last executing test programs: 20.374127092s ago: executing program 0 (id=277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x800, 0x64}, 0x4846, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000380), 0x8, 0xf2, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001480)="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", 0x46a}, {&(0x7f0000000740)="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", 0x5da}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}}}], 0x20}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={0x0}, 0x18) 20.369814552s ago: executing program 3 (id=278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf14"], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1a, 0xb, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b12f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 20.175054378s ago: executing program 0 (id=280): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x800}, 0x48044) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x800}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b301000100"}) 19.636059824s ago: executing program 2 (id=282): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$kcm(0x1e, 0x1, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000006965f302e393f568000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) (async) r5 = socket$kcm(0x2, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14e9ffff030000000400000001000000000000008aab5d82d1d42de3bb4b46291f95a20131effc2b7b99ab0272a56f18e0b0d29224f55f19f46dd19b03db6a22eb0ab4224647e9bd7c48bc4d", @ANYRES32, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000780), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000340), 0x8, 0x3f, 0x8, 0xffffff91, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r6, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0xf, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xd}, 0x84a8, 0x2f, 0x43a1bd79, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18.44141114s ago: executing program 0 (id=283): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'erspan0\x00', @random="02001400e008"}) 18.434068351s ago: executing program 1 (id=284): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f00000012c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x8b, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={0xffffffffffffffff, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000001580)=[0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f0000001600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001640), &(0x7f0000001680), 0x8, 0xa6, 0x8, 0x8, &(0x7f00000016c0)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="73cd9a05557451e4e2ac104e35f73af5a9b26e53887963a28e18f75c17d5db8eefee4cb11e3f7aa11f54fcccf3f05fa394f131ce1c854eb63eb354433405b108e59c5a7ae070f76d6d8b1db1a47e2fb435334666ce2ea5753b04cd91df", 0x5d}], 0x2, &(0x7f0000001840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @remote}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@end, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0xa8}, 0x40084) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)={'a', ' *:* ', 'r\x00'}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b00)={@ifindex=r0, 0x26, 0x0, 0xe3d00000, &(0x7f0000001a00)=[0x0], 0x1, 0x0, &(0x7f0000001a40)=[0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0]}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000001940)={0x1, 0x80, 0x0, 0x4, 0x6, 0x3, 0x0, 0x9, 0x40, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x100400, 0x8, 0xff, 0x6, 0x2, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x8dc0000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000019c0)='a') socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x23, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'erspan0\x00', @random="02001400e008"}) 18.344290134s ago: executing program 2 (id=285): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) 18.343894054s ago: executing program 3 (id=286): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x23, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000003c0), 0x7}, 0x802, 0x7c, 0x9ec3, 0xa, 0x4, 0x0, 0x100, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x80, 0x7, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x1904, 0x9, 0x6, 0x6, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000700)={&(0x7f0000000180)="7fd8655215dbd588c141205201a273154428c4d6d170f5cf28834475909e23adb37b252f96a30e863de419e6a5c2ae15106892139f6917294fdd3039503b65ff03cf1aa4a5000a1771dcce2358201adb3c986ece92e5ffb0b2ab11248dd7e91940c3e10472208a274c5c5ba930b5b1a3daf86c6cd6f6206bc657bb36", &(0x7f0000000340)=""/59, &(0x7f0000000380)="572ffb3fbd5ecf9787844adc57aa8d89946974979d33409772e486105112b30247456f38a6435430ede781f3", &(0x7f0000000580)="6a8a2ca28a71d571b6c0d0b179fde6fac992c6f011ed1b229d73e66ca4fd57f03b303034146bb5514d9749c6abd51a6312c35ab29726e6115cc45fa6ebe15602fede0f26c54a5a96c611f90dcde9d2cbbf1ba1504304a7e442360119ab297a1476f413dd9e532e24f4f02c8d741b79112118cd8256648155b62384d6bedafd5a9226ee3943cff98ac1b446126190d3cca9d50613eae6046ac02e593ce87c35055ad68eb9ac9cf68ede06ce01f637c3f80f22bd6cfe443d4634c7bc54652e0d1eb5d34282cc3b32df7e536e8740ce0621940f8ec9055b9ea4e99c0518dae3728aaf67da6f45a60280c4253201192f176f74090ee7", 0x2, r5}, 0x38) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x5, 0x8, 0x9b9b, 0x6fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000090000000008000000020000000000000c02000000000000000000000d0000000000005f5f612e3000"], 0x0, 0x38}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 18.254210586s ago: executing program 0 (id=287): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r1, @ANYBLOB="20576e07e7d5898b99ecdcfb281575aff87b4075203db4e4ba681d448547e17cee6f5fd127f1e2420fd00b4e1291cd56b6b3603454238565876a9a1e8bed8b776af5c5103a88554e3c169864f4c804253835967a5368e2144755832f4b2644b83a1380a0b841eaccabe553d9153ca4c85775ed2f1c640d2187c7fe034f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d23"], &(0x7f0000000140)='GPL\x00'}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x301) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x2, 0x1}, 0x48) 18.221241187s ago: executing program 2 (id=288): socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffff9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r5}, 0xc) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f00000001c0), 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f00000001c0)=r8, 0x4) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0xf9b1f16659373b60, 0x0, 0x2, 0xc, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18.14001534s ago: executing program 1 (id=289): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000400), 0x8}, 0x204, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000010000000000000000008500000017000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x3c1341, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40080, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 17.965418805s ago: executing program 2 (id=290): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x3ff, 0x8b, &(0x7f0000000140)=""/139, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x3}, 0x10, 0x23971, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x4, '\x00', 0x0, @sk_skb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x16, 0x0, 0xfffffffa, &(0x7f0000000400), 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x1424, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r2, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xc5, 0x0, 0x0, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xd4, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) 17.890562957s ago: executing program 3 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00f28f0000000000000000000700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7fff}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x1, 0x6, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, 0x0, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712b3ef00000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000001c0)={r5}) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x40}, 0x8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) 17.671401644s ago: executing program 0 (id=292): r0 = socket$kcm(0x29, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffceb, &(0x7f0000000700)=[{&(0x7f0000000600)="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"}], 0x0, 0x0, 0x0, 0x7400}, 0x4050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x83, &(0x7f0000000000)=r5, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f9, &(0x7f0000000080)) (async) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) socket$kcm(0x2c, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r9 = socket$kcm(0x23, 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000000c0)=r10, 0x4) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, r8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xe, &(0x7f0000000580)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func, @call={0x85, 0x0, 0x0, 0xb5}, @exit, @printk={@llx}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x2, 0x0, 0x40000004, 0xa021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x82, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, 0x0, 0x0) (async) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100603", 0x17}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2a1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r12 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x41}, 0x80, 0x0}, 0x20048015) 17.49216562s ago: executing program 1 (id=293): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000880)={&(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000200)=""/162, 0xa2}, {&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/70, 0x46}], 0x8, &(0x7f0000000780)=""/198, 0xc6}, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r4}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0x18, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) sendmsg$kcm(r2, 0x0, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x4000}) 17.47795585s ago: executing program 2 (id=294): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (fail_nth: 8) 17.416964262s ago: executing program 0 (id=295): socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2a021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x18, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000001000), 0x4) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe904102"], 0x20}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x17, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x1, 0x3, 0x3, 0x7, 0xa, 0xfffffffffffffff0, 0xfffffffffffffff0}, @ldst={0x3, 0x0, 0x4, 0x7, 0x0, 0x4, 0x1}, @generic={0x6, 0x5, 0x3, 0x2, 0x8}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0xe6, &(0x7f0000000400)=""/230, 0x41100, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x2, 0x5, 0x9}, {0x4, 0x5, 0x2, 0x9}, {0x30000000, 0x1, 0x2, 0x2}, {0x5, 0x5, 0xe, 0x3}, {0x2, 0x2, 0xe, 0x2}, {0x0, 0x3, 0xc}, {0x3, 0x2, 0xd, 0xde8825cbe83c261e}], 0x10, 0xc5}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000006c0)={r2, r4}) sendmsg$inet(r3, 0x0, 0x20040d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x18}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00%\x00'], 0xfe33) sendmsg$kcm(r3, &(0x7f00000062c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)="f6", 0x1}], 0x1}, 0x4004045) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pS \x00'}, 0x20) close(r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b90900000a0b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) 16.964283865s ago: executing program 3 (id=296): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) 16.635403525s ago: executing program 2 (id=297): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xf}, 0x21, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) (fail_nth: 8) 16.608476766s ago: executing program 3 (id=298): socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffff9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r5}, 0xc) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f00000001c0), 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f00000001c0)=r8, 0x4) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0xf9b1f16659373b60, 0x0, 0x2, 0xc, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.500800369s ago: executing program 1 (id=299): socket$kcm(0x2a, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.156085809s ago: executing program 3 (id=300): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r1, @ANYBLOB="20576e07e7d5898b99ecdcfb281575aff87b4075203db4e4ba681d448547e17cee6f5fd127f1e2420fd00b4e1291cd56b6b3603454238565876a9a1e8bed8b776af5c5103a88554e3c169864f4c804253835967a5368e2144755832f4b2644b83a1380a0b841eaccabe553d9153ca4c85775ed2f1c640d2187c7fe034f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x301) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x2, 0x1}, 0x48) 16.121552291s ago: executing program 1 (id=301): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xffff, @remote}, 0x29, &(0x7f0000000740)=[{&(0x7f0000000700)="fbd2b9ed29d8974ae8ab72ff916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be930583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}, {&(0x7f0000000600)="6827b9fff736d81407c20937747b22379a036284a2ebe480e3ac44462339dd3a22069e0f10faefc9ef35a54105116697e59e7740aa1abfdab2f052e98cea4d0cdc807bce117b9f67d82891ec2c232723af4695f2ed94e25bbe3e6ea674844db3689561fb12a998fc45124d805b52b73f3ce5f0030e291f2ba55de2b592eeffd4666a2d49552edc2b0a82dcad2da64ea79554b8c40a924cb338b34a121090ca6b14ee4ec388e6f413fa3d012730a1bd1c90b551ec73172cf07b6ae021c758d73526447687386797b67f8f58c7eb30caf245d6f691ff3099de6f37ab23ee5e93951041e8326e2f8d9093b7"}], 0x2}, 0x0) 15.857660179s ago: executing program 1 (id=302): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x800}, 0x40800) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d", 0xca}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000800)=0xffff) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000180), &(0x7f0000000000)=""/6, 0x2}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000240300002400f6f061014fc4ec7c8b42157d7c733e99000003000000020000000100000604000000040000007f00000007000000000000010000000058005503002e00"], &(0x7f00000003c0)=""/177, 0x3f, 0xb1, 0x1, 0x81}, 0x28) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000001c0)="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", &(0x7f0000002680)=""/178}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r6, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000740)=[0x0], &(0x7f0000000780), 0x0, 0x2a, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000780), &(0x7f0000000840), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x5, [@union={0xe, 0x5, 0x0, 0x5, 0x1, 0x5, [{0x2, 0x4, 0x9}, {0x400007, 0x0, 0x80}, {0xb, 0x1, 0x9}, {0x7, 0x5, 0xb3}, {0xa, 0x1, 0x2}]}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x7, 0xfbd}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x80001}]}]}, {0x0, [0x30, 