last executing test programs: 54.260366032s ago: executing program 3 (id=1750): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffef0, &(0x7f0000000000)='?proo/1/\x00q\xeeP\xee\x9c2G\xf0\x81x\x97\x00'}, 0x30) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202e7b1af8ff00000000bfa100000000000007010000f8cfffffb702000008000000b7030000000000008500000007000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 51.347163257s ago: executing program 3 (id=1743): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x33, 0x0, &(0x7f00000005c0)='GPL\x00', 0x1, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63c78b5524ce5b8c97c7c10d3e8761960b00303234"], 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000003cd8a511e6dbb48bf8ff00000000bfa200000000000007020000f8ffff03001008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000800)=[{0x1c}, {0x28, 0x0, 0x1, 0xefff}, {0xb1, 0x0, 0xba, 0x8007}, {0x16, 0xfc, 0x5, 0xff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f0000000200)}, 0x0) 50.992390206s ago: executing program 3 (id=1745): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'pim6reg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)}, 0xfc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x60780, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x80004, 0x10104, 0xa}, {0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0xd}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0xb}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x1458}, 0x240048c0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb019881b19803bf3ff800700000007000000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000009000000000000000000000009000000000000"], 0x0, 0x8a}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000680)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x20, 0x4, 0xb, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x1, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd030000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff8ba}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x10000}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 50.599384984s ago: executing program 3 (id=1747): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0x2000000000000216, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b70300000000000085000000060004001681000000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(r4, 0x10e, 0xb, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 49.077469898s ago: executing program 2 (id=1754): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x33, 0x0, &(0x7f00000005c0)='GPL\x00', 0x1, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63c78b5524ce5b8c97c7c10d3e8761960b00303234"], 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000003cd8a511e6dbb48bf8ff00000000bfa200000000000007020000f8ffff03001008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000800)=[{0x1c}, {0x28, 0x0, 0x1, 0xefff}, {0xb1, 0x0, 0xba, 0x8007}, {0x16, 0xfc, 0x5, 0xff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f0000000200)}, 0x0) 48.782331225s ago: executing program 1 (id=1755): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000008) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x10}, 0xc) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 48.410725634s ago: executing program 2 (id=1756): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0x2000000000000216, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b70300000000000085000000060004001681000000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r6) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(r6, 0x10e, 0xb, &(0x7f0000000040), 0x4) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 48.408581433s ago: executing program 0 (id=1764): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x33, 0x0, &(0x7f00000005c0)='GPL\x00', 0x1, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63c78b5524ce5b8c97c7c10d3e8761960b00303234"], 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000003cd8a511e6dbb48bf8ff00000000bfa200000000000007020000f8ffff03001008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000800)=[{0x1c}, {0x28, 0x0, 0x1, 0xefff}, {0xb1, 0x0, 0xba, 0x8007}, {0x16, 0xfc, 0x5, 0xff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f0000000200)}, 0x0) 47.700124729s ago: executing program 1 (id=1757): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000300)=r6) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) close(0x3) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'veth0_to_bridge\x00', @multicast}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000030001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r8, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000002e1b95a50500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 47.636284971s ago: executing program 0 (id=1758): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0x2000000000000216, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b70300000000000085000000060004001681000000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r6) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(r6, 0x10e, 0xb, &(0x7f0000000040), 0x4) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 43.169241551s ago: executing program 1 (id=1759): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x33, &(0x7f0000001080)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000020000087b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018590000070000000000000000000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=0x1, @ANYBLOB="00000000001000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x1, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63c78b5524ce5b8c97c7c10d3e8761960b00303234"], 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000003cd8a511e6dbb48bf8ff00000000bfa200000000000007020000f8ffff03001008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000800)=[{0x1c}, {0x28, 0x0, 0x1, 0xefff}, {0xb1, 0x0, 0xba, 0x8007}, {0x16, 0xfc, 0x5, 0xff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f0000000200)}, 0x0) 43.168085441s ago: executing program 0 (id=1760): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) socket$kcm(0xa, 0x3, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7002f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r4], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pB \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3, r5}, 0xc) 42.930766507s ago: executing program 0 (id=1761): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x33, &(0x7f0000001080)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63c78b5524ce5b8c97c7c10d3e876196"], 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000003cd8a511e6dbb48bf8ff00000000bfa200000000000007020000f8ffff03001008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 42.925926667s ago: executing program 2 (id=1762): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x33, &(0x7f0000001080)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000020000087b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018590000070000000000000000000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000000000000a5000000b7ff07000000000000007b0000017b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018239179346a551bfaaba045b4bf149755e137cdd0f1837bd5312da60a3a42044c3b964489396ab826dcbbc39bc3b2ed6d36799cbe70cda46f56e44536f056fb9fba9c52f83fbbf99bca098733d97d6cbab87bcaba4addfa2e6fa88946a7278a0fac48afa271ca8e98bee96f749e5adb8d4c11c85e783e1ff98b542a14624a64e57b208c5be0f0d97b3515a8438b7b8fd8cb0622c327c6aff47f1f90d51b9758638293d13654c2ce9c97ab7d3a55506137c719ddbd3b4ac1ed94cab3b9a0967ffa3d3d9f1f6c9198c30cb3ee9c033269bd2a3094a263680aee90b9f9db0cea7f476d2d323f79987a4ac54b9a2fae2eaa6e726966855a582416de336b86fa02c65d941453a198310492b1d320089b8252bbc7b1c366944f4dc01fec0d520ed2bd554cf84463da974f7bdda1a10c0c908548aa74aa81056e14ee7468223f84aacfc4", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018430000fcffffff00000000000000009500000000000000180000000200000000000000000000801854000001000000000000000000000018270000", @ANYRES32=0x1, @ANYBLOB="00000000001000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x1, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63c78b5524ce5b8c97c7c10d3e8761960b00303234"], 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000003cd8a511e6dbb48bf8ff00000000bfa200000000000007020000f8ffff03001008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000800)=[{0x1c}, {0x28, 0x0, 0x1, 0xefff}, {0xb1, 0x0, 0xba, 0x8007}, {0x16, 0xfc, 0x5, 0xff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f0000000200)}, 0x0) 42.754310171s ago: executing program 3 (id=1763): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x33, &(0x7f0000001080)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000020000087b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018590000070000000000000000000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000001000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x1, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63c78b5524ce5b8c97c7c10d3e8761960b00303234"], 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000003cd8a511e6dbb48bf8ff00000000bfa200000000000007020000f8ffff03001008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000800)=[{0x1c}, {0x28, 0x0, 0x1, 0xefff}, {0xb1, 0x0, 0xba, 0x8007}, {0x16, 0xfc, 0x5, 0xff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f0000000200)}, 0x0) 42.75326266s ago: executing program 1 (id=1772): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x33, &(0x7f0000001080)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63c78b5524ce5b8c97c7c10d3e876196"], 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000003cd8a511e6dbb48bf8ff00000000bfa200000000000007020000f8ffff03001008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 42.562443655s ago: executing program 2 (id=1765): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) socket$kcm(0xa, 0x3, 0x106) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7002f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r4], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pB \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3, r5}, 0xc) 42.553705365s ago: executing program 0 (id=1766): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x33, &(0x7f0000001080)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000020000087b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018590000070000000000000000000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018430000fcffffff00000000000000009500000000000000180000000200000000000000000000801854000001000000000000000000000018270000", @ANYRES32=0x1, @ANYBLOB="00000000001000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x1, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63c78b5524ce5b8c97c7c10d3e8761960b00303234"], 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000003cd8a511e6dbb48bf8ff00000000bfa200000000000007020000f8ffff03001008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000800)=[{0x1c}, {0x28, 0x0, 0x1, 0xefff}, {0xb1, 0x0, 0xba, 0x8007}, {0x16, 0xfc, 0x5, 0xff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f0000000200)}, 0x0) 42.549162785s ago: executing program 1 (id=1767): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x33, &(0x7f0000001080)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x1, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63c78b5524ce5b8c97c7c10d3e8761960b00303234"], 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000003cd8a511e6dbb48bf8ff00000000bfa200000000000007020000f8ffff03001008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000800)=[{0x1c}, {0x28, 0x0, 0x1, 0xefff}, {0xb1, 0x0, 0xba, 0x8007}, {0x16, 0xfc, 0x5, 0xff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f0000000200)}, 0x0) 42.191207533s ago: executing program 2 (id=1768): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x3000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32, @ANYBLOB="0000000000000000b705000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r2}, 0xc) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2=0xe0000001}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x1d4}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\n.t\x00\x00\x00\x00\x00\x00\x00'], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200020085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r6, 0x0) r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x3, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x8) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x401}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r6, 0x0) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[@ANYRES8=r9, @ANYRES64=r8], 0x9a) write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2b, 'hugetlb'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}]}, 0x18) 42.158865714s ago: executing program 3 (id=1769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="2000000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826eda", 0x4b}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000001400)=ANY=[@ANYRESHEX], &(0x7f00000014c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c, 0x0, 0xfffffffd, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2060000000010000ac141416e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.051833726s ago: executing program 1 (id=1770): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0x2000000000000216, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b70300000000000085000000060004001681000000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 41.991017257s ago: executing program 0 (id=1771): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x11278e, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20006, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x20}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000080080092929ea589a4750000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, r4}, 0x10) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x18, &(0x7f0000000100), 0x120) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r6 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b282f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4de517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1bdb58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000041dcc4cabfc4a21604f0b80da4ec5500000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae6e5c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b474"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000a7d4635d7b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x0, 0x48, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x3f) r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x2, 0x0, 0x0, 0x3, 0xc01a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x10d860, 0x9, 0x3, 0x684b37bf787e571d, 0x5, 0xfffffffe, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x54c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r6, 0xffffffffffffffff, r8, 0xb) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x7, 0x3, 0xfa, 0x0, 0x5, 0x401, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x1012b0, 0x101, 0x3, 0x4, 0x6, 0x3ff, 0x9, 0x0, 0x6b, 0x0, 0x6}, r6, 0xc, 0xffffffffffffffff, 0x1) 41.832203351s ago: executing program 2 (id=1773): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) socket$kcm(0xa, 0x3, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7002f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r4], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pB \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3, r5}, 0xc) 6.709166709s ago: executing program 32 (id=1771): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x11278e, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20006, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x20}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000080080092929ea589a4750000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, r4}, 0x10) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x18, &(0x7f0000000100), 0x120) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r6 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000a7d4635d7b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x0, 0x48, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x3f) r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x2, 0x0, 0x0, 0x3, 0xc01a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x10d860, 0x9, 0x3, 0x684b37bf787e571d, 0x5, 