last executing test programs: 26.743386653s ago: executing program 1 (id=2797): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0xffffffffffffff9a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x7ff, 0x80, 0x8, 0x1000, 0x1, 0x5, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x7c}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x4b}, @exit]}, &(0x7f0000000400)='syzkaller\x00', 0xfffffffa, 0xe3, &(0x7f0000000b80)=""/227, 0x41100, 0x0, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000cc0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x2, 0xa, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r0, r0], 0x0, 0x10, 0x8}, 0x94) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r9 = socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = openat$cgroup_int(r10, &(0x7f00000002c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x4, 0x12) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$sock_attach_bpf(r9, 0x84, 0x1f, &(0x7f0000000100)=r14, 0x129) 26.372276085s ago: executing program 2 (id=2800): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x3}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x10010, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='(pu&\"\"\t&&') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) syz_clone(0x2000000, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0), &(0x7f0000000d40), &(0x7f0000000e00)="30ecd106d669c1592fa0d8b05152fa98e98357710331d43a0c4cd20c6f980e8778bc9f4e9b92f0a88068914d98103c16f42cab58ebc7d6e357f48676e4c6c141ed21007fd3c7c2f2d1a8c1fab27337d64f5134c86898087846232c037a4537ce4cbc798471") sendmsg$unix(r4, &(0x7f0000000f40)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000400)}, {&(0x7f0000000940)="c5536a1c690017df143d7afd16ae7fae1272c277930b0c7059d9f15e388601bf000ade3b207b6dcb8a1e27db75c32e2e7c55927aeb2d9d372f1d79f6e98fb516f6911174d01dd9f6691eb3e29c35f243707e4ffaee116719a5e0ae5f1f4459370e4bb47f976a3751b228707ee5752c6a167565d05ab80672a0f5", 0x7a}, {&(0x7f00000009c0)="d4889539d9da92da683272800c7412a26b9121c6939a40205eb341857bd2c568ecd7b6d402098300913a814a894b2a2f3f5cdd03619d08ee3629d524ca473d", 0x3f}], 0x3, &(0x7f0000000700)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r2, r0, r5, r0, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r2, r2, r0, r6]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r6, r4, r6, r2, r2, r6]}}, @rights={{0x1c, 0x1, 0x1, [r2, r6, r1]}}], 0xa8, 0x10}, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2b}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 22.646776667s ago: executing program 1 (id=2803): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="93443f14c10900c600c2000020991d5f334d0b16bd0000004014414fe4b2c9b011db00320ef76ca8b490a3de4374678be8cafd436ce81560dad25ff0e1f0954010b5b644ebd5100357bd948935c77bc65b7d4aba5cb64af6cc56b06c8fd2f7874222e7ca14b805a4e326b246306812c90ef8b5af7fd75318"], &(0x7f00000002c0)='GPL\x00', 0xe, 0xa9, &(0x7f0000000300)=""/169, 0x40f00, 0xc, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x9, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000780), &(0x7f00000007c0)=[{0x4, 0x5, 0x8, 0x1}, {0x0, 0x2, 0x2, 0x5}, {0x3, 0x2, 0xa, 0x9}, {0x0, 0x5, 0x8, 0x4}, {0x1, 0x4, 0xa, 0x7}, {0x2, 0x4, 0x9, 0xc}, {0x4, 0x1, 0x5, 0xb}], 0x10, 0x4}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x181, 0x181, 0x3, [@struct={0xa, 0x6, 0x0, 0x4, 0x0, 0x1, [{0xd, 0x3, 0x3}, {0x2, 0x4, 0x2}, {0x7, 0x3, 0x4}, {0x8, 0x4, 0x3b}, {0xf, 0x3, 0x7}, {0xe, 0x0, 0x9}]}, @fwd={0x6}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x1, 