last executing test programs: 48.026279381s ago: executing program 0 (id=482): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003e00)=""/4050, 0xfd2}, {&(0x7f0000000b00)=""/4117, 0x1015}, {&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f00000002c0)=""/129, 0x81}], 0x4}, 0x20) 47.795524253s ago: executing program 3 (id=483): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x7, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="04000000000000000000510000000000000000002d5e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000040000000000"], 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {&(0x7f0000000700)="78cafb73fc02010700200000ef000000000000", 0x13}], 0x2}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, 0x0, 0x20004044) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0xe}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @typedef={0x1}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x30, 0x2e, 0x61, 0x2e, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000340)=""/149, 0x6b, 0x95, 0x1, 0x0, 0x10000, @value=r4}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x1, 0x4, 0xa, 0x0, 0x1, 0x100, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xae1, 0x1, @perf_config_ext={0x5, 0x8}, 0x102000, 0x0, 0x1, 0x9, 0x5, 0xe, 0x7, 0x0, 0x8b8b}, 0x0, 0x5, r5, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) r6 = socket$kcm(0x22, 0x2, 0x21) recvmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 47.67048536s ago: executing program 0 (id=485): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b36, &(0x7f0000000040)={'gre0\x00', @random="010000000100"}) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x2, @perf_bp={0x0, 0x3}, 0xc1, 0x4, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) openat$cgroup_freezer_state(r0, &(0x7f0000000580), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/cgroup\x00') bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300080c5) setsockopt$sock_attach_bpf(r7, 0x1, 0x9, &(0x7f0000000040), 0x4) 47.585367134s ago: executing program 3 (id=486): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 47.340054547s ago: executing program 3 (id=488): r0 = syz_clone(0x83840000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x8020, 0x0, 0x0, 0x3, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x6, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @remote}) 47.263774972s ago: executing program 2 (id=489): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x440b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (fail_nth: 11) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000500000002000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x14, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048801}, 0x20000050) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) 46.55180188s ago: executing program 0 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r0) socket$kcm(0xa, 0x6, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000000)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 46.492046963s ago: executing program 3 (id=492): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002780)={0xffffffffffffffff, 0x0, 0x0, 0xc9435dac4a28b5ed}, 0x20) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', r4, r5, 0x2, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001980)={&(0x7f0000000000)="2e9c5bf683df525c70262cc7ac2cc5c5cbd99409419bf3a64b9a4cf1f2e8ed7e97d02e9e219fae927fae882e20625f74c4b476b25630c7fef4a67cff1e36220a444f42f8561749bd46a0", &(0x7f0000000080)=""/57, &(0x7f00000000c0)="67b0fd72a58e20d54bfec2362881be894c43de70d00da1ff2eefe72ef8", &(0x7f0000000980)="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", 0x3, r2, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000002850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r7}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup, 0x10, 0x0, 0x10000, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@fallback=r3, r3, 0x2a, 0x4, r3, @void, @value=r3, @void, @void, r8}, 0x20) 46.34360365s ago: executing program 0 (id=493): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, &(0x7f0000000d80)=[{0x0, 0x28}], 0x1}, 0x20040000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6d0920000800000018260000", @ANYRES32, @ANYBLOB="000000004a00aafe"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r1, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x4000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001dc0)={r3, 0x0, 0xe9, 0x0, &(0x7f0000000280)="3828f76a4550f9fa2ecd2964d3ece2727556220859890401698c5ea7ffa60ab3355817e3d834f46368a019476adfd40bf3c6b303612f304d8cb601ae0d268837b3d7f94dd203938016a42721635cf96ef9771d01c9b4e6fb6aced3dc8d78d9e07f9d6671c058ae83325eb7f4db63af5d385d66e2a4931620ab1b82d383481ed50b5015d6d30f77a3f1d3cc45b0aa8a75e6c624bb8d6f32e18636e469489a402468b58eb18f2f1e7417aa088d03f32695c3ded7ecee6058e5a93c25d59d77810639a3584b8e94e0a4337ea82d6acb2e1ba726e07782052213f512b1857cfe7a43cf1cf690ed20d143ba", 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000880), &(0x7f0000000dc0)="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", 0x4, 0x0, 0xae}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="c3080000000000001d000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)="39000000140081ae0000dc676f97da021f2357f9ffffffffffffff0521018701546fabca05e28a06b8580e88370200c54c1960b89c67157f40", 0x39}], 0x1}, 0x4000080) 46.328991281s ago: executing program 2 (id=494): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x7, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="04000000000000000000510000000000000000002d5e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000040000000000"], 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {&(0x7f0000000700)="78cafb73fc02010700200000ef000000000000", 0x13}], 0x2}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, 0x0, 0x20004044) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0xe}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @typedef={0x1}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x30, 0x2e, 0x61, 0x2e, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000340)=""/149, 0x6b, 0x95, 0x1, 0x0, 0x10000, @value=r4}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x1, 0x4, 0xa, 0x0, 0x1, 0x100, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xae1, 0x1, @perf_config_ext={0x5, 0x8}, 0x102000, 0x0, 0x1, 0x9, 0x5, 0xe, 0x7, 0x0, 0x8b8b}, 0x0, 0x5, r5, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) r6 = socket$kcm(0x22, 0x2, 0x21) recvmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 46.141907461s ago: executing program 2 (id=496): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 46.141460781s ago: executing program 3 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r0}, 0x38) 45.951589872s ago: executing program 3 (id=498): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func={0x0, 0x0, 0x0, 0xc, 0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x5}, @func={0xb, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x61, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000780)=""/231, 0x4f, 0xe7, 0x0, 0x5b0}, 0x28) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r4, 0x4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(0x0, 0x0) (async) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, 0x0, &(0x7f0000000200)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) recvmsg$kcm(r5, 0x0, 0x100) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x27, &(0x7f0000000940)=@framed={{0x18, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x321d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4, 0x0, 0x9, 0xb, 0x1, 0x10, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fff}, @ldst={0x0, 0x0, 0x4, 0xb, 0xb, 0x50, 0x4}, @map_fd={0x18, 0x9}, @tail_call, @alu={0x4, 0x0, 0x8, 0x4, 0x9, 0x0, 0x8}, @generic={0x9, 0x8, 0x5, 0x3, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ldst={0x1, 0x1, 0x3, 0x7, 0x0, 0x50, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x1}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x891a, &(0x7f0000000040)={'bond_slave_0\x00', @random="02008000"}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_subtree(r9, &(0x7f0000000100)={[{0x2b, 'blkio'}]}, 0x7) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) 45.891360185s ago: executing program 2 (id=500): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (fail_nth: 34) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="d7", 0x1}], 0x1}, 0x240448c4) 45.155402254s ago: executing program 2 (id=501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x6, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000000)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 44.730088327s ago: executing program 1 (id=503): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', r0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x10140) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x2e, 0x30]}}, 0x0, 0x29, 0x0, 0x1, 0x9}, 0x28) 44.577993655s ago: executing program 2 (id=504): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x7, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="04000000000000000000510000000000000000002d5e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000040000000000"], 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {&(0x7f0000000700)="78cafb73fc02010700200000ef000000000000", 0x13}], 0x2}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, 0x0, 0x20004044) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0xe}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @typedef={0x1}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x30, 0x2e, 0x61, 0x2e, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000340)=""/149, 0x6b, 0x95, 0x1, 0x0, 0x10000, @value=r4}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x1, 0x4, 0xa, 0x0, 0x1, 0x100, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xae1, 0x1, @perf_config_ext={0x5, 0x8}, 0x102000, 0x0, 0x1, 0x9, 0x5, 0xe, 0x7, 0x0, 0x8b8b}, 0x0, 0x5, r5, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) r6 = socket$kcm(0x22, 0x2, 0x21) recvmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 44.391435405s ago: executing program 0 (id=505): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="020000000000000368042c52059501", @ANYRESHEX], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xb580000, '\x00', 0x0, r0, 0x1, 0x5, 0x3}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', r4, r0, 0x3, 0x5, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe51, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r2}, &(0x7f0000000ac0), &(0x7f0000000b40)=r8}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, &(0x7f0000000100)) 44.28497321s ago: executing program 1 (id=506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r0}, 0x38) 44.180839546s ago: executing program 0 (id=507): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033200fefdfff500000200875a65969ff57b00001200000000000000000000ac1414aa"], 0xfdef) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2a, 0x2, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 43.301678563s ago: executing program 1 (id=508): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 42.301703066s ago: executing program 1 (id=509): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x4, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x4, 0x20a5}, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000018e300000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0}, 0x200480c0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0xfffd, 0x9}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) close(r3) recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}], 0x20}, 0x10120) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x59}, 0x10) r6 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000), 0x10) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r11) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x39, 0x9, 0x0, 0x0, 0x0, 0x809, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x526b, 0x9}, 0x0, 0x0, 0x43a1bd76, 0x3, 0x3, 0x0, 0x2, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x81200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 41.2810277s ago: executing