0xfffffffe, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x54c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r6, 0xffffffffffffffff, r8, 0xb) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x7, 0x3, 0xfa, 0x0, 0x5, 0x401, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x1012b0, 0x101, 0x3, 0x4, 0x6, 0x3ff, 0x9, 0x0, 0x6b, 0x0, 0x6}, r6, 0xc, 0xffffffffffffffff, 0x1) 4.775967723s ago: executing program 33 (id=1770): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0x2000000000000216, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b70300000000000085000000060004001681000000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 4.150845287s ago: executing program 34 (id=1773): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) socket$kcm(0xa, 0x3, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7002f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r4], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pB \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3, r5}, 0xc) 0s ago: executing program 35 (id=1769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="2000000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826eda", 0x4b}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000001400)=ANY=[@ANYRESHEX], &(0x7f00000014c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c, 0x0, 0xfffffffd, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2060000000010000ac141416e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 92.527696][ T5759] cgroup: Unknown subsys name 'net' [ 92.698543][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.548614][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.292100][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.307289][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.319780][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.328690][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.350456][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.361068][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.380078][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.402000][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.414696][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.429987][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.437969][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.446932][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.454920][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.463020][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.472615][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.475219][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.487604][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.487775][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.502332][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.510141][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.518391][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.535183][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.543173][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.551551][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.068245][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 97.080304][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 97.261569][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 97.330788][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.338737][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.347405][ T5770] bridge_slave_0: entered allmulticast mode [ 97.354809][ T5770] bridge_slave_0: entered promiscuous mode [ 97.365272][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 97.404611][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.412391][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.419713][ T5770] bridge_slave_1: entered allmulticast mode [ 97.426888][ T5770] bridge_slave_1: entered promiscuous mode [ 97.464820][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.473576][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.482448][ T5775] bridge_slave_0: entered allmulticast mode [ 97.489558][ T5775] bridge_slave_0: entered promiscuous mode [ 97.499117][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.506629][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.514018][ T5775] bridge_slave_1: entered allmulticast mode [ 97.521587][ T5775] bridge_slave_1: entered promiscuous mode [ 97.540764][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.554729][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.660428][ T5770] team0: Port device team_slave_0 added [ 97.676569][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.689957][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.697253][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.704645][ T5781] bridge_slave_0: entered allmulticast mode [ 97.712487][ T5781] bridge_slave_0: entered promiscuous mode [ 97.722780][ T5770] team0: Port device team_slave_1 added [ 97.728925][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.736305][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.744027][ T5781] bridge_slave_1: entered allmulticast mode [ 97.751213][ T5781] bridge_slave_1: entered promiscuous mode [ 97.768463][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.841074][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.848102][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.877351][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.918952][ T5775] team0: Port device team_slave_0 added [ 97.926073][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.933809][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.960990][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.982587][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.995332][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.018896][ T5775] team0: Port device team_slave_1 added [ 98.048748][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.056220][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.064045][ T5776] bridge_slave_0: entered allmulticast mode [ 98.071999][ T5776] bridge_slave_0: entered promiscuous mode [ 98.128786][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.136242][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.143592][ T5776] bridge_slave_1: entered allmulticast mode [ 98.151187][ T5776] bridge_slave_1: entered promiscuous mode [ 98.169855][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.176884][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.206422][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.221684][ T5781] team0: Port device team_slave_0 added [ 98.228499][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.235629][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.261698][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.308806][ T5770] hsr_slave_0: entered promiscuous mode [ 98.315781][ T5770] hsr_slave_1: entered promiscuous mode [ 98.326521][ T5781] team0: Port device team_slave_1 added [ 98.365440][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.380435][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.387452][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.415401][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.429079][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.436502][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.462693][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.476494][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.510671][ T5778] Bluetooth: hci0: command tx timeout [ 98.559048][ T5776] team0: Port device team_slave_0 added [ 98.589879][ T5778] Bluetooth: hci1: command tx timeout [ 98.596022][ T5778] Bluetooth: hci3: command tx timeout [ 98.600127][ T5777] Bluetooth: hci2: command tx timeout [ 98.618725][ T5776] team0: Port device team_slave_1 added [ 98.630338][ T5775] hsr_slave_0: entered promiscuous mode [ 98.637642][ T5775] hsr_slave_1: entered promiscuous mode [ 98.647732][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.655814][ T5775] Cannot create hsr debugfs directory [ 98.683922][ T5781] hsr_slave_0: entered promiscuous mode [ 98.691170][ T5781] hsr_slave_1: entered promiscuous mode [ 98.697732][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.705632][ T5781] Cannot create hsr debugfs directory [ 98.805536][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.812861][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.839275][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.852520][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.859519][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.885583][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.098249][ T5776] hsr_slave_0: entered promiscuous mode [ 99.105345][ T5776] hsr_slave_1: entered promiscuous mode [ 99.112429][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.120947][ T5776] Cannot create hsr debugfs directory [ 99.327446][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.357047][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.371954][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.397432][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.534724][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.546444][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.562842][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.575404][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.692717][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.704401][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.716670][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.730673][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.835976][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.880883][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.893010][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.908437][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.920839][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.985892][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.027492][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.035290][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.077989][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.085576][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.333331][ T23] cfg80211: failed to load regulatory.db [ 100.391537][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.595005][ T5777] Bluetooth: hci0: command tx timeout [ 100.671447][ T5777] Bluetooth: hci2: command tx timeout [ 100.677051][ T5777] Bluetooth: hci3: command tx timeout [ 100.685705][ T5786] Bluetooth: hci1: command tx timeout [ 100.844107][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.094343][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.102562][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.728650][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.737101][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.326261][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.420342][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.438071][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.511625][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.518888][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.532651][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.571844][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.579089][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.655232][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.662614][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.670079][ T5777] Bluetooth: hci0: command tx timeout [ 102.684742][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.692081][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.728359][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.750647][ T5777] Bluetooth: hci3: command tx timeout [ 102.756147][ T5777] Bluetooth: hci1: command tx timeout [ 102.761764][ T5786] Bluetooth: hci2: command tx timeout [ 102.914441][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.014676][ T5770] veth0_vlan: entered promiscuous mode [ 103.049440][ T5770] veth1_vlan: entered promiscuous mode [ 103.084026][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.256820][ T5775] veth0_vlan: entered promiscuous mode [ 103.284869][ T5770] veth0_macvtap: entered promiscuous mode [ 103.321939][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.330188][ T5770] veth1_macvtap: entered promiscuous mode [ 103.347597][ T5775] veth1_vlan: entered promiscuous mode [ 103.389001][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.428354][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.455462][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.474025][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.486760][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.495921][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.507114][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.589019][ T5781] veth0_vlan: entered promiscuous mode [ 103.620201][ T5781] veth1_vlan: entered promiscuous mode [ 103.627593][ T5775] veth0_macvtap: entered promiscuous mode [ 103.669236][ T5775] veth1_macvtap: entered promiscuous mode [ 103.776027][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.787042][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.800354][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.833609][ T5776] veth0_vlan: entered promiscuous mode [ 103.851900][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.862508][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.878340][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.904639][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.919319][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.929428][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.938309][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.955394][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.964338][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.988566][ T5781] veth0_macvtap: entered promiscuous mode [ 104.002742][ T5781] veth1_macvtap: entered promiscuous mode [ 104.047864][ T5776] veth1_vlan: entered promiscuous mode [ 104.067881][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.076420][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.104327][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.125603][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.135558][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.146226][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.158598][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.218504][ T5776] veth0_macvtap: entered promiscuous mode [ 104.235716][ T5776] veth1_macvtap: entered promiscuous mode [ 104.251654][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.262836][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.274819][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.286571][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.305718][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.318639][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.329176][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.338597][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.348410][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.509537][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.531281][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.548487][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.552360][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.569217][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.573319][ C1] hrtimer: interrupt took 85204 ns [ 104.588641][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.599206][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.610706][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.625298][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.684573][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.708467][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.718930][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.730391][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.741210][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.761164][ T5777] Bluetooth: hci0: command tx timeout [ 104.768661][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.780868][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.820426][ T5843] netlink: 'syz.1.2': attribute type 13 has an invalid length. [ 104.828223][ T5843] netlink: 'syz.1.2': attribute type 58 has an invalid length. [ 104.838344][ T5777] Bluetooth: hci1: command tx timeout [ 104.838378][ T5786] Bluetooth: hci2: command tx timeout [ 104.849719][ T5777] Bluetooth: hci3: command tx timeout [ 104.857306][ T5843] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2'. [ 104.890154][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.908695][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.919503][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.934303][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.945557][ T5844] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 104.956521][ T5844] hsr0: entered promiscuous mode [ 104.962651][ T5844] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.979028][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.997210][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.063691][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.082873][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.220060][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.247218][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.315733][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.348434][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.582715][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.619962][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.466539][ T5870] Zero length message leads to an empty skb [ 106.815122][ T5868] delete_channel: no stack [ 107.092364][ T5869] syz.2.10 (5869) used greatest stack depth: 19752 bytes left [ 107.347244][ T5884] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET) [ 107.372712][ T5881] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.13'. [ 107.620937][ T5887] netlink: 'syz.1.16': attribute type 9 has an invalid length. [ 107.642829][ T5887] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.16'. [ 107.942081][ T5887] netlink: 'syz.1.16': attribute type 9 has an invalid length. [ 107.951359][ T5887] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.16'. [ 108.968143][ T5908] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.22'. [ 109.045513][ T5908] openvswitch: netlink: IP tunnel dst address not specified [ 109.853903][ T5932] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.29'. [ 110.117746][ T5934] warning: `syz.1.