last executing test programs: 2.56003811s ago: executing program 3 (id=4): r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0xc4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0x2, 0x5, 0xfc, 0x4, 0x0, 0x5d00000000000000, 0x400, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x41, 0x2, 0x4, 0x9, 0x7f, 0xd, 0x8, 0x0, 0x6, 0x0, 0x1012}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)}, 0x80) (async) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0) (async) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x158}, 0x40) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) (async) close(r2) (async) perf_event_open(&(0x7f0000000100)={0x2, 0xcc, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0x7}, 0x14325, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffd, 0x5, 0x0, 0x7, 0x0, 0x33}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x29, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x7}, 0x0, 0x0, 0x59ba}, 0x0, 0xa, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x541b, 0x0) socket$kcm(0x2d, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfb, 0x60000000, 0x0, 0x70, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f", 0x2}, 0x50) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5) (async) close(0x3) close(0xffffffffffffffff) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) 2.087732428s ago: executing program 2 (id=3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r0, 0x8982, 0x20000700) (async) unlink(&(0x7f0000000080)='./cgroup.net/devices.allow\x00') perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}, [@exit, @func, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @ldst={0x3, 0x0, 0x1, 0x0, 0xb, 0x30, 0xfffffffffffffff0}, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000280)='GPL\x00', 0x3, 0xed, &(0x7f0000000500)=""/237, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0xed, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@fallback=r0, 0xc, 0x1, 0xfffffffc, &(0x7f0000000900)=[0x0], 0x1, 0x0, &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0], 0x0}, 0x40) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x11, &(0x7f0000000ac0)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000b80)='GPL\x00', 0xd, 0x5f, &(0x7f0000000bc0)=""/95, 0x40f00, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xb, 0xb, 0xe15d}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x5, 0x5, 0xa, 0x4}, {0x1, 0x4, 0xb, 0x8}, {0x0, 0x1, 0xa, 0x9}]}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r1, r2, 0x25, 0x11, @val=@tcx={@void, @value=r5, @void, @void, r4}}, 0x1c) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r6, 0x4}, 0x38) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./cgroup.net/devices.allow\x00'}, 0x18) (async, rerun: 32) close(r7) (rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r8) (async) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x4, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x2000f765) (async) ioctl$SIOCSIFHWADDR(r8, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='\b\x00'}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140a, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x2400c000) 1.800304974s ago: executing program 2 (id=6): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x14, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000cf0000020100000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000001880)=[{0x8, 0xc, 0x5, 0x1}, {0x0, 0x8, 0x5, 0xc0ddbc6}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x200}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.633703343s ago: executing program 1 (id=2): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x0, 0x13, 0x0, 0x300) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', 0x1, 0x4000, r2}, 0x18) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) 1.519056035s ago: executing program 4 (id=5): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000a4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000001a0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f0000000500), &(0x7f0000000100)=@udp6=r2, 0x1}, 0x20) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd2e6e3712d0ec942}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.347633957s ago: executing program 1 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x1411, 0x400, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) r6 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000140), 0x4d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a69702c6d61726b"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000007600000000000000000000000500"/28], 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r10 = socket$kcm(0x1e, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400c1, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 79.071369ms ago: executing program 4 (id=8): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x26, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1400000024000bdfd910e4069671e0621526b761", 0x14}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xe}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=1): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_bp={0x0}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, &(0x7f0000001140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r8 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000080), &(0x7f00000001c0)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r7, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000680)='%pS \x00'}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x0, r2}, 0x18) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbcc}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0xfffffffb, 0x2e, &(0x7f0000000340)=""/46, 0x41100, 0x35, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000500)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x5, 0x0, 0x81}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000940)=[r7, 0x1, r9, r10, r11, r12, r13], &(0x7f0000000980)=[{0x1, 0x4, 0x7, 0x2}, {0x5, 0x2, 0x2, 0xb}, {0x0, 0x4, 0x3, 0x5}, {0x2, 0x3, 0x1, 0x9}, {0x2, 0x3, 0x0, 0xa}, {0x2, 0x2, 0xb, 0x4}, {0x4, 0x4, 0xb, 0xa}, {0x5, 0x2, 0x7, 0x8}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x800) r15 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r16 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r16, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x29, 0x4}], 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 70.714292][ T5852] cgroup: Unknown subsys name 'net' [ 70.827753][ T5852] cgroup: Unknown subsys name 'cpuset' [ 70.837388][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.377873][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.384413][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.286643][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.351769][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.361058][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.369360][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.394933][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.414508][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.429603][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.431433][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.437364][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.445837][ T5881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.452316][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.458626][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.465727][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.479286][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.487332][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.487515][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.503505][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.511692][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.518973][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.519765][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.527139][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.541270][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.549399][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.549977][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.560709][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.564135][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.191339][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 77.296729][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 77.349375][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 77.378368][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 77.426968][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 77.590656][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.598178][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.606721][ T5866] bridge_slave_0: entered allmulticast mode [ 77.614174][ T5866] bridge_slave_0: entered promiscuous mode [ 77.633357][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.640548][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.647930][ T5864] bridge_slave_0: entered allmulticast mode [ 77.654967][ T5864] bridge_slave_0: entered promiscuous mode [ 77.689512][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.696781][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.703919][ T5866] bridge_slave_1: entered allmulticast mode [ 77.711187][ T5866] bridge_slave_1: entered promiscuous mode [ 77.740794][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.748306][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.755962][ T5864] bridge_slave_1: entered allmulticast mode [ 77.762869][ T5864] bridge_slave_1: entered promiscuous mode [ 77.780025][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.787389][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.794610][ T5863] bridge_slave_0: entered allmulticast mode [ 77.801564][ T5863] bridge_slave_0: entered promiscuous mode [ 77.824777][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.873755][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.883833][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.891311][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.899070][ T5863] bridge_slave_1: entered allmulticast mode [ 77.906196][ T5863] bridge_slave_1: entered promiscuous mode [ 77.915695][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.965901][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.002602][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.010183][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.018199][ T5871] bridge_slave_0: entered allmulticast mode [ 78.030030][ T5871] bridge_slave_0: entered promiscuous mode [ 78.037712][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.045576][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.052758][ T5862] bridge_slave_0: entered allmulticast mode [ 78.060575][ T5862] bridge_slave_0: entered promiscuous mode [ 78.094605][ T5866] team0: Port device team_slave_0 added [ 78.106212][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.113335][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.121027][ T5871] bridge_slave_1: entered allmulticast mode [ 78.132839][ T5871] bridge_slave_1: entered promiscuous mode [ 78.140069][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.147621][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.154930][ T5862] bridge_slave_1: entered allmulticast mode [ 78.161884][ T5862] bridge_slave_1: entered promiscuous mode [ 78.183108][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.197605][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.208403][ T5866] team0: Port device team_slave_1 added [ 78.252651][ T5864] team0: Port device team_slave_0 added [ 78.309790][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.321652][ T5864] team0: Port device team_slave_1 added [ 78.358311][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.365514][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.392554][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.407386][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.420777][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.432603][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.469583][ T5863] team0: Port device team_slave_0 added [ 78.476882][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.483832][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.510665][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.511096][ T5881] Bluetooth: hci3: command tx timeout [ 78.553035][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.560111][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.586859][ T5881] Bluetooth: hci1: command tx timeout [ 78.586893][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.606333][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.613281][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.639223][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.652403][ T5863] team0: Port device team_slave_1 added [ 78.658105][ T5881] Bluetooth: hci4: command tx timeout [ 78.658421][ T5881] Bluetooth: hci0: command tx timeout [ 78.663636][ T5874] Bluetooth: hci2: command tx timeout [ 78.700312][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.707463][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.733612][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.758917][ T5871] team0: Port device team_slave_0 added [ 78.766990][ T5862] team0: Port device team_slave_0 added [ 78.774642][ T5871] team0: Port device team_slave_1 added [ 78.789251][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.796266][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.822514][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.846908][ T5862] team0: Port device team_slave_1 added [ 78.869150][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.876194][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.902174][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.968434][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.977300][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.004153][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.039970][ T5866] hsr_slave_0: entered promiscuous mode [ 79.046732][ T5866] hsr_slave_1: entered promiscuous mode [ 79.086069][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.093043][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.119032][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.151111][ T5864] hsr_slave_0: entered promiscuous mode [ 79.157984][ T5864] hsr_slave_1: entered promiscuous mode [ 79.164475][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 79.170280][ T5864] Cannot create hsr debugfs directory [ 79.193200][ T5863] hsr_slave_0: entered promiscuous mode [ 79.199936][ T5863] hsr_slave_1: entered promiscuous mode [ 79.206350][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 79.212158][ T5863] Cannot create hsr debugfs directory [ 79.219237][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.226411][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.252578][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.323759][ T5871] hsr_slave_0: entered promiscuous mode [ 79.331181][ T5871] hsr_slave_1: entered promiscuous mode [ 79.337588][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 79.343354][ T5871] Cannot create hsr debugfs directory [ 79.484539][ T5862] hsr_slave_0: entered promiscuous