program 1 (id=510): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}], 0x9}, 0x12100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 40.339034231s ago: executing program 1 (id=511): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481ffe00005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 30.265111027s ago: executing program 32 (id=498): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func={0x0, 0x0, 0x0, 0xc, 0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x5}, @func={0xb, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x61, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000780)=""/231, 0x4f, 0xe7, 0x0, 0x5b0}, 0x28) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r4, 0x4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(0x0, 0x0) (async) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, 0x0, &(0x7f0000000200)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) recvmsg$kcm(r5, 0x0, 0x100) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x27, &(0x7f0000000940)=@framed={{0x18, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x321d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4, 0x0, 0x9, 0xb, 0x1, 0x10, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fff}, @ldst={0x0, 0x0, 0x4, 0xb, 0xb, 0x50, 0x4}, @map_fd={0x18, 0x9}, @tail_call, @alu={0x4, 0x0, 0x8, 0x4, 0x9, 0x0, 0x8}, @generic={0x9, 0x8, 0x5, 0x3, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ldst={0x1, 0x1, 0x3, 0x7, 0x0, 0x50, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x1}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x891a, &(0x7f0000000040)={'bond_slave_0\x00', @random="02008000"}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_subtree(r9, &(0x7f0000000100)={[{0x2b, 'blkio'}]}, 0x7) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800c3530000000000000000009500000000cf2a0283e5e905f238fffab8000000000000000000000000c7d48c2dd2055debc6daf587a4b21254b233b52ab65e911b5de5617168787aa2b7911002d9748bc0a7c6e3ffd7dd7c49042b6d9ceae2372cf82f052b041fa6361b8aea0eecbcce149267dd3f49557186349b124b1eaa3650c4bff15077ee3dc12004b47a647ffe765fa65f1393b366bd1a4601704ccab1d12fc863ff33a98eff40b5279578dd6efd8fd98d633ee3bb3d05a6b0ee8d0a551fd624de0a12415d55db417dbb34b8991f3b5c2f418b900ebb2d53af37a8131ee083682e79dcbd8b0da9822b11e4eb8bc5aeb5701ed4ff3d0e26e086ecb4357acfa2808fe0706d19b3ff0d3d4a95579a6f4def7a47bd0ddf918389657665425068d69cac84c09832e0819aa85fb804f8177dabd664c73edf20d04baff89c218194a271b3f71fa64bb7a5c7c0a6784bd08908a169907d022bf9deb209cec5a63c7bbddcd0d7100bc580a346f665e007598585f690d4334074c7ddaf45c02c08e29ec1d73639d861ecae697e2f4e40af81a8ee0f7629b84d93400d77ffcc8926fb083ab2cd76e28a9e3746f82e80de73bebb83db423d7291cac7c5732c15079546e7910919bbfbabe18c45861d388341f9e0"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) 29.203777664s ago: executing program 33 (id=504): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x7, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="04000000000000000000510000000000000000002d5e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000040000000000"], 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {&(0x7f0000000700)="78cafb73fc02010700200000ef000000000000", 0x13}], 0x2}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, 0x0, 0x20004044) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0xe}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @typedef={0x1}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x30, 0x2e, 0x61, 0x2e, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000340)=""/149, 0x6b, 0x95, 0x1, 0x0, 0x10000, @value=r4}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x1, 0x4, 0xa, 0x0, 0x1, 0x100, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xae1, 0x1, @perf_config_ext={0x5, 0x8}, 0x102000, 0x0, 0x1, 0x9, 0x5, 0xe, 0x7, 0x0, 0x8b8b}, 0x0, 0x5, r5, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) r6 = socket$kcm(0x22, 0x2, 0x21) recvmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 28.1380678s ago: executing program 34 (id=507): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033200fefdfff500000200875a65969ff57b00001200000000000000000000ac1414aa"], 0xfdef) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2a, 0x2, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 35 (id=511): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481ffe00005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 73.577364][ T5757] cgroup: Unknown subsys name 'net' [ 73.716561][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.478322][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.684664][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.709868][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.711219][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.722312][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.730900][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.739634][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.749260][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.751716][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.758351][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.764828][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.772721][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.779609][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.786652][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.794071][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.801193][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.810661][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.824835][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.834747][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.838946][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.851787][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.859910][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.861059][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.876364][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.889338][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.388234][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 78.414247][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 78.515579][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 78.537823][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 78.631770][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.640436][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.648513][ T5779] bridge_slave_0: entered allmulticast mode [ 78.658257][ T5779] bridge_slave_0: entered promiscuous mode [ 78.695813][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.703352][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.713260][ T5779] bridge_slave_1: entered allmulticast mode [ 78.721424][ T5779] bridge_slave_1: entered promiscuous mode [ 78.785785][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.797734][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.807412][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.818169][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.825708][ T5769] bridge_slave_0: entered allmulticast mode [ 78.834874][ T5769] bridge_slave_0: entered promiscuous mode [ 78.875466][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.884880][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.893707][ T5769] bridge_slave_1: entered allmulticast mode [ 78.901161][ T5769] bridge_slave_1: entered promiscuous mode [ 78.907861][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.915639][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.923834][ T5771] bridge_slave_0: entered allmulticast mode [ 78.931942][ T5771] bridge_slave_0: entered promiscuous mode [ 78.941318][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.948862][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.956777][ T5771] bridge_slave_1: entered allmulticast mode [ 78.964361][ T5771] bridge_slave_1: entered promiscuous mode [ 79.013057][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.020735][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.028431][ T5770] bridge_slave_0: entered allmulticast mode [ 79.035886][ T5770] bridge_slave_0: entered promiscuous mode [ 79.047188][ T5779] team0: Port device team_slave_0 added [ 79.076254][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.085332][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.093715][ T5770] bridge_slave_1: entered allmulticast mode [ 79.101652][ T5770] bridge_slave_1: entered promiscuous mode [ 79.110768][ T5779] team0: Port device team_slave_1 added [ 79.131732][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.145403][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.175922][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.186811][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.220009][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.235135][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.257735][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.265790][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.293910][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.343889][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.351186][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.380523][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.395218][ T5771] team0: Port device team_slave_0 added [ 79.416220][ T5769] team0: Port device team_slave_0 added [ 79.435544][ T5771] team0: Port device team_slave_1 added [ 79.446747][ T5770] team0: Port device team_slave_0 added [ 79.454725][ T5769] team0: Port device team_slave_1 added [ 79.494798][ T5770] team0: Port device team_slave_1 added [ 79.524954][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.532535][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.560013][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.575225][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.583146][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.610816][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.670730][ T5779] hsr_slave_0: entered promiscuous mode [ 79.677594][ T5779] hsr_slave_1: entered promiscuous mode [ 79.688304][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.695959][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.725072][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.737782][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.745553][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.772715][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.786310][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.794761][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.821995][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.853898][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.861763][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.891663][ T5085] Bluetooth: hci1: command tx timeout [ 79.897603][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.948834][ T51] Bluetooth: hci2: command tx timeout [ 79.954777][ T51] Bluetooth: hci3: command tx timeout [ 79.961260][ T5085] Bluetooth: hci0: command tx timeout [ 80.002724][ T5769] hsr_slave_0: entered promiscuous mode [ 80.010529][ T5769] hsr_slave_1: entered promiscuous mode [ 80.017416][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.025683][ T5769] Cannot create hsr debugfs directory [ 80.037661][ T5770] hsr_slave_0: entered promiscuous mode [ 80.044798][ T5770] hsr_slave_1: entered promiscuous mode [ 80.052620][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.060783][ T5770] Cannot create hsr debugfs directory [ 80.110633][ T5771] hsr_slave_0: entered promiscuous mode [ 80.118435][ T5771] hsr_slave_1: entered promiscuous mode [ 80.126378][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.135372][ T5771] Cannot create hsr debugfs directory [ 