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.250731][ T5935] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 110.532366][ T5935] syzkaller0: entered promiscuous mode [ 110.537953][ T5935] syzkaller0: entered allmulticast mode [ 111.135093][ T5940] syz.0.31 (5940) used obsolete PPPIOCDETACH ioctl [ 115.411045][ T5977] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.42'. [ 116.800817][ T5996] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.47'. [ 117.183535][ T5992] netlink: 'syz.3.47': attribute type 10 has an invalid length. [ 117.218420][ T5992] hsr_slave_0: left promiscuous mode [ 117.268579][ T5992] hsr_slave_1: left promiscuous mode [ 122.176293][ T6041] netlink: 'syz.3.61': attribute type 2 has an invalid length. [ 122.260122][ T6041] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.61'. [ 122.730606][ T6053] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.64'. [ 122.932900][ T6058] netlink: 'syz.0.65': attribute type 21 has an invalid length. [ 123.071775][ T6052] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.65'. [ 125.058449][ T6094] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.78'. [ 126.898809][ T6143] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.94'. [ 127.822209][ T6149] bridge_slave_1: left allmulticast mode [ 127.879684][ T6149] bridge_slave_1: left promiscuous mode [ 127.886180][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.929352][ T6149] bridge_slave_0: left allmulticast mode [ 127.938219][ T6149] bridge_slave_0: left promiscuous mode [ 127.945089][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.051292][ T6186] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.108'. [ 130.883911][ T6199] bridge_slave_1: left allmulticast mode [ 130.895177][ T6199] bridge_slave_1: left promiscuous mode [ 131.311771][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.714607][ T6199] bridge_slave_0: left allmulticast mode [ 131.721268][ T6199] bridge_slave_0: left promiscuous mode [ 131.782265][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.903358][ T6214] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.117'. [ 131.926682][ T6214] openvswitch: netlink: IP tunnel dst address not specified [ 134.090121][ T6225] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.126'. [ 134.148670][ T6225] openvswitch: netlink: IP tunnel dst address not specified [ 134.742979][ T6249] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.122'. [ 135.592312][ T6261] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.131'. [ 135.787134][ T6265] bridge_slave_1: left allmulticast mode [ 135.798949][ T6265] bridge_slave_1: left promiscuous mode [ 135.831093][ T6260] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.137'. [ 135.856480][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.036813][ T6265] bridge_slave_0: left allmulticast mode [ 136.061740][ T6265] bridge_slave_0: left promiscuous mode [ 136.098184][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.423163][ T6298] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.141'. [ 138.580769][ T6295] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.140'. [ 138.629964][ T6295] openvswitch: netlink: IP tunnel dst address not specified [ 138.878197][ T6309] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.154'. [ 139.146798][ T6315] netlink: 'syz.0.147': attribute type 9 has an invalid length. [ 139.165263][ T6315] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.147'. [ 139.456469][ T6317] netlink: 'syz.0.147': attribute type 9 has an invalid length. [ 139.479301][ T6317] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.147'. [ 140.599487][ T6349] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.160'. [ 141.234700][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.259965][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.550532][ T6369] netlink: 'syz.2.169': attribute type 9 has an invalid length. [ 141.567494][ T6369] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.169'. [ 141.691615][ T6370] netlink: 'syz.2.169': attribute type 9 has an invalid length. [ 141.720999][ T6370] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.169'. [ 141.779281][ T6373] delete_channel: no stack [ 142.665579][ T6393] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.176'. [ 144.292244][ T6411] delete_channel: no stack [ 144.907132][ T6432] netlink: 'syz.3.185': attribute type 9 has an invalid length. [ 144.929418][ T6432] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.185'. [ 145.131435][ T6436] netlink: 'syz.3.185': attribute type 9 has an invalid length. [ 145.157138][ T6436] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.185'. [ 145.859695][ T6449] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.194'. [ 146.257764][ T6456] netlink: 'syz.0.207': attribute type 9 has an invalid length. [ 146.284003][ T6456] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.207'. [ 146.453436][ T6457] delete_channel: no stack [ 147.660645][ T6481] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.206'. [ 148.235813][ T6491] netlink: 'syz.3.210': attribute type 13 has an invalid length. [ 148.250063][ T6496] netlink: 'syz.0.212': attribute type 9 has an invalid length. [ 148.250123][ T6496] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.212'. [ 148.284662][ T6491] netlink: 'syz.3.210': attribute type 58 has an invalid length. [ 148.298663][ T6491] netlink: 152 bytes leftover after parsing attributes in process `syz.3.210'. [ 148.321136][ T6492] netlink: 'syz.3.210': attribute type 10 has an invalid length. [ 149.072815][ T6508] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.217'. [ 150.923053][ T6547] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.227'. [ 151.007640][ T6543] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.229'. [ 153.152283][ T6583] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.241'. [ 154.505244][ T6610] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.255'. [ 155.628963][ T6637] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.264'. [ 158.962385][ T6664] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.274'. [ 162.176350][ T6732] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.292'. [ 162.470968][ T6736] netlink: 'syz.0.292': attribute type 10 has an invalid length. [ 162.486053][ T6736] hsr_slave_0: left promiscuous mode [ 162.541073][ T6736] hsr_slave_1: left promiscuous mode [ 175.334293][ T6857] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.331'. [ 177.040562][ T6891] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.342'. [ 180.956827][ T6988] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.378'. [ 184.447519][ T7035] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.392'. [ 186.036212][ T7071] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.404'. [ 186.971542][ T7089] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.412'. [ 196.216154][ T7210] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.449'. [ 196.890736][ T7220] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.459'. [ 197.947815][ T7251] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.461'. [ 201.946698][ T7284] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.472'. [ 202.674394][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.681097][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.000643][ T7318] netlink: 'syz.3.481': attribute type 9 has an invalid length. [ 206.008431][ T7318] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.481'. [ 206.270705][ T7323] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.483'. [ 209.994695][ T7346] netlink: 'syz.0.492': attribute type 9 has an invalid length. [ 210.002731][ T7346] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.492'. [ 210.298646][ T7351] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.494'. [ 216.564726][ T7386] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.505'. [ 216.626590][ T7388] netlink: 'syz.2.504': attribute type 9 has an invalid length. [ 216.672498][ T7388] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.504'. [ 219.623621][ T7425] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.514'. [ 220.272351][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 220.274728][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 220.284640][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 220.291813][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 223.132540][ T7480] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.525'. [ 226.194332][ T7514] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.535'. [ 230.587952][ T7563] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.545'. [ 231.802133][ T7597] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.558'. [ 233.641840][ T7626] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.568'. [ 233.756938][ T7629] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.578'. [ 234.867286][ T7654] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.581'. [ 235.218318][ T7663] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.591'. [ 236.895983][ T7700] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.596'. [ 239.157172][ T7734] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.605'. [ 239.426472][ T7742] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.616'. [ 240.937996][ T7778] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.621'. [ 245.831260][ T7826] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.636'. [ 250.010919][ T7873] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.647'. [ 255.385380][ T7921] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.669'. [ 259.002294][ T7956] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.672'. [ 261.599180][ T7998] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.682'. [ 261.876432][ T8004] .¿: renamed from vlan0 (while UP) [ 263.275103][ T8067] netlink: 'syz.0.714': attribute type 2 has an invalid length. [ 264.125548][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.138897][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.797991][ T8089] .¿: renamed from vlan0 (while UP) [ 266.815518][ T8091] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.730'. [ 268.291234][ T8118] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.733'. [ 271.323923][ T8143] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.742'. [ 275.003698][ T8170] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.752'. [ 279.891073][ T8211] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.763'. [ 283.558488][ T8237] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.775'. [ 284.574845][ T8263] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.786'. [ 288.810864][ T8294] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.795'. [ 293.128729][ T8324] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.806'. [ 296.637493][ T8355] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.815'. [ 296.871412][ T8359] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.825'. [ 300.483103][ T8402] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.829'. [ 304.079016][ T8440] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.841'. [ 306.005563][ T8480] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.853'. [ 309.605943][ T8505] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.863'. [ 310.737107][ T8535] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.873'. [ 314.496932][ T8571] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.885'. [ 319.976272][ T8617] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.898'. [ 323.311235][ T8638] netlink: 16198 bytes leftover after parsing attributes in process `syz.3.907'. [ 325.556090][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.562776][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.007254][ T8674] netlink: 16198 bytes leftover after parsing attributes in process `syz.2.916'. [ 333.352642][ T8706] netlink: 16198 bytes leftover after parsing attributes in process `syz.1.925'. [ 335.544006][ T8750] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.939'. [ 336.799615][ T8784] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.950'. [ 340.677719][ T8817] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.963'. [ 343.587059][ T8862] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.975'. [ 344.591294][ T8891] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.986'. [ 348.129855][ T8922] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.996'. [ 351.833427][ T8952] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1007'. [ 353.454255][ T8992] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1019'. [ 357.543113][ T9027] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1028'. [ 361.552790][ T9076] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1040'. [ 366.398552][ T9145] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1056'. [ 368.637019][ T9175] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1065'. [ 371.081686][ T9208] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1075'. [ 372.804894][ T9240] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1086'. [ 374.975823][ T9275] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1096'. [ 376.861644][ T9314] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1108'. [ 378.378616][ T9343] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1118'. [ 386.574339][ T9489] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1162'. [ 387.004812][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.012268][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.844283][ T9531] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1173'. [ 395.345490][ T9582] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1192'. [ 395.839525][ T9592] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1196'. [ 403.089310][ T9634] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1199'. [ 410.952013][ T9678] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1211'. [ 415.621151][ T9716] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1220'. [ 418.352069][ T9757] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1231'. [ 421.368751][ T9819] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1242'. [ 427.160813][ T9877] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1254'. [ 428.798604][ T9913] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1267'. [ 430.163486][ T9952] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1278'. [ 431.239152][ T9977] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1289'. [ 432.911975][T10018] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1299'. [ 433.924514][T10044] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1309'. [ 435.922661][T10084] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1320'. [ 438.197710][T10139] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1333'. [ 448.460237][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.466832][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 490.279477][T10677] FAULT_INJECTION: forcing a failure. [ 490.279477][T10677] name failslab, interval 1, probability 0, space 0, times 1 [ 490.299467][T10677] CPU: 0 PID: 10677 Comm: syz.2.1489 Not tainted syzkaller #0 [ 490.307048][T10677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.317343][T10677] Call Trace: [ 490.320698][T10677] [ 490.323710][T10677] dump_stack_lvl+0x18c/0x250 [ 490.328617][T10677] ? show_regs_print_info+0x20/0x20 [ 490.333919][T10677] ? load_image+0x420/0x420 [ 490.338548][T10677] ? __might_sleep+0xe0/0xe0 [ 490.343232][T10677] ? __lock_acquire+0x7d80/0x7d80 [ 490.348359][T10677] should_fail_ex+0x394/0x4c0 [ 490.353149][T10677] should_failslab+0x9/0x20 [ 490.357729][T10677] slab_pre_alloc_hook+0x59/0x300 [ 490.362857][T10677] ? allocate_cgrp_cset_links+0xaa/0x320 [ 490.368564][T10677] __kmem_cache_alloc_node+0x53/0x250 [ 490.374034][T10677] ? allocate_cgrp_cset_links+0xaa/0x320 [ 490.379737][T10677] kmalloc_trace+0x2a/0xe0 [ 490.384236][T10677] allocate_cgrp_cset_links+0xaa/0x320 [ 490.389778][T10677] find_css_set+0xa12/0x15c0 [ 490.394470][T10677] ? trace_event_raw_event_lock+0x240/0x240 [ 490.400460][T10677] ? cgroup_migrate_prepare_dst+0x610/0x610 [ 490.406468][T10677] ? mark_lock+0x94/0x320 [ 490.410920][T10677] cgroup_migrate_prepare_dst+0x118/0x610 [ 490.416847][T10677] cgroup_attach_task+0x5a6/0x8e0 [ 490.422066][T10677] ? cgroup_attach_task+0x25d/0x8e0 [ 490.427361][T10677] ? cgroup_migrate_execute+0xf20/0xf20 [ 490.433032][T10677] ? cgroup_attach_permissions+0x346/0x9e0 [ 490.438939][T10677] ? revert_creds+0xae/0xc0 [ 490.443541][T10677] __cgroup_procs_write+0x23a/0x350 [ 490.448852][T10677] cgroup_threads_write+0x24/0x50 [ 490.453994][T10677] ? cgroup_threads_start+0x30/0x30 [ 490.459286][T10677] cgroup_file_write+0x2cd/0x6a0 [ 490.464314][T10677] ? kernfs_fop_write_iter+0x1dc/0x520 [ 490.469900][T10677] ? cgroup_seqfile_stop+0xd0/0xd0 [ 490.475098][T10677] ? __virt_addr_valid+0x10c/0x380 [ 490.480303][T10677] ? __virt_addr_valid+0x10c/0x380 [ 490.485528][T10677] ? cgroup_seqfile_stop+0xd0/0xd0 [ 490.490717][T10677] kernfs_fop_write_iter+0x3a4/0x520 [ 490.496118][T10677] vfs_write+0x474/0x9a0 [ 490.500646][T10677] ? file_end_write+0x250/0x250 [ 490.505600][T10677] ? __fget_files+0x3fc/0x460 [ 490.510417][T10677] ? __fdget_pos+0x2a3/0x330 [ 490.515078][T10677] ? ksys_write+0x74/0x260 [ 490.519578][T10677] ksys_write+0x151/0x260 [ 490.524001][T10677] ? __ia32_sys_read+0x90/0x90 [ 490.528859][T10677] ? lockdep_hardirqs_on+0x98/0x150 [ 490.534156][T10677] do_syscall_64+0x55/0xb0 [ 490.538656][T10677] ? clear_bhb_loop+0x40/0x90 [ 490.543418][T10677] ? clear_bhb_loop+0x40/0x90 [ 490.548181][T10677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.554271][T10677] RIP: 0033:0x7f2e8779de59 [ 490.558894][T10677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.578606][T10677] RSP: 002b:00007f2e859f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 490.587238][T10677] RAX: ffffffffffffffda RBX: 00007f2e87a25fa0 RCX: 00007f2e8779de59 [ 490.595286][T10677] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 000000000000000d [ 490.603339][T10677] RBP: 00007f2e859f6090 R08: 0000000000000000 R09: 0000000000000000 [ 490.611477][T10677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.619527][T10677] R13: 00007f2e87a26038 R14: 00007f2e87a25fa0 R15: 00007fff2d5dc468 [ 490.627750][T10677] [ 502.607516][T10786] netlink: 'syz.0.1517': attribute type 10 has an invalid length. [ 502.664523][T10786] veth0_macvtap: left promiscuous mode [ 503.084167][T10788] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1517'. [ 503.204964][T10788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.920744][T10825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.949174][T10828] netlink: 57923 bytes leftover after parsing attributes in process `syz.1.1528'. [ 507.968264][T10825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.992437][T10825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.001464][T10825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.218238][T10829] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1527'. [ 508.660490][T10840] Illegal XDP return value 4294967294 on prog (id 932) dev N/A, expect packet loss! [ 509.884312][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.894631][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.201042][T10860] netlink: 'syz.2.1535': attribute type 29 has an invalid length. [ 512.433216][T10860] netlink: 'syz.2.1535': attribute type 29 has an invalid length. [ 512.455839][T10863] netlink: 'syz.2.1535': attribute type 29 has an invalid length. [ 512.647407][T10860] netlink: 'syz.2.1535': attribute type 29 has an invalid length. [ 512.891147][T10869] netlink: 57923 bytes leftover after parsing attributes in process `syz.1.1537'. [ 517.715923][T10916] netlink: 57923 bytes leftover after parsing attributes in process `syz.3.1549'. [ 522.074067][T10963] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 522.118995][T10963] veth0_macvtap: left promiscuous mode [ 522.345939][T10960] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1560'. [ 522.405399][T10960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.681429][T10979] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1561'. [ 523.244703][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1562'. [ 523.268674][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1562'. [ 523.282224][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1562'. [ 523.302099][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1562'. [ 523.319150][T10986] FAULT_INJECTION: forcing a failure. [ 523.319150][T10986] name failslab, interval 1, probability 0, space 0, times 0 [ 523.335580][T10986] CPU: 0 PID: 10986 Comm: syz.0.1562 Not tainted syzkaller #0 [ 523.343136][T10986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.353270][T10986] Call Trace: [ 523.356610][T10986] [ 523.359607][T10986] dump_stack_lvl+0x18c/0x250 [ 523.364396][T10986] ? show_regs_print_info+0x20/0x20 [ 523.369691][T10986] ? load_image+0x420/0x420 [ 523.374320][T10986] should_fail_ex+0x394/0x4c0 [ 523.379083][T10986] should_failslab+0x9/0x20 [ 523.383867][T10986] slab_pre_alloc_hook+0x59/0x300 [ 523.388975][T10986] kmem_cache_alloc+0x5a/0x2c0 [ 523.393812][T10986] ? skb_clone+0x1eb/0x370 [ 523.398297][T10986] skb_clone+0x1eb/0x370 [ 523.402605][T10986] __netlink_deliver_tap+0x411/0x7f0 [ 523.408051][T10986] ? netlink_deliver_tap+0x2e/0x1b0 [ 523.413294][T10986] netlink_deliver_tap+0x19c/0x1b0 [ 523.418443][T10986] netlink_dump+0x95b/0xec0 [ 523.423027][T10986] ? netlink_lookup+0x200/0x200 [ 523.427923][T10986] ? slab_free_freelist_hook+0x130/0x1a0 [ 523.433679][T10986] ? netlink_recvmsg+0x5e7/0xe60 [ 523.438656][T10986] ? kmem_cache_free+0xf8/0x290 [ 523.443547][T10986] netlink_recvmsg+0x693/0xe60 [ 523.448382][T10986] ? netlink_sendmsg+0xbf0/0xbf0 [ 523.453401][T10986] ? aa_af_perm+0x330/0x330 [ 523.457953][T10986] ? __lock_acquire+0x1262/0x7d80 [ 523.463020][T10986] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 523.468345][T10986] ? security_socket_recvmsg+0x89/0xb0 [ 523.473856][T10986] ? netlink_sendmsg+0xbf0/0xbf0 [ 523.478921][T10986] ____sys_recvmsg+0x2bd/0x5d0 [ 523.483897][T10986] ? __sys_recvmsg_sock+0x50/0x50 [ 523.489006][T10986] ? import_iovec+0x73/0xa0 [ 523.493548][T10986] ___sys_recvmsg+0x214/0x590 [ 523.498264][T10986] ? __sys_recvmsg+0x2a0/0x2a0 [ 523.503079][T10986] ? ksys_write+0x1d2/0x260 [ 523.507628][T10986] ? __fget_files+0x3fc/0x460 [ 523.512397][T10986] __x64_sys_recvmsg+0x21e/0x2f0 [ 523.517463][T10986] ? ___sys_recvmsg+0x590/0x590 [ 523.522361][T10986] ? lockdep_hardirqs_on+0x98/0x150 [ 523.527597][T10986] do_syscall_64+0x55/0xb0 [ 523.532048][T10986] ? clear_bhb_loop+0x40/0x90 [ 523.536756][T10986] ? clear_bhb_loop+0x40/0x90 [ 523.541464][T10986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.547411][T10986] RIP: 0033:0x7ff8fef9de59 [ 523.551855][T10986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.571500][T10986] RSP: 002b:00007ff8ffda7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 523.579970][T10986] RAX: ffffffffffffffda RBX: 00007ff8ff225fa0 RCX: 00007ff8fef9de59 [ 523.587971][T10986] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 523.595971][T10986] RBP: 00007ff8ffda7090 R08: 0000000000000000 R09: 0000000000000000 [ 523.603977][T10986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.611976][T10986] R13: 00007ff8ff226038 R14: 00007ff8ff225fa0 R15: 00007ffded5b3298 [ 523.619994][T10986] [ 524.992767][T11018] TCP: TCP_TX_DELAY enabled [ 525.080347][T11018] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1577'. [ 530.643284][T11117] netlink: 'syz.0.1603': attribute type 29 has an invalid length. [ 530.666552][T11117] netlink: 'syz.0.1603': attribute type 29 has an invalid length. [ 530.710058][T11115] netlink: 'syz.0.1603': attribute type 29 has an invalid length. [ 530.762226][T11115] netlink: 'syz.0.1603': attribute type 29 has an invalid length. [ 530.799810][T11117] netlink: 'syz.0.1603': attribute type 29 has an invalid length. [ 531.632789][T11129] netlink: 'syz.3.1608': attribute type 46 has an invalid length. [ 531.680744][T11130] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1608'. [ 531.801274][T11132] FAULT_INJECTION: forcing a failure. [ 531.801274][T11132] name failslab, interval 1, probability 0, space 0, times 0 [ 531.829616][T11132] CPU: 1 PID: 11132 Comm: syz.1.1609 Not tainted syzkaller #0 [ 531.837219][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 531.847356][T11132] Call Trace: [ 531.850666][T11132] [ 531.853625][T11132] dump_stack_lvl+0x18c/0x250 [ 531.858386][T11132] ? show_regs_print_info+0x20/0x20 [ 531.863636][T11132] ? load_image+0x420/0x420 [ 531.868179][T11132] ? __might_sleep+0xe0/0xe0 [ 531.872803][T11132] ? __lock_acquire+0x7d80/0x7d80 [ 531.877950][T11132] should_fail_ex+0x394/0x4c0 [ 531.882671][T11132] should_failslab+0x9/0x20 [ 531.887212][T11132] slab_pre_alloc_hook+0x59/0x300 [ 531.892288][T11132] ? kvmalloc_node+0x70/0x180 [ 531.897003][T11132] ? kvmalloc_node+0x70/0x180 [ 531.901721][T11132] __kmem_cache_alloc_node+0x53/0x250 [ 531.907150][T11132] ? kvmalloc_node+0x70/0x180 [ 531.911871][T11132] __kmalloc_node+0xa6/0x240 [ 531.916506][T11132] kvmalloc_node+0x70/0x180 [ 531.921072][T11132] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 531.926488][T11132] ? 0xffffffffa0004740 [ 531.930675][T11132] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 531.936613][T11132] ? xdp_convert_md_to_buff+0x330/0x330 [ 531.942221][T11132] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 531.948520][T11132] ? _copy_from_user+0xa5/0xe0 [ 531.953319][T11132] ? bpf_test_init+0x119/0x140 [ 531.958107][T11132] ? xdp_convert_md_to_buff+0x5b/0x330 [ 531.963621][T11132] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 531.969028][T11132] ? __lock_acquire+0x7d80/0x7d80 [ 531.974097][T11132] ? dev_put+0x80/0x80 [ 531.978205][T11132] ? dev_put+0x80/0x80 [ 531.982305][T11132] bpf_prog_test_run+0x31f/0x390 [ 531.987370][T11132] __sys_bpf+0x49d/0x890 [ 531.991651][T11132] ? bpf_link_show_fdinfo+0x390/0x390 [ 531.997095][T11132] ? lock_chain_count+0x20/0x20 [ 532.001990][T11132] __x64_sys_bpf+0x7c/0x90 [ 532.006529][T11132] do_syscall_64+0x55/0xb0 [ 532.010995][T11132] ? clear_bhb_loop+0x40/0x90 [ 532.015706][T11132] ? clear_bhb_loop+0x40/0x90 [ 532.020416][T11132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.026346][T11132] RIP: 0033:0x7fbab9d9de59 [ 532.030803][T11132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.050464][T11132] RSP: 002b:00007fbabac6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.059087][T11132] RAX: ffffffffffffffda RBX: 00007fbaba025fa0 RCX: 00007fbab9d9de59 [ 532.067178][T11132] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 532.075199][T11132] RBP: 00007fbabac6c090 R08: 0000000000000000 R09: 0000000000000000 [ 532.083202][T11132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.091201][T11132] R13: 00007fbaba026038 R14: 00007fbaba025fa0 R15: 00007ffda3637a08 [ 532.099332][T11132] [ 533.339258][T11148] FAULT_INJECTION: forcing a failure. [ 533.339258][T11148] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 533.365384][T11148] CPU: 1 PID: 11148 Comm: syz.1.1612 Not tainted syzkaller #0 [ 533.372952][T11148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 533.383046][T11148] Call Trace: [ 533.386362][T11148] [ 533.389427][T11148] dump_stack_lvl+0x18c/0x250 [ 533.394181][T11148] ? show_regs_print_info+0x20/0x20 [ 533.399471][T11148] ? load_image+0x420/0x420 [ 533.404053][T11148] ? __might_fault+0xaa/0x120 [ 533.408804][T11148] ? __lock_acquire+0x7d80/0x7d80 [ 533.413907][T11148] should_fail_ex+0x394/0x4c0 [ 533.418671][T11148] _copy_from_iter+0x1cd/0x1290 [ 533.423603][T11148] ? rep_movs_alternative+0x4a/0x90 [ 533.428884][T11148] ? copyout_mc+0x70/0x70 [ 533.433305][T11148] ? copyout_mc+0x70/0x70 [ 533.437979][T11148] ? __virt_addr_valid+0x10c/0x380 [ 533.443172][T11148] ? page_copy_sane+0x16a/0x270 [ 533.448120][T11148] copy_page_from_iter+0x7b/0x100 [ 533.453235][T11148] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 533.459127][T11148] tun_get_user+0xc84/0x3d70 [ 533.463783][T11148] ? aa_file_perm+0x3e3/0xee0 [ 533.468532][T11148] ? rcu_read_unlock+0xa0/0xa0 [ 533.473376][T11148] ? tun_get+0x1c/0x2e0 [ 533.477620][T11148] ? __lock_acquire+0x7d80/0x7d80 [ 533.482715][T11148] ? tun_get+0x1c/0x2e0 [ 533.486948][T11148] tun_chr_write_iter+0x119/0x200 [ 533.492046][T11148] vfs_write+0x474/0x9a0 [ 533.496401][T11148] ? file_end_write+0x250/0x250 [ 533.501404][T11148] ? __fget_files+0x3fc/0x460 [ 533.506225][T11148] ? __fdget_pos+0x1d8/0x330 [ 533.510848][T11148] ? ksys_write+0x74/0x260 [ 533.515305][T11148] ksys_write+0x151/0x260 [ 533.519727][T11148] ? __ia32_sys_read+0x90/0x90 [ 533.524535][T11148] ? lockdep_hardirqs_on+0x98/0x150 [ 533.529779][T11148] do_syscall_64+0x55/0xb0 [ 533.534234][T11148] ? clear_bhb_loop+0x40/0x90 [ 533.538953][T11148] ? clear_bhb_loop+0x40/0x90 [ 533.543671][T11148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.549615][T11148] RIP: 0033:0x7fbab9d9de59 [ 533.554085][T11148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.573733][T11148] RSP: 002b:00007fbabac6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 533.582178][T11148] RAX: ffffffffffffffda RBX: 00007fbaba025fa0 RCX: 00007fbab9d9de59 [ 533.590181][T11148] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 533.598186][T11148] RBP: 00007fbabac6c090 R08: 0000000000000000 R09: 0000000000000000 [ 533.606216][T11148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.614307][T11148] R13: 00007fbaba026038 R14: 00007fbaba025fa0 R15: 00007ffda3637a08 [ 533.622331][T11148] [ 534.488846][T11173] netlink: 'syz.3.1621': attribute type 10 has an invalid length. [ 534.536842][T11173] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1621'. [ 534.580134][T11173] batadv_slave_1: entered promiscuous mode [ 534.586344][T11173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.596934][T11173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.629285][T11174] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1621'. [ 534.807698][T11179] FAULT_INJECTION: forcing a failure. [ 534.807698][T11179] name failslab, interval 1, probability 0, space 0, times 0 [ 534.849788][T11179] CPU: 0 PID: 11179 Comm: syz.2.1623 Not tainted syzkaller #0 [ 534.857369][T11179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 534.867572][T11179] Call Trace: [ 534.870902][T11179] [ 534.873902][T11179] dump_stack_lvl+0x18c/0x250 [ 