0x30, 0x2e]}}, &(0x7f0000000fc0)=""/5, 0x8d, 0x5, 0x0, 0x10002}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0300000004000000040000400a00000000000000", @ANYRES32=r7, @ANYBLOB='\b\x00'/20, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="020000000400"/28], 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x3143, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x6, &(0x7f0000000100)=@raw=[@generic={0x1, 0x6, 0xf, 0x7f}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2cb}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @jmp={0x5, 0x0, 0x8, 0x0, 0xa, 0x1, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0x10000, 0x15, &(0x7f0000000540)=""/21, 0x40f00, 0x40, '\x00', r8, 0x25, r5, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0xffff62e0, 0xfffffffb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680)=[r4, r10, r4, r4, r4, r4, r4, r4, r4], &(0x7f00000006c0)=[{0x4, 0x3, 0x2}, {0x3, 0x1, 0x7, 0x6}, {0x0, 0x2, 0xa}, {0x0, 0x4, 0xc, 0x7}, {0x3, 0x5, 0x2, 0xc}, {0x1, 0x4, 0x6, 0x6}, {0x0, 0x5, 0x1, 0xf}], 0x10, 0xe}, 0x94) 2.00026873s ago: executing program 32 (id=295): socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2a021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x18, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000001000), 0x4) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe904102"], 0x20}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x17, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x1, 0x3, 0x3, 0x7, 0xa, 0xfffffffffffffff0, 0xfffffffffffffff0}, @ldst={0x3, 0x0, 0x4, 0x7, 0x0, 0x4, 0x1}, @generic={0x6, 0x5, 0x3, 0x2, 0x8}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0xe6, &(0x7f0000000400)=""/230, 0x41100, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x2, 0x5, 0x9}, {0x4, 0x5, 0x2, 0x9}, {0x30000000, 0x1, 0x2, 0x2}, {0x5, 0x5, 0xe, 0x3}, {0x2, 0x2, 0xe, 0x2}, {0x0, 0x3, 0xc}, {0x3, 0x2, 0xd, 0xde8825cbe83c261e}], 0x10, 0xc5}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000006c0)={r2, r4}) sendmsg$inet(r3, 0x0, 0x20040d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x18}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00%\x00'], 0xfe33) sendmsg$kcm(r3, &(0x7f00000062c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)="f6", 0x1}], 0x1}, 0x4004045) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pS \x00'}, 0x20) close(r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b90900000a0b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) 970.387681ms ago: executing program 33 (id=297): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xf}, 0x21, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) (fail_nth: 8) 912.096532ms ago: executing program 34 (id=300): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r1, @ANYBLOB="20576e07e7d5898b99ecdcfb281575aff87b4075203db4e4ba681d448547e17cee6f5fd127f1e2420fd00b4e1291cd56b6b3603454238565876a9a1e8bed8b776af5c5103a88554e3c169864f4c804253835967a5368e2144755832f4b2644b83a1380a0b841eaccabe553d9153ca4c85775ed2f1c640d2187c7fe034f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d23"], &(0x7f0000000140)='GPL\x00'}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x301) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x2, 0x1}, 0x48) 0s ago: executing program 35 (id=302): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x800}, 0x40800) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d", 0xca}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000800)=0xffff) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000180), &(0x7f0000000000)=""/6, 0x2}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000240300002400f6f061014fc4ec7c8b42157d7c733e99000003000000020000000100000604000000040000007f00000007000000000000010000000058005503002e00"], &(0x7f00000003c0)=""/177, 0x3f, 0xb1, 0x1, 0x81}, 0x28) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000001c0)="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", &(0x7f0000002680)=""/178}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r6, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000740)=[0x0], &(0x7f0000000780), 0x0, 0x2a, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000780), &(0x7f0000000840), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x5, [@union={0xe, 0x5, 0x0, 0x5, 0x1, 0x5, [{0x2, 0x4, 0x9}, {0x400007, 0x0, 0x80}, {0xb, 0x1, 0x9}, {0x7, 0x5, 0xb3}, {0xa, 0x1, 0x2}]}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x7, 0xfbd}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x80001}]}]}, {0x0, [0x30, 0x30, 0x2e]}}, &(0x7f0000000fc0)=""/5, 0x8d, 0x5, 0x0, 0x10002}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0300000004000000040000400a00000000000000", @ANYRES32=r7, @ANYBLOB='\b\x00'/20, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="020000000400"/28], 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x3143, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x6, &(0x7f0000000100)=@raw=[@generic={0x1, 0x6, 0xf, 0x7f}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2cb}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @jmp={0x5, 0x0, 0x8, 0x0, 0xa, 0x1, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0x10000, 0x15, &(0x7f0000000540)=""/21, 0x40f00, 0x40, '\x00', r8, 0x25, r5, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0xffff62e0, 0xfffffffb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680)=[r4, r10, r4, r4, r4, r4, r4, r4, r4], &(0x7f00000006c0)=[{0x4, 0x3, 0x2}, {0x3, 0x1, 0x7, 0x6}, {0x0, 0x2, 0xa}, {0x0, 0x4, 0xc, 0x7}, {0x3, 0x5, 0x2, 0xc}, {0x1, 0x4, 0x6, 0x6}, {0x0, 0x5, 0x1, 0xf}], 0x10, 0xe}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 67.717147][ T5757] cgroup: Unknown subsys name 'net' [ 67.850270][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.172797][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.506016][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.515031][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.522743][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.530996][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.544075][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.551909][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.560609][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.568792][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.574093][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.576261][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.583471][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.597380][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.633191][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.641590][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.654751][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.662901][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.671842][ T5770] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.679257][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.688305][ T5770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.695472][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.714965][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.734193][ T5770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.741840][ T5770] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.749623][ T5770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.020151][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 71.143426][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 71.196003][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 71.263294][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.271479][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.278953][ T5768] bridge_slave_0: entered allmulticast mode [ 71.287422][ T5768] bridge_slave_0: entered promiscuous mode [ 71.297360][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.304543][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.311708][ T5768] bridge_slave_1: entered allmulticast mode [ 71.319109][ T5768] bridge_slave_1: entered promiscuous mode [ 71.396016][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 71.406033][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.413200][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.420528][ T5771] bridge_slave_0: entered allmulticast mode [ 71.428856][ T5771] bridge_slave_0: entered promiscuous mode [ 71.438201][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.456367][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.466488][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.473207][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.475836][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.489020][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.496812][ T5771] bridge_slave_1: entered allmulticast mode [ 71.503450][ T5771] bridge_slave_1: entered promiscuous mode [ 71.511536][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.520153][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.527841][ T5775] bridge_slave_0: entered allmulticast mode [ 71.535485][ T5775] bridge_slave_0: entered promiscuous mode [ 71.577890][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.585073][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.592220][ T5775] bridge_slave_1: entered allmulticast mode [ 71.599194][ T5775] bridge_slave_1: entered promiscuous mode [ 71.619720][ T5768] team0: Port device team_slave_0 added [ 71.648504][ T5768] team0: Port device team_slave_1 added [ 71.670615][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.682767][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.722335][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.733398][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.740412][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.766400][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.797707][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.808698][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.815748][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.841810][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.871080][ T5771] team0: Port device team_slave_0 added [ 71.880333][ T5771] team0: Port device team_slave_1 added [ 71.910642][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.918087][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.925494][ T5778] bridge_slave_0: entered allmulticast mode [ 71.932225][ T5778] bridge_slave_0: entered promiscuous mode [ 71.940046][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.947250][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.954692][ T5778] bridge_slave_1: entered allmulticast mode [ 71.961661][ T5778] bridge_slave_1: entered promiscuous mode [ 71.990882][ T5768] hsr_slave_0: entered promiscuous mode [ 71.997184][ T5768] hsr_slave_1: entered promiscuous mode [ 72.030821][ T5775] team0: Port device team_slave_0 added [ 72.061693][ T5775] team0: Port device team_slave_1 added [ 72.068510][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.075678][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.102630][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.125355][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.146865][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.153980][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.179924][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.205227][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.244925][ T5778] team0: Port device team_slave_0 added [ 72.258518][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.265593][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.291980][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.305515][ T5778] team0: Port device team_slave_1 added [ 72.331349][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.338462][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.364707][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.395955][ T5771] hsr_slave_0: entered promiscuous mode [ 72.402606][ T5771] hsr_slave_1: entered promiscuous mode [ 72.409990][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.417759][ T5771] Cannot create hsr debugfs directory [ 72.446796][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.453885][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.480066][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.493069][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.500143][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.526084][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.598300][ T5775] hsr_slave_0: entered promiscuous mode [ 72.605932][ T5775] hsr_slave_1: entered promiscuous mode [ 72.611965][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.619641][ T5775] Cannot create hsr debugfs directory [ 72.654694][ T5770] Bluetooth: hci0: command tx timeout [ 72.660399][ T5770] Bluetooth: hci1: command tx timeout [ 72.669639][ T5778] hsr_slave_0: entered promiscuous mode [ 72.676506][ T5778] hsr_slave_1: entered promiscuous mode [ 72.682510][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.690121][ T5778] Cannot create hsr debugfs directory [ 72.741722][ T5770] Bluetooth: hci2: command tx timeout [ 72.813951][ T5770] Bluetooth: hci3: command tx timeout [ 72.970178][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.983363][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.006377][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.017492][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.079276][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.109954][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.136980][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.148228][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.200726][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.213695][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.245468][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.255670][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.307597][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.367586][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.378426][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.389893][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.401726][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.411113][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.435014][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.442305][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.477856][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.485200][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.568953][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.600295][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.619372][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.626556][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.648713][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.655895][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.710194][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.743265][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.765816][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.809514][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.816711][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.851161][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.862916][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.870047][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.930380][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.937582][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.985751][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.992928][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.069285][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.204009][ T5768] veth0_vlan: entered promiscuous mode [ 74.231014][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.261427][ T5768] veth1_vlan: entered promiscuous mode [ 74.395664][ T5768] veth0_macvtap: entered promiscuous mode [ 74.411942][ T5771] veth0_vlan: entered promiscuous mode [ 74.445121][ T5768] veth1_macvtap: entered promiscuous mode [ 74.468268][ T5771] veth1_vlan: entered promiscuous mode [ 74.517948][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.542787][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.561968][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.571107][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.581785][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.590977][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.603612][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.617888][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.630397][ T5771] veth0_macvtap: entered promiscuous mode [ 74.642580][ T5771] veth1_macvtap: entered promiscuous mode [ 74.718862][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.734261][ T5770] Bluetooth: hci0: command tx timeout [ 74.736473][ T5085] Bluetooth: hci1: command tx timeout [ 74.746630][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.758432][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.786459][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.797122][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.811073][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.819003][ T5085] Bluetooth: hci2: command tx timeout [ 74.860367][ T4950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.869450][ T4950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.881590][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.890674][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.900885][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.908205][ T5085] Bluetooth: hci3: command tx timeout [ 74.910152][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.963918][ T4950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.977084][ T4950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.008287][ T5775] veth0_vlan: entered promiscuous mode [ 75.031428][ T5778] veth0_vlan: entered promiscuous mode [ 75.079166][ T5775] veth1_vlan: entered promiscuous mode [ 75.140834][ T5778] veth1_vlan: entered promiscuous mode [ 75.189847][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.206990][ C0] hrtimer: interrupt took 67327 ns [ 75.222414][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.244087][ T5775] veth0_macvtap: entered promiscuous mode [ 75.271705][ T5775] veth1_macvtap: entered promiscuous mode [ 75.291111][ T5778] veth0_macvtap: entered promiscuous mode [ 75.307036][ T5778] veth1_macvtap: entered promiscuous mode [ 75.341562][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.350685][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.391156][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.416340][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.426553][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.437075][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.465129][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.475002][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.497971][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.515588][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.531847][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.545184][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.555959][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.568446][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.590839][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.637045][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.661454][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.673244][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.685503][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.699933][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.715110][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.731763][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.742511][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.791301][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.806482][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.829761][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.844143][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.865123][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.876546][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.893188][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.950960][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.995605][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.089634][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.141452][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.815000][ T5085] Bluetooth: hci1: command tx timeout [ 76.825782][ T5085] Bluetooth: hci0: command tx timeout [ 76.897601][ T5085] Bluetooth: hci2: command tx timeout [ 76.975235][ T5085] Bluetooth: hci3: command tx timeout [ 78.895352][ T5085] Bluetooth: hci0: command tx timeout [ 78.895841][ T5770] Bluetooth: hci1: command tx timeout [ 78.974325][ T5770] Bluetooth: hci2: command tx timeout [ 79.054559][ T5770] Bluetooth: hci3: command tx timeout [ 79.117386][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.131406][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.140933][ T5844] netlink: 'syz.0.7': attribute type 10 has an invalid length. [ 79.157502][ T5844] veth1_macvtap: left promiscuous mode [ 79.338029][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.360291][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.402210][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.422403][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.431779][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.441798][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.887766][ T5858] netlink: 'syz.1.9': attribute type 17 has an invalid length. [ 80.005248][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 80.006365][ T5861] Zero length message leads to an empty skb [ 80.211740][ T5868] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11'. [ 80.233977][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.246658][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.258549][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.271417][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.109349][ T5883] netlink: 'syz.1.16': attribute type 10 has an invalid length. [ 81.175373][ T5883] veth1_macvtap: left promiscuous mode [ 81.412498][ T5890] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.456336][ T5887] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 81.582130][ T5892] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 81.607480][ T5892] veth1_macvtap: left promiscuous mode [ 81.620659][ T5883] syz.1.16 (5883) used greatest stack depth: 20072 bytes left [ 82.739605][ T5909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.747398][ T5909] IPv6: NLM_F_CREATE should be set when creating new route [ 82.754964][ T5909] IPv6: NLM_F_CREATE should be set when creating new route [ 82.762253][ T5909] IPv6: NLM_F_CREATE should be set when creating new route [ 83.117190][ T5909] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 83.123481][ T5909] syzkaller1: linktype set to 769 [ 85.583531][ T5926] netlink: 'syz.3.29': attribute type 10 has an invalid length. [ 85.619669][ T5926] veth1_macvtap: left promiscuous mode [ 86.462958][ T5939] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 86.839324][ T1196] cfg80211: failed to load regulatory.db [ 87.614625][ T5954] netlink: 'syz.2.39': attribute type 10 has an invalid length. [ 88.604940][ T5968] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.44'. [ 90.312352][ T5996] netlink: 'syz.1.53': attribute type 10 has an invalid length. [ 90.325741][ T5997] netlink: 'syz.3.55': attribute type 10 has an invalid length. [ 90.349904][ T5998] netlink: 14 bytes leftover after parsing attributes in process `syz.2.54'. [ 90.376410][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.395221][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.442155][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.495436][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.544933][ T6001] bridge_slave_0: mtu less than device minimum [ 90.781086][ T6006] netlink: 'syz.1.57': attribute type 29 has an invalid length. [ 90.826018][ T6003] cgroup: fork rejected by pids controller in /syz3 [ 92.520886][ T6006] netlink: 'syz.1.57': attribute type 29 has an invalid length. [ 92.529854][ T6110] netlink: 'syz.2.58': attribute type 10 has an invalid length. [ 92.648645][ T6114] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 92.668511][ T6116] netlink: 'syz.2.61': attribute type 10 has an invalid length. [ 93.002690][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.111056][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.455449][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.469525][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.485045][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.504806][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.514574][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.530712][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.830040][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.863252][ T6133] netlink: 'syz.2.66': attribute type 10 has an invalid length. [ 94.996052][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.313338][ T6145] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 95.396326][ T6130] chnl_net:caif_netlink_parms(): no params data found [ 95.639716][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.666994][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.674374][ T6130] bridge_slave_0: entered allmulticast mode [ 95.681709][ T6130] bridge_slave_0: entered promiscuous mode [ 95.692391][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.700221][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.707560][ T6130] bridge_slave_1: entered allmulticast mode [ 95.715045][ T6130] bridge_slave_1: entered promiscuous mode [ 96.001396][ T6167] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 96.029716][ T6130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.076554][ T6130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.317281][ T6130] team0: Port device team_slave_0 added [ 96.355893][ T6130] team0: Port device team_slave_1 added [ 96.621531][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.644608][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.680726][ T5085] Bluetooth: hci2: command tx timeout [ 96.720436][ T6130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.931033][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.944706][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.971745][ T6130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.631159][ T6130] hsr_slave_0: entered promiscuous mode [ 97.672699][ T6130] hsr_slave_1: entered promiscuous mode [ 97.695748][ T6130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.722301][ T6130] Cannot create hsr debugfs directory [ 98.314092][ T6203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.321365][ T6203] IPv6: NLM_F_CREATE should be set when creating new route [ 98.328719][ T6203] IPv6: NLM_F_CREATE should be set when creating new route [ 98.335998][ T6203] IPv6: NLM_F_CREATE should be set when creating new route [ 98.496146][ T12] hsr_slave_0: left promiscuous mode [ 98.515905][ T12] hsr_slave_1: left promiscuous mode [ 98.548248][ T12] bridge_slave_1: left allmulticast mode [ 98.573937][ T12] bridge_slave_1: left promiscuous mode [ 98.580805][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.744375][ T5085] Bluetooth: hci2: command tx timeout [ 99.252687][ T12] bridge_slave_0: left allmulticast mode [ 99.277452][ T12] bridge_slave_0: left promiscuous mode [ 99.296763][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.825115][ T5085] Bluetooth: hci2: command tx timeout [ 101.770133][ T12] veth0_macvtap: left promiscuous mode [ 101.776108][ T12] veth1_vlan: left promiscuous mode [ 101.781705][ T12] veth0_vlan: left promiscuous mode [ 102.350873][ T12] team0 (unregistering): Port device team_slave_1 removed [ 102.384836][ T12] team0 (unregistering): Port device team_slave_0 removed [ 102.421047][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.458149][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.690899][ T12] bond0 (unregistering): Released all slaves [ 102.901085][ T5085] Bluetooth: hci2: command tx timeout [ 102.904488][ T6222] netlink: 'syz.0.83': attribute type 17 has an invalid length. [ 103.932319][ T6246] netlink: 14 bytes leftover after parsing attributes in process `syz.0.86'. [ 103.951674][ T6246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.970448][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.084685][ T6246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.097388][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.226020][ T6251] bridge_slave_0: mtu less than device minimum [ 105.281859][ T6260] netlink: 'syz.1.89': attribute type 10 has an invalid length. [ 105.488928][ T6130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.512299][ T6130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.541651][ T6130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.576948][ T6130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.839260][ T6130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.883525][ T6130] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.920133][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.928050][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.959139][ T2878] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.966362][ T2878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.986919][ T6277] netlink: 14 bytes leftover after parsing attributes in process `syz.1.101'. [ 106.006270][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.037050][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.861700][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.869429][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.587460][ T6130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.597447][ T6310] netlink: 14 bytes leftover after parsing attributes in process `syz.1.96'. [ 109.677455][ T6130] veth0_vlan: entered promiscuous mode [ 109.696341][ T6130] veth1_vlan: entered promiscuous mode [ 109.749081][ T6130] veth0_macvtap: entered promiscuous mode [ 109.763419][ T6130] veth1_macvtap: entered promiscuous mode [ 109.789840][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.810232][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.835999][ T6130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.851608][ T6130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.863632][ T6130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.874525][ T6130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.961066][ T4950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.975979][ T4950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.011744][ T4950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.021959][ T4950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.137977][ T6323] netlink: 'syz.2.97': attribute type 17 has an invalid length. [ 110.170248][ T6325] netlink: 14 bytes leftover after parsing attributes in process `syz.0.107'. [ 111.322454][ T6345] netlink: 14 bytes leftover after parsing attributes in process `syz.2.99'. [ 112.874814][ T6365] netlink: 'syz.0.105': attribute type 10 has an invalid length. [ 113.621030][ T6382] netlink: 'syz.0.109': attribute type 10 has an invalid length. [ 114.047685][ T6391] netlink: 'syz.0.111': attribute type 10 has an invalid length. [ 114.136262][ T6394] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 114.911685][ T6410] netlink: 'syz.0.122': attribute type 10 has an invalid length. [ 115.419259][ T6424] netlink: 14 bytes leftover after parsing attributes in process `syz.2.114'. [ 115.815976][ T6439] netlink: 14 bytes leftover after parsing attributes in process `syz.1.117'. [ 116.305078][ T6444] netlink: 'syz.3.119': attribute type 10 has an invalid length. [ 116.336948][ T6444] veth1_macvtap: left promiscuous mode [ 117.478408][ T6465] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 117.579919][ T6466] netlink: 14 bytes leftover after parsing attributes in process `syz.0.129'. [ 120.061468][ T6498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.314285][ T6498] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 120.344019][ T6498] syzkaller1: linktype set to 769 [ 120.381746][ T6502] netlink: 14 bytes leftover after parsing attributes in process `syz.0.139'. [ 120.595840][ T6513] netlink: 'syz.2.145': attribute type 4 has an invalid length. [ 120.603678][ T6513] netlink: 152 bytes leftover after parsing attributes in process `syz.2.145'. [ 120.626684][ T6513] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 120.695890][ T6508] warning: `syz.3.143' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.851787][ T6520] netlink: 14 bytes leftover after parsing attributes in process `syz.2.146'. [ 121.402507][ T6537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.440818][ T6537] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 121.447466][ T6537] syzkaller1: linktype set to 769 [ 122.243280][ T6547] netlink: 'syz.2.156': attribute type 153 has an invalid length. [ 122.262236][ T6547] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.156'. [ 122.788250][ T6556] netlink: 'syz.1.158': attribute type 10 has an invalid length. [ 123.193268][ T6556] team0: Device nlmon0 is of different type [ 123.448740][ T6556] syz.1.158 (6556) used greatest stack depth: 19176 bytes left [ 123.894633][ T6572] netlink: 14 bytes leftover after parsing attributes in process `syz.1.169'. [ 124.394217][ T6578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.401622][ T6578] IPv6: NLM_F_CREATE should be set when creating new route [ 124.409122][ T6578] IPv6: NLM_F_CREATE should be set when creating new route [ 124.416481][ T6578] IPv6: NLM_F_CREATE should be set when creating new route [ 124.512437][ T6577] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 124.522810][ T6577] syzkaller1: linktype set to 769 [ 124.969442][ T6585] netlink: 'syz.3.165': attribute type 6 has an invalid length. [ 124.979851][ T6585] netlink: 156 bytes leftover after parsing attributes in process `syz.3.165'. [ 126.331965][ T6603] syzkaller0: entered promiscuous mode [ 126.347639][ T6603] syzkaller0: entered allmulticast mode [ 126.480454][ T6607] netlink: 14 bytes leftover after parsing attributes in process `syz.1.173'. [ 126.839159][ T6614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.846512][ T6614] IPv6: NLM_F_CREATE should be set when creating new route [ 126.853899][ T6614] IPv6: NLM_F_CREATE should be set when creating new route [ 126.861223][ T6614] IPv6: NLM_F_CREATE should be set when creating new route [ 131.164202][ T6616] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.176'. [ 131.192676][ T6623] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 131.218096][ T6623] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 131.247474][ T6625] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 131.253512][ T6625] syzkaller1: linktype set to 769 [ 131.293659][ T6624] netlink: 'syz.1.176': attribute type 21 has an invalid length. [ 131.310725][ T6624] netlink: 156 bytes leftover after parsing attributes in process `syz.1.176'. [ 131.457043][ T6634] netlink: 'syz.1.179': attribute type 6 has an invalid length. [ 131.481415][ T6634] netlink: 156 bytes leftover after parsing attributes in process `syz.1.179'. [ 131.537393][ T6640] FAULT_INJECTION: forcing a failure. [ 131.537393][ T6640] name failslab, interval 1, probability 0, space 0, times 0 [ 131.564057][ T6640] CPU: 0 PID: 6640 Comm: syz.0.182 Not tainted syzkaller #0 [ 131.571415][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 131.581600][ T6640] Call Trace: [ 131.584924][ T6640] [ 131.587871][ T6640] dump_stack_lvl+0x18c/0x250 [ 131.592589][ T6640] ? show_regs_print_info+0x20/0x20 [ 131.597818][ T6640] ? load_image+0x420/0x420 [ 131.602347][ T6640] ? verify_lock_unused+0x140/0x140 [ 131.607578][ T6640] should_fail_ex+0x39d/0x4d0 [ 131.612289][ T6640] should_failslab+0x9/0x20 [ 131.616821][ T6640] slab_pre_alloc_hook+0x59/0x310 [ 131.621859][ T6640] kmem_cache_alloc+0x5a/0x2d0 [ 131.626639][ T6640] ? skb_clone+0x1eb/0x370 [ 131.631066][ T6640] skb_clone+0x1eb/0x370 [ 131.635319][ T6640] __netlink_deliver_tap+0x41c/0x830 [ 131.640618][ T6640] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.645823][ T6640] netlink_deliver_tap+0x19c/0x1b0 [ 131.652964][ T6640] netlink_sendskb+0x68/0x130 [ 131.657673][ T6640] netlink_ack+0xce1/0x1180 [ 131.662200][ T6640] ? netlink_dump+0xe50/0xe50 [ 131.666876][ T6640] ? ref_tracker_free+0x690/0x840 [ 131.671911][ T6640] netlink_rcv_skb+0x2c5/0x4d0 [ 131.676675][ T6640] ? rtnetlink_bind+0x80/0x80 [ 131.681355][ T6640] ? netlink_ack+0x1180/0x1180 [ 131.686123][ T6640] ? __lock_acquire+0x7d40/0x7d40 [ 131.691159][ T6640] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.696366][ T6640] netlink_unicast+0x751/0x8d0 [ 131.701139][ T6640] netlink_sendmsg+0x8d0/0xbf0 [ 131.705911][ T6640] ? netlink_getsockopt+0x590/0x590 [ 131.711110][ T6640] ? aa_sock_msg_perm+0x94/0x150 [ 131.716051][ T6640] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 131.721342][ T6640] ? security_socket_sendmsg+0x80/0xa0 [ 131.726802][ T6640] ? netlink_getsockopt+0x590/0x590 [ 131.732008][ T6640] ____sys_sendmsg+0x5ba/0x960 [ 131.736798][ T6640] ? __asan_memset+0x22/0x40 [ 131.741394][ T6640] ? __sys_sendmsg_sock+0x30/0x30 [ 131.746419][ T6640] ? __import_iovec+0x5f2/0x850 [ 131.751280][ T6640] ? import_iovec+0x73/0xa0 [ 131.755790][ T6640] ___sys_sendmsg+0x2a6/0x360 [ 131.760472][ T6640] ? __sys_sendmsg+0x2a0/0x2a0 [ 131.765249][ T6640] ? trace_call_bpf+0xc3/0x6c0 [ 131.770055][ T6640] __se_sys_sendmsg+0x1c2/0x2b0 [ 131.774998][ T6640] ? __x64_sys_sendmsg+0x80/0x80 [ 131.779946][ T6640] ? lockdep_hardirqs_on+0x98/0x150 [ 131.785148][ T6640] do_syscall_64+0x55/0xb0 [ 131.789569][ T6640] ? clear_bhb_loop+0x40/0x90 [ 131.794239][ T6640] ? clear_bhb_loop+0x40/0x90 [ 131.798910][ T6640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.804805][ T6640] RIP: 0033:0x7ff4fcf9ce59 [ 131.809228][ T6640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.828832][ T6640] RSP: 002b:00007ff4fdef1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.837248][ T6640] RAX: ffffffffffffffda RBX: 00007ff4fd215fa0 RCX: 00007ff4fcf9ce59 [ 131.845222][ T6640] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 131.853194][ T6640] RBP: 00007ff4fdef1090 R08: 0000000000000000 R09: 0000000000000000 [ 131.861173][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.869144][ T6640] R13: 00007ff4fd216038 R14: 00007ff4fd215fa0 R15: 00007ffdbd916228 [ 131.877126][ T6640] [ 132.293471][ T6652] netlink: 14 bytes leftover after parsing attributes in process `syz.1.184'. [ 132.901225][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.909293][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.461264][ T6664] syzkaller0: entered promiscuous mode [ 135.468189][ T6664] syzkaller0: entered allmulticast mode [ 137.312121][ T6672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.323320][ T6675] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.189'. [ 137.335959][ T6679] netlink: 'syz.2.189': attribute type 10 has an invalid length. [ 137.347259][ T6679] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 137.378906][ T6674] netlink: 'syz.1.187': attribute type 13 has an invalid length. [ 137.387490][ T6674] netlink: 'syz.1.187': attribute type 58 has an invalid length. [ 137.401057][ T6674] netlink: 152 bytes leftover after parsing attributes in process `syz.1.187'. [ 137.412381][ T6681] netlink: 'syz.2.189': attribute type 21 has an invalid length. [ 137.433933][ T6681] netlink: 156 bytes leftover after parsing attributes in process `syz.2.189'. [ 137.451944][ T6682] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 137.463242][ T6682] syzkaller1: linktype set to 769 [ 137.670486][ T6692] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.191'. [ 137.694342][ T6693] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.191'. [ 138.142158][ T6708] netlink: 'syz.2.195': attribute type 10 has an invalid length. [ 138.354929][ T6714] netlink: 'syz.3.197': attribute type 10 has an invalid length. [ 138.922488][ T6718] syzkaller0: entered promiscuous mode [ 138.929968][ T6718] syzkaller0: entered allmulticast mode [ 138.949497][ T6722] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.200'. [ 138.981381][ T6722] netlink: 'syz.3.200': attribute type 10 has an invalid length. [ 139.047878][ T6722] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 139.068310][ T6729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.075669][ T6729] IPv6: NLM_F_CREATE should be set when creating new route [ 139.082948][ T6729] IPv6: NLM_F_CREATE should be set when creating new route [ 139.090261][ T6729] IPv6: NLM_F_CREATE should be set when creating new route [ 139.129395][ T6730] netlink: 'syz.3.200': attribute type 21 has an invalid length. [ 139.139436][ T6730] netlink: 156 bytes leftover after parsing attributes in process `syz.3.200'. [ 139.927289][ T6740] Illegal XDP return value 4294967274 on prog (id 146) dev N/A, expect packet loss! [ 140.598225][ T6729] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 140.604309][ T6729] syzkaller1: linktype set to 769 [ 140.613580][ T6735] netlink: 'syz.3.202': attribute type 13 has an invalid length. [ 140.621988][ T6735] netlink: 'syz.3.202': attribute type 58 has an invalid length. [ 140.629896][ T6735] netlink: 152 bytes leftover after parsing attributes in process `syz.3.202'. [ 140.643896][ T6740] netlink: 160 bytes leftover after parsing attributes in process `syz.1.204'. [ 141.337853][ T6765] netlink: 152 bytes leftover after parsing attributes in process `syz.1.212'. [ 141.727090][ T6765] .`: renamed from bond0 (while UP) [ 142.934498][ T6772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.215'. [ 143.182127][ T6779] validate_nla: 4 callbacks suppressed [ 143.182168][ T6779] netlink: 'syz.0.220': attribute type 10 has an invalid length. [ 143.301458][ T6783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.502814][ T6783] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 143.530487][ T6783] syzkaller1: linktype set to 769 [ 143.748343][ T6780] syzkaller0: entered promiscuous mode [ 143.764095][ T6780] syzkaller0: entered allmulticast mode [ 143.826945][ T6781] netlink: 'syz.2.217': attribute type 13 has an invalid length. [ 143.843943][ T6781] netlink: 'syz.2.217': attribute type 58 has an invalid length. [ 143.852473][ T6781] netlink: 152 bytes leftover after parsing attributes in process `syz.2.217'. [ 148.231999][ T6792] netlink: 'syz.0.223': attribute type 10 has an invalid length. [ 148.532133][ T6818] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.227'. [ 148.749298][ T6822] FAULT_INJECTION: forcing a failure. [ 148.749298][ T6822] name failslab, interval 1, probability 0, space 0, times 0 [ 148.798531][ T6822] CPU: 1 PID: 6822 Comm: syz.0.229 Not tainted syzkaller #0 [ 148.805882][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.815959][ T6822] Call Trace: [ 148.819254][ T6822] [ 148.822197][ T6822] dump_stack_lvl+0x18c/0x250 [ 148.826898][ T6822] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 148.833077][ T6822] ? show_regs_print_info+0x20/0x20 [ 148.838299][ T6822] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 148.844485][ T6822] ? dump_stack+0x9/0x20 [ 148.848752][ T6822] should_fail_ex+0x39d/0x4d0 [ 148.853458][ T6822] should_failslab+0x9/0x20 [ 148.857985][ T6822] slab_pre_alloc_hook+0x59/0x310 [ 148.863035][ T6822] ? kvmalloc_node+0x70/0x180 [ 148.867732][ T6822] ? kvmalloc_node+0x70/0x180 [ 148.872427][ T6822] __kmem_cache_alloc_node+0x53/0x250 [ 148.877833][ T6822] ? kvmalloc_node+0x70/0x180 [ 148.882530][ T6822] __kmalloc_node+0xa4/0x230 [ 148.887143][ T6822] kvmalloc_node+0x70/0x180 [ 148.891665][ T6822] alloc_netdev_mqs+0x8cd/0x1040 [ 148.896629][ T6822] ip6gre_tunnel_locate+0x227/0x5d0 [ 148.901849][ T6822] ? apparmor_capable+0x137/0x1a0 [ 148.906900][ T6822] ? ip6gre_tnl_change+0x920/0x920 [ 148.912030][ T6822] ? __asan_memcpy+0x40/0x70 [ 148.916640][ T6822] ? ip6gre_tunnel_siocdevprivate+0x521/0x740 [ 148.922729][ T6822] ip6gre_tunnel_siocdevprivate+0x54e/0x740 [ 148.928653][ T6822] ? ip6gre_tunnel_init+0x150/0x150 [ 148.933868][ T6822] ? __mutex_lock+0x315/0xcc0 [ 148.938568][ T6822] ? dev_ioctl+0x83c/0x1140 [ 148.943104][ T6822] ? dev_ifsioc+0x958/0xc40 [ 148.947628][ T6822] dev_ioctl+0x84c/0x1140 [ 148.951981][ T6822] sock_ioctl+0x74c/0x7e0 [ 148.956332][ T6822] ? sock_poll+0x3e0/0x3e0 [ 148.960775][ T6822] ? bpf_lsm_file_ioctl+0x9/0x10 [ 148.965731][ T6822] ? security_file_ioctl+0x80/0xa0 [ 148.970856][ T6822] ? sock_poll+0x3e0/0x3e0 [ 148.975290][ T6822] __se_sys_ioctl+0xfd/0x170 [ 148.979899][ T6822] do_syscall_64+0x55/0xb0 [ 148.984326][ T6822] ? clear_bhb_loop+0x40/0x90 [ 148.989013][ T6822] ? clear_bhb_loop+0x40/0x90 [ 148.993712][ T6822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.999626][ T6822] RIP: 0033:0x7ff4fcf9ce59 [ 149.004055][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.023682][ T6822] RSP: 002b:00007ff4fdef1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.032119][ T6822] RAX: ffffffffffffffda RBX: 00007ff4fd215fa0 RCX: 00007ff4fcf9ce59 [ 149.040116][ T6822] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000b [ 149.048109][ T6822] RBP: 00007ff4fdef1090 R08: 0000000000000000 R09: 0000000000000000 [ 149.056101][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.064088][ T6822] R13: 00007ff4fd216038 R14: 00007ff4fd215fa0 R15: 00007ffdbd916228 [ 149.072095][ T6822] [ 149.157740][ T6828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.320613][ T6825] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 149.348276][ T6825] syzkaller1: linktype set to 769 [ 149.356159][ T6829] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.231'. [ 149.382778][ T6829] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 149.711593][ T6834] netlink: 'syz.0.232': attribute type 13 has an invalid length. [ 149.729286][ T6834] netlink: 'syz.0.232': attribute type 58 has an invalid length. [ 149.759023][ T6834] netlink: 152 bytes leftover after parsing attributes in process `syz.0.232'. [ 150.601737][ T6858] netlink: 'syz.0.240': attribute type 29 has an invalid length. [ 150.637173][ T6858] netlink: 'syz.0.240': attribute type 29 has an invalid length. [ 150.697608][ T6858] netlink: 'syz.0.240': attribute type 29 has an invalid length. [ 151.160740][ T6861] netlink: 'syz.0.240': attribute type 29 has an invalid length. [ 151.764727][ T6873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.875090][ T6866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.940227][ T6871] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 151.955149][ T6871] syzkaller1: linktype set to 769 [ 152.327349][ T6892] FAULT_INJECTION: forcing a failure. [ 152.327349][ T6892] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 152.343155][ T6892] CPU: 0 PID: 6892 Comm: syz.0.250 Not tainted syzkaller #0 [ 152.350497][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.360580][ T6892] Call Trace: [ 152.363874][ T6892] [ 152.366834][ T6892] dump_stack_lvl+0x18c/0x250 [ 152.371518][ T6892] ? show_regs_print_info+0x20/0x20 [ 152.376713][ T6892] ? load_image+0x420/0x420 [ 152.381210][ T6892] ? __lock_acquire+0x7d40/0x7d40 [ 152.386234][ T6892] should_fail_ex+0x39d/0x4d0 [ 152.390915][ T6892] _copy_from_user+0x2f/0xe0 [ 152.395504][ T6892] __copy_msghdr+0x3bb/0x580 [ 152.400094][ T6892] ___sys_sendmsg+0x214/0x360 [ 152.404769][ T6892] ? get_pid_task+0x20/0x1e0 [ 152.409362][ T6892] ? __sys_sendmsg+0x2a0/0x2a0 [ 152.414157][ T6892] __se_sys_sendmsg+0x1c2/0x2b0 [ 152.419012][ T6892] ? __x64_sys_sendmsg+0x80/0x80 [ 152.423976][ T6892] ? lockdep_hardirqs_on+0x98/0x150 [ 152.429184][ T6892] do_syscall_64+0x55/0xb0 [ 152.433683][ T6892] ? clear_bhb_loop+0x40/0x90 [ 152.438360][ T6892] ? clear_bhb_loop+0x40/0x90 [ 152.443031][ T6892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.448936][ T6892] RIP: 0033:0x7ff4fcf9ce59 [ 152.453346][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.472951][ T6892] RSP: 002b:00007ff4fdef1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.481363][ T6892] RAX: ffffffffffffffda RBX: 00007ff4fd215fa0 RCX: 00007ff4fcf9ce59 [ 152.489330][ T6892] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 152.497294][ T6892] RBP: 00007ff4fdef1090 R08: 0000000000000000 R09: 0000000000000000 [ 152.505261][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.513225][ T6892] R13: 00007ff4fd216038 R14: 00007ff4fd215fa0 R15: 00007ffdbd916228 [ 152.521206][ T6892] [ 156.084703][ T6949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.398603][ T6957] netlink: 'syz.3.261': attribute type 10 has an invalid length. [ 157.304587][ T6981] FAULT_INJECTION: forcing a failure. [ 157.304587][ T6981] name failslab, interval 1, probability 0, space 0, times 0 [ 157.319883][ T6981] CPU: 1 PID: 6981 Comm: syz.2.269 Not tainted syzkaller #0 [ 157.327231][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.337316][ T6981] Call Trace: [ 157.340621][ T6981] [ 157.343565][ T6981] dump_stack_lvl+0x18c/0x250 [ 157.348250][ T6981] ? verify_lock_unused+0x140/0x140 [ 157.353457][ T6981] ? show_regs_print_info+0x20/0x20 [ 157.358660][ T6981] ? load_image+0x420/0x420 [ 157.363162][ T6981] ? crng_make_state+0x411/0x700 [ 157.368101][ T6981] ? crng_make_state+0x41b/0x700 [ 157.373045][ T6981] should_fail_ex+0x39d/0x4d0 [ 157.377731][ T6981] should_failslab+0x9/0x20 [ 157.382235][ T6981] slab_pre_alloc_hook+0x59/0x310 [ 157.387267][ T6981] ? sctp_add_bind_addr+0x8c/0x360 [ 157.392379][ T6981] __kmem_cache_alloc_node+0x53/0x250 [ 157.397754][ T6981] ? sctp_add_bind_addr+0x8c/0x360 [ 157.402867][ T6981] kmalloc_trace+0x2a/0xe0 [ 157.407287][ T6981] sctp_add_bind_addr+0x8c/0x360 [ 157.412226][ T6981] sctp_copy_local_addr_list+0x315/0x4f0 [ 157.417862][ T6981] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 157.423578][ T6981] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 157.429649][ T6981] ? sctp_v4_is_any+0x35/0x60 [ 157.434322][ T6981] ? sctp_copy_one_addr+0x8c/0x350 [ 157.439433][ T6981] sctp_bind_addr_copy+0xb3/0x3c0 [ 157.444460][ T6981] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 157.450793][ T6981] sctp_connect_new_asoc+0x2f9/0x6a0 [ 157.456102][ T6981] ? __sctp_connect+0xd80/0xd80 [ 157.460953][ T6981] ? __local_bh_enable_ip+0x13a/0x1c0 [ 157.466352][ T6981] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 157.471914][ T6981] ? security_sctp_bind_connect+0x89/0xb0 [ 157.477658][ T6981] sctp_sendmsg+0x15d2/0x2910 [ 157.482354][ T6981] ? sctp_getsockopt+0xb60/0xb60 [ 157.487293][ T6981] ? aa_sk_perm+0x83c/0x970 [ 157.491794][ T6981] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.497977][ T6981] ? lockdep_hardirqs_on+0x98/0x150 [ 157.503188][ T6981] ? aa_af_perm+0x330/0x330 [ 157.507692][ T6981] ? sock_rps_record_flow+0x19/0x3f0 [ 157.512979][ T6981] ? inet_sendmsg+0xe9/0x2f0 [ 157.517575][ T6981] ? inet_send_prepare+0x260/0x260 [ 157.522688][ T6981] ____sys_sendmsg+0x5ba/0x960 [ 157.527453][ T6981] ? __lock_acquire+0x7d40/0x7d40 [ 157.532482][ T6981] ? __asan_memset+0x22/0x40 [ 157.537070][ T6981] ? __sys_sendmsg_sock+0x30/0x30 [ 157.542093][ T6981] ? __import_iovec+0x5f2/0x850 [ 157.546974][ T6981] ? import_iovec+0x73/0xa0 [ 157.551484][ T6981] ___sys_sendmsg+0x2a6/0x360 [ 157.556171][ T6981] ? __sys_sendmsg+0x2a0/0x2a0 [ 157.560972][ T6981] __se_sys_sendmsg+0x1c2/0x2b0 [ 157.565837][ T6981] ? __x64_sys_sendmsg+0x80/0x80 [ 157.570792][ T6981] ? lockdep_hardirqs_on+0x98/0x150 [ 157.575993][ T6981] do_syscall_64+0x55/0xb0 [ 157.580411][ T6981] ? clear_bhb_loop+0x40/0x90 [ 157.585095][ T6981] ? clear_bhb_loop+0x40/0x90 [ 157.589767][ T6981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.595691][ T6981] RIP: 0033:0x7fb51359ce59 [ 157.600124][ T6981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.619739][ T6981] RSP: 002b:00007fb51442b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.628158][ T6981] RAX: ffffffffffffffda RBX: 00007fb513815fa0 RCX: 00007fb51359ce59 [ 157.636123][ T6981] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000038 [ 157.644093][ T6981] RBP: 00007fb51442b090 R08: 0000000000000000 R09: 0000000000000000 [ 157.652062][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.660028][ T6981] R13: 00007fb513816038 R14: 00007fb513815fa0 R15: 00007ffeecdfbfb8 [ 157.668012][ T6981] [ 157.737704][ T6979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.028676][ T6995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.320195][ T7006] netlink: 'syz.1.276': attribute type 10 has an invalid length. [ 158.475341][ T7008] syzkaller0: entered promiscuous mode [ 158.481117][ T7008] syzkaller0: entered allmulticast mode [ 158.667237][ T7015] FAULT_INJECTION: forcing a failure. [ 158.667237][ T7015] name failslab, interval 1, probability 0, space 0, times 0 [ 158.680160][ T7015] CPU: 1 PID: 7015 Comm: syz.1.281 Not tainted syzkaller #0 [ 158.687467][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.697518][ T7015] Call Trace: [ 158.700788][ T7015] [ 158.703706][ T7015] dump_stack_lvl+0x18c/0x250 [ 158.708380][ T7015] ? show_regs_print_info+0x20/0x20 [ 158.713590][ T7015] ? load_image+0x420/0x420 [ 158.718084][ T7015] ? __might_sleep+0xe0/0xe0 [ 158.722667][ T7015] ? __lock_acquire+0x7d40/0x7d40 [ 158.727691][ T7015] should_fail_ex+0x39d/0x4d0 [ 158.732369][ T7015] should_failslab+0x9/0x20 [ 158.736868][ T7015] slab_pre_alloc_hook+0x59/0x310 [ 158.741888][ T7015] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 158.747612][ T7015] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 158.753352][ T7015] __kmem_cache_alloc_node+0x53/0x250 [ 158.758757][ T7015] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 158.764520][ T7015] __kmalloc+0xa4/0x230 [ 158.768678][ T7015] tomoyo_realpath_from_path+0xe3/0x5d0 [ 158.774262][ T7015] tomoyo_path_number_perm+0x248/0x620 [ 158.779726][ T7015] ? tomoyo_path_number_perm+0x217/0x620 [ 158.785387][ T7015] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 158.790837][ T7015] ? ksys_write+0x1c4/0x260 [ 158.795350][ T7015] ? __fget_files+0x28/0x4b0 [ 158.799934][ T7015] ? __fget_files+0x28/0x4b0 [ 158.804527][ T7015] security_file_ioctl+0x70/0xa0 [ 158.809470][ T7015] __se_sys_ioctl+0x48/0x170 [ 158.814062][ T7015] do_syscall_64+0x55/0xb0 [ 158.818471][ T7015] ? clear_bhb_loop+0x40/0x90 [ 158.823139][ T7015] ? clear_bhb_loop+0x40/0x90 [ 158.827816][ T7015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.833723][ T7015] RIP: 0033:0x7faf27b9ce59 [ 158.838144][ T7015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.857759][ T7015] RSP: 002b:00007faf28b2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.866170][ T7015] RAX: ffffffffffffffda RBX: 00007faf27e15fa0 RCX: 00007faf27b9ce59 [ 158.874139][ T7015] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000003 [ 158.882102][ T7015] RBP: 00007faf28b2b090 R08: 0000000000000000 R09: 0000000000000000 [ 158.890101][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.898068][ T7015] R13: 00007faf27e16038 R14: 00007faf27e15fa0 R15: 00007ffd9516da18 [ 158.906057][ T7015] [ 158.927186][ T7015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.424894][ T7029] netlink: 'syz.3.286': attribute type 4 has an invalid length. [ 160.432839][ T7029] netlink: 152 bytes leftover after parsing attributes in process `syz.3.286'. [ 160.552494][ T7029] .`: renamed from bond0 (while UP) [ 160.600790][ T7032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.766658][ T7042] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 161.421999][ T7063] FAULT_INJECTION: forcing a failure. [ 161.421999][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 161.457548][ T7063] CPU: 0 PID: 7063 Comm: syz.2.294 Not tainted syzkaller #0 [ 161.464920][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.475032][ T7063] Call Trace: [ 161.478367][ T7063] [ 161.481347][ T7063] dump_stack_lvl+0x18c/0x250 [ 161.486096][ T7063] ? show_regs_print_info+0x20/0x20 [ 161.491361][ T7063] ? load_image+0x420/0x420 [ 161.495932][ T7063] ? __might_sleep+0xe0/0xe0 [ 161.500591][ T7063] ? __lock_acquire+0x7d40/0x7d40 [ 161.505704][ T7063] should_fail_ex+0x39d/0x4d0 [ 161.510466][ T7063] should_failslab+0x9/0x20 [ 161.515033][ T7063] slab_pre_alloc_hook+0x59/0x310 [ 161.520129][ T7063] ? kvmalloc_node+0x70/0x180 [ 161.524866][ T7063] ? kvmalloc_node+0x70/0x180 [ 161.529595][ T7063] __kmem_cache_alloc_node+0x53/0x250 [ 161.535053][ T7063] ? kvmalloc_node+0x70/0x180 [ 161.539791][ T7063] __kmalloc_node+0xa4/0x230 [ 161.544457][ T7063] kvmalloc_node+0x70/0x180 [ 161.549031][ T7063] page_pool_create+0x1eb/0x5c0 [ 161.553958][ T7063] __veth_napi_enable_range+0x195/0x700 [ 161.559609][ T7063] ? __skb_frag_ref+0x1c0/0x1c0 [ 161.564547][ T7063] ? netif_napi_add_weight+0xa22/0xdf0 [ 161.570101][ T7063] veth_napi_enable_range+0xd0/0x150 [ 161.575469][ T7063] veth_set_features+0x1c8/0x2a0 [ 161.580480][ T7063] __netdev_update_features+0x9cb/0x18e0 [ 161.586171][ T7063] ? perf_trace_lock+0x304/0x3b0 [ 161.591200][ T7063] ? trace_event_raw_event_lock+0x250/0x250 [ 161.597186][ T7063] ? dev_xdp_attach+0x1030/0x1030 [ 161.602329][ T7063] ? __might_fault+0xaa/0x120 [ 161.607065][ T7063] ? __lock_acquire+0x7d40/0x7d40 [ 161.612155][ T7063] ? aa_get_newest_label+0xfd/0x5c0 [ 161.617426][ T7063] ? __might_fault+0xaa/0x120 [ 161.622167][ T7063] ? __might_fault+0xc6/0x120 [ 161.626901][ T7063] ? __might_fault+0xaa/0x120 [ 161.631660][ T7063] ethtool_set_one_feature+0x2a8/0x2f0 [ 161.637191][ T7063] ? apparmor_capable+0x137/0x1a0 [ 161.642279][ T7063] ? ethtool_get_one_feature+0x280/0x280 [ 161.647981][ T7063] ? security_capable+0x89/0xb0 [ 161.652926][ T7063] dev_ethtool+0xfd7/0x18d0 [ 161.657528][ T7063] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 161.663834][ T7063] ? __lock_acquire+0x7d40/0x7d40 [ 161.668929][ T7063] ? __might_fault+0xaa/0x120 [ 161.673665][ T7063] ? full_name_hash+0x92/0xe0 [ 161.678430][ T7063] ? dev_load+0x21/0x1f0 [ 161.682759][ T7063] dev_ioctl+0x392/0x1140 [ 161.687168][ T7063] sock_do_ioctl+0x239/0x310 [ 161.691831][ T7063] ? sock_show_fdinfo+0xb0/0xb0 [ 161.696804][ T7063] sock_ioctl+0x5ba/0x7e0 [ 161.701206][ T7063] ? sock_poll+0x3e0/0x3e0 [ 161.705724][ T7063] ? bpf_lsm_file_ioctl+0x9/0x10 [ 161.710723][ T7063] ? security_file_ioctl+0x80/0xa0 [ 161.715901][ T7063] ? sock_poll+0x3e0/0x3e0 [ 161.720382][ T7063] __se_sys_ioctl+0xfd/0x170 [ 161.725044][ T7063] do_syscall_64+0x55/0xb0 [ 161.729528][ T7063] ? clear_bhb_loop+0x40/0x90 [ 161.734268][ T7063] ? clear_bhb_loop+0x40/0x90 [ 161.739005][ T7063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.744966][ T7063] RIP: 0033:0x7fb51359ce59 [ 161.749446][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.769110][ T7063] RSP: 002b:00007fb51440a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.777594][ T7063] RAX: ffffffffffffffda RBX: 00007fb513816090 RCX: 00007fb51359ce59 [ 161.785629][ T7063] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 161.793747][ T7063] RBP: 00007fb51440a090 R08: 0000000000000000 R09: 0000000000000000 [ 161.801789][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.809817][ T7063] R13: 00007fb513816128 R14: 00007fb513816090 R15: 00007ffeecdfbfb8 [ 161.817898][ T7063] [ 161.859165][ T7063] page_pool_create() gave up with errno -12 [ 161.877550][ T7063] veth1_to_bond: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9 [ 162.149507][ T7073] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 162.950779][ T7090] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.302'. [ 176.869036][ T5770] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.878508][ T5770] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.889296][ T5770] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.898718][ T5770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.906654][ T5770] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 176.914965][ T5770] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.051238][ T5085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.065575][ T5085] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.073447][ T5085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.082341][ T5085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.091080][ T5085] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 178.098801][ T5085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.160292][ T5770] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.169940][ T5770] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.179178][ T5770] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.187430][ T5770] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.195376][ T5770] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 178.202725][ T5770] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.869842][ T5085] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.878750][ T5085] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.887331][ T5085] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.896671][ T5085] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.904719][ T5085] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 178.912063][ T5085] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.975103][ T5085] Bluetooth: hci4: command tx timeout [ 180.173875][ T5085] Bluetooth: hci5: command tx timeout [ 180.254856][ T5085] Bluetooth: hci6: command tx timeout [ 180.974021][ T5085] Bluetooth: hci7: command tx timeout [ 181.053846][ T5085] Bluetooth: hci4: command tx timeout [ 182.253851][ T5085] Bluetooth: hci5: command tx timeout [ 182.333892][ T5085] Bluetooth: hci6: command tx timeout [ 183.053896][ T5085] Bluetooth: hci7: command tx timeout [ 183.133921][ T5085] Bluetooth: hci4: command tx timeout [ 184.333923][ T5085] Bluetooth: hci5: command tx timeout [ 184.424631][ T5085] Bluetooth: hci6: command tx timeout [ 185.143885][ T5085] Bluetooth: hci7: command tx timeout [ 185.214537][ T5085] Bluetooth: hci4: command tx timeout [ 186.413836][ T5085] Bluetooth: hci5: command tx timeout [ 186.493855][ T5085] Bluetooth: hci6: command tx timeout [ 187.215293][ T5085] Bluetooth: hci7: command tx timeout [ 194.339923][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.357407][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.417758][ T7113] Bluetooth: hci0: command 0x0406 tx timeout [ 196.423920][ T7113] Bluetooth: hci3: command 0x0406 tx timeout [ 196.427292][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 216.893906][ T5770] Bluetooth: hci2: command 0x0406 tx timeout [ 236.955014][ T5770] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 236.963687][ T5770] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 236.971738][ T5770] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 236.981389][ T5770] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 236.990841][ T5770] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 236.999496][ T5770] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 238.052684][ T5772] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 238.062187][ T5772] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 238.072799][ T5772] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 238.081139][ T5772] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 238.092267][ T5772] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 238.103952][ T5772] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 238.151872][ T5772] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 238.161111][ T5772] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 238.170319][ T5772] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 238.179382][ T5772] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 238.187499][ T5772] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 238.196546][ T5772] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 239.026125][ T5770] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 239.035239][ T5770] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 239.043879][ T5770] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 239.054244][ T5773] Bluetooth: hci8: command tx timeout [ 239.060505][ T5773] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 239.068459][ T5773] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 239.076146][ T5773] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 240.174015][ T5772] Bluetooth: hci9: command tx timeout [ 240.264601][ T5772] Bluetooth: hci10: command tx timeout [ 241.133963][ T5772] Bluetooth: hci11: command tx timeout [ 241.134009][ T5773] Bluetooth: hci8: command tx timeout [ 242.253952][ T5773] Bluetooth: hci9: command tx timeout [ 242.333859][ T5773] Bluetooth: hci10: command tx timeout [ 243.213901][ T5773] Bluetooth: hci11: command tx timeout [ 243.219444][ T5773] Bluetooth: hci8: command tx timeout [ 244.333977][ T5773] Bluetooth: hci9: command tx timeout [ 244.413969][ T5773] Bluetooth: hci10: command tx timeout [ 245.293910][ T5772] Bluetooth: hci11: command tx timeout [ 245.300106][ T5773] Bluetooth: hci8: command tx timeout [ 246.423936][ T5773] Bluetooth: hci9: command tx timeout [ 246.493887][ T5773] Bluetooth: hci10: command tx timeout [ 247.373864][ T5773] Bluetooth: hci11: command tx timeout [ 255.778495][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.784954][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 297.246979][ T5772] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 297.255872][ T5772] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 297.264528][ T5772] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 297.272622][ T5772] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 297.280613][ T5772] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 297.288163][ T5772] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 298.265114][ T5772] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 298.276057][ T5772] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 298.285077][ T5772] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 298.293284][ T5772] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 298.301358][ T5772] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 298.309580][ T5772] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 298.378381][ T5773] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 298.387226][ T5773] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 298.396329][ T5773] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 298.404636][ T5773] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 298.412423][ T5773] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 298.421248][ T5773] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 299.216472][ T5773] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 299.227619][ T5773] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 299.236344][ T5773] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 299.246945][ T5773] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 299.256204][ T5773] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 299.265405][ T5773] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 299.374069][ T5773] Bluetooth: hci12: command tx timeout [ 300.333968][ T5773] Bluetooth: hci13: command tx timeout [ 300.495668][ T5773] Bluetooth: hci14: command tx timeout [ 301.303925][ T5773] Bluetooth: hci15: command tx timeout [ 301.454092][ T5773] Bluetooth: hci12: command tx timeout [ 302.413949][ T51] Bluetooth: hci13: command tx timeout [ 302.583973][ T51] Bluetooth: hci14: command tx timeout [ 303.374894][ T51] Bluetooth: hci15: command tx timeout [ 303.539179][ T51] Bluetooth: hci12: command tx timeout [ 303.934024][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 303.934055][ T5085] Bluetooth: hci6: command 0x0406 tx timeout [ 303.940129][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 303.949630][ T5085] Bluetooth: hci5: command 0x0406 tx timeout [ 304.493853][ T5770] Bluetooth: hci13: command tx timeout [ 304.654070][ T5770] Bluetooth: hci14: command tx timeout [ 305.453977][ T5770] Bluetooth: hci15: command tx timeout [ 305.613876][ T5770] Bluetooth: hci12: command tx timeout [ 306.583840][ T5770] Bluetooth: hci13: command tx timeout [ 306.745936][ T5770] Bluetooth: hci14: command tx timeout [ 307.533895][ T5770] Bluetooth: hci15: command tx timeout [ 313.373945][ T29] INFO: task kworker/u4:3:49 blocked for more than 143 seconds. [ 313.381641][ T29] Not tainted syzkaller #0 [ 313.386813][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.396297][ T29] task:kworker/u4:3 state:D stack:22696 pid:49 ppid:2 flags:0x00004000 [ 313.405713][ T29] Workqueue: ipv6_addrconf addrconf_verify_work [ 313.412104][ T29] Call Trace: [ 313.415503][ T29] [ 313.418525][ T29] __schedule+0x1553/0x45a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 313.423101][ T29] ? asan.module_dtor+0x20/0x20 [ 313.428079][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 313.432790][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 313.438607][ T29] ? kthread_data+0x4f/0xc0 [ 313.443143][ T29] ? wq_worker_sleeping+0x63/0x240 [ 313.448365][ T29] schedule+0xbd/0x170 [ 313.452705][ T29] schedule_preempt_disabled+0x13/0x20 [ 313.459104][ T29] __mutex_lock+0x6a9/0xcc0 [ 313.463654][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 313.480205][ T29] ? addrconf_verify_work+0x19/0x30 [ 313.485765][ T29] ? mutex_lock_nested+0x20/0x20 [ 313.490734][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 313.523214][ T29] ? read_lock_is_recursive+0x20/0x20 [ 313.528746][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.534140][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 313.539896][ T29] addrconf_verify_work+0x19/0x30 [ 313.545069][ T29] process_scheduled_works+0xa5d/0x15d0 [ 313.550706][ T29] ? worker_attach_to_pool+0x380/0x380 [ 313.556251][ T29] ? assign_work+0x3d2/0x5d0 [ 313.560892][ T29] worker_thread+0xa55/0xfc0 [ 313.565584][ T29] kthread+0x2fa/0x390 [ 313.569685][ T29] ? pr_cont_work+0x560/0x560 [ 313.574570][ T29] ? kthread_blkcg+0xd0/0xd0 [ 313.579182][ T29] ret_from_fork+0x48/0x80 [ 313.583601][ T29] ? kthread_blkcg+0xd0/0xd0 [ 313.588364][ T29] ret_from_fork_asm+0x11/0x20 [ 313.593158][ T29] [ 313.596893][ T29] INFO: task kworker/u4:4:59 blocked for more than 143 seconds. [ 313.604683][ T29] Not tainted syzkaller #0 [ 313.609633][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.618372][ T29] task:kworker/u4:4 state:D stack:20040 pid:59 ppid:2 flags:0x00004000 [ 313.627704][ T29] Workqueue: events_unbound linkwatch_event [ 313.633631][ T29] Call Trace: [ 313.636975][ T29] [ 313.639927][ T29] __schedule+0x1553/0x45a0 [ 313.644544][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 313.649799][ T29] ? asan.module_dtor+0x20/0x20 [ 313.654713][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 313.659413][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 313.664965][ T29] ? kthread_data+0x4f/0xc0 [ 313.669485][ T29] ? wq_worker_sleeping+0x63/0x240 [ 313.674713][ T29] schedule+0xbd/0x170 [ 313.678812][ T29] schedule_preempt_disabled+0x13/0x20 [ 313.684518][ T29] __mutex_lock+0x6a9/0xcc0 [ 313.689043][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 313.693738][ T29] ? linkwatch_event+0xe/0x60 [ 313.699266][ T29] ? mutex_lock_nested+0x20/0x20 [ 313.704323][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.709551][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 313.715349][ T29] linkwatch_event+0xe/0x60 [ 313.719890][ T29] process_scheduled_works+0xa5d/0x15d0 [ 313.725555][ T29] ? worker_attach_to_pool+0x380/0x380 [ 313.731045][ T29] ? assign_work+0x3d2/0x5d0 [ 313.735715][ T29] worker_thread+0xa55/0xfc0 [ 313.740346][ T29] kthread+0x2fa/0x390 [ 313.744523][ T29] ? pr_cont_work+0x560/0x560 [ 313.749240][ T29] ? kthread_blkcg+0xd0/0xd0 [ 313.753924][ T29] ret_from_fork+0x48/0x80 [ 313.758384][ T29] ? kthread_blkcg+0xd0/0xd0 [ 313.763012][ T29] ret_from_fork_asm+0x11/0x20 [ 313.767896][ T29] [ 313.771064][ T29] INFO: task syz.0.295:7062 blocked for more than 143 seconds. [ 313.778884][ T29] Not tainted syzkaller #0 [ 313.783895][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.792566][ T29] task:syz.0.295 state:D stack:24424 pid:7062 ppid:5771 flags:0x00004004 [ 313.802558][ T29] Call Trace: [ 313.805964][ T29] [ 313.808920][ T29] __schedule+0x1553/0x45a0 [ 313.813444][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 313.818585][ T29] ? asan.module_dtor+0x20/0x20 [ 313.823463][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 313.828268][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 313.833754][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 313.839983][ T29] schedule+0xbd/0x170 [ 313.844138][ T29] schedule_preempt_disabled+0x13/0x20 [ 313.849660][ T29] __mutex_lock+0x6a9/0xcc0 [ 313.854279][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 313.858976][ T29] ? tun_chr_close+0x41/0x1c0 [ 313.863657][ T29] ? mutex_lock_nested+0x20/0x20 [ 313.868711][ T29] ? __fput+0x61c/0x970 [ 313.872881][ T29] ? tun_chr_open+0x510/0x510 [ 313.877608][ T29] tun_chr_close+0x41/0x1c0 [ 313.882129][ T29] __fput+0x234/0x970 [ 313.886361][ T29] task_work_run+0x1d4/0x260 [ 313.891000][ T29] ? task_work_cancel+0x220/0x220 [ 313.896126][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 313.902196][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 313.907696][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 313.913271][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 313.918831][ T29] do_syscall_64+0x61/0xb0 [ 313.923265][ T29] ? clear_bhb_loop+0x40/0x90 [ 313.928049][ T29] ? clear_bhb_loop+0x40/0x90 [ 313.932748][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.939212][ T29] RIP: 0033:0x7ff4fcf9ce59 [ 313.943653][ T29] RSP: 002b:00007ffdbd916388 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 313.952249][ T29] RAX: 0000000000000000 RBX: 00007ff4fd217da0 RCX: 00007ff4fcf9ce59 [ 313.960267][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 313.968325][ T29] RBP: 00007ff4fd217da0 R08: 0000000000000006 R09: 0000000000000000 [ 313.976360][ T29] R10: 00007ff4fd217cb0 R11: 0000000000000246 R12: 0000000000027a75 [ 313.984442][ T29] R13: 00007ff4fd21618c R14: 0000000000027a0b R15: 00007ffdbd916490 [ 313.992451][ T29] [ 313.995556][ T29] INFO: task syz.0.295:7064 blocked for more than 143 seconds. [ 314.003121][ T29] Not tainted syzkaller #0 [ 314.009357][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.018739][ T29] task:syz.0.295 state:D stack:23944 pid:7064 ppid:5771 flags:0x00004006 [ 314.028044][ T29] Call Trace: [ 314.031668][ T29] [ 314.034683][ T29] __schedule+0x1553/0x45a0 [ 314.039223][ T29] ? asan.module_dtor+0x20/0x20 [ 314.044181][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 