPv4 tunnel dst address is zero [ 128.522261][ T7272] : entered promiscuous mode [ 129.619134][ T7314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.598'. [ 129.641771][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 129.723280][ T7318] netlink: 152 bytes leftover after parsing attributes in process `syz.0.600'. [ 131.409125][ T7356] pimreg1: tun_chr_ioctl cmd 1074025677 [ 131.414831][ T7356] pimreg1: linktype set to 1 [ 132.264876][ T7383] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.630'. [ 132.589000][ T7397] netlink: 'syz.4.637': attribute type 29 has an invalid length. [ 132.647919][ T7397] netlink: 'syz.4.637': attribute type 29 has an invalid length. [ 132.657641][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 132.666456][ T7399] netlink: 33 bytes leftover after parsing attributes in process `syz.0.638'. [ 132.712770][ T7399] netlink: 33 bytes leftover after parsing attributes in process `syz.0.638'. [ 132.756350][ T7404] netlink: 'syz.2.640': attribute type 9 has an invalid length. [ 132.759414][ T7397] netlink: 'syz.4.637': attribute type 29 has an invalid length. [ 132.765492][ T7404] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.640'. [ 132.871457][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 132.907590][ T7406] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 132.914899][ T7406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.983903][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987894][ T7412] $Hÿ: renamed from bond0 (while UP) [ 132.997359][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.072015][ T7412] $Hÿ: entered promiscuous mode [ 133.130480][ T7412] bond_slave_0: entered promiscuous mode [ 133.161784][ T7412] bond_slave_1: entered promiscuous mode [ 133.321631][ T7420] vlan0: entered allmulticast mode [ 133.326798][ T7420] veth0_vlan: entered allmulticast mode [ 133.740871][ T7437] netlink: 148 bytes leftover after parsing attributes in process `syz.3.655'. [ 133.848788][ T7441] netlink: 'syz.2.656': attribute type 11 has an invalid length. [ 133.893365][ T7441] netlink: 'syz.2.656': attribute type 11 has an invalid length. [ 133.938362][ T7439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.867339][ T5879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.876341][ T5879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.885363][ T5879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.895463][ T5879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.903324][ T5879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.086053][ T7465] netlink: 'syz.2.669': attribute type 2 has an invalid length. [ 135.110626][ T7465] __nla_validate_parse: 3 callbacks suppressed [ 135.110642][ T7465] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.669'. [ 135.133418][ T7465] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 135.515088][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.605322][ T7478] : entered promiscuous mode [ 135.688835][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.796203][ T7486] syz.3.678 uses obsolete (PF_INET,SOCK_PACKET) [ 135.935966][ T7491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.680'. [ 135.971700][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.561895][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.870385][ T7516] netlink: 211576 bytes leftover after parsing attributes in process `syz.4.690'. [ 136.967735][ T5872] Bluetooth: hci5: command tx timeout [ 137.004074][ T7454] chnl_net:caif_netlink_parms(): no params data found [ 137.077794][ T7520] netlink: 'syz.3.693': attribute type 10 has an invalid length. [ 137.127995][ T7520] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 137.171444][ T7520] bridge0: port 1(bridge_slave_0) entered learning state [ 137.319553][ T7524] netlink: 'syz.4.695': attribute type 4 has an invalid length. [ 137.345043][ T36] bridge_slave_1: left allmulticast mode [ 137.348190][ T7524] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.695'. [ 137.369351][ T36] bridge_slave_1: left promiscuous mode [ 137.376159][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.402036][ T7531] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.696'. [ 137.423337][ T36] bridge_slave_0: left allmulticast mode [ 137.444675][ T36] bridge_slave_0: left promiscuous mode [ 137.457917][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.341119][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.354381][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.370941][ T36] bond0 (unregistering): Released all slaves [ 138.400859][ T7539] lo speed is unknown, defaulting to 1000 [ 138.484296][ T7539] lo speed is unknown, defaulting to 1000 [ 138.603411][ T5915] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 138.671624][ T7539] lo speed is unknown, defaulting to 1000 [ 138.712032][ T7539] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.798789][ T7539] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 138.984790][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.014102][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.027672][ T7454] bridge_slave_0: entered allmulticast mode [ 139.035679][ T7454] bridge_slave_0: entered promiscuous mode [ 139.047470][ T5872] Bluetooth: hci5: command tx timeout [ 139.063759][ T7539] lo speed is unknown, defaulting to 1000 [ 139.083824][ T7575] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.708'. [ 139.104938][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.122694][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.131988][ T7454] bridge_slave_1: entered allmulticast mode [ 139.149154][ T7454] bridge_slave_1: entered promiscuous mode [ 139.241281][ T7539] lo speed is unknown, defaulting to 1000 [ 139.472258][ T7539] lo speed is unknown, defaulting to 1000 [ 139.526569][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.558280][ T7539] lo speed is unknown, defaulting to 1000 [ 139.573946][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.614743][ T7539] lo speed is unknown, defaulting to 1000 [ 139.730757][ T7539] lo speed is unknown, defaulting to 1000 [ 139.739468][ T7454] team0: Port device team_slave_0 added [ 139.765018][ T7454] team0: Port device team_slave_1 added [ 140.010037][ T36] hsr_slave_0: left promiscuous mode [ 140.032516][ T36] hsr_slave_1: left promiscuous mode [ 140.040997][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.061963][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.084758][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.103790][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.180509][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 140.256140][ T36] veth1_macvtap: left promiscuous mode [ 140.270348][ T36] veth0_macvtap: left promiscuous mode [ 140.282451][ T36] veth1_vlan: left promiscuous mode [ 140.290534][ T36] veth0_vlan: left promiscuous mode [ 140.443433][ T7612] netlink: 'syz.4.719': attribute type 21 has an invalid length. [ 140.467085][ T7612] netlink: 168 bytes leftover after parsing attributes in process `syz.4.719'. [ 141.138803][ T5872] Bluetooth: hci5: command tx timeout [ 141.418394][ T36] team0 (unregistering): Port device team_slave_1 removed [ 141.454728][ T36] team0 (unregistering): Port device team_slave_0 removed [ 141.781554][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.789183][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.849313][ T7454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.914214][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.937538][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.982903][ T7454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.311419][ T7454] hsr_slave_0: entered promiscuous mode [ 142.316094][ T7627] netlink: 144 bytes leftover after parsing attributes in process `syz.2.725'. [ 142.351144][ T7454] hsr_slave_1: entered promiscuous mode [ 142.391839][ T7632] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.728'. [ 143.217350][ T5872] Bluetooth: hci5: command tx timeout [ 