534.878664][T11179] ? show_regs_print_info+0x20/0x20 [ 534.883940][T11179] ? load_image+0x420/0x420 [ 534.888510][T11179] ? __might_sleep+0xe0/0xe0 [ 534.893166][T11179] ? __lock_acquire+0x7d80/0x7d80 [ 534.898253][T11179] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 534.903964][T11179] should_fail_ex+0x394/0x4c0 [ 534.908755][T11179] should_failslab+0x9/0x20 [ 534.913329][T11179] slab_pre_alloc_hook+0x59/0x300 [ 534.918405][T11179] kmem_cache_alloc_node+0x5e/0x310 [ 534.923664][T11179] ? __alloc_skb+0x103/0x2c0 [ 534.928345][T11179] __alloc_skb+0x103/0x2c0 [ 534.932821][T11179] __ip6_append_data+0x2be0/0x3d40 [ 534.937998][T11179] ? rawv6_send_hdrinc+0x1660/0x1660 [ 534.943426][T11179] ? ip6_setup_cork+0xff0/0xff0 [ 534.948320][T11179] ip6_append_data+0x1b0/0x350 [ 534.953128][T11179] ? rawv6_send_hdrinc+0x1660/0x1660 [ 534.958544][T11179] rawv6_sendmsg+0x1229/0x1740 [ 534.963359][T11179] ? compat_rawv6_ioctl+0x70/0x70 [ 534.968539][T11179] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 534.975112][T11179] ? inet_sendmsg+0x7e/0x2a0 [ 534.979774][T11179] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 534.985104][T11179] ? inet_send_prepare+0x250/0x250 [ 534.990427][T11179] ____sys_sendmsg+0x61b/0x980 [ 534.995254][T11179] ? __asan_memset+0x22/0x40 [ 534.999885][T11179] ? __sys_sendmsg_sock+0x30/0x30 [ 535.004972][T11179] ? __import_iovec+0x5f2/0x850 [ 535.009863][T11179] ? import_iovec+0x73/0xa0 [ 535.014496][T11179] ___sys_sendmsg+0x2a6/0x360 [ 535.019242][T11179] ? __sys_sendmsg+0x2b0/0x2b0 [ 535.024083][T11179] __se_sys_sendmsg+0x1d0/0x2c0 [ 535.028977][T11179] ? __x64_sys_sendmsg+0x80/0x80 [ 535.033971][T11179] do_syscall_64+0x55/0xb0 [ 535.038433][T11179] ? clear_bhb_loop+0x40/0x90 [ 535.043141][T11179] ? clear_bhb_loop+0x40/0x90 [ 535.047849][T11179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.053779][T11179] RIP: 0033:0x7f2e8779de59 [ 535.058250][T11179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.077932][T11179] RSP: 002b:00007f2e859f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.086381][T11179] RAX: ffffffffffffffda RBX: 00007f2e87a25fa0 RCX: 00007f2e8779de59 [ 535.094388][T11179] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000007 [ 535.102388][T11179] RBP: 00007f2e859f6090 R08: 0000000000000000 R09: 0000000000000000 [ 535.110384][T11179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.118411][T11179] R13: 00007f2e87a26038 R14: 00007f2e87a25fa0 R15: 00007fff2d5dc468 [ 535.126423][T11179] [ 535.161591][T11184] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1624'. [ 536.188277][T11215] FAULT_INJECTION: forcing a failure. [ 536.188277][T11215] name failslab, interval 1, probability 0, space 0, times 0 [ 536.221139][T11215] CPU: 0 PID: 11215 Comm: syz.0.1633 Not tainted syzkaller #0 [ 536.228706][T11215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.238831][T11215] Call Trace: [ 536.242169][T11215] [ 536.245165][T11215] dump_stack_lvl+0x18c/0x250 [ 536.249940][T11215] ? show_regs_print_info+0x20/0x20 [ 536.255217][T11215] ? load_image+0x420/0x420 [ 536.259799][T11215] ? __lock_acquire+0x7d80/0x7d80 [ 536.264888][T11215] ? trace_call_bpf+0xc3/0x6c0 [ 536.269768][T11215] ? trace_call_bpf+0xc3/0x6c0 [ 536.274614][T11215] should_fail_ex+0x394/0x4c0 [ 536.279391][T11215] should_failslab+0x9/0x20 [ 536.283972][T11215] slab_pre_alloc_hook+0x59/0x300 [ 536.289077][T11215] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 536.295233][T11215] ? bpf_test_init+0x9f/0x140 [ 536.299976][T11215] ? bpf_test_init+0x9f/0x140 [ 536.304743][T11215] __kmem_cache_alloc_node+0x53/0x250 [ 536.310231][T11215] ? bpf_test_init+0x9f/0x140 [ 536.314981][T11215] __kmalloc+0xa7/0x240 [ 536.319212][T11215] bpf_test_init+0x9f/0x140 [ 536.323786][T11215] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 536.329225][T11215] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 536.336514][T11215] ? dev_put+0x80/0x80 [ 536.340661][T11215] ? bpf_prog_test_run+0x313/0x390 [ 536.345845][T11215] ? dev_put+0x80/0x80 [ 536.349979][T11215] bpf_prog_test_run+0x31f/0x390 [ 536.354995][T11215] __sys_bpf+0x49d/0x890 [ 536.359312][T11215] ? bpf_link_show_fdinfo+0x390/0x390 [ 536.364765][T11215] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.371053][T11215] __x64_sys_bpf+0x7c/0x90 [ 536.375549][T11215] do_syscall_64+0x55/0xb0 [ 536.380048][T11215] ? clear_bhb_loop+0x40/0x90 [ 536.384789][T11215] ? clear_bhb_loop+0x40/0x90 [ 536.389530][T11215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.395517][T11215] RIP: 0033:0x7ff8fef9de59 [ 536.399989][T11215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.419658][T11215] RSP: 002b:00007ff8ffda7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 536.428226][T11215] RAX: ffffffffffffffda RBX: 00007ff8ff225fa0 RCX: 00007ff8fef9de59 [ 536.436262][T11215] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 536.444307][T11215] RBP: 00007ff8ffda7090 R08: 0000000000000000 R09: 0000000000000000 [ 536.452360][T11215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.460395][T11215] R13: 00007ff8ff226038 R14: 00007ff8ff225fa0 R15: 00007ffded5b3298 [ 536.468453][T11215] [ 537.518586][T11246] FAULT_INJECTION: forcing a failure. [ 537.518586][T11246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.539628][T11246] CPU: 1 PID: 11246 Comm: syz.2.1641 Not tainted syzkaller #0 [ 537.547186][T11246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 537.557292][T11246] Call Trace: [ 537.560621][T11246] [ 537.563599][T11246] dump_stack_lvl+0x18c/0x250 [ 537.568343][T11246] ? show_regs_print_info+0x20/0x20 [ 537.573613][T11246] ? load_image+0x420/0x420 [ 537.578184][T11246] ? __lock_acquire+0x7d80/0x7d80 [ 537.583327][T11246] ? snprintf+0xe9/0x140 [ 537.587672][T11246] should_fail_ex+0x394/0x4c0 [ 537.592419][T11246] _copy_to_user+0x2f/0xa0 [ 537.596891][T11246] simple_read_from_buffer+0xe7/0x150 [ 537.602341][T11246] proc_fail_nth_read+0x1e8/0x260 [ 537.607430][T11246] ? proc_fault_inject_write+0x360/0x360 [ 537.613160][T11246] ? fsnotify_perm+0x271/0x5e0 [ 537.617984][T11246] ? proc_fault_inject_write+0x360/0x360 [ 537.623691][T11246] vfs_read+0x298/0x990 [ 537.627920][T11246] ? kernel_read+0x1e0/0x1e0 [ 537.632581][T11246] ? __fget_files+0x28/0x460 [ 537.637240][T11246] ? __fget_files+0x3fc/0x460 [ 537.642009][T11246] ? __fdget_pos+0x2a3/0x330 [ 537.646656][T11246] ? ksys_read+0x74/0x260 [ 537.651053][T11246] ksys_read+0x151/0x260 [ 537.655368][T11246] ? vfs_write+0x9a0/0x9a0 [ 537.659857][T11246] ? lockdep_hardirqs_on+0x98/0x150 [ 537.665137][T11246] do_syscall_64+0x55/0xb0 [ 537.669748][T11246] ? clear_bhb_loop+0x40/0x90 [ 537.674474][T11246] ? clear_bhb_loop+0x40/0x90 [ 537.679188][T11246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.685140][T11246] RIP: 0033:0x7f2e8775e68e [ 537.689590][T11246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 537.709248][T11246] RSP: 002b:00007f2e859d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 537.717696][T11246] RAX: ffffffffffffffda RBX: 00007f2e859d56c0 RCX: 00007f2e8775e68e [ 537.725711][T11246] RDX: 000000000000000f RSI: 00007f2e859d50a0 RDI: 0000000000000007 [ 537.733802][T11246] RBP: 00007f2e859d5090 R08: 0000000000000000 R09: 0000000000000000 [ 537.741808][T11246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.749825][T11246] R13: 00007f2e87a26128 R14: 00007f2e87a26090 R15: 00007fff2d5dc468 [ 537.757879][T11246] [ 538.179801][T11264] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1646'. [ 538.503085][T11273] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1651'. [ 539.523828][T11291] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1654'. [ 539.958700][T11291] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 540.297609][T11308] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1659'. [ 540.440269][T11313] netlink: 'syz.2.1660': attribute type 1 has an invalid length. [ 540.452256][T11313] netlink: 'syz.2.1660': attribute type 3 has an invalid length. [ 540.486918][T11313] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1660'. [ 540.674551][T11320] netlink: 'syz.3.1664': attribute type 9 has an invalid length. [ 540.698947][T11320] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1664'. [ 543.018351][T11356] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1674'. [ 543.857313][T11368] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1684'. [ 545.040137][T11383] FAULT_INJECTION: forcing a failure. [ 545.040137][T11383] name failslab, interval 1, probability 0, space 0, times 0 [ 545.057022][T11383] CPU: 1 PID: 11383 Comm: syz.1.1682 Not tainted syzkaller #0 [ 545.064592][T11383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.074778][T11383] Call Trace: [ 545.078103][T11383] [ 545.081110][T11383] dump_stack_lvl+0x18c/0x250 [ 545.085857][T11383] ? show_regs_print_info+0x20/0x20 [ 545.091289][T11383] ? load_image+0x420/0x420 [ 545.095850][T11383] ? __might_sleep+0xe0/0xe0 [ 545.100502][T11383] ? __lock_acquire+0x7d80/0x7d80 [ 545.105583][T11383] should_fail_ex+0x394/0x4c0 [ 545.110324][T11383] should_failslab+0x9/0x20 [ 545.114887][T11383] slab_pre_alloc_hook+0x59/0x300 [ 545.120009][T11383] ? __lock_acquire+0x7d80/0x7d80 [ 545.125086][T11383] kmem_cache_alloc_node+0x5e/0x310 [ 545.130341][T11383] ? __alloc_skb+0x103/0x2c0 [ 545.134997][T11383] __alloc_skb+0x103/0x2c0 [ 545.139517][T11383] netlink_sendmsg+0x66a/0xbf0 [ 545.144384][T11383] ? netlink_getsockopt+0x590/0x590 [ 545.149736][T11383] ? apparmor_socket_sendmsg+0x8e/0x330 [ 545.155334][T11383] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 545.160674][T11383] ? security_socket_sendmsg+0x80/0xa0 [ 545.166236][T11383] ? netlink_getsockopt+0x590/0x590 [ 545.171507][T11383] ____sys_sendmsg+0x61b/0x980 [ 545.176338][T11383] ? __asan_memset+0x22/0x40 [ 545.180986][T11383] ? __sys_sendmsg_sock+0x30/0x30 [ 545.186073][T11383] ? __import_iovec+0x5f2/0x850 [ 545.190994][T11383] ? import_iovec+0x73/0xa0 [ 545.195586][T11383] ___sys_sendmsg+0x2a6/0x360 [ 545.200335][T11383] ? get_pid_task+0x20/0x1e0 [ 545.204995][T11383] ? __sys_sendmsg+0x2b0/0x2b0 [ 545.209933][T11383] ? __lock_acquire+0x7d80/0x7d80 [ 545.215084][T11383] __se_sys_sendmsg+0x1d0/0x2c0 [ 545.220013][T11383] ? __x64_sys_sendmsg+0x80/0x80 [ 545.225028][T11383] ? lockdep_hardirqs_on+0x98/0x150 [ 545.230284][T11383] do_syscall_64+0x55/0xb0 [ 545.234756][T11383] ? clear_bhb_loop+0x40/0x90 [ 545.239502][T11383] ? clear_bhb_loop+0x40/0x90 [ 545.244237][T11383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.250194][T11383] RIP: 0033:0x7fbab9d9de59 [ 545.254661][T11383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.274325][T11383] RSP: 002b:00007fbabac6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.282853][T11383] RAX: ffffffffffffffda RBX: 00007fbaba025fa0 RCX: 00007fbab9d9de59 [ 545.290878][T11383] RDX: 0000000000008084 RSI: 0000200000000000 RDI: 0000000000000003 [ 545.298902][T11383] RBP: 00007fbabac6c090 R08: 0000000000000000 R09: 0000000000000000 [ 545.306927][T11383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.315032][T11383] R13: 00007fbaba026038 R14: 00007fbaba025fa0 R15: 00007ffda3637a08 [ 545.323058][T11383] [ 545.801987][T11396] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1686'. [ 546.152855][T11403] netlink: 'syz.1.1688': attribute type 3 has an invalid length. [ 546.160776][T11403] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1688'. [ 552.792327][T11432] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1698'. [ 553.489070][T11442] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1699'. [ 554.451451][T11462] FAULT_INJECTION: forcing a failure. [ 554.451451][T11462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.497536][T11462] CPU: 1 PID: 11462 Comm: syz.2.1705 Not tainted syzkaller #0 [ 554.505124][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.515425][T11462] Call Trace: [ 554.518787][T11462] [ 554.521785][T11462] dump_stack_lvl+0x18c/0x250 [ 554.526644][T11462] ? show_regs_print_info+0x20/0x20 [ 554.531920][T11462] ? load_image+0x420/0x420 [ 554.536504][T11462] ? __might_fault+0xaa/0x120 [ 554.541251][T11462] ? __lock_acquire+0x7d80/0x7d80 [ 554.546374][T11462] should_fail_ex+0x394/0x4c0 [ 554.551137][T11462] _copy_from_iter+0x1cd/0x1290 [ 554.556168][T11462] ? copyout_mc+0x70/0x70 [ 554.560614][T11462] ? verify_lock_unused+0x140/0x140 [ 554.565886][T11462] ? release_sock+0x2f/0x1c0 [ 554.570534][T11462] ? reacquire_held_locks+0x31f/0x5c0 [ 554.575965][T11462] ? __check_object_size+0x8a/0xa40 [ 554.581216][T11462] ? ping_common_sendmsg+0x97/0x2a0 [ 554.586611][T11462] ping_common_sendmsg+0xbc/0x2a0 [ 554.591705][T11462] ping_v6_sendmsg+0x1fd/0x1130 [ 554.596630][T11462] ? ping_v6_pre_connect+0x30/0x30 [ 554.601805][T11462] ? perf_trace_preemptirq_template+0xac/0x330 [ 554.608040][T11462] ? inet_sendmsg+0x10d/0x2a0 [ 554.612785][T11462] ? __local_bh_enable_ip+0x13a/0x1c0 [ 554.618213][T11462] ? lockdep_hardirqs_on+0x98/0x150 [ 554.623492][T11462] ? _local_bh_enable+0xa0/0xa0 [ 554.628454][T11462] ? do_raw_spin_unlock+0x121/0x230 [ 554.633841][T11462] ? inet_sendmsg+0x10d/0x2a0 [ 554.638592][T11462] ? inet_sendmsg+0x10d/0x2a0 [ 554.643332][T11462] ? inet_send_prepare+0x250/0x250 [ 554.648513][T11462] ____sys_sendmsg+0x61b/0x980 [ 554.653356][T11462] ? __asan_memset+0x22/0x40 [ 554.658020][T11462] ? __sys_sendmsg_sock+0x30/0x30 [ 554.663109][T11462] ? __import_iovec+0x5f2/0x850 [ 554.668046][T11462] ? import_iovec+0x73/0xa0 [ 554.672630][T11462] ___sys_sendmsg+0x2a6/0x360 [ 554.677402][T11462] ? get_pid_task+0x20/0x1e0 [ 554.682091][T11462] ? __sys_sendmsg+0x2b0/0x2b0 [ 554.686946][T11462] ? __lock_acquire+0x7d80/0x7d80 [ 554.692053][T11462] __se_sys_sendmsg+0x1d0/0x2c0 [ 554.696979][T11462] ? __x64_sys_sendmsg+0x80/0x80 [ 554.702012][T11462] ? lockdep_hardirqs_on+0x98/0x150 [ 554.707343][T11462] do_syscall_64+0x55/0xb0 [ 554.711836][T11462] ? clear_bhb_loop+0x40/0x90 [ 554.716581][T11462] ? clear_bhb_loop+0x40/0x90 [ 554.721323][T11462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.727280][T11462] RIP: 0033:0x7f2e8779de59 [ 554.731786][T11462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.751547][T11462] RSP: 002b:00007f2e859d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.760064][T11462] RAX: ffffffffffffffda RBX: 00007f2e87a26090 RCX: 00007f2e8779de59 [ 554.768095][T11462] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 000000000000000e [ 554.776125][T11462] RBP: 00007f2e859d5090 R08: 0000000000000000 R09: 0000000000000000 [ 554.784161][T11462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.792196][T11462] R13: 00007f2e87a26128 R14: 00007f2e87a26090 R15: 00007fff2d5dc468 [ 554.800251][T11462] [ 555.818106][T11476] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1709'. [ 558.210793][T11483] FAULT_INJECTION: forcing a failure. [ 558.210793][T11483] name failslab, interval 1, probability 0, space 0, times 0 [ 558.230377][T11483] CPU: 1 PID: 11483 Comm: syz.3.1710 Not tainted syzkaller #0 [ 558.237962][T11483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 558.248077][T11483] Call Trace: [ 558.251417][T11483] [ 558.254395][T11483] dump_stack_lvl+0x18c/0x250 [ 558.259145][T11483] ? show_regs_print_info+0x20/0x20 [ 558.264421][T11483] ? load_image+0x420/0x420 [ 558.269000][T11483] ? mark_lock+0x94/0x320 [ 558.273393][T11483] ? verify_lock_unused+0x140/0x140 [ 558.278652][T11483] should_fail_ex+0x394/0x4c0 [ 558.283393][T11483] should_failslab+0x9/0x20 [ 558.287953][T11483] slab_pre_alloc_hook+0x59/0x300 [ 558.293042][T11483] ? lockdep_hardirqs_on+0x98/0x150 [ 558.298432][T11483] ? ___neigh_create+0x6f4/0x23d0 [ 558.303520][T11483] ? ___neigh_create+0x6f4/0x23d0 [ 558.308685][T11483] __kmem_cache_alloc_node+0x53/0x250 [ 558.314739][T11483] ? ___neigh_create+0x6f4/0x23d0 [ 558.319832][T11483] __kmalloc+0xa7/0x240 [ 558.324248][T11483] ___neigh_create+0x6f4/0x23d0 [ 558.329201][T11483] ? __ipv6_neigh_lookup_noref+0x5a0/0x7d0 [ 558.335082][T11483] ip6_finish_output2+0x156d/0x1620 [ 558.340363][T11483] ? ip6_finish_output2+0x642/0x1620 [ 558.345809][T11483] ? nf_hook+0x390/0x390 [ 558.350087][T11483] ? ip6_mtu+0x321/0x3f0 [ 558.354464][T11483] ? ip6_finish_output+0x567/0x7f0 [ 558.359616][T11483] ? ip6_send_skb+0x10a/0x380 [ 558.364334][T11483] ip6_send_skb+0x1cd/0x380 [ 558.369139][T11483] udp_v6_send_skb+0xbd8/0x1810 [ 558.374252][T11483] udp_v6_push_pending_frames+0x133/0x220 [ 558.380024][T11483] udpv6_sendmsg+0xdd8/0x2350 [ 558.384743][T11483] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 