80.545693][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.559802][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.571005][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.582062][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.653585][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.666584][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.683966][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.706959][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.803187][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.823161][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.856032][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.867400][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.921216][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.999761][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.010738][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.022021][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.033588][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.053930][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.074860][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.082507][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.145657][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.152873][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.167785][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.244772][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.262306][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.269709][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.303415][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.310960][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.331329][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.402399][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.448513][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.455976][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.471038][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.478385][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.644244][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.697186][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.747249][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.755129][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.824971][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.832600][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.915430][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.949653][ T51] Bluetooth: hci1: command tx timeout [ 81.994601][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.029058][ T51] Bluetooth: hci3: command tx timeout [ 82.034814][ T51] Bluetooth: hci0: command tx timeout [ 82.043296][ T5085] Bluetooth: hci2: command tx timeout [ 82.134735][ T5779] veth0_vlan: entered promiscuous mode [ 82.205236][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.225016][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.256554][ T5779] veth1_vlan: entered promiscuous mode [ 82.337064][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.381443][ T5779] veth0_macvtap: entered promiscuous mode [ 82.415223][ T5779] veth1_macvtap: entered promiscuous mode [ 82.438310][ T5771] veth0_vlan: entered promiscuous mode [ 82.464690][ T5769] veth0_vlan: entered promiscuous mode [ 82.499995][ T5770] veth0_vlan: entered promiscuous mode [ 82.515949][ T5771] veth1_vlan: entered promiscuous mode [ 82.525497][ T5769] veth1_vlan: entered promiscuous mode [ 82.544707][ T5770] veth1_vlan: entered promiscuous mode [ 82.560632][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.601223][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.615132][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.625436][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.636969][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.646566][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.711153][ T5769] veth0_macvtap: entered promiscuous mode [ 82.725645][ T5770] veth0_macvtap: entered promiscuous mode [ 82.738408][ T5770] veth1_macvtap: entered promiscuous mode [ 82.759267][ T5769] veth1_macvtap: entered promiscuous mode [ 82.784575][ T5771] veth0_macvtap: entered promiscuous mode [ 82.825582][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.836976][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.849348][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.861318][ T5771] veth1_macvtap: entered promiscuous mode [ 82.886753][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.899094][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.914317][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.962636][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.974251][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.985513][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.996932][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.010561][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.026047][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.035704][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.044508][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.049865][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.057133][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.072020][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.090223][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.103617][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.116304][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.133913][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.150101][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.164901][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.177382][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.188219][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.200764][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.211912][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.223143][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.235878][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.271200][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.282615][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.293156][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.304437][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.315540][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.326896][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.339832][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.365786][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.377771][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.387513][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.398513][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.424257][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.433627][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.443555][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.453469][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.499983][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.508067][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.630539][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.649677][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.717431][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.734813][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.768520][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.783961][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.941185][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.964854][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.016280][ C0] hrtimer: interrupt took 66458 ns [ 84.029030][ T5085] Bluetooth: hci1: command tx timeout [ 84.090609][ T5085] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 84.112769][ T5085] Bluetooth: hci2: command tx timeout [ 84.118267][ T5085] Bluetooth: hci0: command tx timeout [ 84.121216][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.123948][ T51] Bluetooth: hci3: command tx timeout [ 84.132871][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.159468][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.181485][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.558385][ T5842] delete_channel: no stack [ 84.827498][ T5848] Zero length message leads to an empty skb [ 85.059482][ T5849] Illegal XDP return value 3386836184 on prog (id 10) dev N/A, expect packet loss! [ 85.503645][ T5853] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.561562][ T5853] netlink: 'syz.1.6': attribute type 10 has an invalid length. [ 85.610334][ T5853] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6'. [ 85.702682][ T5853] bond0: entered promiscuous mode [ 85.707822][ T5853] bond_slave_0: entered promiscuous mode [ 85.766674][ T5853] bond_slave_1: entered promiscuous mode [ 85.812119][ T5853] bridge0: port 3(bond0) entered blocking state [ 85.906759][ T5853] bridge0: port 3(bond0) entered disabled state [ 86.109001][ T5085] Bluetooth: hci1: command tx timeout [ 86.189663][ T5853] bond0: entered allmulticast mode [ 86.195257][ T5853] bond_slave_0: entered allmulticast mode [ 86.201664][ T5085] Bluetooth: hci3: command tx timeout [ 86.207590][ T5085] Bluetooth: hci2: command tx timeout [ 86.213661][ T5085] Bluetooth: hci0: command tx timeout [ 86.338402][ T5853] bond_slave_1: entered allmulticast mode [ 86.410874][ T5853] bridge0: port 3(bond0) entered blocking state [ 86.418247][ T5853] bridge0: port 3(bond0) entered forwarding state [ 89.238029][ T5883] netlink: 'syz.1.13': attribute type 10 has an invalid length. [ 89.254605][ T5883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13'. [ 89.275605][ T5883] batman_adv: batadv0: Adding interface: vlan1 [ 89.284530][ T5883] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.326195][ T5883] batman_adv: batadv0: Interface activated: vlan1 [ 89.960719][ T5884] delete_channel: no stack [ 90.117189][ T5889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16'. [ 103.851252][ T42] cfg80211: failed to load regulatory.db [ 105.501324][ T5936] delete_channel: no stack [ 108.449363][ T5945] netlink: 14 bytes leftover after parsing attributes in process `syz.2.33'. [ 111.436954][ T5945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.468223][ T5945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.518068][ T5945] bond0 (unregistering): Released all slaves [ 111.603176][ T5945] syz.2.33 (5945) used greatest stack depth: 20136 bytes left [ 111.673392][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.692355][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.751641][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.769883][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.511470][ T5996] netlink: 14 bytes leftover after parsing attributes in process `syz.3.51'. [ 113.848468][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.973751][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.185729][ T5996] bond0 (unregistering): Released all slaves [ 114.344064][ T6004] warning: `syz.0.