0x2}, {}, {0x0, 0x1}, {0x5, 0x5}, {0x6, 0x2}]}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @datasec={0x7, 0x9, 0x0, 0xf, 0x1, [{0x4, 0x80, 0x4}, {0x1, 0x401}, {0x4, 0x3, 0xcb67}, {0x1, 0x7, 0x10}, {0x4, 0x5, 0x6}, {0x5, 0x400, 0x6e1}, {0x5, 0xfffffff8}, {0x1, 0x8000, 0x4}, {0x1, 0x679, 0xffffffff}], "fd"}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0x4, [{0x0, 0x1, 0x1}, {0x0, 0x0, 0x9}, {0x1, 0x5, 0xc7}, {0x6, 0x0, 0x6}, {0xc, 0x0, 0x6a}, {0x8, 0x3, 0x7}, {0x8, 0x3, 0x3}]}]}, {0x0, [0x5f]}}, &(0x7f0000000b80)=""/41, 0x19f, 0x29, 0x0, 0xff, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x42d1, 0x0, r4, 0x4, '\x00', r6, r8, 0x3, 0x5}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r9}, 0x0, &(0x7f0000000080)='%-5lx \x00'}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x8, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 22.599431019s ago: executing program 2 (id=2804): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x2}, 0x1b002, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0xfffffffffffffffe}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x5ae) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r8, 0x0) 22.461753804s ago: executing program 3 (id=2806): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x5, 0x4, 0x9, 0x0, 0x0, 0x7, 0x100, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x800, 0x7fffffff, 0x3, 0x5, 0xf, 0x6, 0x8, 0x0, 0x10, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x5, 0x5ba, 0x0, 0x201}, 0x0, 0x1, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002a80)={0x1, &(0x7f0000001980)="2aec44b71a47a3587a0ee8272646f0a1da8ace820b86a88109e73028c3f8f4dae8f44afaf2e7bea48ce14e693e5e88741524c47d83f12cb9e0dfed1dbcb66da2e8b12954184ad8ee63a49cc7f33bc9301db823c597b63a464cfb53925e99c99157d375cc34cf24e9f4151a3403d3f001aefa9f44eb1a17ecce5dae00fbacd0c3556cacae746b9a255bed40fe8b681baf37f9fe7753da9b97c65fdf2f8f62c2e902e4dcc730181fa92b43c70b3fc2d196a855dac08987bc6cd486943ee15624c1dcd83a664415717b8302ab43c99e11e6e1b0e89e03cbd35b3c7d8cb70bdcf63862daa7a64a766b3de30aac9682d6c3ea7cddcead8794e6ffde292afc28f4a51f34c4c384ece71b4352818fdd8df23f8cd448f040d9946efa1a15dbcc2ed09029e42b7ca25f4dda26e8f6b20fcfd30605366b8a584efca85a1aa25a983724689117387507c037304cc547cf031ef504a1f97b5ae00a1d706310d433693f9f156c524dd6f6c688c5bcf24b86ead7fc1450a5e06b9d88568ec03b93a881b87925bb4b83eabfc35660ebcd745c154a0f79e699076b8e50bcc51db8853d4730fdb44e6b8f0a41f8c906f567341a58523b5c497dc27640acab85c5b5d4fafb00fd32252b8fcb1e33178859b340cee8782e900cb1a08eac8ad6c5af84d8feca8d35abad9abefb27bf8f36c69df3df27e047d7b0d45e97ab38f758c9d636a950097551738858ceb50b5e036008b464070039242ed9d0c02962a078338a8e9204fa26948b6be7a1bfd3ad2938cef285f6d92660aadd372906ad73f40d6eb6fb08afc984a8bdeba169ae8f49b1be38cb655931ad813c990dde723264ea189b490a6f2afa2f8d3d337527ae76ea71f9fb5ab02f40eff621d0e17c6e0acea4237349e3cbd7fc45f0da5e8446fb1aa18afce6df41ee3bdf10016db1f01040cabb9219cbb7b16197c25b84d828aa29c1554d3082fa2dd2068f54a1f8331053f0bac679f11ccdb31df28eab10d19479dacf09fecff0ffe01fcad3b6384a0356b66241ca9449f2e5795d4e031724fc219dc4d78a32a8e4e2a798364e015a26fd257c226f89a331d994b025c8c358a0830d9d41e812da0bfac86218573dc7cbd7e69df3465d24fb00061336043ed31bfc3636d25ca20c0d763c5485a58ba60866b55baa90d3d05ec28585de747c19b1d8171b4c7ddf72b400858b9828fe948e27dae935f459fe50e246ff1efac58e76b66ba878d6fcaeb6cf777e7e0c0a95a991004cc62a2a4059251b73c32f2f5794f2c55732431ce9d10d68cf49295a2da016bdfc22340b48d205735517c2a4e23cd68799beb00ed059abddf2a265a2488bbbfdf5be8ccf9866801fdd861b2abdf0039e77a59e75066c7394