558.389683][T11483] ? __might_sleep+0xe0/0xe0 [ 558.394333][T11483] ? udp_v6_early_demux+0xf90/0xf90 [ 558.399586][T11483] ? aa_af_perm+0x330/0x330 [ 558.404152][T11483] ? sock_rps_record_flow+0x19/0x3f0 [ 558.409481][T11483] ? inet_send_prepare+0x5b/0x250 [ 558.414739][T11483] ? inet6_sendmsg+0x5f/0xd0 [ 558.419385][T11483] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 558.424658][T11483] ____sys_sendmsg+0x61b/0x980 [ 558.429480][T11483] ? __asan_memset+0x22/0x40 [ 558.434122][T11483] ? __sys_sendmsg_sock+0x30/0x30 [ 558.439276][T11483] ? __import_iovec+0x3fa/0x850 [ 558.444186][T11483] ? import_iovec+0x73/0xa0 [ 558.448734][T11483] ___sys_sendmsg+0x2a6/0x360 [ 558.453459][T11483] ? __sys_sendmsg+0x2b0/0x2b0 [ 558.458380][T11483] ? trace_call_bpf+0xc3/0x6c0 [ 558.463209][T11483] __se_sys_sendmsg+0x1d0/0x2c0 [ 558.468118][T11483] ? perf_trace_preemptirq_template+0x269/0x330 [ 558.474408][T11483] ? __x64_sys_sendmsg+0x80/0x80 [ 558.479419][T11483] ? lockdep_hardirqs_on+0x98/0x150 [ 558.484662][T11483] do_syscall_64+0x55/0xb0 [ 558.489119][T11483] ? clear_bhb_loop+0x40/0x90 [ 558.493830][T11483] ? clear_bhb_loop+0x40/0x90 [ 558.498616][T11483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.504554][T11483] RIP: 0033:0x7f9d6ef9de59 [ 558.509030][T11483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.528675][T11483] RSP: 002b:00007f9d6fef3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.537127][T11483] RAX: ffffffffffffffda RBX: 00007f9d6f226090 RCX: 00007f9d6ef9de59 [ 558.545132][T11483] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000009 [ 558.553141][T11483] RBP: 00007f9d6fef3090 R08: 0000000000000000 R09: 0000000000000000 [ 558.561231][T11483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.569237][T11483] R13: 00007f9d6f226128 R14: 00007f9d6f226090 R15: 00007ffc3c428cb8 [ 558.577261][T11483] [ 562.790743][T11514] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1719'. [ 562.824862][T11511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.837857][T11511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.500017][T11543] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1729'. [ 565.295342][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 565.570612][T11556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1733'. [ 565.596248][T11556] netlink: 'syz.3.1733': attribute type 10 has an invalid length. [ 565.611922][T11556] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1733'. [ 567.611155][T11570] netlink: 'syz.1.1744': attribute type 3 has an invalid length. [ 567.618991][T11570] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1744'. [ 571.226219][T11595] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1740'. [ 571.304540][T11599] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1750'. [ 571.340919][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.347476][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.512504][T11604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.539974][T11604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.576428][T11604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.588476][T11604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.283004][T11604] syz.1.1742 (11604) used greatest stack depth: 19624 bytes left [ 577.239893][T11641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1755'. [ 577.271033][T11641] netlink: 'syz.1.1755': attribute type 10 has an invalid length. [ 577.280363][T11641] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1755'. [ 578.769141][T11652] syzkaller0: entered promiscuous mode [ 578.954322][T11652] syzkaller0: entered allmulticast mode [ 600.610420][T11718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.621500][T11718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.629978][T11718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.638693][T11718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.655301][T11718] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 600.664550][T11718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 600.776940][T11718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.786450][T11718] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 600.797527][T11718] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 600.807341][T11718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 600.817504][T11718] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 600.825163][T11718] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 600.975206][ T5777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 600.984815][ T5777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 601.000559][ T5777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 601.011965][ T5777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 601.022088][ T5777] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 601.039819][ T5777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 601.136886][ T5777] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 601.146569][ T5777] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 601.157293][ T5777] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 601.165668][ T5777] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 601.175533][ T5777] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 601.183081][ T5777] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 602.749788][ T5777] Bluetooth: hci4: command tx timeout [ 602.909737][ T5777] Bluetooth: hci5: command tx timeout [ 603.069588][ T5777] Bluetooth: hci6: command tx timeout [ 603.229839][ T5777] Bluetooth: hci7: command tx timeout [ 604.829517][ T5777] Bluetooth: hci4: command tx timeout [ 604.989586][ T5777] Bluetooth: hci5: command tx timeout [ 605.149782][ T5777] Bluetooth: hci6: command tx timeout [ 605.319577][ T5777] Bluetooth: hci7: command tx timeout [ 606.909508][ T5777] Bluetooth: hci4: command tx timeout [ 607.069636][ T5777] Bluetooth: hci5: command tx timeout [ 607.229499][ T5777] Bluetooth: hci6: command tx timeout [ 607.389715][ T5777] Bluetooth: hci7: command tx timeout [ 608.989609][ T5777] Bluetooth: hci4: command tx timeout [ 609.159605][ T5777] Bluetooth: hci5: command tx timeout [ 609.309632][ T5777] Bluetooth: hci6: command tx timeout [ 609.469680][ T5777] Bluetooth: hci7: command tx timeout [ 636.091466][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.097886][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.958245][T11718] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 659.975801][T11718] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 659.999642][T11718] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 660.012083][T11718] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 660.020364][T11718] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 660.028062][T11718] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 660.088418][ T5777] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 660.103587][ T5777] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 660.112814][ T5777] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 660.123225][ T5777] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 660.150267][ T5777] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 660.157860][ T5777] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 661.270275][ T5777] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 661.282322][ T5777] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 661.291440][ T5777] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 661.302291][ T5777] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 661.316430][ T5777] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 661.327179][ T5777] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 661.424088][T11718] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 661.433968][T11718] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 661.446056][T11718] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 661.455575][T11718] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 661.466493][T11718] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 661.477913][T11718] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 662.109636][T11718] Bluetooth: hci8: command tx timeout [ 662.269812][T11718] Bluetooth: hci9: command tx timeout [ 663.461601][T11718] Bluetooth: hci10: command tx timeout [ 663.549584][T11718] Bluetooth: hci11: command tx timeout [ 664.189523][T11718] Bluetooth: hci8: command tx timeout [ 664.349675][T11718] Bluetooth: hci9: command tx timeout [ 665.469574][T11718] Bluetooth: hci10: command tx timeout [ 665.629665][T11718] Bluetooth: hci11: command tx timeout [ 666.269500][T11718] Bluetooth: hci8: command tx timeout [ 666.429744][T11718] Bluetooth: hci9: command tx timeout [ 667.549633][T11718] Bluetooth: hci10: command tx timeout [ 667.719638][T11718] Bluetooth: hci11: command tx timeout [ 668.504523][T11718] Bluetooth: hci8: command tx timeout [ 668.789490][T11718] Bluetooth: hci9: command tx timeout [ 669.707061][T11718] Bluetooth: hci10: command tx timeout [ 669.879494][T11718] Bluetooth: hci11: command tx timeout [ 698.148814][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 698.159467][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.835713][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 720.845634][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 720.856735][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 720.866216][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 720.875676][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 720.883412][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 720.972361][T11760] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 720.982298][T11760] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 720.992664][T11760] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 721.001282][T11760] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 721.012538][T11760] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 721.020407][T11760] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 722.215693][T11766] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 722.229677][T11766] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 722.238908][T11766] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 722.250240][T11766] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 722.262078][T11766] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 722.270307][T11766] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 722.480013][T11768] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 722.493518][T11768] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 722.577072][T11768] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 722.585665][T11768] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 722.594122][T11768] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 722.601893][T11768] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 723.069672][T11768] Bluetooth: hci12: command tx timeout [ 724.349668][T11768] Bluetooth: hci13: command tx timeout [ 724.434369][T11768] Bluetooth: hci0: command tx timeout [ 724.669941][T11768] Bluetooth: hci14: command tx timeout [ 725.159671][T11760] Bluetooth: hci12: command tx timeout [ 726.429556][T11760] Bluetooth: hci13: command tx timeout [ 726.519831][T11760] Bluetooth: hci0: command tx timeout [ 726.810396][T11760] Bluetooth: hci14: command tx timeout [ 726.994891][T11760] Bluetooth: hci7: command 0x0406 tx timeout [ 727.003264][T11760] Bluetooth: hci4: command 0x0406 tx timeout [ 727.010567][T11760] Bluetooth: hci5: command 0x0406 tx timeout [ 727.016658][T11760] Bluetooth: hci6: command 0x0406 tx timeout [ 727.229436][T11773] Bluetooth: hci12: command tx timeout [ 728.519615][T11773] Bluetooth: hci13: command tx timeout [ 728.599783][T11773] Bluetooth: hci0: command tx timeout [ 728.881128][T11773] Bluetooth: hci14: command tx timeout [ 729.319644][T11773] Bluetooth: hci12: command tx timeout [ 730.589468][T11773] Bluetooth: hci13: command tx timeout [ 730.669746][T11773] Bluetooth: hci0: command tx timeout [ 730.909871][T11773] Bluetooth: hci14: command tx timeout [ 756.909614][ T29] INFO: task kworker/u4:0:11 blocked for more than 142 seconds. [ 756.917351][ T29] Not tainted syzkaller #0 [ 756.931903][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.945460][ T29] task:kworker/u4:0 state:D stack:22096 pid:11 ppid:2 flags:0x00004000 [ 756.956086][ T29] Workqueue: events_unbound linkwatch_event [ 756.963875][ T29] Call Trace: [ 756.967219][ T29] [ 756.970851][ T29] __schedule+0x15ae/0x4660 [ 756.975556][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 756.982451][ T29] ? asan.module_dtor+0x20/0x20 [ 756.989096][ T29] ? __mutex_lock+0x66e/0xc80 [ 756.994504][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 757.001888][ T29] ? kthread_data+0x4f/0xc0 [ 757.006472][ T29] ? wq_worker_sleeping+0x63/0x240 [ 757.016524][ T29] schedule+0xbd/0x170 [ 757.022351][ T29] schedule_preempt_disabled+0x13/0x20 [ 757.027891][ T29] __mutex_lock+0x673/0xc80 [ 757.033108][ T29] ? __mutex_lock+0x4d2/0xc80 [ 757.037889][ T29] ? linkwatch_event+0xe/0x60 [ 757.044335][ T29] ? mutex_lock_nested+0x20/0x20 [ 757.049884][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 757.055170][ T29] ? process_scheduled_works+0x975/0x1600 [ 757.063399][ T29] ? process_scheduled_works+0x975/0x1600 [ 757.069214][ T29] linkwatch_event+0xe/0x60 [ 757.074546][ T29] process_scheduled_works+0xa60/0x1600 [ 757.082509][ T29] ? worker_attach_to_pool+0x370/0x370 [ 757.088065][ T29] ? assign_work+0x3cc/0x5d0 [ 757.093328][ T29] worker_thread+0xa5e/0xfe0 [ 757.098038][ T29] kthread+0x2fa/0x390 [ 757.104043][ T29] ? pr_cont_work+0x550/0x550 [ 757.108800][ T29] ? kthread_blkcg+0xd0/0xd0 [ 757.114039][ T29] ret_from_fork+0x48/0x80 [ 757.118618][ T29] ? kthread_blkcg+0xd0/0xd0 [ 757.130771][ T29] ret_from_fork_asm+0x11/0x20 [ 757.135661][ T29] [ 757.138738][ T29] INFO: task kworker/1:1:27 blocked for more than 143 seconds. [ 757.148470][ T29] Not tainted syzkaller #0 [ 757.153929][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.164502][ T29] task:kworker/1:1 state:D stack:24584 pid:27 ppid:2 flags:0x00004000 [ 757.174319][ T29] Workqueue: events_power_efficient reg_check_chans_work [ 757.183777][ T29] Call Trace: [ 757.187574][ T29] [ 757.191005][ T29] __schedule+0x15ae/0x4660 [ 757.195595][ T29] ? schedule+0x6b/0x170 [ 757.201874][ T29] ? mark_lock+0x94/0x320 [ 757.206282][ T29] ? asan.module_dtor+0x20/0x20 [ 757.211733][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 757.216859][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 757.222800][ T29] schedule+0xbd/0x170 [ 757.226945][ T29] schedule_preempt_disabled+0x13/0x20 [ 757.238597][ T29] __mutex_lock+0x673/0xc80 [ 757.243631][ T29] ? __mutex_lock+0x4d2/0xc80 [ 757.248384][ T29] ? reg_check_chans_work+0x92/0xd90 [ 757.255651][ T29] ? mutex_lock_nested+0x20/0x20 [ 757.261112][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 757.267092][ T29] ? process_scheduled_works+0x975/0x1600 [ 757.275122][ T29] reg_check_chans_work+0x92/0xd90 [ 757.281012][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.287751][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.297103][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 757.303851][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 757.309044][ T29] ? reg_process_ht_flags+0xb70/0xb70 [ 757.316380][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 757.322165][ T29] ? process_scheduled_works+0x975/0x1600 [ 757.328072][ T29] ? process_scheduled_works+0x975/0x1600 [ 757.335765][ T29] process_scheduled_works+0xa60/0x1600 [ 757.347585][ T29] ? worker_attach_to_pool+0x370/0x370 [ 757.354915][ T29] ? assign_work+0x3cc/0x5d0 [ 757.360151][ T29] worker_thread+0xa5e/0xfe0 [ 757.365032][ T29] ? _raw_spin_unlock+0x40/0x40 [ 757.371798][ T29] ? __kthread_parkme+0x71/0x1c0 [ 757.377035][ T29] kthread+0x2fa/0x390 [ 757.381810][ T29] ? pr_cont_work+0x550/0x550 [ 757.387119][ T29] ? kthread_blkcg+0xd0/0xd0 [ 757.393984][ T29] ret_from_fork+0x48/0x80 [ 757.398684][ T29] ? kthread_blkcg+0xd0/0xd0 [ 757.404573][ T29] ret_from_fork_asm+0x11/0x20 [ 757.411267][ T29] [ 757.414621][ T29] INFO: task syz.1.1770:11710 blocked for more than 143 seconds. [ 757.423102][ T29] Not tainted syzkaller #0 [ 757.428256][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.439098][ T29] task:syz.1.1770 state:D stack:27624 pid:11710 ppid:5770 