143.562466][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 143.951834][ T7454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.602364][ T7454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.695339][ T7454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.768010][ T7454] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.168062][ T7454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.256084][ T7454] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.283121][ T7713] netlink: 'syz.0.753': attribute type 46 has an invalid length. [ 145.368454][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.375731][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.436693][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.443999][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.126475][ T7454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.135421][ T7454] veth0_vlan: entered promiscuous mode [ 147.192031][ T7454] veth1_vlan: entered promiscuous mode [ 147.264915][ T7454] veth0_macvtap: entered promiscuous mode [ 147.300847][ T7454] veth1_macvtap: entered promiscuous mode [ 147.391501][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.441739][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.501833][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.538191][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.641297][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.675312][ T7804] netlink: 2410 bytes leftover after parsing attributes in process `syz.2.780'. [ 147.682991][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.840720][ T7809] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.783'. [ 147.894845][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.930556][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.001226][ T7813] netlink: 'syz.4.785': attribute type 10 has an invalid length. [ 148.028843][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.042696][ T7813] netlink: 'syz.4.785': attribute type 19 has an invalid length. [ 148.070096][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.077389][ T7813] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.785'. [ 148.410655][ T7818] netlink: 10 bytes leftover after parsing attributes in process `syz.0.787'. [ 149.921735][ T7873] netlink: 64 bytes leftover after parsing attributes in process `syz.2.809'. [ 150.185315][ T7880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.812'. [ 150.222053][ T7880] unsupported nlmsg_type 40 [ 153.063296][ T7988] netlink: 'syz.0.859': attribute type 4 has an invalid length. [ 153.088077][ T7988] netlink: 116 bytes leftover after parsing attributes in process `syz.0.859'. [ 153.384967][ T8006] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.868'. [ 153.427688][ T8008] netlink: 184 bytes leftover after parsing attributes in process `syz.2.869'. [ 153.828011][ T8020] can: request_module (can-proto-5) failed. [ 154.307494][ T8045] netlink: 208192 bytes leftover after parsing attributes in process `syz.3.885'. [ 154.343763][ T8045] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 154.584543][ T8062] netlink: 'syz.4.893': attribute type 2 has an invalid length. [ 154.681000][ T8062] netlink: 'syz.4.893': attribute type 8 has an invalid length. [ 154.740574][ T8062] netlink: 132 bytes leftover after parsing attributes in process `syz.4.893'. [ 154.906553][ T8066] netlink: 'syz.0.894': attribute type 4 has an invalid length. [ 154.936949][ T8066] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.894'. [ 155.234551][ T8078] netlink: 48 bytes leftover after parsing attributes in process `syz.3.902'. [ 155.586213][ T8089] netlink: 56 bytes leftover after parsing attributes in process `syz.2.906'. [ 155.601824][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 155.616168][ T8096] netlink: 188 bytes leftover after parsing attributes in process `syz.5.908'. [ 156.452740][ T8122] netlink: 'syz.3.920': attribute type 23 has an invalid length. [ 157.756777][ T8145] [ 157.759143][ T8145] ===================================== [ 157.764685][ T8145] WARNING: bad unlock balance detected! [ 157.770220][ T8145] syzkaller #0 Not tainted [ 157.774612][ T8145] ------------------------------------- [ 157.780138][ T8145] syz.0.930/8145 is trying to release lock (&sighand->siglock) at: [ 157.788028][ T8145] [] copy_process+0x2793/0x3c00 [ 157.794431][ T8145] but there are no more locks to release! [ 157.800121][ T8145] [ 157.800121][ T8145] other info that might help us debug this: [ 157.808253][ T8145] 1 lock held by syz.0.930/8145: [ 157.813191][ T8145] #0: ffffffff8e171890 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x212a/0x3c00 [ 157.823615][ T8145] [ 157.823615][ T8145] stack backtrace: [ 157.829593][ T8145] CPU: 0 UID: 0 PID: 8145 Comm: syz.0.930 Not tainted syzkaller #0 PREEMPT(full) [ 157.829609][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.829622][ T8145] Call Trace: [ 157.829629][ T8145] [ 157.829635][ T8145] dump_stack_lvl+0x189/0x250 [ 157.829655][ T8145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.829668][ T8145] ? __pfx__printk+0x10/0x10 [ 157.829688][ T8145] ? copy_process+0x2793/0x3c00 [ 157.829700][ T8145] print_unlock_imbalance_bug+0xdc/0xf0 [ 157.829715][ T8145] lock_release+0x269/0x3e0 [ 157.829732][ T8145] ? copy_process+0x2793/0x3c00 [ 157.829745][ T8145] _raw_spin_unlock+0x16/0x50 [ 157.829759][ T8145] copy_process+0x2793/0x3c00 [ 157.829776][ T8145] ? copy_process+0x97f/0x3c00 [ 157.829791][ T8145] ? __pfx_copy_process+0x10/0x10 [ 157.829807][ T8145] kernel_clone+0x21e/0x840 [ 157.829823][ T8145] ? __pfx_kernel_clone+0x10/0x10 [ 157.829838][ T8145] ? __lock_acquire+0xab9/0xd20 [ 157.829857][ T8145] __se_sys_clone3+0x256/0x2d0 [ 157.829872][ T8145] ? __pfx___se_sys_clone3+0x10/0x10 [ 157.829889][ T8145] ? __might_fault+0xb0/0x130 [ 157.829901][ T8145] ? bpf_trace_run2+0x186/0x4b0 [ 157.829921][ T8145] ? rcu_is_watching+0x15/0xb0 [ 157.829933][ T8145] ? trace_sys_enter+0x25/0x100 [ 157.829952][ T8145] do_syscall_64+0xfa/0x3b0 [ 157.829967][ T8145] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.829981][ T8145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.829993][ T8145] ? clear_bhb_loop+0x60/0xb0 [ 157.830006][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.830018][ T8145] RIP: 0033:0x7f2bb5dc3609 [ 157.830031][ T8145] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 157.830059][ T8145] RSP: 002b:00007fffabbd2e78 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 157.830078][ T8145] RAX: ffffffffffffffda RBX: 00007f2bb5d459f0 RCX: 00007f2bb5dc3609 [ 157.830088][ T8145] RDX: 00007f2bb5d459f0 RSI: 0000000000000058 RDI: 00007fffabbd2ec0 [ 157.830096][ T8145] RBP: 00007f2bb6c366c0 R08: 00007f2bb6c366c0 R09: 00007fffabbd2fa7 [ 157.830104][ T8145] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 157.830112][ T8145] R13: 000000000000000b R14: 00007fffabbd2ec0 R15: 00007fffabbd2fa8 [ 157.830126][ T8145] [ 158.073326][ T8146] ------------[ cut here ]------------ [ 158.077410][ T8145] ------------[ cut here ]------------ [ 158.079022][ T8146] pvqspinlock: lock 0xffff888024879280 has corrupted value 0x0! [ 158.084381][ T8145] pvqspinlock: lock 0xffff88802487ae40 has corrupted value 0x0! [ 158.092108][ T8146] WARNING: CPU: 0 PID: 8146 at kernel/locking/qspinlock_paravirt.h:506 __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 158.112251][ T8146] Modules linked in: [ 158.116253][ T8146] CPU: 0 UID: 0 PID: 8146 Comm: syz.4.929 Not tainted syzkaller #0 PREEMPT(full) [ 158.127410][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.135150][ T8145] WARNING: CPU: 1 PID: 8145 at kernel/locking/qspinlock_paravirt.h:506 __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 158.139044][ T8146] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 158.149802][ T8145] Modules linked in: [ 158.156768][ T8146] Code: 48 23 a6 f6 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 93 00 00 00 8b 13 48 c7 c7 00 0c 8b 8b 48 89 de e8 13 98 05 f6 90 <0f> 