mode [ 79.490908][ T5862] hsr_slave_1: entered promiscuous mode [ 79.497752][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 79.503491][ T5862] Cannot create hsr debugfs directory [ 80.003060][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.023157][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.035944][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.057891][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.114111][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.126536][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.141940][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.155136][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.277227][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.293511][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.312391][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.323521][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.452426][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.464412][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.479282][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.492194][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.520947][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.533206][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.574435][ T5874] Bluetooth: hci3: command tx timeout [ 80.580205][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.605632][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.642515][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.649847][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.654087][ T5874] Bluetooth: hci1: command tx timeout [ 80.680429][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.690322][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.703288][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.727583][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.734755][ T5874] Bluetooth: hci0: command tx timeout [ 80.734798][ T5874] Bluetooth: hci4: command tx timeout [ 80.744974][ T5881] Bluetooth: hci2: command tx timeout [ 80.755786][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.762890][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.772729][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.779838][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.829225][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.836425][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.963273][ T5863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.974896][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.018483][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.106544][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.126883][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.151652][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.158910][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.239887][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.257868][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.265133][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.308525][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.315722][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.362523][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.369744][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.439694][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.471238][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.492237][ T5864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.509678][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.563328][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.609434][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.616652][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.662514][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.707906][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.715102][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.992865][ T5866] veth0_vlan: entered promiscuous mode [ 82.063177][ T5866] veth1_vlan: entered promiscuous mode [ 82.232663][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.285469][ T5866] veth0_macvtap: entered promiscuous mode [ 82.313181][ T5866] veth1_macvtap: entered promiscuous mode [ 82.356662][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.473798][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.507407][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.533071][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.543380][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.559679][ T5864] veth0_vlan: entered promiscuous mode [ 82.566549][ T5863] veth0_vlan: entered promiscuous mode [ 82.583284][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.592895][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.635473][ T5863] veth1_vlan: entered promiscuous mode [ 82.652951][ T5864] veth1_vlan: entered promiscuous mode [ 82.659910][ T5881] Bluetooth: hci3: command tx timeout [ 82.677238][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.689646][ T5862] veth0_vlan: entered promiscuous mode [ 82.717480][ T5862] veth1_vlan: entered promiscuous mode [ 82.736317][ T5881] Bluetooth: hci1: command tx timeout [ 82.772999][ T5864] veth0_macvtap: entered promiscuous mode [ 82.815371][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.816645][ T5881] Bluetooth: hci2: command tx timeout [ 82.823322][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.828839][ T5881] Bluetooth: hci4: command tx timeout [ 82.836852][ T5874] Bluetooth: hci0: command tx timeout [ 82.861672][ T5864] veth1_macvtap: entered promiscuous mode [ 82.882975][ T5863] veth0_macvtap: entered promiscuous mode [ 82.902226][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.919921][ T5863] veth1_macvtap: entered promiscuous mode [ 82.951032][ T5862] veth0_macvtap: entered promiscuous mode [ 82.963014][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.987274][ T5862] veth1_macvtap: entered promiscuous mode [ 83.000849][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.020769][ T3479] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.030268][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.042560][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.051640][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.062177][ T5871] veth0_vlan: entered promiscuous mode [ 83.071955][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.080620][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.097860][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.111983][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.147870][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.182575][ T3504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.199401][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.223858][ T5871] veth1_vlan: entered promiscuous mode [ 83.243186][ T3504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.253539][ T3504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.303139][ T3504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.321875][ T3504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.332544][ T3504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.392061][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.412510][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.432458][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.474827][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.567932][ T5871] veth0_macvtap: entered promiscuous mode [ 83.577428][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.596772][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.616782][ T5871] veth1_macvtap: entered promiscuous mode [ 