flags:0x00004006 [ 757.449101][ T29] Call Trace: [ 757.458736][ T29] [ 757.463329][ T29] __schedule+0x15ae/0x4660 [ 757.468067][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 757.476479][ T29] ? asan.module_dtor+0x20/0x20 [ 757.481931][ T29] ? __mutex_lock+0x66e/0xc80 [ 757.486711][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 757.494759][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 757.501633][ T29] schedule+0xbd/0x170 [ 757.505785][ T29] schedule_preempt_disabled+0x13/0x20 [ 757.514320][ T29] __mutex_lock+0x673/0xc80 [ 757.518919][ T29] ? __mutex_lock+0x4d2/0xc80 [ 757.524282][ T29] ? tun_chr_close+0x41/0x1c0 [ 757.529043][ T29] ? mutex_lock_nested+0x20/0x20 [ 757.536062][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 757.542789][ T29] ? tun_chr_open+0x510/0x510 [ 757.547548][ T29] tun_chr_close+0x41/0x1c0 [ 757.556478][ T29] ? tun_chr_open+0x510/0x510 [ 757.566221][ T29] __fput+0x221/0x940 [ 757.572016][ T29] task_work_run+0x1d4/0x260 [ 757.577202][ T29] ? task_work_cancel+0x220/0x220 [ 757.583212][ T29] do_exit+0x986/0x2530 [ 757.587546][ T29] ? put_task_struct+0xc0/0xc0 [ 757.594816][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 757.601423][ T29] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 757.608999][ T29] ? lock_chain_count+0x20/0x20 [ 757.615920][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 757.622013][ T29] do_group_exit+0x22d/0x2f0 [ 757.626689][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 757.633884][ T29] get_signal+0x12a6/0x1390 [ 757.638502][ T29] arch_do_signal_or_restart+0xc2/0x7b0 [ 757.644725][ T29] ? ret_from_fork+0x24/0x80 [ 757.651089][ T29] ? get_sigframe_size+0x20/0x20 [ 757.656113][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 757.662989][ T29] ? lock_chain_count+0x20/0x20 [ 757.667939][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 757.679683][ T29] exit_to_user_mode_loop+0x70/0x110 [ 757.685087][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 757.694737][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 757.700765][ T29] ret_from_fork_asm+0x11/0x20 [ 757.705715][ T29] [ 757.708790][ T29] INFO: task syz-executor:11715 blocked for more than 143 seconds. [ 757.718930][ T29] Not tainted syzkaller #0 [ 757.724517][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.735843][ T29] task:syz-executor state:D stack:25384 pid:11715 ppid:1 flags:0x00004004 [ 757.745888][ T29] Call Trace: [ 757.749267][ T29] [ 757.754226][ T29] __schedule+0x15ae/0x4660 [ 757.758873][ T29] ? trace_event_raw_event_lock+0x240/0x240 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 757.765543][ T29] ? asan.module_dtor+0x20/0x20 [ 757.770853][ T29] ? __mutex_lock+0x66e/0xc80 [ 757.783873][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 757.803858][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 757.819366][ T29] schedule+0xbd/0x170 [ 757.823548][ T29] schedule_preempt_disabled+0x13/0x20 [ 757.829062][ T29] __mutex_lock+0x673/0xc80 [ 757.889591][ T29] ? __mutex_lock+0x4d2/0xc80 [ 757.894405][ T29] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 757.956839][ T29] ? mutex_lock_nested+0x20/0x20 [ 757.987507][ T29] rtnetlink_rcv_msg+0x7ed/0xf90 [ 758.001377][ T29] ? rtnetlink_rcv_msg+0x220/0xf90 [ 758.006629][ T29] ? rtnetlink_bind+0x80/0x80 [ 758.024784][ T29] ? mark_lock+0x94/0x320 [ 758.029225][ T29] ? __lock_acquire+0x1262/0x7d80 [ 758.038079][ T29] ? mark_lock+0x94/0x320 [ 758.042814][ T29] ? mark_lock+0x94/0x320 [ 758.047218][ T29] ? __lock_acquire+0x1262/0x7d80 [ 758.054355][ T29] ? verify_lock_unused+0x140/0x140 [ 758.059980][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 758.064918][ T29] ? verify_lock_unused+0x140/0x140 [ 758.072149][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 758.077092][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 758.082596][ T29] netlink_rcv_skb+0x235/0x4c0 [ 758.087451][ T29] ? rtnetlink_bind+0x80/0x80 [ 758.095280][ T29] ? netlink_ack+0x1160/0x1160 [ 758.113701][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 758.118842][ T29] ? net_generic+0x1e/0x240 [ 758.138255][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.147633][ T29] netlink_unicast+0x7b1/0x930 [ 758.152896][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 758.157760][ T29] ? netlink_getsockopt+0x590/0x590 [ 758.165103][ T29] ? apparmor_socket_sendmsg+0x8e/0x330 [ 758.171177][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 758.176622][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 758.184107][ T29] __sys_sendto+0x4a9/0x6b0 [ 758.188694][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 758.195876][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 758.202796][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 758.209768][ T29] ? lock_chain_count+0x20/0x20 [ 758.214818][ T29] ? lock_chain_count+0x20/0x20 [ 758.221881][ T29] __x64_sys_sendto+0xde/0xf0 [ 758.226649][ T29] do_syscall_64+0x55/0xb0 [ 758.232090][ T29] ? clear_bhb_loop+0x40/0x90 [ 758.236841][ T29] ? clear_bhb_loop+0x40/0x90 [ 758.246698][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.254235][ T29] RIP: 0033:0x7f1367b5e68e [ 758.258730][ T29] RSP: 002b:00007ffeff4e5308 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 758.269718][ T29] RAX: ffffffffffffffda RBX: 000055556ea07500 RCX: 00007f1367b5e68e [ 758.277766][ T29] RDX: 0000000000000028 RSI: 00007f1368954670 RDI: 0000000000000003 [ 758.287906][ T29] RBP: 0000000000000001 R08: 00007ffeff4e5384 R09: 000000000000000c [ 758.296334][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 758.306245][ T29] R13: 0000000000000000 R14: 00007f1368954670 R15: 0000000000000000 [ 758.315228][ T29] [ 758.318324][ T29] INFO: task syz-executor:11719 blocked for more than 144 seconds. [ 758.328247][ T29] Not tainted syzkaller #0 [ 758.333613][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.344700][ T29] task:syz-executor state:D stack:25384 pid:11719 ppid:1 flags:0x00004004 [ 758.361926][ T29] Call Trace: [ 758.365295][ T29] [ 758.368856][ T29] __schedule+0x15ae/0x4660 [ 758.376705][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 758.383120][ T29] ? asan.module_dtor+0x20/0x20 [ 758.388051][ T29] ? __mutex_lock+0x66e/0xc80 [ 758.394883][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 758.400782][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 758.407017][ T29] schedule+0xbd/0x170 [ 758.430342][ T29] schedule_preempt_disabled+0x13/0x20 [ 758.436010][ T29] __mutex_lock+0x673/0xc80 [ 758.441265][ T29] ? __mutex_lock+0x4d2/0xc80 [ 758.446216][ T29] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 758.453979][ T29] ? mutex_lock_nested+0x20/0x20 [ 758.459116][ T29] rtnetlink_rcv_msg+0x7ed/0xf90 [ 758.466050][ T29] ? rtnetlink_rcv_msg+0x220/0xf90 [ 758.475367][ T29] ? rtnetlink_bind+0x80/0x80 [ 758.481718][ T29] ? mark_lock+0x94/0x320 [ 758.486141][ T29] ? __lock_acquire+0x1262/0x7d80 [ 758.493299][ T29] ? mark_lock+0x94/0x320 [ 758.497799][ T29] ? mark_lock+0x94/0x320 [ 758.502932][ T29] ? __lock_acquire+0x1262/0x7d80 [ 758.508079][ T29] ? verify_lock_unused+0x140/0x140 [ 758.515824][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 758.521169][ T29] ? verify_lock_unused+0x140/0x140 [ 758.526507][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 758.533378][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 758.538372][ T29] netlink_rcv_skb+0x235/0x4c0 [ 758.543926][ T29] ? rtnetlink_bind+0x80/0x80 [ 758.548977][ T29] ? netlink_ack+0x1160/0x1160 [ 758.555703][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 758.561908][ T29] ? net_generic+0x1e/0x240 [ 758.566541][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.574950][ T29] netlink_unicast+0x7b1/0x930 [ 758.583514][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 758.588385][ T29] ? netlink_getsockopt+0x590/0x590 [ 758.598257][ T29] ? apparmor_socket_sendmsg+0x8e/0x330 [ 758.604264][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 758.611448][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 758.617368][ T29] __sys_sendto+0x4a9/0x6b0 [ 758.622782][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 758.628311][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 758.635318][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 758.641813][ T29] ? lock_chain_count+0x20/0x20 [ 758.647100][ T29] ? lock_chain_count+0x20/0x20 [ 758.653960][ T29] __x64_sys_sendto+0xde/0xf0 [ 758.658742][ T29] do_syscall_64+0x55/0xb0 [ 758.663963][ T29] ? clear_bhb_loop+0x40/0x90 [ 758.668719][ T29] ? clear_bhb_loop+0x40/0x90 [ 758.675714][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.683743][ T29] RIP: 0033:0x7f5355d5e68e [ 758.688230][ T29] RSP: 002b:00007ffdddc65c28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 758.700972][ T29] RAX: ffffffffffffffda RBX: 000055556fa3d500 RCX: 00007f5355d5e68e [ 758.709021][ T29] RDX: 0000000000000028 RSI: 00007f5356b54670 RDI: 0000000000000003 [ 758.720767][ T29] RBP: 0000000000000001 R08: 00007ffdddc65ca4 R09: 000000000000000c [ 758.728833][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 758.738705][ T29] R13: 0000000000000000 R14: 00007f5356b54670 R15: 0000000000000000 [ 758.748677][ T29] [ 758.752198][ T29] INFO: task syz-executor:11723 blocked for more than 144 seconds. [ 758.761918][ T29] Not tainted syzkaller #0 [ 758.766912][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.776200][ T29] task:syz-executor state:D stack:25384 pid:11723 ppid:1 flags:0x00004004 [ 758.787547][ T29] Call Trace: [ 758.792910][ T29] [ 758.796011][ T29] __schedule+0x15ae/0x4660 [ 758.802584][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 758.808582][ T29] ? asan.module_dtor+0x20/0x20 [ 758.815185][ T29] ? __mutex_lock+0x66e/0xc80 [ 758.824554][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 758.831659][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 758.837944][ T29] schedule+0xbd/0x170 [ 758.844605][ T29] schedule_preempt_disabled+0x13/0x20 [ 758.850499][ T29] __mutex_lock+0x673/0xc80 [ 758.855081][ T29] ? __mutex_lock+0x4d2/0xc80 [ 758.861774][ T29] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 758.866965][ T29] ? mutex_lock_nested+0x20/0x20 [ 758.872580][ T29] rtnetlink_rcv_msg+0x7ed/0xf90 [ 758.877592][ T29] ? rtnetlink_rcv_msg+0x220/0xf90 [ 758.884698][ T29] ? rtnetlink_bind+0x80/0x80 [ 758.889911][ T29] ? mark_lock+0x94/0x320 [ 758.894313][ T29] ? __lock_acquire+0x1262/0x7d80 [ 758.900044][ T29] ? mark_lock+0x94/0x320 [ 758.904455][ T29] ? mark_lock+0x94/0x320 [ 758.908845][ T29] ? __lock_acquire+0x1262/0x7d80 [ 758.917666][ T29] ? verify_lock_unused+0x140/0x140 [ 758.925112][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 758.935117][ T29] ? verify_lock_unused+0x140/0x140 [ 758.940820][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 758.945763][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 758.952715][ T29] netlink_rcv_skb+0x235/0x4c0 [ 758.957572][ T29] ? rtnetlink_bind+0x80/0x80 [ 758.962856][ T29] ? netlink_ack+0x1160/0x1160 [ 758.967716][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 758.974759][ T29] ? net_generic+0x1e/0x240 [ 758.980042][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.988566][ T29] netlink_unicast+0x7b1/0x930 [ 758.995518][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 759.001138][ T29] ? netlink_getsockopt+0x590/0x590 [ 759.006423][ T29] ? apparmor_socket_sendmsg+0x8e/0x330 [ 759.014060][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 759.021453][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 759.027549][ T29] __sys_sendto+0x4a9/0x6b0 [ 759.035198][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 759.043453][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 759.048580][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 759.056593][ T29] ? lock_chain_count+0x20/0x20 [ 759.062058][ T29] ? lock_chain_count+0x20/0x20 [ 759.067038][ T29] __x64_sys_sendto+0xde/0xf0 [ 759.073530][ T29] do_syscall_64+0x55/0xb0 [ 759.078036][ T29] ? clear_bhb_loop+0x40/0x90 [ 759.083427][ T29] ? clear_bhb_loop+0x40/0x90 [ 759.088184][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.096074][ T29] RIP: 0033:0x7fe65d15e68e [ 759.100983][ T29] RSP: 002b:00007ffe61980818 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 759.111229][ T29] RAX: ffffffffffffffda RBX: 0000555574ec5500 RCX: 00007fe65d15e68e [ 759.119656][ T29] RDX: 0000000000000028 RSI: 00007fe65df54670 RDI: 0000000000000003 [ 759.136696][ T29] RBP: 0000000000000001 R08: 00007ffe61980894 R09: 000000000000000c [ 759.147344][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 759.159597][ T29] R13: 0000000000000000 R14: 00007fe65df54670 R15: 0000000000000000 [ 759.167729][ T29] [ 759.172882][ T29] INFO: task syz-executor:11725 blocked for more than 145 seconds. [ 759.181251][ T29] Not tainted syzkaller #0 [ 759.186249][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.195680][ T29] task:syz-executor state:D stack:25384 pid:11725 ppid:1 flags:0x00004004 [ 759.206655][ T29] Call Trace: [ 759.210693][ T29] [ 759.213695][ T29] __schedule+0x15ae/0x4660 [ 759.218275][ T29] ? trace_event_raw_event_lock+0x240/0x240 [ 759.226527][ T29] ? asan.module_dtor+0x20/0x20 [ 759.232445][ T29] ? __mutex_lock+0x66e/0xc80 [ 759.237237][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 759.246298][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 759.254239][ T29] schedule+0xbd/0x170 [ 759.258407][ T29] schedule_preempt_disabled+0x13/0x20 [ 759.269176][ T29] __mutex_lock+0x673/0xc80 [ 759.274251][ T29] ? __mutex_lock+0x4d2/0xc80 [ 759.279032][ T29] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 759.286223][ T29] ? mutex_lock_nested+0x20/0x20 [ 759.291677][ T29] rtnetlink_rcv_msg+0x7ed/0xf90 [ 759.296687][ T29] ? rtnetlink_rcv_msg+0x220/0xf90 [ 759.303732][ T29] ? rtnetlink_bind+0x80/0x80 [ 759.308478][ T29] ? mark_lock+0x94/0x320 [ 759.313465][ T29] ? __lock_acquire+0x1262/0x7d80 [ 759.318572][ T29] ? mark_lock+0x94/0x320 [ 759.324815][ T29] ? mark_lock+0x94/0x320 [ 759.329244][ T29] ? __lock_acquire+0x1262/0x7d80 [ 759.335557][ T29] ? verify_lock_unused+0x140/0x140 [ 759.342922][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 759.347873][ T29] ? verify_lock_unused+0x140/0x140 [ 759.355214][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 759.363125][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 759.368094][ T29] netlink_rcv_skb+0x235/0x4c0 [ 759.375896][ T29] ? rtnetlink_bind+0x80/0x80 [ 759.382476][ T29] ? netlink_ack+0x1160/0x1160 [ 759.387441][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 759.393198][ T29] ? net_generic+0x1e/0x240 [ 759.397788][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 759.405017][ T29] netlink_unicast+0x7b1/0x930 [ 759.410260][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 759.415125][ T29] ? netlink_getsockopt+0x590/0x590 [ 759.422440][ T29] ? apparmor_socket_sendmsg+0x8e/0x330 [ 759.428065][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 759.434321][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 759.441806][ T29] __sys_sendto+0x4a9/0x6b0 [ 759.446397][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 759.452484][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 759.457602][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 759.467436][ T29] ? lock_chain_count+0x20/0x20 [ 759.474087][ T29] ? lock_chain_count+0x20/0x20 [ 759.479019][ T29] __x64_sys_sendto+0xde/0xf0 [ 759.488504][ T29] do_syscall_64+0x55/0xb0 [ 759.493527][ T29] ? clear_bhb_loop+0x40/0x90 [ 759.498280][ T29] ? clear_bhb_loop+0x40/0x90 [ 759.505123][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.511614][ T29] RIP: 0033:0x7f8d7f55e68e [ 759.516097][ T29] RSP: 002b:00007ffc7c57dd98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 759.526533][ T29] RAX: ffffffffffffffda RBX: 000055557d43d500 RCX: 00007f8d7f55e68e [ 759.534975][ T29] RDX: 0000000000000028 RSI: 00007f8d80354670 RDI: 0000000000000003 [ 759.543893][ T29] RBP: 0000000000000001 R08: 00007ffc7c57de14 R09: 000000000000000c [ 759.553943][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 759.562604][ T29] R13: 0000000000000000 R14: 00007f8d80354670 R15: 0000000000000000 [ 759.573678][ T29] [ 759.576810][ T29] [ 759.576810][ T29] Showing all locks held in the system: [ 759.586727][ T29] 1 lock held by pool_workqueue_/3: [ 759.595769][ T29] #0: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 759.607329][ T29] 3 locks held by kworker/u4:0/11: [ 759.614551][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 