889016029f91d00d8251c178f5ab4b640a8a960d9935d1cb13788cda0d2f8bece4eb9ebfdd42b4a7da0c0788e6f65071b1da2e1708508e313fd475abe6edae9c0af1d274491d5657089942e544ff378994814c6fc5207e18b5856c74ee31aca195c0c1db0483a0d534005f914db9a735377c4534c26da55995828bd8aa8033201d30176bd4e2870ec06b56f330e63d585341a48702f497dc3ff1352e7e2c29b20629809b3ec20045feac73fd913922b6193e52b933ce78838543a0508aeb375c457971a3246403a8c060e10da1918ef90939f7b8a4df5f4e89617c65b8ca0e9f81338af509cc5571d1a42dda08ffe6e91067ca131833fcb4f9506ebc10885da1efbe0389348c942612c089694c02b1636ee7155dfdb9335b0969300267308b5b66773b861dd9008c5d2c43438c6fc74e4768c4c76a06040af40a8f02b5b9fde0c653d261285c4149f8b9c691789a0aa12ab501a408c3f82560066832e4251f015c4aba96721cd7e1598019b567d3aa0aef99d7e6d7252064acbf3207763061406b867ea05bbf92227c040c2e098414e346e5f46f0c58f02550a87d30ff2aaf9f71ab7e6b52d9db34cf864f5a297f333de80b6754b73bf836175a4e7f0a0776763cbec9f9c29983d32d161670af4d70bc3bb9f68a54fc7c1ef53e3f54c1a1171a9232388b47cbba48847dbb7bb59a110ebd7bf9196bc038fdeaa7a0db91d87765671d7160bda933497a237aaf1635a4d0651fee5a1e2751ec5956dd723b5a6a81ac984243fe14772f7e3d7479d46da4e073281c1ec3f3619a4a0d3b139c374dbaf1ad0a0d522504fac881da276836d9da66e17e8f512bfab8ee972eccfeeb2e933241b7a035d9d07a76217f5dde308a298cf25753cc43e7ea59e55a26e5f2bf8ff58e58b4288ccdfb70b44719fdc6a2131a9a9d86f0e9f1d2f7f1aff21bb8201fd519593d8d62aff8be928ec23036b34321bd1a448cd1f190b93cfa3d8cd620c9fdaae66bd857102d3677eb9c39b13dadf381f38c6668f31856b9efc1f0e26e8eec5225ca6ddc0a3d894b316f3bfffa6a5b36b93a80dea7fa3abaab39a7df4d17373e1737db6b0636a95ea53215b48e90a4b9d6a52e352db98c1a74059a4d92e94ad6c312bf21cf114c3b637f04c95474bba350e6225d630091faa22d44e30c2614fd1d25ea1865323e78e8441383205d21bbc123404fd9fd4a373debafc6d7c899696bb21be6510d7978007bcfb04f9d7a489fb55a6934d9e4a724e68e698bf0a1c879752dcdd044169d29e696ad4007f7b956c3bb2c96c206ffb6fdd2faa76867ecfcc6e33132ea8bbd83278d265a4bd5d6bd6200858810ff27c573e750380f8ddb548d6163b24b11d3f1611036e01062d590be91f9bbbdec697e61cc9bf1a83371214e4bf88a6f1d62e7f94605c6b473e0c131235d015ae5077c3099ea9e6c16daa20b135b1277808914d5b8db1c36239f93ce72d3a21e90f8ddaf3a8b2aca4f6eb2993eb2085bd0a28a24520b09cda24061180f3b3fc4508c9025211be3e6a6f32f97b1dda6e77d4d7558c855f2caa20d1688e6231550dadf53791c8ae8887a931b7ecd74985420c4e6532153973de887c48ad96cd3ab6357ea3cd53931fb35bc8b9dcad199b2175921f853334afe19bee63c698f671b5251b1c51ee36731b502c6a8e8bf275f43e0271f33abd50d4ae57b4df1ddea2181ba8a8113bbb98c8d8d77f33cd000ff327e85a3a3727ac402e52f21d1484d0b316bfad754d0c5d69ebb8ab94a5ff42c7234827c286fae0b43d1f711373dca8161cc5503b166259bcecd1e4e94d355c0ed74c9ac664d2dbf2a311f2fdc05ecccb37bc6a0acd8a41ae0090b6b258301d9957c94166077391e4c43fa180132cb5f14bf647b06c099f61fc70bcef41978c91081fbcb241c863f1d602eb07659d7e0a129861d37156c2a08b944f2f4ec59bfae7f12692eaa1b8c4251384ab3fa2e246e95ca81a1b33de113ab9a83aba97e1fe6c6d6ef0529aded9f86a3aefb2dd12badba8765dc5f5a5efc36e4d155cfc2a6933a95c4493e4188ed762607f8c2bc719681ccd7e60b746e77b698973443eb639982355932625834d42c43d15d70aae4a75664140d2e621b8c7b5b5ceea18d64a95a52908495d8bd90f47e45e6e121fa2c29325477cfd715f83f97da436a27563fe5f3e2290bb2fa728b301fd31ce355e7b2e7b1fd9e5cbb9b7fbe80928f50fd9fa5ddd7d78ce806ef70c89d65e140ed4213de61b152206c8f6d9245118ca2e8c1fbb8aa81cd750dd7e1f92e2bf6745ed08cb295b5c3889c1abf6c410c88d0576ab6ff3ff8534b8fc99b87b7c6970aeab78c2f4cf458756bfaf4ea77fdbc56fec7f9b91c8cab81e02175c3a9bfeb6eceac76ecf70ae91054e0cf1e558ba2144f7823124fbace2afc6b13bfcaf46a1f9d86e6b4b24f31c7bc1c09f4f37b9016dd357cd4ed2b7d485df63b40720307ee4eba83be0b92645e8ef160ca0da3f623c13ec84