83.663503][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.672360][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.801226][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.833799][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.849842][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.875206][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.913126][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.929335][ T3479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.932864][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.946165][ T3479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.949467][ T3479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.967227][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.996753][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.017886][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.359061][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.415303][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.495709][ T6010] netlink: 'syz.4.5': attribute type 21 has an invalid length. [ 84.541534][ T6010] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5'. [ 84.593455][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.625453][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.651571][ C0] hrtimer: interrupt took 378909 ns [ 84.739305][ T5874] Bluetooth: hci3: command tx timeout [ 84.814673][ T5874] Bluetooth: hci1: command tx timeout [ 84.894641][ T5874] Bluetooth: hci0: command tx timeout [ 84.900107][ T51] Bluetooth: hci4: command tx timeout [ 84.900452][ T5881] Bluetooth: hci2: command tx timeout [ 85.012676][ T5987] syz.3.4: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 85.030860][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.3.4 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 85.030886][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.030904][ T5987] Call Trace: [ 85.030912][ T5987] [ 85.030920][ T5987] dump_stack_lvl+0x189/0x250 [ 85.030955][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.030977][ T5987] ? __pfx__printk+0x10/0x10 [ 85.031002][ T5987] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 85.031024][ T5987] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 85.031048][ T5987] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 85.031073][ T5987] warn_alloc+0x214/0x310 [ 85.031107][ T5987] ? __pfx_warn_alloc+0x10/0x10 [ 85.031145][ T5987] ? __get_vm_area_node+0x28f/0x300 [ 85.031170][ T5987] ? hash_netiface_create+0x358/0xfe0 [ 85.031197][ T5987] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 85.031266][ T5987] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.031290][ T5987] ? hash_netiface_create+0x358/0xfe0 [ 85.031313][ T5987] ? __get_vm_area_node+0x28f/0x300 [ 85.031337][ T5987] ? hash_netiface_create+0x358/0xfe0 [ 85.031359][ T5987] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 85.031384][ T5987] ? hash_netiface_create+0x358/0xfe0 [ 85.031401][ T5987] ? do_syscall_64+0xfa/0x3b0 [ 85.031463][ T5987] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.031495][ T5987] ? rcu_is_watching+0x15/0xb0 [ 85.031515][ T5987] ? hash_netiface_create+0x358/0xfe0 [ 85.031534][ T5987] ? hash_netiface_create+0x358/0xfe0 [ 85.031551][ T5987] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 85.031575][ T5987] ? hash_netiface_create+0x358/0xfe0 [ 85.031596][ T5987] ? hash_netiface_create+0x2fe/0xfe0 [ 85.031621][ T5987] hash_netiface_create+0x358/0xfe0 [ 85.031652][ T5987] ? __nla_parse+0x40/0x60 [ 85.031678][ T5987] ? __pfx_hash_netiface_create+0x10/0x10 [ 85.031701][ T5987] ip_set_create+0xa94/0x1940 [ 85.031723][ T5987] ? ip_set_create+0x4a2/0x1940 [ 85.031758][ T5987] ? __pfx_ip_set_create+0x10/0x10 [ 85.031829][ T5987] nfnetlink_rcv_msg+0xb4d/0x1130 [ 85.031853][ T5987] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 85.031899][ T5987] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 85.031919][ T5987] ? kasan_save_free_info+0x46/0x50 [ 85.032001][ T5987] netlink_rcv_skb+0x208/0x470 [ 85.032027][ T5987] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 85.032051][ T5987] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.032092][ T5987] ? bpf_lsm_capable+0x9/0x20 [ 85.032113][ T5987] ? security_capable+0x7e/0x2e0 [ 85.032162][ T5987] nfnetlink_rcv+0x26a/0x2520 [ 85.032188][ T5987] ? __dev_queue_xmit+0x1d79/0x3b50 [ 85.032222][ T5987] ? __dev_queue_xmit+0x27b/0x3b50 [ 85.032263][ T5987] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 85.032285][ T5987] ? __pfx___dev_queue_xmit+0x10/0x10 [ 85.032323][ T5987] ? ref_tracker_free+0x63a/0x7d0 [ 85.032348][ T5987] ? __asan_memcpy+0x40/0x70 [ 85.032367][ T5987] ? __pfx_ref_tracker_free+0x10/0x10 [ 85.032388][ T5987] ? __skb_clone+0x63/0x7a0 [ 85.032413][ T5987] ? __skb_clone+0x483/0x7a0 [ 85.032441][ T5987] ? skb_clone+0x246/0x3a0 [ 85.032470][ T5987] ? __netlink_deliver_tap+0x807/0x850 [ 85.032494][ T5987] ? netlink_deliver_tap+0x2e/0x1b0 [ 85.032527][ T5987] ? netlink_deliver_tap+0x2e/0x1b0 [ 85.032562][ T5987] netlink_unicast+0x82c/0x9e0 [ 85.032597][ T5987] ? __pfx_netlink_unicast+0x10/0x10 [ 85.032622][ T5987] ? netlink_sendmsg+0x642/0xb30 [ 85.032644][ T5987] ? skb_put+0x11b/0x210 [ 85.032674][ T5987] netlink_sendmsg+0x805/0xb30 [ 85.032711][ T5987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.032740][ T5987] ? aa_sock_msg_perm+0xf1/0x1d0 [ 85.032770][ T5987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 85.032789][ T5987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.032815][ T5987] __sock_sendmsg+0x21c/0x270 [ 85.032842][ T5987] ____sys_sendmsg+0x505/0x830 [ 85.032868][ T5987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.032900][ T5987] ? import_iovec+0x74/0xa0 [ 85.032925][ T5987] ___sys_sendmsg+0x21f/0x2a0 [ 85.032948][ T5987] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.033014][ T5987] ? __fget_files+0x2a/0x420 [ 85.033029][ T5987] ? __fget_files+0x3a0/0x420 [ 85.033059][ T5987] __x64_sys_sendmsg+0x19b/0x260 [ 85.033082][ T5987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 85.033115][ T5987] ? rcu_is_watching+0x15/0xb0 [ 85.033140][ T5987] ? do_syscall_64+0xbe/0x3b0 [ 85.033169][ T5987] do_syscall_64+0xfa/0x3b0 [ 85.033191][ T5987] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.033213][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.033231][ T5987] ? clear_bhb_loop+0x60/0xb0 [ 85.033260][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.033277][ T5987] RIP: 0033:0x7f3f1278ebe9 [ 85.033300][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.033315][ T5987] RSP: 002b:00007f3f1362b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.033334][ T5987] RAX: ffffffffffffffda RBX: 00007f3f129b6090 RCX: 00007f3f1278ebe9 [ 85.033347][ T5987] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 85.033358][ T5987] RBP: 00007f3f12811e19 R08: 0000000000000000 R09: 0000000000000000 [ 85.033369][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.033379][ T5987] R13: 00007f3f129b6128 R14: 00007f3f129b6090 R15: 00007ffdd98e7908 [ 85.033413][ T5987] [ 85.033509][ T5987] Mem-Info: [ 85.598258][ T5987] active_anon:5348 inactive_anon:0 isolated_anon:0 [ 85.598258][ T5987] active_file:1895 inactive_file:39826 isolated_file:0 [ 85.598258][ T5987] unevictable:768 dirty:1376 writeback:0 [ 85.598258][ T5987] slab_reclaimable:10318 slab_unreclaimable:94434 [ 85.598258][ T5987] mapped:30036 shmem:1356 pagetables:1136 [ 85.598258][ T5987] sec_pagetables:0 bounce:0 [ 85.598258][ T5987] kernel_misc_reclaimable:0 [ 85.598258][ T5987] free:1284379 free_pcp:30900 free_cma:0 [ 85.644826][ T5987] Node 0 active_anon:21392kB inactive_anon:0kB active_file:7580kB inactive_file:159104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120144kB