759.626880][ T29] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 759.641777][ T29] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 759.651245][ T29] 3 locks held by kworker/1:1/27: [ 759.656418][ T29] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 759.669624][ T29] #1: ffffc90000a2fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 759.683831][ T29] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 759.695957][ T29] 1 lock held by khungtaskd/29: [ 759.704752][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 759.715127][ T29] 2 locks held by kworker/1:2/55: [ 759.722146][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 759.733618][ T29] #1: ffffc9000130fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 759.748080][ T29] 3 locks held by kworker/u4:9/4208: [ 759.753792][ T29] #0: ffff88802c22ad38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 759.767493][ T29] #1: ffffc9000df67d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 759.783083][ T29] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 759.794309][ T29] 2 locks held by getty/5525: [ 759.799046][ T29] #0: ffff88802d3220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 759.814740][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 759.825445][ T29] 1 lock held by syz-executor/5770: [ 759.832498][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 759.842014][ T29] 2 locks held by syz.3.1769/11697: [ 759.847799][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 759.859199][ T29] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 759.873124][ T29] 1 lock held by syz.1.1770/11710: [ 759.878304][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 759.887995][ T29] 4 locks held by syz.0.1771/11701: [ 759.893347][ T29] 1 lock held by syz.2.1773/11704: [ 759.898502][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 759.910984][ T29] 1 lock held by syz-executor/11715: [ 759.916353][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 759.932196][ T29] 1 lock held by syz-executor/11719: [ 759.937567][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 759.948263][ T29] 1 lock held by syz-executor/11723: [ 759.955610][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 759.965588][ T29] 1 lock held by syz-executor/11725: [ 759.972733][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 759.982675][ T29] 1 lock held by syz-executor/11735: [ 759.988019][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 759.999506][ T29] 1 lock held by syz-executor/11738: [ 760.004848][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.016599][ T29] 1 lock held by syz-executor/11744: [ 760.023547][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.037016][ T29] 1 lock held by syz-executor/11746: [ 760.045521][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.057536][ T29] 1 lock held by syz-executor/11755: [ 760.063330][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.074871][ T29] 1 lock held by syz-executor/11759: [ 760.080544][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.091814][ T29] 1 lock held by syz-executor/11764: [ 760.097193][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.107326][ T29] 1 lock held by syz-executor/11767: [ 760.114925][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 760.124965][ T29] [ 760.127343][ T29] ============================================= [ 760.127343][ T29] [ 760.139183][ T29] NMI backtrace for cpu 1 [ 760.143579][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 760.150827][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.160960][ T29] Call Trace: [ 760.164288][ T29] [ 760.167266][ T29] dump_stack_lvl+0x18c/0x250 [ 760.172358][ T29] ? __wake_up_klogd+0xd9/0x100 [ 760.177287][ T29] ? show_regs_print_info+0x20/0x20 [ 760.182552][ T29] ? load_image+0x420/0x420 [ 760.187125][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 760.192133][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 760.198377][ T29] ? load_image+0x420/0x420 [ 760.202933][ T29] ? wq_watchdog_touch+0xef/0x170 [ 760.208026][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 760.214283][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 760.220320][ T29] watchdog+0xf59/0xfa0 [ 760.224624][ T29] ? watchdog+0x1e1/0xfa0 [ 760.229015][ T29] kthread+0x2fa/0x390 [ 760.233129][ T29] ? hungtask_pm_notify+0x50/0x50 [ 760.238214][ T29] ? kthread_blkcg+0xd0/0xd0 [ 760.242861][ T29] ret_from_fork+0x48/0x80 [ 760.247331][ T29] ? kthread_blkcg+0xd0/0xd0 [ 760.251966][ T29] ret_from_fork_asm+0x11/0x20 [ 760.256800][ T29] [ 760.260461][ T29] Sending NMI from CPU 1 to CPUs 0: [ 760.265767][ C0] NMI backtrace for cpu 0 [ 760.265777][ C0] CPU: 0 PID: 11701 Comm: syz.0.1771 Not tainted syzkaller #0 [ 760.265794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.265804][ C0] RIP: 0010:__asan_memset+0x5/0x40 [ 760.265835][ C0] Code: 0f 1f 44 00 00 f3 0f 1e fa 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 dc ea ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 55 <41> 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 [ 760.265849][ C0] RSP: 0018:ffffc90000007870 EFLAGS: 00000046 [ 760.265864][ C0] RAX: 0000000000000014 RBX: 0000000000000014 RCX: ffff888018bc0000 [ 760.265875][ C0] RDX: 0000000000000008 RSI: 0000000000000000 RDI: ffffe8ffffc9200c [ 760.265885][ C0] RBP: 0000000000000000 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 760.265896][ C0] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffffffff8ca90a30 [ 760.265908][ C0] R13: dffffc0000000000 R14: ffffe8ffffc92000 R15: ffffffff8ca90a30 [ 760.265921][ C0] FS: 00007ff8ffda76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 760.265935][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.265950][ C0] CR2: 00007f47637214f0 CR3: 00000000532b7000 CR4: 00000000003506f0 [ 760.265964][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 760.265974][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 760.265983][ C0] Call Trace: [ 760.265989][ C0] [ 760.265995][ C0] perf_trace_buf_alloc+0x1d2/0x290 [ 760.266022][ C0] perf_trace_preemptirq_template+0x144/0x330 [ 760.266046][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.266075][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 760.266099][ C0] ? __irq_exit_rcu+0xdf/0x190 [ 760.266116][ C0] ? irq_exit_rcu+0x20/0x20 [ 760.266134][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.266162][ C0] trace_irq_enable+0xbb/0xe0 [ 760.266184][ C0] trace_hardirqs_on+0x18/0x40 [ 760.266207][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.266232][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 760.266257][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 9b ed c6 f6 65 8b 05 6c 3c 6e 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 760.266269][ C0] RSP: 0018:ffffc90000007a60 EFLAGS: 00000206 [ 760.266281][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: e6088491acbbb800 [ 760.266354][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: 0000000000000001 [ 760.266365][ C0] RBP: ffffc90000007af0 R08: ffffffff911e7597 R09: 1ffffffff223ceb2 [ 760.266377][ C0] R10: dffffc0000000000 R11: fffffbfff223ceb3 R12: dffffc0000000000 [ 760.266389][ C0] R13: ffff8880b8e295c0 R14: ffff8880b8e295c0 R15: 1ffff92000000f4c [ 760.266414][ C0] ? _raw_spin_unlock+0x40/0x40 [ 760.266435][ C0] ? rcu_is_watching+0x15/0xb0 [ 760.266463][ C0] __mod_timer+0x9b0/0xd60 [ 760.266497][ C0] call_timer_fn+0x189/0x540 [ 760.266513][ C0] ? can_get_proto+0x280/0x280 [ 760.266536][ C0] ? call_timer_fn+0xd2/0x540 [ 760.266551][ C0] ? __run_timers+0x810/0x810 [ 760.266575][ C0] ? can_get_proto+0x280/0x280 [ 760.266598][ C0] __run_timers+0x570/0x810 [ 760.266624][ C0] ? detach_timer+0x2b0/0x2b0 [ 760.266650][ C0] run_timer_softirq+0x67/0xf0 [ 760.266667][ C0] handle_softirqs+0x27d/0x820 [ 760.266682][ C0] ? read_tsc+0x9/0x20 [ 760.266700][ C0] ? ktime_get+0x24b/0x280 [ 760.266720][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 760.266745][ C0] ? do_softirq+0x1a0/0x1a0 [ 760.266764][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 760.266789][ C0] __irq_exit_rcu+0xd3/0x190 [ 760.266805][ C0] ? irq_exit_rcu+0x20/0x20 [ 760.266826][ C0] irq_exit_rcu+0x9/0x20 [ 760.266840][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 760.266861][ C0] [ 760.266865][ C0] [ 760.266871][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.266900][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 760.266921][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d ec 87 05 0d 48 89 de 5b e9 23 a7 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d c0 d2 7c 7e 65 8b 15 c1 d2 7c 7e 81 e2 00 01 ff 00 74 [ 760.266933][ C0] RSP: 0018:ffffc90004e56b00 EFLAGS: 00000246 [ 760.266945][ C0] RAX: ffffffff813290e7 RBX: ffffc90004e56bc0 RCX: ffff888018bc0000 [ 760.266957][ C0] RDX: dffffc0000000000 RSI: ffffffff81c28c00 RDI: ffffc90004e56bc0 [ 760.266969][ C0] RBP: ffffc90004e56b90 R08: ffffc90004e56bd0 R09: 000000000000000f [ 760.266980][ C0] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff81c28c00 [ 760.266990][ C0] R13: 1ffff110031780ae R14: ffffffff81758be0 R15: ffffc90004e56b08 [ 760.267003][ C0] ? stack_trace_save+0x100/0x100 [ 760.267022][ C0] ? kvmalloc_node+0x70/0x180 [ 760.267046][ C0] ? arch_stack_walk+0x167/0x190 [ 760.267063][ C0] ? kvmalloc_node+0x70/0x180 [ 760.267087][ C0] arch_stack_walk+0x167/0x190 [ 760.267107][ C0] ? kvmalloc_node+0x70/0x180 [ 760.267131][ C0] stack_trace_save+0xaa/0x100 [ 760.267151][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 760.267178][ C0] save_stack+0x125/0x230 [ 760.267195][ C0] ? __reset_page_owner+0x190/0x190 [ 760.267221][ C0] ? free_unref_page_prepare+0x7d7/0x8f0 [ 760.267247][ C0] ? free_unref_page+0x32/0x2e0 [ 760.267270][ C0] ? __mmdrop+0xb4/0x3d0 [ 760.267284][ C0] ? finish_task_switch+0x3da/0x8f0 [ 760.267299][ C0] ? __schedule+0x15b6/0x4660 [ 760.267315][ C0] ? preempt_schedule_irq+0xbf/0x150 [ 760.267331][ C0] ? irqentry_exit+0x67/0x70 [ 760.267348][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.267373][ C0] ? put_cpu_partial+0x1b0/0x250 [ 760.267387][ C0] ? __slab_free+0x319/0x400 [ 760.267402][ C0] ? qlist_free_all+0x75/0xd0 [ 760.267423][ C0] ? kasan_quarantine_reduce+0x143/0x160 [ 760.267446][ C0] ? __kasan_kmalloc_large+0x1c/0xa0 [ 760.267469][ C0] ? __kmalloc_large_node+0x144/0x1f0 [ 760.267493][ C0] ? __kmalloc_node+0x112/0x240 [ 760.267514][ C0] ? kvmalloc_node+0x70/0x180 [ 760.267535][ C0] ? page_ext_get+0x22/0x2b0 [ 760.267556][ C0] ? page_ext_get+0x1e2/0x2b0 [ 760.267577][ C0] __reset_page_owner+0x4e/0x190 [ 760.267601][ C0] ? rcu_is_watching+0x15/0xb0 [ 760.267626][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 760.267655][ C0] free_unref_page+0x32/0x2e0 [ 760.267682][ C0] __mmdrop+0xb4/0x3d0 [ 760.267700][ C0] finish_task_switch+0x3da/0x8f0 [ 760.267722][ C0] __schedule+0x15b6/0x4660 [ 760.267754][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 760.267779][ C0] ? asan.module_dtor+0x20/0x20 [ 760.267793][ C0] ? mark_lock+0x94/0x320 [ 760.267814][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 760.267843][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 760.267863][ C0] preempt_schedule_irq+0xbf/0x150 [ 760.267880][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 760.267898][ C0] ? lock_chain_count+0x20/0x20 [ 760.267920][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 760.267943][ C0] irqentry_exit+0x67/0x70 [ 760.267961][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.267986][ C0] RIP: 0010:put_cpu_partial+0x1b0/0x250 [ 760.268020][ C0] Code: 3b 44 24 18 0f 85 b4 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5c d7 ac 08 f7 c5 00 02 00 00 74 c0 fb 4d 85 e4 <75> bf eb c8 e8 87 cb 4e 02 85 c0 0f 84 e9 fe ff ff 83 3d d8 ae ad [ 760.268033][ C0] RSP: 0018:ffffc90004e57290 EFLAGS: 00000246 [ 760.268046][ C0] RAX: e6088491acbbb800 RBX: ffff888140008780 RCX: e6088491acbbb800 [ 760.268058][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 760.268069][ C0] RBP: 0000000000000286 R08: ffffffff911e752f R09: 1ffffffff223cea5 [ 760.268080][ C0] R10: dffffc0000000000 R11: fffffbfff223cea6 R12: 0000000000000000 [ 760.268091][ C0] R13: 0000000000000000 R14: ffff888018bc0000 R15: ffff8880b8e42da0 [ 760.268114][ C0] ? put_cpu_partial+0x6e/0x250 [ 760.268132][ C0] __slab_free+0x319/0x400 [ 760.268154][ C0] qlist_free_all+0x75/0xd0 [ 760.268180][ C0] kasan_quarantine_reduce+0x143/0x160 [ 760.268206][ C0] __kasan_kmalloc_large+0x1c/0xa0 [ 760.268226][ C0] __kmalloc_large_node+0x144/0x1f0 [ 760.268254][ C0] ? kvmalloc_node+0x70/0x180 [ 760.268275][ C0] __kmalloc_node+0x112/0x240 [ 760.268301][ C0] kvmalloc_node+0x70/0x180 [ 760.268325][ C0] bpf_check+0x1aa/0xec30 [ 760.268354][ C0] ? perf_tp_event+0x1550/0x1550 [ 760.268372][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 760.268393][ C0] ? perf_swevent_event+0x4be/0x570 [ 760.268417][ C0] ? perf_tp_event+0x13f5/0x1550 [ 760.268435][ C0] ? bpf_get_btf_vmlinux+0x20/0x20 [ 760.268458][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 760.268478][ C0] ? perf_tp_event+0x13f5/0x1550 [ 760.268520][ C0] ? verify_lock_unused+0x140/0x140 [ 760.268544][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 760.268570][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 760.268589][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 760.268615][ C0] ? lock_chain_count+0x20/0x20 [ 760.268636][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.268662][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 760.268682][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.268712][ C0] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 760.268734][ C0] ? seqcount_lockdep_reader_access+0x19a/0x1d0 [ 760.268763][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 760.268783][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 760.268812][ C0] ? bpf_obj_name_cpy+0x194/0x1e0 [ 760.268841][ C0] bpf_prog_load+0x10fa/0x1610 [ 760.268876][ C0] ? map_freeze+0x420/0x420 [ 760.268903][ C0] ? __might_fault+0xaa/0x120 [ 760.268920][ C0] ? __might_fault+0xc6/0x120 [ 760.268934][ C0] ? __might_fault+0xaa/0x120 [ 760.268950][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 760.268971][ C0] ? security_bpf+0x7e/0xa0 [ 760.268990][ C0] __sys_bpf+0x5ba/0x890 [ 760.269008][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 760.269036][ C0] ? lock_chain_count+0x20/0x20 [ 760.269053][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 760.269078][ C0] __x64_sys_bpf+0x7c/0x90 [ 760.269095][ C0] do_syscall_64+0x55/0xb0 [ 760.269119][ C0] ? clear_bhb_loop+0x40/0x90 [ 760.269133][ C0] ? clear_bhb_loop+0x40/0x90 [ 760.269149][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.269173][ C0] RIP: 0033:0x7ff8fef9de59 [ 760.269195][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.269207][ C0] RSP: 002b:00007ff8ffda7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 760.269223][ C0] RAX: ffffffffffffffda RBX: 00007ff8ff225fa0 RCX: 00007ff8fef9de59 [ 760.269234][ C0] RDX: 0000000000000094 RSI: 00002000000018c0 RDI: 0000000000000005 [ 760.269246][ C0] RBP: 00007ff8ff033e6f R08: 0000000000000000 R09: 0000000000000000 [ 760.269256][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.269265][ C0] R13: 00007ff8ff226038 R14: 00007ff8ff225fa0 R15: 00007ffded5b3298 [ 760.269287][ C0] [ 761.343425][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 761.350356][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 761.357606][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 761.367800][ T29] Call Trace: [ 761.371114][ T29] [ 761.374089][ T29] dump_stack_lvl+0x18c/0x250 [ 761.378840][ T29] ? show_regs_print_info+0x20/0x20 [ 761.384100][ T29] ? load_image+0x420/0x420 [ 761.388671][ T29] panic+0x2ca/0x720 [ 761.392628][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 761.397186][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 761.402786][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 761.408220][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 761.414429][ T29] watchdog+0xf98/0xfa0 [ 761.418647][ T29] ? watchdog+0x1e1/0xfa0 [ 761.423059][ T29] kthread+0x2fa/0x390 [ 761.427175][ T29] ? hungtask_pm_notify+0x50/0x50 [ 761.432280][ T29] ? kthread_blkcg+0xd0/0xd0 [ 761.436916][ T29] ret_from_fork+0x48/0x80 [ 761.441385][ T29] ? kthread_blkcg+0xd0/0xd0 [ 761.446023][ T29] ret_from_fork_asm+0x11/0x20 [ 761.450897][ T29] [ 761.454639][ T29] Kernel Offset: disabled [ 761.458996][ T29] Rebooting in 86400 seconds..