314.048871][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 314.054413][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 314.060584][ T29] schedule+0xbd/0x170 [ 314.064757][ T29] schedule_preempt_disabled+0x13/0x20 [ 314.070241][ T29] __mutex_lock+0x6a9/0xcc0 [ 314.074851][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 314.079565][ T29] ? wg_netns_pre_exit+0x1c/0x1c0 [ 314.084733][ T29] ? mutex_lock_nested+0x20/0x20 [ 314.089736][ T29] ? __kmem_cache_free+0xba/0x1e0 [ 314.094903][ T29] ? net_generic+0x1e/0x240 [ 314.099447][ T29] ? net_generic+0x1e/0x240 [ 314.104078][ T29] wg_netns_pre_exit+0x1c/0x1c0 [ 314.109500][ T29] setup_net+0x648/0xa30 [ 314.113921][ T29] ? copy_net_ns+0x5e0/0x5e0 [ 314.118538][ T29] ? copy_net_ns+0x351/0x5e0 [ 314.123132][ T29] ? down_read_killable+0x1d0/0x340 [ 314.128524][ T29] copy_net_ns+0x36d/0x5e0 [ 314.132968][ T29] create_new_namespaces+0x3d3/0x6f0 [ 314.138333][ T29] ? copy_namespaces+0x5c/0x4a0 [ 314.143201][ T29] copy_namespaces+0x430/0x4a0 [ 314.148087][ T29] copy_process+0x1724/0x3dc0 [ 314.152804][ T29] ? copy_process+0x96e/0x3dc0 [ 314.158149][ T29] ? futex_wait+0x4cc/0x5e0 [ 314.162684][ T29] ? __pidfd_prepare+0x140/0x140 [ 314.167718][ T29] kernel_clone+0x24b/0x8a0 [ 314.172239][ T29] ? create_io_thread+0x190/0x190 [ 314.177337][ T29] ? do_futex+0x2ff/0x3e0 [ 314.181711][ T29] __x64_sys_clone+0x1b7/0x230 [ 314.186724][ T29] ? __ia32_sys_vfork+0x140/0x140 [ 314.191781][ T29] ? lock_chain_count+0x20/0x20 [ 314.196699][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 314.201914][ T29] do_syscall_64+0x55/0xb0 [ 314.206397][ T29] ? clear_bhb_loop+0x40/0x90 [ 314.211613][ T29] ? clear_bhb_loop+0x40/0x90 [ 314.216380][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.222301][ T29] RIP: 0033:0x7ff4fcf9ce59 [ 314.226799][ T29] RSP: 002b:00007ff4fdef0fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 314.235378][ T29] RAX: ffffffffffffffda RBX: 00007ff4fd215fa0 RCX: 00007ff4fcf9ce59 [ 314.243376][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000010eb22f000 [ 314.251475][ T29] RBP: 00007ff4fd032d6f R08: 0000000000000000 R09: 0000000000000000 [ 314.259521][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.267568][ T29] R13: 00007ff4fd216038 R14: 00007ff4fd215fa0 R15: 00007ffdbd916228 [ 314.275666][ T29] [ 314.278741][ T29] INFO: task syz.0.295:7065 blocked for more than 144 seconds. [ 314.286446][ T29] Not tainted syzkaller #0 [ 314.291404][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.300138][ T29] task:syz.0.295 state:D stack:24616 pid:7065 ppid:5771 flags:0x00004004 [ 314.309448][ T29] Call Trace: [ 314.313294][ T29] [ 314.316303][ T29] __schedule+0x1553/0x45a0 [ 314.320841][ T29] ? asan.module_dtor+0x20/0x20 [ 314.325782][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 314.330495][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 314.336021][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 314.342195][ T29] schedule+0xbd/0x170 [ 314.346478][ T29] schedule_preempt_disabled+0x13/0x20 [ 314.351978][ T29] __mutex_lock+0x6a9/0xcc0 [ 314.356564][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 314.361275][ T29] ? dev_ioctl+0x7a4/0x1140 [ 314.365879][ T29] ? mutex_lock_nested+0x20/0x20 [ 314.370846][ T29] ? dev_load+0x21/0x1f0 [ 314.375178][ T29] dev_ioctl+0x7a4/0x1140 [ 314.379530][ T29] sock_do_ioctl+0x239/0x310 [ 314.384202][ T29] ? sock_show_fdinfo+0xb0/0xb0 [ 314.389105][ T29] sock_ioctl+0x5ba/0x7e0 [ 314.393456][ T29] ? sock_poll+0x3e0/0x3e0 [ 314.397973][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 314.402947][ T29] ? security_file_ioctl+0x80/0xa0 [ 314.408178][ T29] ? sock_poll+0x3e0/0x3e0 [ 314.412642][ T29] __se_sys_ioctl+0xfd/0x170 [ 314.417982][ T29] do_syscall_64+0x55/0xb0 [ 314.422432][ T29] ? clear_bhb_loop+0x40/0x90 [ 314.427211][ T29] ? clear_bhb_loop+0x40/0x90 [ 314.431923][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.437897][ T29] RIP: 0033:0x7ff4fcf9ce59 [ 314.442336][ T29] RSP: 002b:00007ff4fded0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.450854][ T29] RAX: ffffffffffffffda RBX: 00007ff4fd216090 RCX: 00007ff4fcf9ce59 [ 314.458997][ T29] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 000000000000000b [ 314.467087][ T29] RBP: 00007ff4fd032d6f R08: 0000000000000000 R09: 0000000000000000 [ 314.475109][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.483098][ T29] R13: 00007ff4fd216128 R14: 00007ff4fd216090 R15: 00007ffdbd916228 [ 314.491184][ T29] [ 314.494252][ T29] INFO: task syz.0.295:7069 blocked for more than 144 seconds. [ 314.501804][ T29] Not tainted syzkaller #0 [ 314.506901][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.516304][ T29] task:syz.0.295 state:D stack:24968 pid:7069 ppid:5771 flags:0x00004004 [ 314.525629][ T29] Call Trace: [ 314.528931][ T29] [ 314.531868][ T29] __schedule+0x1553/0x45a0 [ 314.536472][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.542603][ T29] ? asan.module_dtor+0x20/0x20 [ 314.547769][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 314.552484][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 314.558240][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 314.564776][ T29] schedule+0xbd/0x170 [ 314.568877][ T29] schedule_preempt_disabled+0x13/0x20 [ 314.574590][ T29] __mutex_lock+0x6a9/0xcc0 [ 314.579141][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 314.583935][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 314.589078][ T29] ? mutex_lock_nested+0x20/0x20 [ 314.594103][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 314.599233][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 314.604299][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 314.609529][ T29] ? rtnetlink_bind+0x80/0x80 [ 314.614282][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 314.621005][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 314.627123][ T29] ? lock_chain_count+0x20/0x20 [ 314.632007][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 314.637479][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 314.642706][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 314.648159][ T29] ? _local_bh_enable+0xa0/0xa0 [ 314.653030][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 314.658226][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 314.663388][ T29] ? __dev_queue_xmit+0x1b2c/0x3660 [ 314.668730][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 314.674103][ T29] ? ref_tracker_free+0x690/0x840 [ 314.679171][ T29] netlink_rcv_skb+0x241/0x4d0 [ 314.684054][ T29] ? rtnetlink_bind+0x80/0x80 [ 314.688812][ T29] ? netlink_ack+0x1180/0x1180 [ 314.693638][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 314.698803][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.704132][ T29] netlink_unicast+0x751/0x8d0 [ 314.708939][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 314.713722][ T29] ? netlink_getsockopt+0x590/0x590 [ 314.719010][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 314.724686][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 314.730006][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 314.735538][ T29] ? netlink_getsockopt+0x590/0x590 [ 314.740777][ T29] ____sys_sendmsg+0x5ba/0x960 [ 314.745652][ T29] ? __asan_memset+0x22/0x40 [ 314.750262][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 314.755381][ T29] ? __import_iovec+0x5f2/0x850 [ 314.760265][ T29] ? import_iovec+0x73/0xa0 [ 314.764889][ T29] ___sys_sendmsg+0x2a6/0x360 [ 314.769605][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 314.774517][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 314.779397][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 314.784536][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 314.789773][ T29] do_syscall_64+0x55/0xb0 [ 314.794279][ T29] ? clear_bhb_loop+0x40/0x90 [ 314.798971][ T29] ? clear_bhb_loop+0x40/0x90 [ 314.803673][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.809670][ T29] RIP: 0033:0x7ff4fcf9ce59 [ 314.814216][ T29] RSP: 002b:00007ff4fdeaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.823224][ T29] RAX: ffffffffffffffda RBX: 00007ff4fd216180 RCX: 00007ff4fcf9ce59 [ 314.831301][ T29] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 000000000000000c [ 314.839421][ T29] RBP: 00007ff4fd032d6f R08: 0000000000000000 R09: 0000000000000000 [ 314.847663][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.855767][ T29] R13: 00007ff4fd216218 R14: 00007ff4fd216180 R15: 00007ffdbd916228 [ 314.863862][ T29] [ 314.866919][ T29] INFO: task syz.3.300:7083 blocked for more than 144 seconds. [ 314.874547][ T29] Not tainted syzkaller #0 [ 314.879506][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.888294][ T29] task:syz.3.300 state:D stack:25960 pid:7083 ppid:6130 flags:0x00004004 [ 314.897721][ T29] Call Trace: [ 314.901037][ T29] [ 314.904066][ T29] __schedule+0x1553/0x45a0 [ 314.908601][ T29] ? stack_trace_save+0x100/0x100 [ 314.913657][ T29] ? asan.module_dtor+0x20/0x20 [ 314.918575][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 314.923276][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 314.929501][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 314.935774][ T29] schedule+0xbd/0x170 [ 314.939877][ T29] schedule_preempt_disabled+0x13/0x20 [ 314.945433][ T29] __mutex_lock+0x6a9/0xcc0 [ 314.949957][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 314.954736][ T29] ? ethnl_default_dumpit+0x78/0x8a0 [ 314.960053][ T29] ? mutex_lock_nested+0x20/0x20 [ 314.965117][ T29] ? __kmem_cache_alloc_node+0x13a/0x250 [ 314.970771][ T29] ethnl_default_dumpit+0x78/0x8a0 [ 314.976456][ T29] ? __build_skb_around+0x255/0x3d0 [ 314.981681][ T29] genl_dumpit+0xff/0x1a0 [ 314.986151][ T29] netlink_dump+0x747/0xe50 [ 314.990680][ T29] ? netlink_lookup+0x200/0x200 [ 314.995607][ T29] ? genl_start+0x574/0x6b0 [ 315.000128][ T29] __netlink_dump_start+0x5f1/0x810 [ 315.005537][ T29] genl_family_rcv_msg_dumpit+0x214/0x310 [ 315.011293][ T29] ? genl_rcv_msg+0x7a0/0x7a0 [ 315.016021][ T29] ? genl_get_cmd+0x692/0x920 [ 315.020717][ T29] ? genl_family_rcv_msg_doit+0x310/0x310 [ 315.026512][ T29] ? genl_start+0x6b0/0x6b0 [ 315.031547][ T29] ? genl_dumpit+0x1a0/0x1a0 [ 315.036261][ T29] genl_rcv_msg+0x5e5/0x7a0 [ 315.040797][ T29] ? genl_bind+0x360/0x360 [ 315.045316][ T29] ? ethnl_default_doit+0xb80/0xb80 [ 315.050533][ T29] ? ethnl_default_start+0x560/0x560 [ 315.056031][ T29] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 315.061428][ T29] ? ref_tracker_free+0x690/0x840 [ 315.067036][ T29] netlink_rcv_skb+0x241/0x4d0 [ 315.071832][ T29] ? genl_bind+0x360/0x360 [ 315.076335][ T29] ? netlink_ack+0x1180/0x1180 [ 315.081120][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 315.086237][ T29] ? down_read+0x1ac/0x2e0 [ 315.090667][ T29] genl_rcv+0x28/0x40 [ 315.094696][ T29] netlink_unicast+0x751/0x8d0 [ 315.099485][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 315.104357][ T29] ? netlink_getsockopt+0x590/0x590 [ 315.109575][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 315.114708][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 315.120013][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 315.125552][ T29] ? netlink_getsockopt+0x590/0x590 [ 315.131307][ T29] ____sys_sendmsg+0x5ba/0x960 [ 315.136187][ T29] ? __asan_memset+0x22/0x40 [ 315.140803][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 315.145901][ T29] ? __import_iovec+0x5f2/0x850 [ 315.151641][ T29] ? import_iovec+0x73/0xa0 [ 315.156242][ T29] ___sys_sendmsg+0x2a6/0x360 [ 315.160934][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 315.165816][ T29] ? trace_call_bpf+0xc3/0x6c0 [ 315.170629][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 315.175603][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 315.180586][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 315.185903][ T29] do_syscall_64+0x55/0xb0 [ 315.190348][ T29] ? clear_bhb_loop+0x40/0x90 [ 315.195086][ T29] ? clear_bhb_loop+0x40/0x90 [ 315.199762][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.205771][ T29] RIP: 0033:0x7f148e99ce59 [ 315.210195][ T29] RSP: 002b:00007f148f882028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.218666][ T29] RAX: ffffffffffffffda RBX: 00007f148ec15fa0 RCX: 00007f148e99ce59 [ 315.226825][ T29] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 315.235544][ T29] RBP: 00007f148ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 315.243547][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.251606][ T29] R13: 00007f148ec16038 R14: 00007f148ec15fa0 R15: 00007ffea8731cf8 [ 315.259644][ T29] [ 315.262661][ T29] INFO: task syz.3.300:7084 blocked for more than 145 seconds. [ 315.270291][ T29] Not tainted syzkaller #0 [ 315.275282][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.284060][ T29] task:syz.3.300 state:D stack:25544 pid:7084 ppid:6130 flags:0x00004004 [ 315.293303][ T29] Call Trace: [ 315.296736][ T29] [ 315.299688][ T29] __schedule+0x1553/0x45a0 [ 315.304305][ T29] ? asan.module_dtor+0x20/0x20 [ 315.309184][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 315.313914][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 315.319407][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 315.325683][ T29] schedule+0xbd/0x170 [ 315.329780][ T29] schedule_preempt_disabled+0x13/0x20 [ 315.336913][ T29] __mutex_lock+0x6a9/0xcc0 [ 315.341452][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 315.346229][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 315.351362][ T29] ? mutex_lock_nested+0x20/0x20 [ 315.356394][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 315.361533][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 315.366556][ T29] ? rtnetlink_bind+0x80/0x80 [ 315.371248][ T29] ? perf_trace_preemptirq_template+0x269/0x330 [ 315.377555][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 315.383555][ T29] ? lock_chain_count+0x20/0x20 [ 315.388513][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 315.393957][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 315.399169][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 315.404651][ T29] ? _local_bh_enable+0xa0/0xa0 [ 315.409539][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 315.414727][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 315.419866][ T29] ? __dev_queue_xmit+0x1b2c/0x3660 [ 315.425165][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 315.430317][ T29] ? ref_tracker_free+0x690/0x840 [ 315.435531][ T29] netlink_rcv_skb+0x241/0x4d0 [ 315.440822][ T29] ? rtnetlink_bind+0x80/0x80 [ 315.445703][ T29] ? netlink_ack+0x1180/0x1180 [ 315.450508][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 315.455772][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.461006][ T29] netlink_unicast+0x751/0x8d0 [ 315.465865][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 315.470666][ T29] ? netlink_getsockopt+0x590/0x590 [ 315.475972][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 315.480932][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 315.486299][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 