dirty:5496kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11928kB pagetables:4416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 85.683705][ T5987] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 85.719693][ T5987] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.764939][ T5987] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 85.770774][ T5987] Node 0 DMA32 free:1230440kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21248kB inactive_anon:0kB active_file:7580kB inactive_file:157532kB unevictable:1536kB writepending:5488kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:105116kB local_pcp:65556kB free_cma:0kB [ 85.820091][ T5987] lowmem_reserve[]: 0 0 1 1 1 [ 85.836244][ T5987] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:8kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 85.882529][ T5987] lowmem_reserve[]: 0 0 0 0 0 [ 85.888446][ T5987] Node 1 Normal free:3891492kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19008kB local_pcp:10464kB free_cma:0kB [ 85.922576][ T5987] lowmem_reserve[]: 0 0 0 0 0 [ 85.931073][ T5987] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 85.949685][ T5987] Node 0 DMA32: 0*4kB 1*8kB (M) 1*16kB (U) 2*32kB (UE) 1*64kB (U) 2*128kB (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 2*2048kB (UE) 299*4096kB (M) = 1229976kB [ 85.968730][ T5987] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 85.981673][ T5987] Node 1 Normal: 183*4kB (UM) 55*8kB (UME) 46*16kB (UME) 56*32kB (UME) 14*64kB (UME) 5*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3891572kB [ 86.006503][ T5987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.017637][ T5987] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.028204][ T5987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.039220][ T5987] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.049155][ T5987] 43481 total pagecache pages [ 86.138313][ T5987] 0 pages in swap cache [ 180.344672][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.363963][ C1] sched: DL replenish lagged too much [ 180.364160][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.292396][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 144s! [syz.0.1:6017] [ 222.292420][ C0] Modules linked in: [ 222.292447][ C0] irq event stamp: 13365619 [ 222.292454][ C0] hardirqs last enabled at (13365618): [] irqentry_exit+0x74/0x90 [ 222.292485][ C0] hardirqs last disabled at (13365619): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 222.292508][ C0] softirqs last enabled at (12966310): [] __irq_exit_rcu+0xca/0x1f0 [ 222.292528][ C0] softirqs last disabled at (12966313): [] __irq_exit_rcu+0xca/0x1f0 [ 222.292554][ C0] CPU: 0 UID: 0 PID: 6017 Comm: syz.0.1 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 222.292574][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.292584][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 222.292608][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb e3 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 222.292622][ C0] RSP: 0018:ffffc900000071f8 EFLAGS: 00000206 [ 222.292636][ C0] RAX: dda9ac60fb9db400 RBX: 0000000000000000 RCX: dda9ac60fb9db400 [ 222.292648][ C0] RDX: 0000000000000000 RSI: ffffffff8dba5fb5 RDI: ffffffff8be33380 [ 222.292660][ C0] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 222.292671][ C0] R10: ffffc90000006ec8 R11: ffffffff81ac3890 R12: 0000000000000002 [ 222.292683][ C0] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 [ 222.292694][ C0] FS: 00007f97b479f6c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 222.292709][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.292720][ C0] CR2: 0000001b3331bff8 CR3: 0000000030afe000 CR4: 00000000003526f0 [ 222.292736][ C0] Call Trace: [ 222.292744][ C0] [ 222.292773][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.292794][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.292817][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.292837][ C0] unwind_next_frame+0xc2/0x2390 [ 222.292855][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.292891][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.292915][ C0] ? do_syscall_64+0xfa/0x3b0 [ 222.292953][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 222.292977][ C0] arch_stack_walk+0x11c/0x150 [ 222.293016][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.293050][ C0] stack_trace_save+0x9c/0xe0 [ 222.293073][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 222.293099][ C0] ? __irq_exit_rcu+0xd8/0x1f0 [ 222.293118][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 222.293151][ C0] kasan_save_track+0x3e/0x80 [ 222.293171][ C0] ? kasan_save_track+0x3e/0x80 [ 222.293190][ C0] ? kasan_save_free_info+0x46/0x50 [ 222.293206][ C0] ? __kasan_slab_free+0x5b/0x80 [ 222.293231][ C0] ? kmem_cache_free+0x18f/0x400 [ 222.293251][ C0] ? skb_release_data+0x62d/0x7c0 [ 222.293267][ C0] ? sk_skb_reason_drop+0x127/0x170 [ 222.293281][ C0] ? ip6_mc_input+0x8f4/0xaf0 [ 222.293301][ C0] ? NF_HOOK+0x30c/0x3a0 [ 222.293320][ C0] ? __netif_receive_skb+0xd3/0x380 [ 222.293339][ C0] ? process_backlog+0x60e/0x14f0 [ 222.293359][ C0] ? __napi_poll+0xc7/0x360 [ 222.293378][ C0] ? net_rx_action+0x707/0xe30 [ 222.293397][ C0] ? handle_softirqs+0x283/0x870 [ 222.293412][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 222.293426][ C0] ? irq_exit_rcu+0x9/0x30 [ 222.293440][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 222.293460][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.293477][ C0] ? __asan_memset+0x4/0x50 [ 222.293493][ C0] ? perf_tp_event+0xb7/0x1380 [ 222.293508][ C0] ? perf_trace_run_bpf_submit+0xee/0x170 [ 222.293524][ C0] ? perf_trace_lock+0x2f8/0x3b0 [ 222.293538][ C0] ? lock_release+0x3b2/0x3e0 [ 222.293559][ C0] ? unwind_next_frame+0x19a9/0x2390 [ 222.293576][ C0] ? arch_stack_walk+0x11c/0x150 [ 222.293593][ C0] ? stack_trace_save+0x9c/0xe0 [ 222.293610][ C0] ? kasan_save_track+0x3e/0x80 [ 222.293628][ C0] ? kasan_save_free_info+0x46/0x50 [ 222.293644][ C0] ? __kasan_slab_free+0x5b/0x80 [ 222.293663][ C0] ? kmem_cache_free+0x18f/0x400 [ 222.293682][ C0] ? va_alloc+0xc8c/0xef0 [ 222.293697][ C0] ? alloc_vmap_area+0x963/0x1490 [ 222.293716][ C0] ? __get_vm_area_node+0x1f8/0x300 [ 222.293736][ C0] ? __vmalloc_node_range_noprof+0x301/0x12f0 [ 222.293758][ C0] ? __vmalloc_noprof+0xb1/0xf0 [ 222.293778][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 222.293799][ C0] ? bpf_prog_alloc+0x3c/0x1a0 [ 222.293819][ C0] ? bpf_prog_load+0x735/0x1930 [ 222.293839][ C0] ? __sys_bpf+0x528/0x870 [ 222.293857][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 222.293874][ C0] ? do_syscall_64+0xfa/0x3b0 [ 222.293894][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.293965][ C0] ? skb_release_data+0x62d/0x7c0 [ 222.293981][ C0] kasan_save_free_info+0x46/0x50 [ 222.294000][ C0] __kasan_slab_free+0x5b/0x80 [ 222.294024][ C0] kmem_cache_free+0x18f/0x400 [ 222.294065][ C0] skb_release_data+0x62d/0x7c0 [ 222.294113][ C0] sk_skb_reason_drop+0x127/0x170 [ 222.294140][ C0] ip6_mc_input+0x8f4/0xaf0 [ 222.294182][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 222.294203][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 222.294261][ C0] NF_HOOK+0x30c/0x3a0 [ 222.294281][ C0] ? skb_orphan+0x4f/0xd0 [ 222.294309][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 222.294331][ C0] ? NF_HOOK+0x9a/0x3a0 [ 222.294353][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 222.294385][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 222.294438][ C0] __netif_receive_skb+0xd3/0x380 [ 222.294471][ C0] ? process_backlog+0x2d5/0x14f0 [ 222.294502][ C0] process_backlog+0x60e/0x14f0 [ 222.294570][ C0] ? __pfx_process_backlog+0x10/0x10 [ 