0b 90 90 eb 95 48 c7 c7 10 c6 00 8e 4c 89 f6 4c 89 fa e8 ca a8 [ 158.156785][ T8146] RSP: 0018:ffffc9000bc878c0 EFLAGS: 00010246 [ 158.160840][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.0.930 Not tainted syzkaller #0 PREEMPT(full) [ 158.180576][ T8146] [ 158.180584][ T8146] RAX: aaf0692a6a84d900 RBX: ffff888024879280 RCX: ffff88802f3e3c00 [ 158.180596][ T8146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 158.180604][ T8146] RBP: 1ffff1100490f251 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6 [ 158.180615][ T8146] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: dffffc0000000000 [ 158.186659][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.195852][ T8146] R13: dffffc0000000000 R14: ffff888024879290 R15: ffff888024879288 [ 158.198226][ T8145] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 158.206183][ T8146] FS: 00005555749a9500(0000) GS:ffff888125c11000(0000) knlGS:0000000000000000 [ 158.214179][ T8145] Code: 48 23 a6 f6 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 93 00 00 00 8b 13 48 c7 c7 00 0c 8b 8b 48 89 de e8 13 98 05 f6 90 <0f> 0b 90 90 eb 95 48 c7 c7 10 c6 00 8e 4c 89 f6 4c 89 fa e8 ca a8 [ 158.222172][ T8146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.230525][ T8145] RSP: 0018:ffffc9000c0f78c0 EFLAGS: 00010246 [ 158.230547][ T8145] RAX: 690ae20778b35a00 RBX: ffff88802487ae40 RCX: ffff88802b6c9e00 [ 158.230560][ T8145] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 158.230570][ T8145] RBP: 1ffff1100490f5c9 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6 [ 158.230583][ T8145] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: dffffc0000000000 [ 158.230596][ T8145] R13: dffffc0000000000 R14: ffff88802487ae50 R15: ffff88802487ae48 [ 158.230608][ T8145] FS: 0000555568a64500(0000) GS:ffff888125d11000(0000) knlGS:0000000000000000 [ 158.230623][ T8145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.230634][ T8145] CR2: 0000558569adb0a0 CR3: 0000000078912000 CR4: 00000000003526f0 [ 158.230650][ T8145] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.230661][ T8145] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 158.230671][ T8145] Call Trace: [ 158.230678][ T8145] [ 158.230687][ T8145] __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 158.230717][ T8145] .slowpath+0x9/0x18 [ 158.230734][ T8145] do_raw_spin_unlock+0x122/0x240 [ 158.230757][ T8145] _raw_spin_unlock+0x1e/0x50 [ 158.230774][ T8145] copy_process+0x2793/0x3c00 [ 158.230797][ T8145] ? copy_process+0x97f/0x3c00 [ 158.230814][ T8145] ? __pfx_copy_process+0x10/0x10 [ 158.230834][ T8145] kernel_clone+0x21e/0x840 [ 158.230853][ T8145] ? __pfx_kernel_clone+0x10/0x10 [ 158.230873][ T8145] ? __lock_acquire+0xab9/0xd20 [ 158.230896][ T8145] __se_sys_clone3+0x256/0x2d0 [ 158.230912][ T8145] ? __pfx___se_sys_clone3+0x10/0x10 [ 158.230935][ T8145] ? __might_fault+0xb0/0x130 [ 158.230950][ T8145] ? bpf_trace_run2+0x186/0x4b0 [ 158.230976][ T8145] ? rcu_is_watching+0x15/0xb0 [ 158.230993][ T8145] ? trace_sys_enter+0x25/0x100 [ 158.231016][ T8145] do_syscall_64+0xfa/0x3b0 [ 158.231036][ T8145] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.231054][ T8145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.231071][ T8145] ? clear_bhb_loop+0x60/0xb0 [ 158.231097][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.231113][ T8145] RIP: 0033:0x7f2bb5dc3609 [ 158.231128][ T8145] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 158.231142][ T8145] RSP: 002b:00007fffabbd2e78 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 158.231160][ T8145] RAX: ffffffffffffffda RBX: 00007f2bb5d459f0 RCX: 00007f2bb5dc3609 [ 158.231172][ T8145] RDX: 00007f2bb5d459f0 RSI: 0000000000000058 RDI: 00007fffabbd2ec0 [ 158.231184][ T8145] RBP: 00007f2bb6c366c0 R08: 00007f2bb6c366c0 R09: 00007fffabbd2fa7 [ 158.231196][ T8145] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 158.231207][ T8145] R13: 000000000000000b R14: 00007fffabbd2ec0 R15: 00007fffabbd2fa8 [ 158.231226][ T8145] [ 158.231235][ T8145] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.231247][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.0.930 Not tainted syzkaller #0 PREEMPT(full) [ 158.231265][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.231273][ T8145] Call Trace: [ 158.231278][ T8145] [ 158.231283][ T8145] dump_stack_lvl+0x99/0x250 [ 158.231302][ T8145] ? __asan_memcpy+0x40/0x70 [ 158.231322][ T8145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.231340][ T8145] ? __pfx__printk+0x10/0x10 [ 158.231365][ T8145] vpanic+0x281/0x750 [ 158.231382][ T8145] ? __pfx__printk+0x10/0x10 [ 158.231400][ T8145] ? __pfx_vpanic+0x10/0x10 [ 158.231417][ T8145] ? is_bpf_text_address+0x26/0x2b0 [ 158.231443][ T8145] panic+0xb9/0xc0 [ 158.231460][ T8145] ? __pfx_panic+0x10/0x10 [ 158.231482][ T8145] __warn+0x31b/0x4b0 [ 158.231498][ T8145] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 158.231518][ T8145] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 158.231538][ T8145] report_bug+0x2be/0x4f0 [ 158.231556][ T8145] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 158.231576][ T8145] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 158.231596][ T8145] ? __pv_queued_spin_unlock_slowpath+0x200/0x2a0 [ 158.231615][ T8145] handle_bug+0x84/0x160 [ 158.231635][ T8145] exc_invalid_op+0x1a/0x50 [ 158.231656][ T8145] asm_exc_invalid_op+0x1a/0x20 [ 158.231670][ T8145] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 158.231691][ T8145] Code: 48 23 a6 f6 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 93 00 00 00 8b 13 48 c7 c7 00 0c 8b 8b 48 89 de e8 13 98 05 f6 90 <0f> 0b 90 90 eb 95 48 c7 c7 10 c6 00 8e 4c 89 f6 4c 89 fa e8 ca a8 [ 158.231704][ T8145] RSP: 0018:ffffc9000c0f78c0 EFLAGS: 00010246 [ 158.231718][ T8145] RAX: 690ae20778b35a00 RBX: ffff88802487ae40 RCX: ffff88802b6c9e00 [ 158.231731][ T8145] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 158.231741][ T8145] RBP: 1ffff1100490f5c9 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6 [ 158.231753][ T8145] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: dffffc0000000000 [ 158.231765][ T8145] R13: dffffc0000000000 R14: ffff88802487ae50 R15: ffff88802487ae48 [ 158.231785][ T8145] __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 158.231808][ T8145] .slowpath+0x9/0x18 [ 158.231825][ T8145] do_raw_spin_unlock+0x122/0x240 [ 158.231845][ T8145] _raw_spin_unlock+0x1e/0x50 [ 158.231861][ T8145] copy_process+0x2793/0x3c00 [ 158.231884][ T8145] ? copy_process+0x97f/0x3c00 [ 158.231911][ T8145] ? __pfx_copy_process+0x10/0x10 [ 158.231932][ T8145] kernel_clone+0x21e/0x840 [ 158.231951][ T8145] ? __pfx_kernel_clone+0x10/0x10 [ 158.231972][ T8145] ? __lock_acquire+0xab9/0xd20 [ 158.231996][ T8145] __se_sys_clone3+0x256/0x2d0 [ 158.232014][ T8145] ? __pfx___se_sys_clone3+0x10/0x10 [ 158.232038][ T8145] ? __might_fault+0xb0/0x130 [ 158.232051][ T8145] ? bpf_trace_run2+0x186/0x4b0 [ 158.232077][ T8145] ? rcu_is_watching+0x15/0xb0 [ 158.232098][ T8145] ? trace_sys_enter+0x25/0x100 [ 158.232121][ T8145] do_syscall_64+0xfa/0x3b0 [ 158.232139][ T8145] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.232157][ T8145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.232173][ T8145] ? clear_bhb_loop+0x60/0xb0 [ 158.232190][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.232205][ T8145] RIP: 0033:0x7f2bb5dc3609 [ 158.232217][ T8145] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 158.232230][ T8145] RSP: 002b:00007fffabbd2e78 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 158.232246][ T8145] RAX: ffffffffffffffda RBX: 00007f2bb5d459f0 RCX: 00007f2bb5dc3609 [ 158.232258][ T8145] RDX: 00007f2bb5d459f0 RSI: 0000000000000058 RDI: 00007fffabbd2ec0 [ 158.232269][ T8145] RBP: 00007f2bb6c366c0 R08: 00007f2bb6c366c0 R09: 00007fffabbd2fa7 [ 158.232281][ T8145] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 158.232291][ T8145] R13: 000000000000000b R14: 00007fffabbd2ec0 R15: 00007fffabbd2fa8 [ 158.232308][ T8145] [ 158.241694][ T8145] Kernel Offset: disabled