fb847582d7bd972b7c4eb56bddfb65a207073ebc78dc0579d66040d4064db534966004cdd22fb738d88b82d8ba910c967079de3984087e97f6cefd41c16d36c568b2377625ea1caa090c8e09b82699a7c31a79d6287c2792a12fc590eb322c49007d0605d633e877fca83dc0e03b416ff6a11a66944dbf6308d0181b661d39a3818e2e383b3cd39ee4847f85583d33057ab189d6d2c99d507ad3bc770a0674ba28fc42d77c1aef40deca9c81b6abe2b75bfdd26a1a1a82d43b8c337b57e50a841101391292db50e7f94ae6383b679fe41496527f932b5b005b4b74d2ace1d984fe25c6abe090d5553a8eea9b5857200fd76a0685f5c0890beec1b8227d4159173c4344051fe14940ec63a7521d17cc52e2b18a2b729b2bd430d93aefd50194c1e69afb474b403e65e9529c17ed6e5a72a2f7174ba54d9930ac1cca491242c4522996af6176c6ccbbbdcdd9ab8c36c388063ba8693efdafc268e31564444dcbc2a01c77f5af37c40bf10f41d543adc541907d7a87655a2d562c334ab324de8a8f92876c3a0dbcf0b1504aae5d69d13ba4b36b73f9e1e328cb981d798f6f529b0072f3701a45d9d61726c8e7cb5b3b445ad54e1e49a062f413a1f794cb1dc6677d6f68d53347982a15b6eae3796850a023df7d39c2e43ed21508b1c7ebbed6c783e3a9db1b7c3ce3d68cb4bc238e15a4ce5443bd1d5b9fdf8cd506444a87c7f2b1c8a21224881d1cc3a7dd88a51d34b02887eae459532ce33e99a684fc499f48e15e9fa429e233c72883877b34b8337cdfe6d9b777191bdf8d9da263f9eb453ba9555acbad1b19019050ec8baf34ca8eb50b5fdc98509cc37d85ed2005cf78cbcf0c8bce7026c6291c112e5ee35fb9efd2d9eec8e0d1a4a1aa7c41d34822f8e26bb1953b4cb71c92f5e1af0bf5442174fb0970b0e0328c54f7805d8c6fbaa0a69466fad1a9e3fe8d31c8262721a608fa5e2afcc9a8866d7c7746fc69d2fd877444d7db53f48d88dae0bbdfb874f65f365e1e79cf7970f6fb22f5df064986920431b20da5650fb7ddc69978472028e1ec42356d70ade5198d6eaa493bc629f2dfddcaa72b29384ad0be5771980af66a8f4ebfab1c3c3f0ae1584fdb58d08a17b8d129c0fd7724a414dc798fdec053d9836d77b10f37553d341263f86a281681c87b05ad859807ee610a0c784dbc510b4513036be0c17da414e062191f08f08dd1baf85f64ec79a9edbfd13d3f4d2d8bdbae7096a7310b42aa69e54c0e23f4e47bd66dd5361421000a9afd0859c0a68d7b9552c8e0e09a405d4f12abf82e381873ae91a8d237b70f4802b559f918a68e28bcd00f54009783c0f624ed8a6b7f71cbaa6a92f278e05a796d8688c1ad70c2c914b24262b95ebaeef713f682dd5380eec8e57ab3dd3671b85b6da42c602ac246b79d26078758388375e41307b672b3f26f35b577b687bb30b427920486f16e5da52be8f0cb8c2c5e82a5ec3ca5c16dd7eeb784ee53c4592098333344b1312a4b984e6383d1b606b91d8e416b8d972b5d670742dc8b643903c0d7201be83dbb402cbeb2cae127e77b361050c2c58443bd1dc5258068de9a77bccdfabe2c4db0b65995eca8c8095cd88756562988ec666d2a3e24b09964c27b2de16070b66761c452a0254c4f2ff09da83d61023515e226c0f02e760bf99be0be3bae5b2ce8b6cd8f0e6e3132c47a7ccdffe56fc881624d35489e7f7ad6c0afd22473d0ea255f44a5993373c42d81f4e5af69d0e4a6632e7ab9fd9f19d5f1b0d0a62febd6fec88be839a66af6698b6938a8fa13d700c156adb26edfeb85d56a5bac0b44adbf7d121d5bff6e0e23f43287a09164f20e75b325807fdd7e54570d1a526e5132f507cbf66876fe5f5acf8c2677397cdb53355c0da5e3d8839", &(0x7f0000002980)=""/213}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37477813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de", 0xffeb}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="0506000000000000000000d6c5136f00000000000000000000000040"]) socket$kcm(0x10, 0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x4000000000001000, 0x12) 22.290941859s ago: executing program 1 (id=2807): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20) socketpair(0x25, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x24}, {0x6}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000400000f1000000000000063000000000000009500050000000000622167cc525a970268e17740a38f02925549625b01a53d0a078072b0e1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x56) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000036600000000000000700000000000000000000009500000000000000038a24104aae"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x20000000000002aa, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000001680)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x4}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001500)="b7f8a578791cbd2639916c2a692ca4ca5c3c3e7813a8afcc2f728d3f4c38ef17c2dee0034221bcfd751a9417474cbb7492fd78c9b7fa7f6c7434fe5ea27a9d0cf7ad16dfbaa593a81eb053a249460d1d1cb3f3ae9ee52498b7a7c298030cb63fdda0d555b5b937138eeaa61c5a29a0f9329d781351d713c264fcb73bfdaf8e15a8b1e0d677ddcce89ac94ba953ae12d1e6e4118a55624ca93df40db2c9ed5a93f8d36901b3ae97f4aacb0461b62c91d7f345653d70d61dc6a49f05b6b1289b9470fb2c66c38686a036e84b0f9148204d2b37625853", 0xd5}], 0x1, &(0x7f0000001640)="c660e0c1f007717539f4d57bac25208f07cdffc34cf2d4fa7afc0c6d926211d547b620965f4edb5c4e780e0783ffba", 0x2f, 0x44804}, 0x4008000) 22.231094401s ago: executing program 0 (id=2808): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="93443f14c10900c600c2000020991d5f334d0b16bd0000004014414fe4b2c9b011db00320ef76ca8b490a3de4374678be8cafd436ce81560dad25ff0e1f0954010b5b644ebd5100357bd948935c77bc65b7d4aba5cb64af6cc56b06c8fd2f7874222e7ca14b805a4e326b246306812c90ef8b5af7fd75318"], &(0x7f00000002c0)='GPL\x00', 0xe, 0xa9, &(0x7f0000000300)=""/169, 0x40f00, 0xc, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x9, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000780), &(0x7f00000007c0)=[{0x4, 0x5, 0x8, 0x1}, {0x0, 0x2, 0x2, 0x5}, {0x3, 0x2, 0xa, 0x9}, {0x0, 0x5, 0x8, 0x4}, {0x1, 0x4, 0xa, 0x7}, {0x2, 0x4, 0x9, 0xc}, {0x4, 0x1, 0x5, 0xb}], 0x10, 0x4}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x181, 0x181, 0x3, [@struct={0xa, 0x6, 0x0, 0x4, 0x0, 0x1, [{0xd, 0x3, 0x3}, {0x2, 0x4, 0x2}, {0x7, 0x3, 0x4}, {0x8, 0x4, 0x3b}, {0xf, 0x3, 0x7}, {0xe, 0x0, 0x9}]}, @fwd={0x6}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x1, 0x2}, {}, {0x0, 0x1}, {0x5, 0x5}, {0x6, 0x2}]}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @datasec={0x7, 0x9, 0x0, 0xf, 0x1, [{0x4, 0x80, 0x4}, {0x1, 0x401}, {0x4, 0x3, 0xcb67}, {0x1, 0x7, 0x10}, {0x4, 0x5, 0x6}, {0x5, 0x400, 0x6e1}, {0x5, 0xfffffff8}, {0x1, 0x8000, 0x4}, {0x1, 0x679, 0xffffffff}], "fd"}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0x4, [{0x0, 0x1, 0x1}, {0x0, 0x0, 0x9}, {0x1, 0x5, 0xc7}, {0x6, 0x0, 0x6}, {0xc, 0x0, 0x6a}, {0x8, 0x3, 0x7}, {0x8, 0x3, 0x3}]}]}, {0x0, [0x5f]}}, &(0x7f0000000b80)=""/41, 0x19f, 0x29, 0x0, 0xff, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x42d1, 0x0, r4, 0x4, '\x00', r6, r8, 0x3, 0x5}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r9}, 0x0, &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x8, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 21.933474561s ago: executing program 0 (id=2809): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="93443f14c10900c600c2000020991d5f334d0b16bd0000004014414fe4b2c9b011db00320ef76ca8b490a3de4374678be8cafd436ce81560dad25ff0e1f0954010b5b644ebd5100357bd948935c77bc65b7d4aba5cb64af6cc56b06c8fd2f7874222e7ca14b805a4e326b246306812c90ef8b5af7fd75318"], &(0x7f00000002c0)='GPL\x00', 0xe, 0xa9, &(0x7f0000000300)=""/169, 0x40f00, 0xc, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x9, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000780), &(0x7f00000007c0)=[{0x4, 0x5, 0x8, 0x1}, {0x0, 0x2, 0x2, 0x5}, {0x3, 0x2, 0xa, 0x9}, {0x0, 0x5, 0x8, 0x4}, {0x1, 0x4, 0xa, 0x7}, {0x2, 0x4, 0x9, 0xc}, {0x4, 0x1, 0x5, 0xb}], 0x10, 0x4}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x181, 0x181, 