222.294622][ C0] __napi_poll+0xc7/0x360 [ 222.294647][ C0] ? net_rx_action+0x46d/0xe30 [ 222.294681][ C0] net_rx_action+0x707/0xe30 [ 222.294757][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 222.294778][ C0] ? __irq_exit_rcu+0xd8/0x1f0 [ 222.294797][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 222.294878][ C0] ? handle_softirqs+0x23d/0x870 [ 222.294919][ C0] handle_softirqs+0x283/0x870 [ 222.294950][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 222.294986][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 222.295020][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 222.295052][ C0] __irq_exit_rcu+0xca/0x1f0 [ 222.295073][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 222.295118][ C0] irq_exit_rcu+0x9/0x30 [ 222.295133][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 222.295157][ C0] [ 222.295163][ C0] [ 222.295173][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.295191][ C0] RIP: 0010:__asan_memset+0x4/0x50 [ 222.295234][ C0] Code: ba 01 00 00 00 e9 bc e4 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 [ 222.295248][ C0] RSP: 0018:ffffc900053eed38 EFLAGS: 00000246 [ 222.295262][ C0] RAX: ffffffff81ef5318 RBX: ffffe8ffffc23818 RCX: 0000000000080000 [ 222.295274][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffc900053eedc0 [ 222.295285][ C0] RBP: ffffc900053eefc8 R08: ffff8880b8632980 R09: ffffe8ffffc23818 [ 222.295297][ C0] R10: dffffc0000000000 R11: fffff91ffff8d3c1 R12: 000000000000002c [ 222.295309][ C0] R13: ffffe8ffffc69de0 R14: ffffc900053eedc0 R15: dffffc0000000000 [ 222.295343][ C0] ? perf_tp_event+0xa8/0x1380 [ 222.295381][ C0] perf_tp_event+0xb7/0x1380 [ 222.295419][ C0] ? __pfx_perf_tp_event+0x10/0x10 [ 222.295463][ C0] ? perf_swevent_get_recursion_context+0xa6/0x100 [ 222.295491][ C0] ? perf_trace_buf_alloc+0x131/0x2a0 [ 222.295522][ C0] ? perf_trace_preemptirq_template+0x149/0x340 [ 222.295546][ C0] ? irqentry_enter+0x3d/0x60 [ 222.295574][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 222.295633][ C0] ? irqentry_exit+0x74/0x90 [ 222.295656][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.295703][ C0] perf_trace_run_bpf_submit+0xee/0x170 [ 222.295743][ C0] perf_trace_lock+0x2f8/0x3b0 [ 222.295784][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 222.295828][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.295847][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.295867][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.295890][ C0] lock_release+0x3b2/0x3e0 [ 222.295914][ C0] ? deref_stack_reg+0x19f/0x230 [ 222.295948][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.295966][ C0] unwind_next_frame+0x19a9/0x2390 [ 222.296004][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.296027][ C0] ? __vmalloc_noprof+0xb1/0xf0 [ 222.296065][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 222.296088][ C0] arch_stack_walk+0x11c/0x150 [ 222.296126][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 222.296164][ C0] stack_trace_save+0x9c/0xe0 [ 222.296187][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 222.296244][ C0] kasan_save_track+0x3e/0x80 [ 222.296264][ C0] ? kasan_save_track+0x3e/0x80 [ 222.296282][ C0] ? kasan_save_free_info+0x46/0x50 [ 222.296297][ C0] ? __kasan_slab_free+0x5b/0x80 [ 222.296317][ C0] ? kmem_cache_free+0x18f/0x400 [ 222.296336][ C0] ? va_alloc+0xc8c/0xef0 [ 222.296351][ C0] ? alloc_vmap_area+0x963/0x1490 [ 222.296370][ C0] ? __get_vm_area_node+0x1f8/0x300 [ 222.296389][ C0] ? __vmalloc_node_range_noprof+0x301/0x12f0 [ 222.296411][ C0] ? __vmalloc_noprof+0xb1/0xf0 [ 222.296555][ C0] ? va_alloc+0xc8c/0xef0 [ 222.296572][ C0] kasan_save_free_info+0x46/0x50 [ 222.296592][ C0] __kasan_slab_free+0x5b/0x80 [ 222.296616][ C0] kmem_cache_free+0x18f/0x400 [ 222.296657][ C0] va_alloc+0xc8c/0xef0 [ 222.296708][ C0] alloc_vmap_area+0x963/0x1490 [ 222.296776][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 222.296800][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 222.296828][ C0] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 222.296853][ C0] ? __get_vm_area_node+0x13f/0x300 [ 222.296877][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 222.296905][ C0] __get_vm_area_node+0x1f8/0x300 [ 222.296949][ C0] __vmalloc_node_range_noprof+0x301/0x12f0 [ 222.296977][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 222.297046][ C0] ? __schedule+0x17ae/0x4cc0 [ 222.297094][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.297131][ C0] ? perf_trace_run_bpf_submit+0xee/0x170 [ 222.297166][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 222.297187][ C0] __vmalloc_noprof+0xb1/0xf0 [ 222.297213][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 222.297252][ C0] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 222.297291][ C0] bpf_prog_alloc+0x3c/0x1a0 [ 222.297324][ C0] bpf_prog_load+0x735/0x1930 [ 222.297383][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 222.297411][ C0] ? irqentry_exit+0x74/0x90 [ 222.297483][ C0] ? rep_movs_alternative+0x4a/0x90 [ 222.297502][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 222.297521][ C0] ? security_bpf+0x7e/0x300 [ 222.297555][ C0] __sys_bpf+0x528/0x870 [ 222.297587][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 222.297654][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 222.297684][ C0] ? rcu_is_watching+0x15/0xb0 [ 222.297724][ C0] __x64_sys_bpf+0x7c/0x90 [ 222.297751][ C0] do_syscall_64+0xfa/0x3b0 [ 222.297780][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.297796][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.297813][ C0] ? clear_bhb_loop+0x60/0xb0 [ 222.297841][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.297859][ C0] RIP: 0033:0x7f97b398ebe9 [ 222.297887][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.297900][ C0] RSP: 002b:00007f97b479f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.297917][ C0] RAX: ffffffffffffffda RBX: 00007f97b3bb5fa0 RCX: 00007f97b398ebe9 [ 222.297929][ C0] RDX: 0000000000000094 RSI: 00002000000018c0 RDI: 0000000000000005 [ 222.297940][ C0] RBP: 00007f97b3a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 222.297951][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.297961][ C0] R13: 00007f97b3bb6038 R14: 00007f97b3bb5fa0 R15: 00007ffff8c27c48 [ 222.298017][ C0] [ 222.298030][ C0] Sending NMI from CPU 0 to CPUs 1: [ 223.468535][ C1] NMI backtrace for cpu 1 [ 223.468551][ C1] CPU: 1 UID: 0 PID: 6018 Comm: syz.4.8 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 223.468570][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.468579][ C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 223.468602][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b6 62 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 61 5e 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 45 5e [ 223.468614][ C1] RSP: 0018:ffffc9000475f340 EFLAGS: 00000293 [ 223.468629][ C1] RAX: ffffffff81b44d6b RBX: 1ffff110170c8341 RCX: ffff88801e3c9e00 [ 223.468641][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 223.468650][ C1] RBP: ffffc9000475f4c0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 223.468661][ C1] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff8880b8641a08 [ 223.468672][ C1] R13: dffffc0000000000 R14: ffff8880b873b1c0 R15: 0000000000000000 [ 223.468683][ C1] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 223.468696][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.468706][ C1] CR2: 00005555634945c8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 223.468720][ C1] Call Trace: [ 223.468727][ C1] [ 223.468739][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 223.468766][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 223.468781][ C1] ? perf_trace_lock+0xec/0x3b0 [ 223.468800][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 223.468815][ C1] ? rcu_is_watching+0x15/0xb0 [ 223.468833][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 223.468851][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 223.468868][ C1] flush_tlb_mm_range+0x6b1/0x12d0 [ 223.468892][ C1] ? trace_call_bpf+0xb7/0x850 [ 223.468906][ C1] ? free_pgd_range+0x144b/0x14c0 [ 223.468923][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 223.468949][ C1] tlb_flush_mmu+0x1a7/0x680 [ 223.468970][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 223.468983][ C1] ? free_pgd_range+0x144b/0x14c0 [ 223.468999][ C1] free_ldt_pgtables+0x17b/0x320 [ 223.469020][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 223.469051][ C1] ? down_read+0x1ad/0x2e0 [ 223.469073][ C1] exit_mmap+0x17c/0xb50 [ 223.469092][ C1] ? uprobe_clear_state+0x20f/0x290 [ 223.469112][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 223.469129][ C1] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 223.469158][ C1] ? __pfx_exit_aio+0x10/0x10 [ 223.469186][ C1] ? uprobe_clear_state+0x274/0x290 [ 223.469213][ C1] __mmput+0x118/0x420 [ 223.469230][ C1] exit_mm+0x1da/0x2c0 [ 223.469250][ C1] ? __pfx_exit_mm+0x10/0x10 [ 223.469268][ C1] ? trace_sched_process_exit+0x7c/0x1f0 [ 223.469291][ C1] do_exit+0x648/0x2300 [ 223.469309][ C1] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 223.469337][ C1] ? __pfx_do_exit+0x10/0x10 [ 223.469366][ C1] do_group_exit+0x21c/0x2d0 [ 223.469389][ C1] get_signal+0x1286/0x1340 [ 223.469419][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 223.469445][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 223.469466][ C1] ? irqentry_exit+0x74/0x90 [ 223.469500][ C1] exit_to_user_mode_loop+0x75/0x110 [ 223.469522][ C1] do_syscall_64+0x2bd/0x3b0 [ 223.469543][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.469557][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.469572][ C1] ? clear_bhb_loop+0x60/0xb0 [ 223.469590][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.469605][ C1] RIP: 0033:0x7f298af8ebe9 [ 223.469618][ C1] Code: Unable to access opcode bytes at 0x7f298af8ebbf. [ 223.469626][ C1] RSP: 002b:00007f29891f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.469641][ C1] RAX: fffffffffffffff5 RBX: 00007f298b1b5fa0 RCX: 00007f298af8ebe9 [ 223.469652][ C1] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 223.469661][ C1] RBP: 00007f298b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 223.469671][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.469681][ C1] R13: 00007f298b1b6038 R14: 00007f298b1b5fa0 R15: 00007fff64177768 [ 223.469703][ C1] [ 223.470537][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 223.873674][ C0] CPU: 0 UID: 0 PID: 6017 Comm: syz.0.1 Tainted: G L 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 223.886427][ C0] Tainted: [L]=SOFTLOCKUP [ 223.890740][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.900785][ C0] Call Trace: [ 223.904128][ C0] [ 223.906980][ C0] dump_stack_lvl+0x99/0x250 [ 223.911581][ C0] ? __asan_memcpy+0x40/0x70 [ 223.916181][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.921386][ C0] ? __pfx__printk+0x10/0x10 [ 223.926009][ C0] vpanic+0x281/0x750 [ 223.929988][ C0] ? __pfx__printk+0x10/0x10 [ 223.934595][ C0] ? __pfx_vpanic+0x10/0x10 [ 223.939113][ C0] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 223.945113][ C0] panic+0xb9/0xc0 [ 223.948832][ C0] ? __pfx_panic+0x10/0x10 [ 223.953258][ C0] ? nmi_backtrace_stall_check+0x433/0x440 [ 223.959067][ C0] ? irq_work_queue+0xc3/0x140 [ 223.963863][ C0] watchdog_timer_fn+0x862/0x870 [ 223.968812][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 223.974279][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 223.980168][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 223.986500][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 223.991958][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 223.997586][ C0] __hrtimer_run_queues+0x4e0/0xc60 [ 224.002814][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 224.008522][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 224.014606][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 224.019654][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 224.025635][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 224.031275][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.037269][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 224.042557][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb e3 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 224.062160][ C0] RSP: 0018:ffffc900000071f8 EFLAGS: 00000206 [ 224.068320][ C0] RAX: dda9ac60fb9db400 RBX: 0000000000000000 RCX: dda9ac60fb9db400 [ 224.076307][ C0] RDX: 0000000000000000 RSI: ffffffff8dba5fb5 RDI: ffffffff8be33380 [ 224.084275][ C0] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 224.092250][ C0] R10: ffffc90000006ec8 R11: ffffffff81ac3890 R12: 0000000000000002 [ 224.100215][ C0] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 [ 224.108188][ C0] ? unwind_next_frame+0xa5/0x2390 [ 224.113298][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 224.119447][ C0] ? unwind_next_frame+0xa5/0x2390 [ 224.124590][ C0] ? unwind_next_frame+0xa5/0x2390 [ 224.129780][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.135935][ C0] ? unwind_next_frame+0xa5/0x2390 [ 224.141039][ C0] unwind_next_frame+0xc2/0x2390 [ 224.145982][ C0] ? unwind_next_frame+0xa5/0x2390 [ 224.151104][ C0] ? unwind_next_frame+0xa5/0x2390 [ 224.156220][ C0] ? do_syscall_64+0xfa/0x3b0 [ 224.160906][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 224.167054][ C0] arch_stack_walk+0x11c/0x150 [ 224.171827][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.177895][ C0] stack_trace_save+0x9c/0xe0 [ 224.182570][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 224.187939][ C0] ? __irq_exit_rcu+0xd8/0x1f0 [ 224.192697][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 224.197897][ C0] kasan_save_track+0x3e/0x80 [ 224.202573][ C0] ? kasan_save_track+0x3e/0x80 [ 224.207415][ C0] ? kasan_save_free_info+0x46/0x50 [ 224.212604][ C0] ? __kasan_slab_free+0x5b/0x80 [ 224.217536][ C0] ? kmem_cache_free+0x18f/0x400 [ 224.222474][ C0] ? skb_release_data+0x62d/0x7c0 [ 224.227490][ C0] ? sk_skb_reason_drop+0x127/0x170 [ 224.232675][ C0] ? ip6_mc_input+0x8f4/0xaf0 [ 224.237349][ C0] ? NF_HOOK+0x30c/0x3a0 [ 224.241583][ C0] ? __netif_receive_skb+0xd3/0x380 [ 224.246776][ C0] ? process_backlog+0x60e/0x14f0 [ 224.251797][ C0] ? __napi_poll+0xc7/0x360 [ 224.256294][ C0] ? net_rx_action+0x707/0xe30 [ 224.261064][ C0] ? handle_softirqs+0x283/0x870 [ 224.265996][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 224.270752][ C0] ? irq_exit_rcu+0x9/0x30 [ 224.275161][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 224.280960][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.287104][ C0] ? __asan_memset+0x4/0x50 [ 224.291597][ C0] ? perf_tp_event+0xb7/0x1380 [ 224.296350][ C0] ? perf_trace_run_bpf_submit+0xee/0x170 [ 224.302064][ C0] ? perf_trace_lock+0x2f8/0x3b0 [ 224.306993][ C0] ? lock_release+0x3b2/0x3e0 [ 224.311670][ C0] ? unwind_next_frame+0x19a9/0x2390 [ 224.316951][ C0] ? arch_stack_walk+0x11c/0x150 [ 224.321880][ C0] ? stack_trace_save+0x9c/0xe0 [ 224.326728][ C0] ? kasan_save_track+0x3e/0x80 [ 224.331583][ C0] ? kasan_save_free_info+0x46/0x50 [ 224.336770][ C0] ? __kasan_slab_free+0x5b/0x80 [ 224.341712][ C0] ? kmem_cache_free+0x18f/0x400 [ 224.346651][ C0] ? va_alloc+0xc8c/0xef0 [ 224.350988][ C0] ? alloc_vmap_area+0x963/0x1490 [ 224.356019][ C0] ? __get_vm_area_node+0x1f8/0x300 [ 224.361226][ C0] ? __vmalloc_node_range_noprof+0x301/0x12f0 [ 224.367297][ C0] ? __vmalloc_noprof+0xb1/0xf0 [ 224.372186][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 224.377731][ C0] ? bpf_prog_alloc+0x3c/0x1a0 [ 224.382488][ C0] ? bpf_prog_load+0x735/0x1930 [ 224.387348][ C0] ? __sys_bpf+0x528/0x870 [ 224.391761][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 224.396341][ C0] ? do_syscall_64+0xfa/0x3b0 [ 224.401016][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.407113][ C0] ? skb_release_data+0x62d/0x7c0 [ 224.412133][ C0] kasan_save_free_info+0x46/0x50 [ 224.417154][ C0] __kasan_slab_free+0x5b/0x80 [ 224.421918][ C0] kmem_cache_free+0x18f/0x400 [ 224.426692][ C0] skb_release_data+0x62d/0x7c0 [ 224.431557][ C0] sk_skb_reason_drop+0x127/0x170 [ 224.436579][ C0] ip6_mc_input+0x8f4/0xaf0 [ 224.441107][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 224.446137][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 224.451185][ C0] NF_HOOK+0x30c/0x3a0 [ 224.455248][ C0] ? skb_orphan+0x4f/0xd0 [ 224.459585][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 224.464812][ C0] ? NF_HOOK+0x9a/0x3a0 [ 224.468963][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 224.473555][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 224.478798][ C0] __netif_receive_skb+0xd3/0x380 [ 224.483826][ C0] ? process_backlog+0x2d5/0x14f0 [ 224.488851][ C0] process_backlog+0x60e/0x14f0 [ 224.493740][ C0] ? __pfx_process_backlog+0x10/0x10 [ 224.499046][ C0] __napi_poll+0xc7/0x360 [ 224.503409][ C0] ? net_rx_action+0x46d/0xe30 [ 224.508184][ C0] net_rx_action+0x707/0xe30 [ 224.512813][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 224.517915][ C0] ? __irq_exit_rcu+0xd8/0x1f0 [ 224.522679][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 224.527909][ C0] ? handle_softirqs+0x23d/0x870 [ 224.532852][ C0] handle_softirqs+0x283/0x870 [ 224.537615][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 224.542396][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 224.547703][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 224.552930][ C0] __irq_exit_rcu+0xca/0x1f0 [ 224.557526][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 224.562748][ C0] irq_exit_rcu+0x9/0x30 [ 224.566986][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 224.572633][ C0] [ 224.575558][ C0] [ 224.578490][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.584461][ C0] RIP: 0010:__asan_memset+0x4/0x50 [ 224.589568][ C0] Code: ba 01 00 00 00 e9 bc e4 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 [ 224.609167][ C0] RSP: 0018:ffffc900053eed38 EFLAGS: 00000246 [ 224.615233][ C0] RAX: ffffffff81ef5318 RBX: ffffe8ffffc23818 RCX: 0000000000080000 [ 224.623195][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffc900053eedc0 [ 224.631164][ C0] RBP: ffffc900053eefc8 R08: ffff8880b8632980 R09: ffffe8ffffc23818 [ 224.639130][ C0] R10: dffffc0000000000 R11: fffff91ffff8d3c1 R12: 000000000000002c [ 224.647094][ C0] R13: ffffe8ffffc69de0 R14: ffffc900053eedc0 R15: dffffc0000000000 [ 224.655080][ C0] ? perf_tp_event+0xa8/0x1380 [ 224.659855][ C0] perf_tp_event+0xb7/0x1380 [ 224.664450][ C0] ? __pfx_perf_tp_event+0x10/0x10 [ 224.669571][ C0] ? perf_swevent_get_recursion_context+0xa6/0x100 [ 224.676081][ C0] ? perf_trace_buf_alloc+0x131/0x2a0 [ 224.681478][ C0] ? perf_trace_preemptirq_template+0x149/0x340 [ 224.687761][ C0] ? irqentry_enter+0x3d/0x60 [ 224.692461][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 224.699086][ C0] ? irqentry_exit+0x74/0x90 [ 224.703682][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.708899][ C0] perf_trace_run_bpf_submit+0xee/0x170 [ 224.714456][ C0] perf_trace_lock+0x2f8/0x3b0 [ 224.719238][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 224.724537][ C0] ? unwind_next_frame+0xa5/0x2390 [ 224.729657][ C0] ? unwind_next_frame+0xa5/0x2390 [ 224.734798][ C0] ? unwind_next_frame+0xa5/0x2390 [ 224.739918][ C0] lock_release+0x3b2/0x3e0 [ 224.744425][ C0] ? deref_stack_reg+0x19f/0x230 [ 224.749378][ C0] ? unwind_next_frame+0xa5/0x2390 [ 224.754500][ C0] unwind_next_frame+0x19a9/0x2390 [ 224.759637][ C0] ? unwind_next_frame+0xa5/0x2390 [ 224.764751][ C0] ? __vmalloc_noprof+0xb1/0xf0 [ 224.769613][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 224.775766][ C0] arch_stack_walk+0x11c/0x150 [ 224.780541][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 224.786092][ C0] stack_trace_save+0x9c/0xe0 [ 224.790766][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 224.796155][ C0] kasan_save_track+0x3e/0x80 [ 224.800825][ C0] ? kasan_save_track+0x3e/0x80 [ 224.805672][ C0] ? kasan_save_free_info+0x46/0x50 [ 224.810861][ C0] ? __kasan_slab_free+0x5b/0x80 [ 224.815792][ C0] ? kmem_cache_free+0x18f/0x400 [ 224.820721][ C0] ? va_alloc+0xc8c/0xef0 [ 224.825043][ C0] ? alloc_vmap_area+0x963/0x1490 [ 224.830060][ C0] ? __get_vm_area_node+0x1f8/0x300 [ 224.835254][ C0] ? __vmalloc_node_range_noprof+0x301/0x12f0 [ 224.841312][ C0] ? __vmalloc_noprof+0xb1/0xf0 [ 224.846240][ C0] ? va_alloc+0xc8c/0xef0 [ 224.850567][ C0] kasan_save_free_info+0x46/0x50 [ 224.855600][ C0] __kasan_slab_free+0x5b/0x80 [ 224.860366][ C0] kmem_cache_free+0x18f/0x400 [ 224.865138][ C0] va_alloc+0xc8c/0xef0 [ 224.869315][ C0] alloc_vmap_area+0x963/0x1490 [ 224.874194][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 224.879473][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 224.884237][ C0] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 224.890218][ C0] ? __get_vm_area_node+0x13f/0x300 [ 224.895418][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 224.900962][ C0] __get_vm_area_node+0x1f8/0x300 [ 224.905999][ C0] __vmalloc_node_range_noprof+0x301/0x12f0 [ 224.911896][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 224.917471][ C0] ? __schedule+0x17ae/0x4cc0 [ 224.922169][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 224.928501][ C0] ? perf_trace_run_bpf_submit+0xee/0x170 [ 224.934246][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 224.939824][ C0] __vmalloc_noprof+0xb1/0xf0 [ 224.944523][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 224.950081][ C0] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 224.955466][ C0] bpf_prog_alloc+0x3c/0x1a0 [ 224.960064][ C0] bpf_prog_load+0x735/0x1930 [ 224.964759][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 224.969870][ C0] ? irqentry_exit+0x74/0x90 [ 224.974491][ C0] ? rep_movs_alternative+0x4a/0x90 [ 224.979682][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 224.984009][ C0] ? security_bpf+0x7e/0x300 [ 224.988602][ C0] __sys_bpf+0x528/0x870 [ 224.992847][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 224.997639][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 225.004227][ C0] ? rcu_is_watching+0x15/0xb0 [ 225.009035][ C0] __x64_sys_bpf+0x7c/0x90 [ 225.013452][ C0] do_syscall_64+0xfa/0x3b0 [ 225.017955][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.024013][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.030158][ C0] ? clear_bhb_loop+0x60/0xb0 [ 225.034837][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.040718][ C0] RIP: 0033:0x7f97b398ebe9 [ 225.045129][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.064734][ C0] RSP: 002b:00007f97b479f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.073161][ C0] RAX: ffffffffffffffda RBX: 00007f97b3bb5fa0 RCX: 00007f97b398ebe9 [ 225.081217][ C0] RDX: 0000000000000094 RSI: 00002000000018c0 RDI: 0000000000000005 [ 225.089183][ C0] RBP: 00007f97b3a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 225.097148][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.105153][ C0] R13: 00007f97b3bb6038 R14: 00007f97b3bb5fa0 R15: 00007ffff8c27c48 [ 225.113231][ C0] [ 225.116509][ C0] Kernel Offset: disabled [ 225.121001][ C0] Rebooting in 86400 seconds..