315.491790][ T29] ? netlink_getsockopt+0x590/0x590 [ 315.497066][ T29] ____sys_sendmsg+0x5ba/0x960 [ 315.501860][ T29] ? __asan_memset+0x22/0x40 [ 315.506549][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 315.511597][ T29] ? __import_iovec+0x3fa/0x850 [ 315.516527][ T29] ? import_iovec+0x73/0xa0 [ 315.521056][ T29] ___sys_sendmsg+0x2a6/0x360 [ 315.525857][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 315.530680][ T29] ? trace_call_bpf+0xc3/0x6c0 [ 315.535584][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 315.540985][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 315.546089][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 315.551331][ T29] do_syscall_64+0x55/0xb0 [ 315.555928][ T29] ? clear_bhb_loop+0x40/0x90 [ 315.560641][ T29] ? clear_bhb_loop+0x40/0x90 [ 315.565434][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.571352][ T29] RIP: 0033:0x7f148e99ce59 [ 315.575876][ T29] RSP: 002b:00007f148f861028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.584381][ T29] RAX: ffffffffffffffda RBX: 00007f148ec16090 RCX: 00007f148e99ce59 [ 315.592371][ T29] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 315.600461][ T29] RBP: 00007f148ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 315.608521][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.616680][ T29] R13: 00007f148ec16128 R14: 00007f148ec16090 R15: 00007ffea8731cf8 [ 315.624845][ T29] [ 315.627897][ T29] INFO: task syz.3.300:7087 blocked for more than 145 seconds. [ 315.635497][ T29] Not tainted syzkaller #0 [ 315.640447][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.649790][ T29] task:syz.3.300 state:D stack:27880 pid:7087 ppid:6130 flags:0x00004004 [ 315.659070][ T29] Call Trace: [ 315.662363][ T29] [ 315.665479][ T29] __schedule+0x1553/0x45a0 [ 315.670036][ T29] ? asan.module_dtor+0x20/0x20 [ 315.674959][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 315.679655][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 315.685203][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 315.691373][ T29] schedule+0xbd/0x170 [ 315.695580][ T29] schedule_preempt_disabled+0x13/0x20 [ 315.701064][ T29] __mutex_lock+0x6a9/0xcc0 [ 315.705665][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 315.710370][ T29] ? __tun_chr_ioctl+0x400/0x2000 [ 315.715528][ T29] ? mutex_lock_nested+0x20/0x20 [ 315.720493][ T29] ? __might_fault+0xaa/0x120 [ 315.725267][ T29] ? __might_fault+0xc6/0x120 [ 315.729952][ T29] ? __might_fault+0xaa/0x120 [ 315.734713][ T29] __tun_chr_ioctl+0x400/0x2000 [ 315.739593][ T29] ? tun_flow_create+0x310/0x310 [ 315.745250][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 315.750218][ T29] ? security_file_ioctl+0x80/0xa0 [ 315.755422][ T29] ? tun_chr_poll+0x630/0x630 [ 315.760117][ T29] __se_sys_ioctl+0xfd/0x170 [ 315.764804][ T29] do_syscall_64+0x55/0xb0 [ 315.769239][ T29] ? clear_bhb_loop+0x40/0x90 [ 315.774394][ T29] ? clear_bhb_loop+0x40/0x90 [ 315.779103][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.785091][ T29] RIP: 0033:0x7f148e99ce59 [ 315.789529][ T29] RSP: 002b:00007f148f840028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.798021][ T29] RAX: ffffffffffffffda RBX: 00007f148ec16180 RCX: 00007f148e99ce59 [ 315.806069][ T29] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 000000000000000b [ 315.814088][ T29] RBP: 00007f148ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 315.822085][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.830141][ T29] R13: 00007f148ec16218 R14: 00007f148ec16180 R15: 00007ffea8731cf8 [ 315.838204][ T29] [ 315.841231][ T29] INFO: task syz.3.300:7088 blocked for more than 145 seconds. [ 315.849562][ T29] Not tainted syzkaller #0 [ 315.854604][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.863285][ T29] task:syz.3.300 state:D stack:29128 pid:7088 ppid:6130 flags:0x00004004 [ 315.872577][ T29] Call Trace: [ 315.875937][ T29] [ 315.878876][ T29] __schedule+0x1553/0x45a0 [ 315.883406][ T29] ? lock_chain_count+0x20/0x20 [ 315.888477][ T29] ? asan.module_dtor+0x20/0x20 [ 315.893354][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 315.898129][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 315.903610][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 315.909864][ T29] schedule+0xbd/0x170 [ 315.914020][ T29] schedule_preempt_disabled+0x13/0x20 [ 315.919499][ T29] __mutex_lock+0x6a9/0xcc0 [ 315.924185][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 315.928900][ T29] ? __tun_chr_ioctl+0x400/0x2000 [ 315.934224][ T29] ? mutex_lock_nested+0x20/0x20 [ 315.939208][ T29] __tun_chr_ioctl+0x400/0x2000 [ 315.944139][ T29] ? tun_flow_create+0x310/0x310 [ 315.949679][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 315.954733][ T29] ? security_file_ioctl+0x80/0xa0 [ 315.959873][ T29] ? tun_chr_poll+0x630/0x630 [ 315.964656][ T29] __se_sys_ioctl+0xfd/0x170 [ 315.969270][ T29] do_syscall_64+0x55/0xb0 [ 315.973708][ T29] ? clear_bhb_loop+0x40/0x90 [ 315.978490][ T29] ? clear_bhb_loop+0x40/0x90 [ 315.983194][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.989162][ T29] RIP: 0033:0x7f148e99ce59 [ 315.993593][ T29] RSP: 002b:00007f148f81f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.002205][ T29] RAX: ffffffffffffffda RBX: 00007f148ec16270 RCX: 00007f148e99ce59 [ 316.010272][ T29] RDX: 0000000000000301 RSI: 00000000400454cd RDI: 000000000000000b [ 316.018760][ T29] RBP: 00007f148ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 316.026845][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.034880][ T29] R13: 00007f148ec16308 R14: 00007f148ec16270 R15: 00007ffea8731cf8 [ 316.042881][ T29] [ 316.046025][ T29] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 316.055602][ T29] [ 316.055602][ T29] Showing all locks held in the system: [ 316.063341][ T29] 1 lock held by khungtaskd/29: [ 316.068268][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 316.078221][ T29] 3 locks held by kworker/u4:3/49: [ 316.083352][ T29] #0: ffff88814cce0d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 316.095555][ T29] #1: ffffc90000ba7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 316.109754][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 316.119560][ T29] 3 locks held by kworker/u4:4/59: [ 316.124737][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 316.136512][ T29] #1: ffffc900015b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 316.147560][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 316.157221][ T29] 5 locks held by kworker/u4:6/2878: [ 316.162519][ T29] #0: ffff8880b8e3c098 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 316.172520][ T29] #1: ffff8880b8e28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 316.181331][ T29] #2: ffff888023908768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 316.191400][ T29] #3: ffffffff97538990 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6c/0x4f0 [ 316.201789][ T29] #4: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0xb1/0x320 [ 316.212152][ T29] 2 locks held by getty/5525: [ 316.216976][ T29] #0: ffff88814d23b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 316.226879][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 316.237081][ T29] 3 locks held by kworker/0:3/5777: [ 316.242281][ T29] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 316.254765][ T29] #1: ffffc900045ffd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 316.266716][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 316.276411][ T29] 1 lock held by syz.0.295/7062: [ 316.281353][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 316.290393][ T29] 2 locks held by syz.0.295/7064: [ 316.295470][ T29] #0: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x351/0x5e0 [ 316.304990][ T29] #1: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1c/0x1c0 [ 316.314399][ T29] 1 lock held by syz.0.295/7065: [ 316.319324][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 316.328315][ T29] 1 lock held by syz.0.295/7069: [ 316.333266][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.342785][ T29] 1 lock held by syz.2.297/7073: [ 316.347778][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x1e2/0x18d0 [ 316.356811][ T29] 3 locks held by syz.3.300/7083: [ 316.362363][ T29] #0: ffffffff8e42b8f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 316.370671][ T29] #1: ffff888025c4c690 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 316.381205][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_default_dumpit+0x78/0x8a0 [ 316.390952][ T29] 1 lock held by syz.3.300/7084: [ 316.395953][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.405422][ T29] 1 lock held by syz.3.300/7087: [ 316.410357][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000 [ 316.419786][ T29] 1 lock held by syz.3.300/7088: [ 316.424776][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000 [ 316.434398][ T29] 3 locks held by syz.1.302/7090: [ 316.439439][ T29] #0: ffffffff8e42b8f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 316.447695][ T29] #1: ffffffff8e42b708 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x10c/0x7a0 [ 316.456749][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_register_hw+0x2f45/0x4250 [ 316.467391][ T29] 1 lock held by syz-executor/7097: [ 316.472607][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.482111][ T29] 1 lock held by syz-executor/7106: [ 316.487348][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.496830][ T29] 1 lock held by syz-executor/7108: [ 316.502028][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.511506][ T29] 1 lock held by syz-executor/7111: [ 316.516777][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.526307][ T29] 1 lock held by syz-executor/7119: [ 316.531514][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.541019][ T29] 1 lock held by syz-executor/7125: [ 316.546341][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.555889][ T29] 1 lock held by syz-executor/7127: [ 316.561099][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.571179][ T29] 1 lock held by syz-executor/7130: [ 316.576543][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.586117][ T29] 1 lock held by syz-executor/7139: [ 316.591326][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.600816][ T29] 1 lock held by syz-executor/7144: [ 316.606102][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.615594][ T29] 1 lock held by syz-executor/7147: [ 316.620794][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.630241][ T29] 1 lock held by syz-executor/7150: [ 316.635533][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 316.645071][ T29] [ 316.647409][ T29] ============================================= [ 316.647409][ T29] [ 316.656076][ T29] NMI backtrace for cpu 1 [ 316.660407][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 316.667604][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.677652][ T29] Call Trace: [ 316.680928][ T29] [ 316.683856][ T29] dump_stack_lvl+0x18c/0x250 [ 316.688533][ T29] ? show_regs_print_info+0x20/0x20 [ 316.693723][ T29] ? load_image+0x420/0x420 [ 316.698232][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 316.703166][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 316.709311][ T29] ? _printk+0xde/0x130 [ 316.713456][ T29] ? load_image+0x420/0x420 [ 316.717955][ T29] ? load_image+0x420/0x420 [ 316.722450][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 316.728531][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 316.734511][ T29] watchdog+0xf3d/0xf80 [ 316.738665][ T29] ? watchdog+0x1e1/0xf80 [ 316.742995][ T29] kthread+0x2fa/0x390 [ 316.747054][ T29] ? hungtask_pm_notify+0x90/0x90 [ 316.752070][ T29] ? kthread_blkcg+0xd0/0xd0 [ 316.756650][ T29] ret_from_fork+0x48/0x80 [ 316.761062][ T29] ? kthread_blkcg+0xd0/0xd0 [ 316.765644][ T29] ret_from_fork_asm+0x11/0x20 [ 316.770411][ T29] [ 316.774237][ T29] Sending NMI from CPU 1 to CPUs 0: [ 316.779464][ C0] NMI backtrace for cpu 0 [ 316.779474][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 316.779487][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.779495][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 316.779520][ C0] Code: 88 1f 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 e4 3f 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 316.779530][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 316.779542][ C0] RAX: 0a1574b19e95e900 RBX: ffffffff8162af3d RCX: 0a1574b19e95e900 [ 316.779553][ C0] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 316.779562][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 316.779572][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 316.779582][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 316.779591][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 316.779602][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.779611][ C0] CR2: 000055d0d5b99000 CR3: 000000001f764000 CR4: 00000000003506f0 [ 316.779624][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 316.779631][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 316.779639][ C0] Call Trace: [ 316.779645][ C0] [ 316.779649][ C0] default_idle+0x13/0x20 [ 316.779668][ C0] default_idle_call+0x6c/0xa0 [ 316.779688][ C0] do_idle+0x33d/0x590 [ 316.779704][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 316.779724][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 316.779743][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 316.779762][ C0] ? do_idle+0x56b/0x590 [ 316.779779][ C0] cpu_startup_entry+0x43/0x60 [ 316.779794][ C0] rest_init+0x2e2/0x300 [ 316.779807][ C0] ? time_init+0x40/0x40 [ 316.779825][ C0] arch_call_rest_init+0xe/0x10 [ 316.779844][ C0] start_kernel+0x459/0x4e0 [ 316.779863][ C0] x86_64_start_reservations+0x2a/0x30 [ 316.779880][ C0] x86_64_start_kernel+0x60/0x60 [ 316.779896][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 316.779922][ C0] [ 316.780630][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 317.001237][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 317.008443][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.018501][ T29] Call Trace: [ 317.021783][ T29] [ 317.024761][ T29] dump_stack_lvl+0x18c/0x250 [ 317.029460][ T29] ? show_regs_print_info+0x20/0x20 [ 317.034662][ T29] ? load_image+0x420/0x420 [ 317.039196][ T29] panic+0x2dc/0x730 [ 317.043110][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 317.048750][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 317.053251][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 317.058804][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 317.064970][ T29] watchdog+0xf7c/0xf80 [ 317.069145][ T29] ? watchdog+0x1e1/0xf80 [ 317.073489][ T29] kthread+0x2fa/0x390 [ 317.077565][ T29] ? hungtask_pm_notify+0x90/0x90 [ 317.082589][ T29] ? kthread_blkcg+0xd0/0xd0 [ 317.087190][ T29] ret_from_fork+0x48/0x80 [ 317.091618][ T29] ? kthread_blkcg+0xd0/0xd0 [ 317.096217][ T29] ret_from_fork_asm+0x11/0x20 [ 317.101012][ T29] [ 317.104307][ T29] Kernel Offset: disabled [ 317.108625][ T29] Rebooting in 86400 seconds..