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.611237][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.654039][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.709735][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.718876][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.881009][ T6026] netlink: 'syz.3.68': attribute type 29 has an invalid length. [ 115.331617][ T6028] netlink: 'syz.3.68': attribute type 1 has an invalid length. [ 115.341175][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 115.352227][ T6030] netlink: 'syz.3.68': attribute type 1 has an invalid length. [ 115.363823][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 115.385854][ T6026] netlink: 'syz.3.68': attribute type 29 has an invalid length. [ 115.717342][ T6041] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 115.724705][ T6041] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 115.749985][ T6038] delete_channel: no stack [ 117.337871][ T6066] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.74'. [ 117.367121][ T6066] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.74'. [ 117.387231][ T6066] netlink: 2 bytes leftover after parsing attributes in process `syz.3.74'. [ 117.410732][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.421619][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.440537][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.490678][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.531639][ T6070] batman_adv: batadv0: Interface deactivated: vlan1 [ 117.554857][ T6070] batman_adv: batadv0: Removing interface: vlan1 [ 118.547226][ T6076] delete_channel: no stack [ 120.028350][ T6083] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 120.056339][ T6083] veth1_vlan: entered allmulticast mode [ 120.222063][ T6088] sctp: [Deprecated]: syz.0.85 (pid 6088) Use of int in max_burst socket option deprecated. [ 120.222063][ T6088] Use struct sctp_assoc_value instead [ 121.217002][ T6109] delete_channel: no stack [ 121.636769][ T6119] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.90'. [ 122.963237][ T6130] syzkaller0: entered promiscuous mode [ 122.969117][ T6130] syzkaller0: entered allmulticast mode [ 123.666539][ T6143] sctp: [Deprecated]: syz.2.95 (pid 6143) Use of int in max_burst socket option deprecated. [ 123.666539][ T6143] Use struct sctp_assoc_value instead [ 124.566756][ T6144] delete_channel: no stack [ 124.988431][ T6140] veth1_vlan: entered allmulticast mode [ 128.642160][ T6180] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.104'. [ 129.745233][ T6185] delete_channel: no stack [ 129.754491][ T6190] veth1_vlan: entered allmulticast mode [ 129.955668][ T6193] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 130.876878][ T6203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.114'. [ 133.317354][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.326224][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.583106][ T6212] delete_channel: no stack [ 133.757953][ T6215] netlink: 'syz.3.118': attribute type 9 has an invalid length. [ 133.963629][ T6226] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.123'. [ 133.980753][ T6226] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.123'. [ 133.990433][ T6226] netlink: 2 bytes leftover after parsing attributes in process `syz.2.123'. [ 134.859574][ T6228] netlink: 'syz.0.124': attribute type 25 has an invalid length. [ 140.254084][ T6246] delete_channel: no stack [ 140.362274][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 141.511173][ T5784] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 141.676890][ T6265] netlink: 'syz.1.135': attribute type 25 has an invalid length. [ 143.013068][ T6279] delete_channel: no stack [ 144.223310][ T6307] delete_channel: no stack [ 144.593449][ T6315] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.152'. [ 144.898106][ T6325] netlink: 'syz.3.156': attribute type 153 has an invalid length. [ 144.944930][ T6325] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.156'. [ 145.022243][ T6327] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.156'. [ 145.058580][ T6327] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 145.090359][ T6327] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 146.365518][ T6341] delete_channel: no stack [ 150.320762][ T6380] netlink: 164 bytes leftover after parsing attributes in process `syz.0.174'. [ 150.378043][ T6378] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.175'. [ 150.605137][ T6389] mac80211_hwsim hwsim6 ..ãc¤±: renamed from wlan1 (while UP) [ 150.890557][ T6398] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.183'. [ 150.900632][ T6398] bridge_slave_1: default FDB implementation only supports local addresses [ 150.923760][ T6398] netlink: 'syz.2.183': attribute type 33 has an invalid length. [ 150.933484][ T6398] netlink: 152 bytes leftover after parsing attributes in process `syz.2.183'. [ 151.620405][ T6409] wlan0: mtu greater than device maximum [ 151.999200][ T6417] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.188'. [ 152.054398][ T6414] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.190'. [ 152.149192][ T6420] netlink: 'syz.2.191': attribute type 25 has an invalid length. [ 152.303302][ T6422] sctp: [Deprecated]: syz.1.192 (pid 6422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.303302][ T6422] Use struct sctp_sack_info instead [ 152.787494][ T6431] netlink: 'syz.0.194': attribute type 29 has an invalid length. [ 152.847979][ T6431] netlink: 'syz.0.194': attribute type 29 has an invalid length. [ 152.889455][ T6432] netlink: 'syz.0.194': attribute type 29 has an invalid length. [ 155.063863][ T6467] netlink: 'syz.1.204': attribute type 29 has an invalid length. [ 155.073866][ T6467] netlink: 'syz.1.204': attribute type 29 has an invalid length. [ 155.105463][ T6467] netlink: 'syz.1.204': attribute type 29 has an invalid length. [ 155.221698][ T6469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.205'. [ 155.290680][ T6462] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.202'. [ 155.805922][ T6487] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.211'. [ 156.187109][ T6414] syz.3.190 (6414) used greatest stack depth: 19752 bytes left [ 156.709063][ T6494] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.213'. [ 156.946772][ T6499] netlink: 'syz.2.215': attribute type 29 has an invalid length. [ 156.964436][ T6499] netlink: 'syz.2.215': attribute type 29 has an invalid length. [ 157.000227][ T6499] netlink: 'syz.2.215': attribute type 29 has an invalid length. [ 157.220963][ T6502] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 157.253181][ T6502] team0: Device veth1_macvtap failed to register rx_handler [ 157.785779][ T6512] syzkaller0: entered promiscuous mode [ 157.792339][ T6512] syzkaller0: entered allmulticast mode [ 158.583165][ T6533] netlink: 'syz.3.227': attribute type 29 has an invalid length. [ 160.431802][ T6533] netlink: 'syz.3.227': attribute type 29 has an invalid length. [ 160.451508][ T6540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.504874][ T6541] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.229'. [ 160.525692][ T6544] netlink: 156 bytes leftover after parsing attributes in process `syz.0.230'. [ 160.742010][ T6554] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.233'. [ 160.762276][ T6554] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.233'. [ 160.785547][ T6554] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.233'. [ 160.931653][ T6561] netlink: 'syz.0.235': attribute type 29 has an invalid length. [ 162.907180][ T6561] netlink: 'syz.0.235': attribute type 29 has an invalid length. [ 162.961068][ T6563] syz.1.236 (6563) used greatest stack depth: 19048 bytes left [ 163.191018][ T6576] netlink: 'syz.2.239': attribute type 29 has an invalid length. [ 163.342187][ T6576] netlink: 'syz.2.239': attribute type 29 has an invalid length. [ 163.371379][ T6580] netlink: 'syz.2.239': attribute type 29 has an invalid length. [ 163.406364][ T6584] netlink: 'syz.2.239': attribute type 29 has an invalid length. [ 164.392933][ T6587] delete_channel: no stack [ 165.140009][ T6620] netlink: 'syz.0.250': attribute type 29 has an invalid length. [ 165.153152][ T6620] netlink: 'syz.0.250': attribute type 29 has an invalid length. [ 165.163744][ T6620] netlink: 'syz.0.250': attribute type 29 has an invalid length. [ 165.182791][ T6620] netlink: 'syz.0.250': attribute type 29 has an invalid length. [ 165.378429][ T6626] netlink: 'syz.0.253': attribute type 21 has an invalid length. [ 165.397052][ T59] wlan1: Trigger new scan to find an IBSS to join [ 166.469476][ T6649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.287216][ T6655] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.264'. [ 167.375941][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 167.654805][ T6660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.266'. [ 167.703701][ T6665] netlink: 176 bytes leftover after parsing attributes in process `syz.1.267'. [ 168.135457][ T6682] FAULT_INJECTION: forcing a failure. [ 168.135457][ T6682] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 168.161065][ T6681] validate_nla: 6 callbacks suppressed [ 168.161083][ T6681] netlink: 'syz.0.271': attribute type 29 has an invalid length. [ 168.168165][ T6682] CPU: 1 PID: 6682 Comm: syz.3.273 Not tainted syzkaller #0 [ 168.182117][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.192397][ T6682] Call Trace: [ 168.196171][ T6682] [ 168.199158][ T6682] dump_stack_lvl+0x18c/0x250 [ 168.203912][ T6682] ? show_regs_print_info+0x20/0x20 [ 168.209173][ T6682] ? load_image+0x420/0x420 [ 168.213832][ T6682] ? __might_fault+0xaa/0x120 [ 168.218585][ T6682] ? __lock_acquire+0x7d40/0x7d40 [ 168.220046][ T6681] netlink: 'syz.0.271': attribute type 29 has an invalid length. [ 168.223831][ T6682] should_fail_ex+0x39d/0x4d0 [ 168.236559][ T6682] _copy_from_user+0x2f/0xe0 [ 168.241220][ T6682] csum_and_copy_from_iter+0x1f3/0x14a0 [ 168.246832][ T6682] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 168.252514][ T6682] ? __kmem_cache_alloc_node+0x13a/0x250 [ 168.258293][ T6682] ? __alloc_skb+0x138/0x2c0 [ 168.263019][ T6682] ? rcu_is_watching+0x15/0xb0 [ 168.267921][ T6682] ip_generic_getfrag+0x163/0x2f0 [ 168.273348][ T6682] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 168.278537][ T6682] ? skb_put+0x11b/0x210 [ 168.280711][ T6684] netlink: 'syz.0.271': attribute type 29 has an invalid length. [ 168.282955][ T6682] __ip6_append_data+0x2f1b/0x3c50 [ 168.283019][ T6682] ? rawv6_send_hdrinc+0x1640/0x1640 [ 168.283057][ T6682] ? ip6_setup_cork+0xfe0/0xfe0 [ 168.283089][ T6682] ip6_append_data+0x1b0/0x350 [ 168.283118][ T6682] ? rawv6_send_hdrinc+0x1640/0x1640 [ 168.283146][ T6682] rawv6_sendmsg+0x1264/0x1770 [ 168.283190][ T6682] ? compat_rawv6_ioctl+0x70/0x70 [ 168.283224][ T6682] ? aa_sk_perm+0x83c/0x970 [ 168.283263][ T6682] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 168.283295][ T6682] ? inet_sendmsg+0x7c/0x2f0 [ 168.283324][ T6682] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 168.283348][ T6682] ? security_socket_sendmsg+0x80/0xa0 [ 168.283369][ T6682] ? inet_send_prepare+0x260/0x260 [ 168.283394][ T6682] ____sys_sendmsg+0x5ba/0x960 [ 168.283414][ T6682] ? __lock_acquire+0x7d40/0x7d40 [ 168.283441][ T6682] ? __asan_memset+0x22/0x40 [ 168.312961][ T6686] netlink: 'syz.0.271': attribute type 29 has an invalid length. [ 168.316614][ T6682] ? __sys_sendmsg_sock+0x30/0x30 [ 168.316643][ T6682] ? __import_iovec+0x5f2/0x850 [ 168.391730][ T6682] ? import_iovec+0x73/0xa0 [ 168.396402][ T6682] ___sys_sendmsg+0x2a6/0x360 [ 168.401416][ T6682] ? get_pid_task+0x20/0x1e0 [ 168.406244][ T6682] ? __sys_sendmsg+0x2a0/0x2a0 [ 168.411084][ T6682] ? __lock_acquire+0x7d40/0x7d40 [ 168.416218][ T6682] __se_sys_sendmsg+0x1c2/0x2b0 [ 168.421203][ T6682] ? __x64_sys_sendmsg+0x80/0x80 [ 168.426452][ T6682] ? lockdep_hardirqs_on+0x98/0x150 [ 168.431791][ T6682] do_syscall_64+0x55/0xa0 [ 168.436517][ T6682] ? clear_bhb_loop+0x40/0x90 [ 168.441264][ T6682] ? clear_bhb_loop+0x40/0x90 [ 168.446128][ T6682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.452405][ T6682] RIP: 0033:0x7fc220b9c819 [ 168.456957][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.476959][ T6682] RSP: 002b:00007fc221b46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.485841][ T6682] RAX: ffffffffffffffda RBX: 00007fc220e15fa0 RCX: 00007fc220b9c819 [ 168.494250][ T6682] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 168.502621][ T6682] RBP: 00007fc221b46090 R08: 0000000000000000 R09: 0000000000000000 [ 168.510920][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.519292][ T6682] R13: 00007fc220e16038 R14: 00007fc220e15fa0 R15: 00007ffd746c8808 [ 168.527427][ T6682] [ 169.235012][ T6703] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.276'. [ 169.308843][ T1145] wlan1: Trigger new scan to find an IBSS to join [ 169.477391][ T6701] netlink: 'syz.3.276': attribute type 39 has an invalid length. [ 169.678313][ T6701] hsr_slave_1 (unregistering): left promiscuous mode [ 169.983288][ T6711] syzkaller0: entered allmulticast mode [ 170.088266][ T6720] netlink: 'syz.3.283': attribute type 29 has an invalid length. [ 170.126712][ T6720] netlink: 'syz.3.283': attribute type 29 has an invalid length. [ 170.175708][ T6721] netlink: 'syz.3.283': attribute type 29 has an invalid length. [ 170.200304][ T6720] netlink: 'syz.3.283': attribute type 29 has an invalid length. [ 171.240621][ T6736] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.289'. [ 171.561200][ T6741] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 171.588933][ T6741] netlink: 2 bytes leftover after parsing attributes in process `syz.2.290'. [ 171.626166][ T6741] hsr0: entered promiscuous mode [ 171.670299][ T6741] bridge0: port 3(hsr0) entered blocking state [ 171.709991][ T6741] bridge0: port 3(hsr0) entered disabled state [ 171.741844][ T6741] hsr0: entered allmulticast mode [ 171.762726][ T6741] hsr_slave_0: entered allmulticast mode [ 171.781851][ T6741] hsr_slave_1: entered allmulticast mode [ 171.844669][ T6741] bridge0: port 3(hsr0) entered blocking state [ 171.852246][ T6741] bridge0: port 3(hsr0) entered forwarding state [ 172.135671][ T6750] wlan0: mtu greater than device maximum [ 172.322040][ T6755] syzkaller0: entered promiscuous mode [ 172.327766][ T6755] syzkaller0: entered allmulticast mode [ 172.348041][ T6759] netlink: 152 bytes leftover after parsing attributes in process `syz.0.298'. [ 172.358072][ T12] wlan1: Trigger new scan to find an IBSS to join [ 172.377618][ T6759] .