0x3, [@struct={0xa, 0x6, 0x0, 0x4, 0x0, 0x1, [{0xd, 0x3, 0x3}, {0x2, 0x4, 0x2}, {0x7, 0x3, 0x4}, {0x8, 0x4, 0x3b}, {0xf, 0x3, 0x7}, {0xe, 0x0, 0x9}]}, @fwd={0x6}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x1, 0x2}, {}, {0x0, 0x1}, {0x5, 0x5}, {0x6, 0x2}]}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @datasec={0x7, 0x9, 0x0, 0xf, 0x1, [{0x4, 0x80, 0x4}, {0x1, 0x401}, {0x4, 0x3, 0xcb67}, {0x1, 0x7, 0x10}, {0x4, 0x5, 0x6}, {0x5, 0x400, 0x6e1}, {0x5, 0xfffffff8}, {0x1, 0x8000, 0x4}, {0x1, 0x679, 0xffffffff}], "fd"}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0x4, [{0x0, 0x1, 0x1}, {0x0, 0x0, 0x9}, {0x1, 0x5, 0xc7}, {0x6, 0x0, 0x6}, {0xc, 0x0, 0x6a}, {0x8, 0x3, 0x7}, {0x8, 0x3, 0x3}]}]}, {0x0, [0x5f]}}, &(0x7f0000000b80)=""/41, 0x19f, 0x29, 0x0, 0xff, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x42d1, 0x0, r4, 0x4, '\x00', r6, r8, 0x3, 0x5}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r9}, 0x0, &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x8, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 21.932963351s ago: executing program 3 (id=2810): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fcffffff0000000009460000183e6200", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x50000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000006b0000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7030000000000000c0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000060000000000000085290600000400000004000000040000000700000004000000060000000061008849ed357b9c46a949d2144d1b899c6270b20ee2d473b786bfbaa9137b02541df2fdad09905587414dff"], &(0x7f0000000680)=""/246, 0x4f, 0xf6, 0x0, 0xfffffffb}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) 21.767881606s ago: executing program 3 (id=2811): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x18}, 0x0) recvmsg$unix(r6, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001540)={r0, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001580)=@generic={&(0x7f0000000300)='./file0\x00', r8}, 0x18) openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000000000000f0000000000000085100000fdffffff060000809500000000000000000000004f1bf33d27b1befc964ccf55e56b901e0e47b1686bda412a3f2b338252e1dd1c565802d62904880b10e64650c3288f98a48e6d8cff4ae0ea5d8fb5b08e43521f55a1355feb85973a63f19bb932cee4ba12ec9c54477db9a75321b5f154117e35d4813b8e"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x4, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) syz_clone(0x10000600, &(0x7f00000000c0)="0b760f2fd6a5", 0x6, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000480)="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") write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r4], 0x12) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000240)='./file0\x00', r3}, 0x18) 21.686428599s ago: executing program 2 (id=2812): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0xffffffffffffff9a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x7ff, 0x80, 0x8, 0x1000, 0x1, 0x5, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x7c}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x4b}, @exit]}, &(0x7f0000000400)='syzkaller\x00', 0xfffffffa, 0xe3, &(0x7f0000000b80)=""/227, 0x41100, 0x0, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000cc0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x2, 0xa, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r0, r0], 0x0, 0x10, 0x8}, 0x94) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r9 = socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = openat$cgroup_int(r10, &(0x7f00000002c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x4, 0x12) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$sock_attach_bpf(r9, 0x84, 0x1f, &(0x7f0000000100)=r14, 0x129) 21.65151875s ago: executing program 0 (id=2813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000dbee000000000000d300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000900008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffde3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r4, 0x1, 0x35, &(0x7f0000000040)=r5, 0x13) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xfffff147, 0x5, 0x7, 0x400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xd}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x160, 0x160, 0x8, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x2}, @struct={0x10, 0x4, 0x0, 0x4, 0x1, 0x9, [{0xd, 0x5, 0x5ef49703}, {0x4, 0x2, 0x2}, {0x3, 0x1, 0xf}, {0x7, 0x5, 0x9}]}, @enum={0xa, 0x9, 0x0, 0x6, 0x4, [{0x1}, {0x3, 0x800}, {0x8, 0x2}, {0x9, 0x1}, {0xb, 0x1}, {0xe, 0x8001}, {0xc, 0x773}, {0x3, 0x2}, {0xc, 0x100}]}, @enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0x0, 0x3ac2}, {0xf, 0x2}, {0xf, 0xa}, {0x1, 0x9741}, {0xb, 0x7}, {0xc, 0xf}, {0xa, 0x9}]}, @fwd={0x5}, @float={0x4, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0x9, 0x3}, {0x5, 0x1}, {0xf, 0x1}, {0xe, 0x1}, {0x3, 0x1}, {0xf, 0x3}, {0x10}]}]}, {0x0, [0x61, 0x61, 0x6f, 0x0, 0x0, 0x5f]}}, &(0x7f0000000880)=""/175, 0x180, 0xaf, 0x0, 0x2, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r13) ioctl$TUNGETVNETLE(r13, 0x8955, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r15) r16 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r14, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r17, &(0x7f0000000100)=ANY=[@ANYBLOB="3eca", @ANYRES32=r16], 0x9a) r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1e85e4f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x1b, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x0, 0x0, 0x1, 0x2, 0x100, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x1, 0x9, 0xd, 0x2, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x71}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6a92}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa4}, @ldst={0x2, 0x1, 0x1, 0x2, 0x2, 0x8, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x57}], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x83, &(0x7f0000000300)=""/131, 0x41000, 0xa8, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000980)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x8, 0xb, 0xff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[r11, r12, r13, r17, r18], &(0x7f0000000b80)=[{0x4, 0x5, 0x1, 0x2}, {0x2, 0x5, 0x10, 0x4}], 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 21.512754155s ago: executing program 1 (id=2814): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x3}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x10010, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='(pu&\"\"\t&&') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) syz_clone(0x2000000, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0), &(0x7f0000000d40), &(0x7f0000000e00)="30ecd106d669c1592fa0d8b05152fa98e98357710331d43a0c4cd20c6f980e8778bc9f4e9b92f0a88068914d98103c16f42cab58ebc7d6e357f48676e4c6c141ed21007fd3c7c2f2d1a8c1fab27337d64f5134c86898087846232c037a4537ce4cbc798471") sendmsg$unix(r4, &(0x7f0000000f40)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000400)}, {&(0x7f0000000940)="c5536a1c690017df143d7afd16ae7fae1272c277930b0c7059d9f15e388601bf000ade3b207b6dcb8a1e27db75c32e2e7c55927aeb2d9d372f1d79f6e98fb516f6911174d01dd9f6691eb3e29c35f243707e4ffaee116719a5e0ae5f1f4459370e4bb47f976a3751b228707ee5752c6a167565d05ab80672a0f5", 