`: renamed from bond0 (while UP) [ 172.624727][ T6766] netlink: 168 bytes leftover after parsing attributes in process `syz.0.301'. [ 172.679003][ T6766] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 172.700389][ T6766] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 173.280167][ T59] wlan1: Creating new IBSS network, BSSID 12:11:a3:f8:ce:ea [ 174.694717][ T6779] wlan0: mtu greater than device maximum [ 174.714659][ T6774] validate_nla: 3 callbacks suppressed [ 174.714679][ T6774] netlink: 'syz.2.305': attribute type 46 has an invalid length. [ 174.796331][ T6781] netlink: 'syz.2.305': attribute type 46 has an invalid length. [ 175.220484][ T6791] netlink: 'syz.3.308': attribute type 10 has an invalid length. [ 175.248033][ T6791] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.308'. [ 176.016300][ T6811] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 176.248626][ T6818] wlan0: mtu greater than device maximum [ 176.575615][ T6828] netlink: 60 bytes leftover after parsing attributes in process `syz.1.321'. [ 176.593813][ T6828] netlink: 60 bytes leftover after parsing attributes in process `syz.1.321'. [ 176.612046][ T6828] netlink: 60 bytes leftover after parsing attributes in process `syz.1.321'. [ 176.961987][ T6843] netlink: 10 bytes leftover after parsing attributes in process `syz.2.326'. [ 177.984931][ T6850] netlink: 'syz.3.328': attribute type 29 has an invalid length. [ 178.019237][ T6850] netlink: 'syz.3.328': attribute type 29 has an invalid length. [ 178.054608][ T6850] netlink: 'syz.3.328': attribute type 29 has an invalid length. [ 178.082795][ T6850] netlink: 'syz.3.328': attribute type 29 has an invalid length. [ 178.115402][ T6854] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.330'. [ 178.127129][ T6853] netlink: 'syz.0.329': attribute type 29 has an invalid length. [ 178.166164][ T6853] netlink: 'syz.0.329': attribute type 29 has an invalid length. [ 178.175469][ T6855] netlink: 'syz.0.329': attribute type 29 has an invalid length. [ 178.255986][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 178.558376][ T6869] netlink: 168 bytes leftover after parsing attributes in process `syz.1.336'. [ 178.582603][ T6864] FAULT_INJECTION: forcing a failure. [ 178.582603][ T6864] name failslab, interval 1, probability 0, space 0, times 1 [ 178.599375][ T6864] CPU: 0 PID: 6864 Comm: syz.0.334 Not tainted syzkaller #0 [ 178.606915][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 178.617804][ T6864] Call Trace: [ 178.621224][ T6864] [ 178.624482][ T6864] dump_stack_lvl+0x18c/0x250 [ 178.629341][ T6864] ? show_regs_print_info+0x20/0x20 [ 178.634682][ T6864] ? load_image+0x420/0x420 [ 178.639427][ T6864] should_fail_ex+0x39d/0x4d0 [ 178.644249][ T6864] should_failslab+0x9/0x20 [ 178.648892][ T6864] slab_pre_alloc_hook+0x59/0x310 [ 178.654199][ T6864] ? perf_trace_preemptirq_template+0x269/0x330 [ 178.660569][ T6864] kmem_cache_alloc_node+0x60/0x320 [ 178.665800][ T6864] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 178.671815][ T6864] ? __alloc_skb+0x103/0x2c0 [ 178.676448][ T6864] __alloc_skb+0x103/0x2c0 [ 178.680972][ T6864] alloc_skb_with_frags+0xca/0x7b0 [ 178.686142][ T6864] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 178.692604][ T6864] sock_alloc_send_pskb+0x883/0x9a0 [ 178.698026][ T6864] ? sock_kzfree_s+0x50/0x50 [ 178.702849][ T6864] ? dev_get_by_index+0x22/0x2d0 [ 178.708409][ T6864] ? dev_get_by_index+0x22/0x2d0 [ 178.713576][ T6864] packet_sendmsg+0x316e/0x4d70 [ 178.718580][ T6864] ? lock_chain_count+0x20/0x20 [ 178.723818][ T6864] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 178.729653][ T6864] ? perf_trace_preemptirq_template+0x269/0x330 [ 178.736182][ T6864] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 178.742192][ T6864] ? lock_chain_count+0x20/0x20 [ 178.747355][ T6864] ? aa_sk_perm+0x83c/0x970 [ 178.751984][ T6864] ? packet_getsockopt+0xad0/0xad0 [ 178.757115][ T6864] ? lockdep_hardirqs_on+0x98/0x150 [ 178.762422][ T6864] ? packet_getsockopt+0xad0/0xad0 [ 178.767648][ T6864] ? packet_getsockopt+0xad0/0xad0 [ 178.772777][ T6864] ____sys_sendmsg+0x5ba/0x960 [ 178.777649][ T6864] ? __asan_memset+0x22/0x40 [ 178.782354][ T6864] ? __sys_sendmsg_sock+0x30/0x30 [ 178.787478][ T6864] ? __import_iovec+0x5f2/0x850 [ 178.792525][ T6864] ? import_iovec+0x73/0xa0 [ 178.797073][ T6864] ___sys_sendmsg+0x2a6/0x360 [ 178.801853][ T6864] ? get_pid_task+0x20/0x1e0 [ 178.806470][ T6864] ? __sys_sendmsg+0x2a0/0x2a0 [ 178.811443][ T6864] ? __lock_acquire+0x7d40/0x7d40 [ 178.816515][ T6864] __se_sys_sendmsg+0x1c2/0x2b0 [ 178.821380][ T6864] ? __x64_sys_sendmsg+0x80/0x80 [ 178.826432][ T6864] ? lockdep_hardirqs_on+0x98/0x150 [ 178.831831][ T6864] do_syscall_64+0x55/0xa0 [ 178.836379][ T6864] ? clear_bhb_loop+0x40/0x90 [ 178.841249][ T6864] ? clear_bhb_loop+0x40/0x90 [ 178.845956][ T6864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.852045][ T6864] RIP: 0033:0x7f6e4619c819 [ 178.856658][ T6864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.877248][ T6864] RSP: 002b:00007f6e47013028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.885776][ T6864] RAX: ffffffffffffffda RBX: 00007f6e46415fa0 RCX: 00007f6e4619c819 [ 178.893847][ T6864] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 000000000000000d [ 178.901921][ T6864] RBP: 00007f6e47013090 R08: 0000000000000000 R09: 0000000000000000 [ 178.910112][ T6864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.918099][ T6864] R13: 00007f6e46416038 R14: 00007f6e46415fa0 R15: 00007ffc3c7e4d18 [ 178.926190][ T6864] [ 178.958780][ T6872] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 178.970994][ T6872] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 179.740054][ T6887] validate_nla: 5 callbacks suppressed [ 179.740076][ T6887] netlink: 'syz.2.342': attribute type 29 has an invalid length. [ 179.756884][ T6887] netlink: 'syz.2.342': attribute type 29 has an invalid length. [ 179.772066][ T6887] netlink: 'syz.2.342': attribute type 29 has an invalid length. [ 179.784206][ T6887] netlink: 'syz.2.342': attribute type 29 has an invalid length. [ 179.910566][ T6890] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.343'. [ 179.928895][ T6891] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.343'. [ 179.949754][ T6891] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 179.959068][ T6890] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 180.170165][ T6896] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.344'. [ 180.250895][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 180.563743][ T6905] netlink: 168 bytes leftover after parsing attributes in process `syz.2.348'. [ 180.718822][ T6911] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 180.728674][ T6911] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 180.767050][ T6909] netlink: 'syz.3.349': attribute type 21 has an invalid length. [ 180.775557][ T6909] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.808964][ T6909] IPv6: Can't replace route, no match found [ 180.897707][ T6917] netlink: 'syz.1.351': attribute type 29 has an invalid length. [ 180.909246][ T6917] netlink: 'syz.1.351': attribute type 29 has an invalid length. [ 180.913898][ T6915] netlink: 'syz.2.352': attribute type 29 has an invalid length. [ 180.922496][ T6917] netlink: 'syz.1.351': attribute type 29 has an invalid length. [ 180.939163][ T6917] netlink: 'syz.1.351': attribute type 29 has an invalid length. [ 181.165898][ T6927] veth1_vlan: mtu less than device minimum [ 181.254360][ T6931] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.357'. [ 183.000940][ T6977] netlink: 21 bytes leftover after parsing attributes in process `syz.2.373'. [ 183.013392][ T6977] ksmbd: Unknown IPC event: 0, ignore. [ 183.432635][ T6983] netlink: 160 bytes leftover after parsing attributes in process `syz.3.375'. [ 183.507162][ T6983] erspan0: refused to change device tx_queue_len [ 183.537729][ T6983] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 183.657564][ T6995] FAULT_INJECTION: forcing a failure. [ 183.657564][ T6995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.688807][ T6995] CPU: 1 PID: 6995 Comm: syz.0.378 Not tainted syzkaller #0 [ 183.696293][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 183.706493][ T6995] Call Trace: [ 183.709852][ T6995] [ 183.712831][ T6995] dump_stack_lvl+0x18c/0x250 [ 183.717582][ T6995] ? show_regs_print_info+0x20/0x20 [ 183.722925][ T6995] ? load_image+0x420/0x420 [ 183.727464][ T6995] ? __lock_acquire+0x7d40/0x7d40 [ 183.732600][ T6995] ? __virt_addr_valid+0x18c/0x540 [ 183.737762][ T6995] should_fail_ex+0x39d/0x4d0 [ 183.742687][ T6995] _copy_from_user+0x2f/0xe0 [ 183.747386][ T6995] bpf_test_init+0xde/0x140 [ 183.751945][ T6995] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 183.757366][ T6995] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 183.763745][ T6995] ? lockdep_hardirqs_on+0x98/0x150 [ 183.769078][ T6995] ? dev_put+0x80/0x80 [ 183.773176][ T6995] ? dev_put+0x80/0x80 [ 183.777359][ T6995] bpf_prog_test_run+0x321/0x390 [ 183.782412][ T6995] __sys_bpf+0x49d/0x890 [ 183.786709][ T6995] ? bpf_link_show_fdinfo+0x390/0x390 [ 183.792428][ T6995] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 183.798656][ T6995] __x64_sys_bpf+0x7c/0x90 [ 183.803106][ T6995] do_syscall_64+0x55/0xa0 [ 183.807632][ T6995] ? clear_bhb_loop+0x40/0x90 [ 183.812507][ T6995] ? clear_bhb_loop+0x40/0x90 [ 183.817301][ T6995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.823498][ T6995] RIP: 0033:0x7f6e4619c819 [ 183.828028][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.848380][ T6995] RSP: 002b:00007f6e47013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.856995][ T6995] RAX: ffffffffffffffda RBX: 00007f6e46415fa0 RCX: 00007f6e4619c819 [ 183.865422][ T6995] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 183.873759][ T6995] RBP: 00007f6e47013090 R08: 0000000000000000 R09: 0000000000000000 [ 183.882095][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.890261][ T6995] R13: 00007f6e46416038 R14: 00007f6e46415fa0 R15: 00007ffc3c7e4d18 [ 183.898349][ T6995] [ 184.188678][ T5085] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 184.600289][ T7022] syz.3.391 uses obsolete (PF_INET,SOCK_PACKET) [ 187.574862][ T7073] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.407'. [ 188.423879][ T7097] netlink: 180 bytes leftover after parsing attributes in process `syz.2.418'. [ 188.579314][ T7104] wlan0: mtu greater than device maximum [ 188.775149][ T7110] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.422'. [ 189.057865][ T7120] netlink: 152 bytes leftover after parsing attributes in process `syz.1.427'. [ 189.068026][ T7120] tc_dump_action: action bad kind [ 189.095555][ T7117] syzkaller0: entered promiscuous mode [ 189.103833][ T7117] syzkaller0: entered allmulticast mode [ 189.451512][ T7130] wlan0: mtu greater than device maximum [ 189.589666][ T5085] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 190.083068][ T7146] netlink: 'syz.2.438': attribute type 11 has an invalid length. [ 190.150557][ T7146] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.438'. [ 190.808398][ T7152] wlan0: mtu greater than device maximum [ 190.826882][ T7154] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.441'. [ 190.842936][ T7154] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 191.161220][ T7164] validate_nla: 19 callbacks suppressed [ 191.161238][ T7164] netlink: 'syz.1.445': attribute type 29 has an invalid length. [ 191.220786][ T7164] netlink: 'syz.1.445': attribute type 29 has an invalid length. [ 191.428130][ T7169] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.447'. [ 191.488743][ T7172] netlink: 140 bytes leftover after parsing attributes in process `syz.3.448'. [ 191.521162][ T7169] netlink: 21096 bytes leftover after parsing attributes in process `syz.0.447'. [ 191.538647][ T7169] tipc: Started in network mode [ 191.550308][ T7169] tipc: Node identity 1a, cluster identity 4711 [ 191.580872][ T7169] tipc: Node number set to 26 [ 191.593917][ T7165] netlink: 'syz.1.445': attribute type 29 has an invalid length. [ 191.776631][ T7174] wlan0: mtu greater than device maximum [ 191.813066][ T7178] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.449'. [ 191.854675][ T7178] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.952279][ T7185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.453'. [ 191.971594][ T7185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.453'. [ 192.503787][ T7197] hsr0: VLAN not yet supported [ 194.410555][ T7222] __nla_validate_parse: 1 callbacks suppressed [ 194.410577][ T7222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.463'. [ 194.480425][ T7222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.463'. [ 194.756414][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.765620][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.646310][ T7229] wlan0: mtu greater than device maximum [ 196.717637][ T7250] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.473'. [ 197.758385][ T7265] wlan0: mtu greater than device maximum [ 198.068742][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.482'. [ 198.082097][ T7272] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.480'. [ 198.108725][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.482'. [ 198.185575][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.482'. [ 198.274180][ T7275] delete_channel: no stack [ 198.842847][ T7290] FAULT_INJECTION: forcing a failure. [ 198.842847][ T7290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.879803][ T7290] CPU: 1 PID: 7290 Comm: syz.2.489 Not tainted syzkaller #0 [ 198.887363][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.897632][ T7290] Call Trace: [ 198.900940][ T7290] [ 198.903924][ T7290] dump_stack_lvl+0x18c/0x250 [ 198.908642][ T7290] ? show_regs_print_info+0x20/0x20 [ 198.913870][ T7290] ? load_image+0x420/0x420 [ 198.918399][ T7290] ? __might_fault+0xaa/0x120 [ 198.923105][ T7290] ? __lock_acquire+0x7d40/0x7d40 [ 198.928331][ T7290] should_fail_ex+0x39d/0x4d0 [ 198.933129][ T7290] _copy_from_user+0x2f/0xe0 [ 198.937918][ T7290] csum_and_copy_from_iter+0x1f3/0x14a0 [ 198.943578][ T7290] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 198.949578][ T7290] ? lock_chain_count+0x20/0x20 [ 198.954537][ T7290] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 198.960181][ T7290] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.966441][ T7290] ? lockdep_hardirqs_on+0x98/0x150 [ 198.971659][ T7290] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.977839][ T7290] ip_generic_getfrag+0x163/0x2f0 [ 198.982885][ T7290] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 198.987753][ T7290] ? skb_put+0x11b/0x210 [ 198.992020][ T7290] __ip6_append_data+0x2f1b/0x3c50 [ 198.997261][ T7290] ? rawv6_send_hdrinc+0x1640/0x1640 [ 199.002749][ T7290] ? ip6_setup_cork+0xfe0/0xfe0 [ 199.007620][ T7290] ? kasan_check_range+0x8f/0x290 [ 199.012666][ T7290] ip6_append_data+0x1b0/0x350 [ 199.017448][ T7290] ? rawv6_send_hdrinc+0x1640/0x1640 [ 199.022760][ T7290] rawv6_sendmsg+0x1264/0x1770 [ 199.027649][ T7290] ? perf_trace_preemptirq_template+0x269/0x330 [ 199.034009][ T7290] ? compat_rawv6_ioctl+0x70/0x70 [ 199.039059][ T7290] ? lock_chain_count+0x20/0x20 [ 199.043935][ T7290] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 199.050400][ T7290] ? compat_rawv6_ioctl+0x70/0x70 [ 199.055721][ T7290] ? inet_send_prepare+0x260/0x260 [ 199.060854][ T7290] ____sys_sendmsg+0x5ba/0x960 [ 199.065643][ T7290] ? __lock_acquire+0x7d40/0x7d40 [ 199.070778][ T7290] ? __asan_memset+0x22/0x40 [ 199.075489][ T7290] ? __sys_sendmsg_sock+0x30/0x30 [ 199.080788][ T7290] ? __import_iovec+0x5f2/0x850 [ 199.085663][ T7290] ? import_iovec+0x73/0xa0 [ 199.090276][ T7290] ___sys_sendmsg+0x2a6/0x360 [ 199.095077][ T7290] ? __sys_sendmsg+0x2a0/0x2a0 [ 199.100011][ T7290] __se_sys_sendmsg+0x1c2/0x2b0 [ 199.104887][ T7290] ? __x64_sys_sendmsg+0x80/0x80 [ 199.109885][ T7290] ? syscall_enter_from_user_mode+0x2e/0x80 [ 199.115829][ T7290] do_syscall_64+0x55/0xa0 [ 199.120452][ T7290] ? clear_bhb_loop+0x40/0x90 [ 199.125159][ T7290] ? clear_bhb_loop+0x40/0x90 [ 199.129945][ T7290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.135893][ T7290] RIP: 0033:0x7f3d0839c819 [ 199.140325][ T7290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.160151][ T7290] RSP: 002b:00007f3d0928c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.168954][ T7290] RAX: ffffffffffffffda RBX: 00007f3d08615fa0 RCX: 00007f3d0839c819 [ 199.176962][ T7290] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000006 [ 199.184954][ T7290] RBP: 00007f3d0928c090 R08: 0000000000000000 R09: 0000000000000000 [ 199.193230][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.201316][ T7290] R13: 00007f3d08616038 R14: 00007f3d08615fa0 R15: 00007ffd30ae8468 [ 199.209318][ T7290] [ 199.614462][ T7299] netlink: 'syz.3.492': attribute type 21 has an invalid length. [ 199.757965][ T7303] delete_channel: no stack [ 200.179984][ T7319] FAULT_INJECTION: forcing a failure. [ 200.179984][ T7319] name failslab, interval 1, probability 0, space 0, times 0 [ 200.219866][ T7319] CPU: 0 PID: 7319 Comm: syz.2.500 Not tainted syzkaller #0 [ 200.227329][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 200.237688][ T7319] Call Trace: [ 200.241088][ T7319] [ 200.244144][ T7319] dump_stack_lvl+0x18c/0x250 [ 200.248956][ T7319] ? sctp_sendmsg+0x1575/0x28c0 [ 200.254028][ T7319] ? ___sys_sendmsg+0x2a6/0x360 [ 200.258916][ T7319] ? show_regs_print_info+0x20/0x20 [ 200.264161][ T7319] ? load_image+0x420/0x420 [ 200.268722][ T7319] should_fail_ex+0x39d/0x4d0 [ 200.273483][ T7319] should_failslab+0x9/0x20 [ 200.278214][ T7319] slab_pre_alloc_hook+0x59/0x310 [ 200.283506][ T7319] ? sctp_add_bind_addr+0x8c/0x360 [ 200.288835][ T7319] __kmem_cache_alloc_node+0x53/0x250 [ 200.294512][ T7319] ? sctp_add_bind_addr+0x8c/0x360 [ 200.299826][ T7319] kmalloc_trace+0x2a/0xe0 [ 200.304282][ T7319] sctp_add_bind_addr+0x8c/0x360 [ 200.309461][ T7319] sctp_copy_local_addr_list+0x315/0x4f0 [ 200.315328][ T7319] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 200.321183][ T7319] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 200.327379][ T7319] ? sctp_v4_is_any+0x35/0x60 [ 200.332623][ T7319] ? sctp_copy_one_addr+0x8c/0x350 [ 200.337891][ T7319] sctp_bind_addr_copy+0xb3/0x3c0 [ 200.343127][ T7319] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 200.349632][ T7319] sctp_connect_new_asoc+0x2f9/0x6a0 [ 200.354973][ T7319] ? __sctp_connect+0xd80/0xd80 [ 200.359878][ T7319] ? __local_bh_enable_ip+0x13a/0x1c0 [ 200.365477][ T7319] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 200.371073][ T7319] ? security_sctp_bind_connect+0x89/0xb0 [ 200.376928][ T7319] sctp_sendmsg+0x1575/0x28c0 [ 200.381667][ T7319] ? sctp_getsockopt+0xb60/0xb60 [ 200.386736][ T7319] ? aa_sk_perm+0x83c/0x970 [ 200.391305][ T7319] ? aa_af_perm+0x330/0x330 [ 200.395903][ T7319] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 200.402560][ T7319] ? sock_rps_record_flow+0x19/0x3f0 [ 200.407963][ T7319] ? inet_sendmsg+0xe9/0x2f0 [ 200.412574][ T7319] ? inet_send_prepare+0x260/0x260 [ 200.417883][ T7319] ____sys_sendmsg+0x5ba/0x960 [ 200.422762][ T7319] ? __lock_acquire+0x7d40/0x7d40 [ 200.427816][ T7319] ? __asan_memset+0x22/0x40 [ 200.432703][ T7319] ? __sys_sendmsg_sock+0x30/0x30 [ 200.437851][ T7319] ? __import_iovec+0x5f2/0x850 [ 200.442818][ T7319] ? import_iovec+0x73/0xa0 [ 200.447532][ T7319] ___sys_sendmsg+0x2a6/0x360 [ 200.452322][ T7319] ? __sys_sendmsg+0x2a0/0x2a0 [ 200.457218][ T7319] ? __lock_acquire+0x7d40/0x7d40 [ 200.462632][ T7319] __se_sys_sendmsg+0x1c2/0x2b0 [ 200.467531][ T7319] ? __x64_sys_sendmsg+0x80/0x80 [ 200.472502][ T7319] ? lockdep_hardirqs_on+0x98/0x150 [ 200.477722][ T7319] do_syscall_64+0x55/0xa0 [ 200.482325][ T7319] ? clear_bhb_loop+0x40/0x90 [ 200.487102][ T7319] ? clear_bhb_loop+0x40/0x90 [ 200.491818][ T7319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.497839][ T7319] RIP: 0033:0x7f3d0839c819 [ 200.502279][ T7319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.522361][ T7319] RSP: 002b:00007f3d0928c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.530809][ T7319] RAX: ffffffffffffffda RBX: 00007f3d08615fa0 RCX: 00007f3d0839c819 [ 200.538904][ T7319] RDX: 00000000000000fc RSI: 0000200000000600 RDI: 0000000000000003 [ 200.547166][ T7319] RBP: 00007f3d0928c090 R08: 0000000000000000 R09: 0000000000000000 [ 200.555248][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.563255][ T7319] R13: 00007f3d08616038 R14: 00007f3d08615fa0 R15: 00007ffd30ae8468 [ 200.571266][ T7319] [ 200.949040][ T7327] wlan0: mtu greater than device maximum [ 201.982963][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 201.983957][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 201.989505][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 201.995283][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 202.532813][ T7335] delete_channel: no stack [ 216.100778][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.110231][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.118347][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.126954][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.135874][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.143465][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.188737][ T51] Bluetooth: hci4: command tx timeout [ 220.269986][ T51] Bluetooth: hci4: command tx timeout [ 222.348958][ T51] Bluetooth: hci4: command tx timeout [ 224.432720][ T51] Bluetooth: hci4: command tx timeout [ 246.929578][ T5784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.939604][ T5784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.948019][ T5784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.957762][ T5784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.967816][ T5784] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 246.975703][ T5784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.084863][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 247.094018][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 247.103116][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 247.111668][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 247.119628][ T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 247.127550][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 247.270407][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 247.282329][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 247.291431][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 247.300356][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 247.308373][ T51] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 247.317550][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 249.075324][ T5784] Bluetooth: hci5: command tx timeout [ 249.367311][ T5784] Bluetooth: hci6: command tx timeout [ 249.509344][ T5784] Bluetooth: hci7: command tx timeout [ 251.159517][ T5784] Bluetooth: hci5: command tx timeout [ 251.408708][ T5784] Bluetooth: hci6: command tx timeout [ 251.549515][ T5784] Bluetooth: hci7: command tx timeout [ 253.230077][ T5784] Bluetooth: hci5: command tx timeout [ 253.628905][ T5784] Bluetooth: hci7: command tx timeout [ 253.659828][ T5784] Bluetooth: hci6: command tx timeout [ 255.438557][ T5784] Bluetooth: hci5: command tx timeout [ 255.708955][ T51] Bluetooth: hci7: command tx timeout [ 255.714641][ T5784] Bluetooth: hci6: command tx timeout [ 256.252668][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.259646][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 276.810470][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 276.819504][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 276.828694][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 276.837848][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 276.846758][ T51] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 276.855859][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 277.800750][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 277.810377][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 277.819817][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 277.835186][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 277.844019][ T51] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 277.854195][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 278.860364][ T5784] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 278.872816][ T5784] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 278.881573][ T5784] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 278.892139][ T5784] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 278.900325][ T5784] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 278.908905][ T5784] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 278.916844][ T5784] Bluetooth: hci8: command tx timeout [ 279.868744][ T5784] Bluetooth: hci9: command tx timeout [ 280.988800][ T51] Bluetooth: hci8: command tx timeout [ 280.995500][ T5784] Bluetooth: hci10: command tx timeout [ 281.948663][ T5784] Bluetooth: hci9: command tx timeout [ 283.269596][ T5784] Bluetooth: hci10: command tx timeout [ 283.275693][ T5784] Bluetooth: hci8: command tx timeout [ 284.028599][ T51] Bluetooth: hci9: command tx timeout [ 285.308860][ T5784] Bluetooth: hci10: command tx timeout [ 285.316098][ T51] Bluetooth: hci8: command tx timeout [ 286.188654][ T51] Bluetooth: hci9: command tx timeout [ 287.391126][ T51] Bluetooth: hci10: command tx timeout [ 307.026253][ T5784] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 307.037826][ T5784] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 307.047008][ T5784] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 307.057526][ T5784] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 307.066848][ T5784] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 307.075874][ T5784] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 309.148746][ T5784] Bluetooth: hci11: command tx timeout [ 311.238711][ T5784] Bluetooth: hci11: command tx timeout [ 313.308580][ T5784] Bluetooth: hci11: command tx timeout [ 315.838798][ T5784] Bluetooth: hci11: command tx timeout [ 325.369214][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.375768][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.175843][ T51] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 337.188822][ T51] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 337.198033][ T51] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 337.208829][ T51] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 337.216800][ T51] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 337.226944][ T51] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 338.216023][ T5784] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 338.228254][ T5784] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 338.237954][ T5784] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 338.250067][ T5784] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 338.260224][ T5784] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 338.269383][ T5784] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 339.348620][ T51] Bluetooth: hci12: command tx timeout [ 339.411609][ T5784] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 339.421269][ T5784] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 339.431462][ T5784] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 339.443590][ T5784] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 339.455224][ T5784] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 339.463084][ T5784] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 340.269423][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 340.348693][ T5784] Bluetooth: hci13: command tx timeout [ 341.388646][ T5085] Bluetooth: hci12: command tx timeout [ 341.548655][ T5085] Bluetooth: hci14: command tx timeout [ 342.428601][ T5085] Bluetooth: hci13: command tx timeout [ 343.468587][ T5085] Bluetooth: hci12: command tx timeout [ 343.628640][ T5085] Bluetooth: hci14: command tx timeout [ 345.548650][ T5085] Bluetooth: hci12: command tx timeout [ 345.708753][ T5085] Bluetooth: hci14: command tx timeout [ 346.123855][ T5085] Bluetooth: hci13: command tx timeout [ 347.808767][ T5085] Bluetooth: hci14: command tx timeout [ 348.189118][ T5085] Bluetooth: hci13: command tx timeout [ 359.111506][ T28] INFO: task syz.2.504:7336 blocked for more than 154 seconds. [ 359.119251][ T28] Not tainted syzkaller #0 [ 359.124221][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.133319][ T28] task:syz.2.504 state:D stack:25768 pid:7336 ppid:5769 flags:0x00004004 [ 359.160965][ T28] Call Trace: [ 359.164543][ T28] [ 359.167615][ T28] __schedule+0x1553/0x45a0 [ 359.191908][ T28] ? lock_chain_count+0x20/0x20 [ 359.196916][ T28] ? asan.module_dtor+0x20/0x20 [ 359.228607][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 359.233551][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 359.257221][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 359.285934][ T28] schedule+0xbd/0x170 [ 359.299719][ T28] schedule_preempt_disabled+0x13/0x20 [ 359.305443][ T28] __mutex_lock+0x6a9/0xcc0 [ 359.326124][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 359.340053][ T28] ? dev_ioctl+0x83c/0x1140 [ 359.344634][ T28] ? mutex_lock_nested+0x20/0x20 [ 359.359721][ T28] ? dev_load+0x21/0x1f0 [ 359.364267][ T28] ? dev_load+0x21/0x1f0 [ 359.377867][ T28] dev_ioctl+0x83c/0x1140 [ 359.385577][ T28] sock_ioctl+0x74c/0x7e0 [ 359.390802][ T28] ? sock_poll+0x3e0/0x3e0 [ 359.395293][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 359.402352][ T28] ? security_file_ioctl+0x80/0xa0 [ 359.407595][ T28] ? sock_poll+0x3e0/0x3e0 [ 359.412615][ T28] __se_sys_ioctl+0xfd/0x170 [ 359.417538][ T28] do_syscall_64+0x55/0xa0 [ 359.423844][ T28] ? clear_bhb_loop+0x40/0x90 [ 359.428840][ T28] ? clear_bhb_loop+0x40/0x90 [ 359.433737][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.441730][ T28] RIP: 0033:0x7f3d0839c819 [ 359.446286][ T28] RSP: 002b:00007f3d0928c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.457062][ T28] RAX: ffffffffffffffda RBX: 00007f3d08615fa0 RCX: 00007f3d0839c819 [ 359.468593][ T28] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000009 [ 359.476835][ T28] RBP: 00007f3d08432c91 R08: 0000000000000000 R09: 0000000000000000 [ 359.492514][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.502747][ T28] R13: 00007f3d08616038 R14: 00007f3d08615fa0 R15: 00007ffd30ae8468 [ 359.511242][ T28] [ 359.514389][ T28] INFO: task syz.0.507:7341 blocked for more than 155 seconds. [ 359.523899][ T28] Not tainted syzkaller #0 [ 359.529432][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 359.540315][ T28] task:syz.0.507 state:D stack:25840 pid:7341 ppid:5770 flags:0x00004004 [ 359.550787][ T28] Call Trace: [ 359.554208][ T28] [ 359.557175][ T28] __schedule+0x1553/0x45a0 [ 359.598665][ T28] ? lock_chain_count+0x20/0x20 [ 359.603925][ T28] ? asan.module_dtor+0x20/0x20 [ 359.643675][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 359.653835][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 359.659985][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 359.666949][ T28] schedule+0xbd/0x170 [ 359.672860][ T28] schedule_preempt_disabled+0x13/0x20 [ 359.678724][ T28] __mutex_lock+0x6a9/0xcc0 [ 359.683363][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 359.688251][ T28] ? register_nexthop_notifier+0x88/0x240 [ 359.696643][ T28] ? mutex_lock_nested+0x20/0x20 [ 359.703341][ T28] ? __asan_memset+0x22/0x40 [ 359.707982][ T28] ? lockdep_init_map_type+0x9c/0x8e0 [ 359.715477][ T28] register_nexthop_notifier+0x88/0x240 [ 359.724704][ T28] ? fib_check_nexthop+0x560/0x560 [ 359.731659][ T28] ? net_generic+0x1e/0x240 [ 359.736450][ T28] ? __asan_memset+0x22/0x40 [ 359.741953][ T28] ops_init+0x397/0x640 [ 359.746288][ T28] ? __raw_spin_lock_init+0x45/0x100 [ 359.753959][ T28] setup_net+0x3b6/0xa30 [ 359.758396][ T28] ? mutex_unlock+0x10/0x10 [ 359.764127][ T28] ? copy_net_ns+0x5e0/0x5e0 [ 359.771235][ T28] ? copy_net_ns+0x351/0x5e0 [ 359.776074][ T28] ? down_read_killable+0x1d0/0x340 [ 359.782073][ T28] copy_net_ns+0x36d/0x5e0 [ 359.786581][ T28] create_new_namespaces+0x3d3/0x6f0 [ 359.793907][ T28] ? copy_namespaces+0x5c/0x4a0 [ 359.799087][ T28] copy_namespaces+0x430/0x4a0 [ 359.804173][ T28] copy_process+0x1724/0x3d80 [ 359.811965][ T28] ? copy_process+0x96e/0x3d80 [ 359.817148][ T28] ? futex_wait+0x4cc/0x5e0 [ 359.822240][ T28] ? __pidfd_prepare+0x140/0x140 [ 359.827412][ T28] kernel_clone+0x24b/0x8a0 [ 359.833186][ T28] ? create_io_thread+0x190/0x190 [ 359.844290][ T28] ? do_futex+0x2ff/0x3e0 [ 359.849416][ T28] __x64_sys_clone+0x1b7/0x230 [ 359.854252][ T28] ? __ia32_sys_vfork+0x140/0x140 [ 359.861420][ T28] ? lock_chain_count+0x20/0x20 [ 359.866923][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 359.873777][ T28] do_syscall_64+0x55/0xa0 [ 359.878243][ T28] ? clear_bhb_loop+0x40/0x90 [ 359.884423][ T28] ? clear_bhb_loop+0x40/0x90 [ 359.889718][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.895751][ T28] RIP: 0033:0x7f6e4619c819 [ 359.901872][ T28] RSP: 002b:00007f6e47012fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 359.911104][ T28] RAX: ffffffffffffffda RBX: 00007f6e46415fa0 RCX: 00007f6e4619c819 [ 359.922091][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041064400 [ 359.930653][ T28] RBP: 00007f6e46232c91 R08: 0000000000000000 R09: 0000000000000000 [ 359.940687][ T28] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 359.953161][ T28] R13: 00007f6e46416038 R14: 00007f6e46415fa0 R15: 00007ffc3c7e4d18 [ 359.963776][ T28] [ 359.966947][ T28] [ 359.966947][ T28] Showing all locks held in the system: [ 359.998697][ T28] 1 lock held by khungtaskd/28: [ 360.003930][ T28] #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 360.018969][ T28] 3 locks held by kworker/0:2/788: [ 360.024208][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 360.035924][ T28] #1: ffffc90003837d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 360.047274][ T28] #2: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 360.058046][ T28] 3 locks held by kworker/u4:8/1327: [ 360.063625][ T28] #0: ffff88802c69dd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 360.076226][ T28] #1: ffffc90004abfd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 360.109730][ T28] #2: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 360.125508][ T28] 2 locks held by getty/5529: [ 360.133775][ T28] #0: ffff888031ab20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 360.144508][ T28] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 360.156318][ T28] 3 locks held by kworker/1:6/5866: [ 360.161924][ T28] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 360.176528][ T28] #1: ffffc90004c1fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 360.188217][ T28] #2: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 360.199813][ T28] 4 locks held by syz.3.498/7317: [ 360.204955][ T28] 1 lock held by syz.2.504/7336: [ 360.211570][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x83c/0x1140 [ 360.228471][ T28] 2 locks held by syz.0.507/7341: [ 360.233880][ T28] #0: ffffffff8e3b5710 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x351/0x5e0 [ 360.246848][ T28] #1: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x88/0x240 [ 360.257591][ T28] 1 lock held by syz.1.511/7355: [ 360.263277][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.274644][ T28] 1 lock held by syz-executor/7357: [ 360.281025][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.292807][ T28] 1 lock held by syz-executor/7370: [ 360.298211][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.308510][ T28] 1 lock held by syz-executor/7373: [ 360.314274][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.327161][ T28] 1 lock held by syz-executor/7378: [ 360.335901][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.347664][ T28] 1 lock held by syz-executor/7381: [ 360.353476][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.365370][ T28] 1 lock held by syz-executor/7385: [ 360.370972][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.382792][ T28] 1 lock held by syz-executor/7389: [ 360.388253][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.401589][ T28] 1 lock held by syz-executor/7392: [ 360.407183][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.419020][ T28] 1 lock held by syz-executor/7403: [ 360.424607][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.435901][ T28] 1 lock held by syz-executor/7409: [ 360.446722][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.457598][ T28] 1 lock held by syz-executor/7412: [ 360.464728][ T28] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 360.475863][ T28] [ 360.478247][ T28] ============================================= [ 360.478247][ T28] [ 360.490446][ T28] NMI backtrace for cpu 1 [ 360.495352][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 360.502640][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.513621][ T28] Call Trace: [ 360.517139][ T28] [ 360.520274][ T28] dump_stack_lvl+0x18c/0x250 [ 360.525379][ T28] ? show_regs_print_info+0x20/0x20 [ 360.530837][ T28] ? load_image+0x420/0x420 [ 360.535761][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 360.540919][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 360.547552][ T28] ? _printk+0xde/0x130 [ 360.551871][ T28] ? load_image+0x420/0x420 [ 360.556638][ T28] ? load_image+0x420/0x420 [ 360.561271][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 360.567840][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 360.573979][ T28] watchdog+0xf3d/0xf80 [ 360.578268][ T28] ? watchdog+0x1e1/0xf80 [ 360.582738][ T28] kthread+0x2fa/0x390 [ 360.587015][ T28] ? hungtask_pm_notify+0x90/0x90 [ 360.592714][ T28] ? kthread_blkcg+0xd0/0xd0 [ 360.597660][ T28] ret_from_fork+0x48/0x80 [ 360.602125][ T28] ? kthread_blkcg+0xd0/0xd0 [ 360.607014][ T28] ret_from_fork_asm+0x11/0x20 [ 360.611845][ T28] [ 360.615684][ T28] Sending NMI from CPU 1 to CPUs 0: [ 360.621285][ C0] NMI backtrace for cpu 0 [ 360.621299][ C0] CPU: 0 PID: 7317 Comm: syz.3.498 Not tainted syzkaller #0 [ 360.621314][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.621322][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 360.621347][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 1c f5 03 0d 48 89 de 5b e9 e3 67 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d b0 93 7c 7e 65 8b 15 b1 93 7c 7e 81 e2 00 01 ff 00 74 [ 360.621359][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00000046 [ 360.621373][ C0] RAX: ffffffff81ae3245 RBX: 0000000000000000 RCX: ffff88802eaabc00 [ 360.621383][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.621392][ C0] RBP: ffffc90000007970 R08: ffffffff8e8b14ef R09: 1ffffffff1d1629d [ 360.621402][ C0] R10: dffffc0000000000 R11: fffffbfff1d1629e R12: ffffc90000007b80 [ 360.621412][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000000048068b [ 360.621422][ C0] FS: 00007fc221b466c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 360.621434][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.621444][ C0] CR2: 00007f2743f47e20 CR3: 000000007bc43000 CR4: 00000000003506f0 [ 360.621459][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.621468][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 360.621477][ C0] Call Trace: [ 360.621484][ C0] [ 360.621489][ C0] perf_prepare_sample+0x12d5/0x1df0 [ 360.621509][ C0] ? __lock_acquire+0x1347/0x7d40 [ 360.621527][ C0] ? read_lock_is_recursive+0x20/0x20 [ 360.621542][ C0] ? perf_callchain+0x220/0x220 [ 360.621562][ C0] perf_event_output_forward+0x187/0x3e0 [ 360.621579][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 360.621594][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 360.621608][ C0] ? verify_lock_unused+0x140/0x140 [ 360.621623][ C0] ? __lock_acquire+0x1347/0x7d40 [ 360.621641][ C0] ? __irq_work_queue_local+0x118/0x3b0 [ 360.621678][ C0] __perf_event_overflow+0x447/0x630 [ 360.621698][ C0] perf_swevent_hrtimer+0x439/0x610 [ 360.621716][ C0] ? cpu_clock_event_read+0x40/0x40 [ 360.621733][ C0] ? finish_task_switch+0x26a/0x8f0 [ 360.621757][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 360.621775][ C0] ? _raw_spin_unlock+0x40/0x40 [ 360.621796][ C0] __hrtimer_run_queues+0x4e1/0xc40 [ 360.621811][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 360.621832][ C0] ? cpu_clock_event_read+0x40/0x40 [ 360.621849][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 360.621873][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 360.621899][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 360.621927][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 360.621945][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 360.621963][ C0] [ 360.621967][ C0] [ 360.621972][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.621990][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 360.622005][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 99 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 360.622016][ C0] RSP: 0018:ffffc90004b8ec98 EFLAGS: 00000282 [ 360.622027][ C0] RAX: 19b03611719dd100 RBX: 0000000000000000 RCX: 19b03611719dd100 [ 360.622037][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 360.622047][ C0] RBP: ffffc90004b8ecf0 R08: ffffffff911c552f R09: 1ffffffff2238aa5 [ 360.622057][ C0] R10: dffffc0000000000 R11: fffffbfff2238aa6 R12: ffff88802eaabc00 [ 360.622066][ C0] R13: dffffc0000000000 R14: ffff88801a27da00 R15: ffff8880b8e3cac8 [ 360.622086][ C0] ? finish_task_switch+0x265/0x8f0 [ 360.622103][ C0] __schedule+0x155b/0x45a0 [ 360.622126][ C0] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 360.622149][ C0] ? asan.module_dtor+0x20/0x20 [ 360.622170][ C0] ? mark_lock+0x94/0x320 [ 360.622190][ C0] ? lock_chain_count+0x20/0x20 [ 360.622204][ C0] ? preempt_schedule+0xc0/0xd0 [ 360.622224][ C0] preempt_schedule_common+0x82/0xc0 [ 360.622245][ C0] preempt_schedule+0xc0/0xd0 [ 360.622265][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 360.622285][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.622305][ C0] preempt_schedule_thunk+0x1a/0x30 [ 360.622329][ C0] _raw_spin_unlock_irqrestore+0x111/0x120 [ 360.622345][ C0] ? _raw_spin_unlock+0x40/0x40 [ 360.622363][ C0] ? swake_up_one+0x78/0x140 [ 360.622380][ C0] rcu_preempt_deferred_qs_irqrestore+0xa1c/0xce0 [ 360.622402][ C0] ? sysfs_create_groups+0x59/0x120 [ 360.622423][ C0] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 360.622447][ C0] ? rcu_is_watching+0x15/0xb0 [ 360.622465][ C0] rcu_read_unlock_special+0x3d4/0x4d0 [ 360.622484][ C0] ? __slab_free+0x319/0x400 [ 360.622497][ C0] ? qlist_free_all+0x75/0xd0 [ 360.622515][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 360.622530][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 360.622548][ C0] ? kernfs_new_node+0x14c/0x260 [ 360.622565][ C0] ? __kernfs_create_file+0x4b/0x2e0 [ 360.622583][ C0] ? sysfs_add_file_mode_ns+0x238/0x300 [ 360.622601][ C0] ? internal_create_group+0x434/0xd10 [ 360.622614][ C0] ? sysfs_create_groups+0x59/0x120 [ 360.622627][ C0] ? page_ext_get+0x22/0x2b0 [ 360.622644][ C0] ? page_ext_get+0x1e2/0x2b0 [ 360.622669][ C0] __rcu_read_unlock+0x7c/0xd0 [ 360.622689][ C0] page_ext_put+0x95/0xb0 [ 360.622705][ C0] free_unref_page_prepare+0x7b2/0x8c0 [ 360.622729][ C0] free_unref_page+0x32/0x2e0 [ 360.622750][ C0] __unfreeze_partials+0x1cf/0x210 [ 360.622767][ C0] put_cpu_partial+0x17c/0x250 [ 360.622781][ C0] ? put_cpu_partial+0x6e/0x250 [ 360.622796][ C0] __slab_free+0x319/0x400 [ 360.622811][ C0] ? __phys_addr+0x82/0x170 [ 360.622827][ C0] ? __phys_addr+0xba/0x170 [ 360.622845][ C0] qlist_free_all+0x75/0xd0 [ 360.622865][ C0] kasan_quarantine_reduce+0x143/0x160 [ 360.622893][ C0] __kasan_slab_alloc+0x22/0x80 [ 360.622910][ C0] slab_post_alloc_hook+0x6e/0x4b0 [ 360.622933][ C0] kmem_cache_alloc+0x11a/0x2d0 [ 360.622957][ C0] ? __kernfs_new_node+0xe5/0x810 [ 360.622984][ C0] __kernfs_new_node+0xe5/0x810 [ 360.623008][ C0] ? kernfs_add_one+0x14e/0x6b0 [ 360.623032][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 360.623046][ C0] ? down_write+0x16e/0x200 [ 360.623060][ C0] ? kernfs_new_node+0x260/0x260 [ 360.623083][ C0] ? up_write+0x1c3/0x410 [ 360.623100][ C0] kernfs_new_node+0x14c/0x260 [ 360.623120][ C0] __kernfs_create_file+0x4b/0x2e0 [ 360.623141][ C0] sysfs_add_file_mode_ns+0x238/0x300 [ 360.623165][ C0] internal_create_group+0x434/0xd10 [ 360.623179][ C0] ? kernfs_add_one+0x14e/0x6b0 [ 360.623202][ C0] ? sysfs_create_group+0x20/0x20 [ 360.623217][ C0] ? up_write+0x1c3/0x410 [ 360.623232][ C0] sysfs_create_groups+0x59/0x120 [ 360.623248][ C0] device_add_attrs+0x1b2/0x830 [ 360.623268][ C0] ? device_add_class_symlinks+0x240/0x240 [ 360.623289][ C0] ? device_add_class_symlinks+0x21f/0x240 [ 360.623308][ C0] device_add+0x528/0xc20 [ 360.623325][ C0] ? device_initialize+0x24b/0x440 [ 360.623343][ C0] netdev_register_kobject+0x188/0x320 [ 360.623362][ C0] register_netdevice+0x12ee/0x1bb0 [ 360.623383][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 360.623397][ C0] ? netif_stacked_transfer_operstate+0x210/0x210 [ 360.623417][ C0] ? idr_alloc+0x20e/0x2f0 [ 360.623433][ C0] ? mutex_unlock+0x10/0x10 [ 360.623446][ C0] ? vscnprintf+0x80/0x80 [ 360.623465][ C0] ? net_generic+0x1e/0x240 [ 360.623479][ C0] ? net_generic+0x1e/0x240 [ 360.623494][ C0] ? radix_tree_lookup+0x267/0x280 [ 360.623510][ C0] ppp_dev_configure+0x84b/0xad0 [ 360.623532][ C0] ppp_ioctl+0x6e2/0x1a90 [ 360.623551][ C0] ? ppp_poll+0x250/0x250 [ 360.623566][ C0] ? __fget_files+0x28/0x4b0 [ 360.623590][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 360.623604][ C0] ? security_file_ioctl+0x80/0xa0 [ 360.623618][ C0] ? ppp_poll+0x250/0x250 [ 360.623633][ C0] __se_sys_ioctl+0xfd/0x170 [ 360.623658][ C0] do_syscall_64+0x55/0xa0 [ 360.623670][ C0] ? clear_bhb_loop+0x40/0x90 [ 360.623686][ C0] ? clear_bhb_loop+0x40/0x90 [ 360.623703][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.623720][ C0] RIP: 0033:0x7fc220b9c819 [ 360.623789][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.623799][ C0] RSP: 002b:00007fc221b46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.623814][ C0] RAX: ffffffffffffffda RBX: 00007fc220e15fa0 RCX: 00007fc220b9c819 [ 360.623824][ C0] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000005 [ 360.623833][ C0] RBP: 00007fc220c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 360.623842][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.623850][ C0] R13: 00007fc220e16038 R14: 00007fc220e15fa0 R15: 00007ffd746c8808 [ 360.623868][ C0] [ 361.551396][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 361.558399][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 361.565717][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 361.575979][ T28] Call Trace: [ 361.579385][ T28] [ 361.582444][ T28] dump_stack_lvl+0x18c/0x250 [ 361.587626][ T28] ? show_regs_print_info+0x20/0x20 [ 361.593186][ T28] ? load_image+0x420/0x420 [ 361.598489][ T28] panic+0x2dc/0x730 [ 361.602842][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 361.609068][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 361.613799][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 361.619845][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 361.626366][ T28] watchdog+0xf7c/0xf80 [ 361.630920][ T28] ? watchdog+0x1e1/0xf80 [ 361.635831][ T28] kthread+0x2fa/0x390 [ 361.640203][ T28] ? hungtask_pm_notify+0x90/0x90 [ 361.645558][ T28] ? kthread_blkcg+0xd0/0xd0 [ 361.650185][ T28] ret_from_fork+0x48/0x80 [ 361.654728][ T28] ? kthread_blkcg+0xd0/0xd0 [ 361.659345][ T28] ret_from_fork_asm+0x11/0x20 [ 361.664262][ T28] [ 361.667927][ T28] Kernel Offset: disabled [ 361.672478][ T28] Rebooting in 86400 seconds..