0x7a}, {&(0x7f00000009c0)="d4889539d9da92da683272800c7412a26b9121c6939a40205eb341857bd2c568ecd7b6d402098300913a814a894b2a2f3f5cdd03619d08ee3629d524ca473d", 0x3f}], 0x3, &(0x7f0000000700)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r2, r0, r5, r0, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r2, r2, r0, r6]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r6, r4, r6, r2, r2, r6]}}, @rights={{0x1c, 0x1, 0x1, [r2, r6, r1]}}], 0xa8, 0x10}, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2b}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.555671921s ago: executing program 2 (id=2815): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x28, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x6, 0x26, &(0x7f0000001ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9ee7, 0x0, 0x0, 0x0, 0x910}, {}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x8, 0xb, 0xfffffffffffffff4, 0x1}, @map_fd={0x18, 0xb}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ddb405e, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001c00)='syzkaller\x00', 0x9, 0xc8, &(0x7f0000001c40)=""/200, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001d80)={0x1, 0x4, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001dc0)=[{0x0, 0x5, 0xc, 0xb}, {0x1, 0x3, 0xc, 0x3}, {0x3, 0x4, 0x2, 0x1}, {0x1, 0x5, 0xf, 0x2}, {0x1, 0x4, 0x4, 0xb}, {0x2, 0x3, 0x8, 0x7}, {0x4, 0x2, 0xc, 0xd}], 0x10, 0x2}, 0x94) r6 = gettid() r7 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r10, &(0x7f0000000080), 0x11ffffce1) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="00009e00429e7f6245b25b8ffa", @ANYRES32=0x0, @ANYRES32], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001f00)=@base={0x18, 0x5, 0x343eeddf, 0x3, 0x10, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081054e81f782db44b9040a1d3b020a000000040000a11800020000e9400084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6e94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9561b4a29c828f6a3aa2fcf72baa7ea67e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a753916647f616b762439deec51", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) sendmsg$unix(r4, &(0x7f0000002080)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000003c0)="18d4ae5320a69bd4f305646705cfa9afc522f49c304e4b7c58203a045f7956ba9bee1f89a4b7f64c98eff038e2efffa60f0e87e5c84dcfd79c3c31a2f689b91b091fe569c4d5d7ff4de09b28c4079523f6af6ef141f67377c391e403", 0x5c}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="266e5d6208d1c2f78dd3f6e33a7bf86563b96fdb48103023c15abe641423fdbb2479e9d81605f6b447cfa65049bd955651220767ad767cdf4ab445b9cd522b12ead024d1384b4bf408928010e10bf18d69e55c82cbe0c8d364d69eeb21923db398301d3e1407f115c844ea0323c7128f4b6261ed21126d48c8fe8209063f1615b2c493d15cba73703914", 0x8a}, {&(0x7f0000001780)="f4a41c7574f9e907902b89396359354eca52c7dffcc3b5fe1b09bb88695b372df0abc9e4898956bf043cce84f8", 0x2d}, {&(0x7f00000017c0)="f62cc204f05f9b63cfae41144e411610a5a75f513e4652f8648b4c21a27fdff6fdb1f50e5353f7fb3c4051fed13cba904d180e687ebc0ac32d102a715b96423a741499e682911f2a938a32c98fb9299018084eab9240a1642b0aef985450c9b3293e86cc4f8b77690b3e9660e12c62c0a4488e1421e97ba575face144612c8544a49d6535d6d59d61f", 0x89}, {&(0x7f0000001980)="edfb99723ae4ebfcab84e5c7516f87120e5d91114891fb201d79ce1e4e6908e2d3c29c05ab5b40f04ede544ac0a0d4386976b158ba97f3c1e5a4fd688b6edd50001a62696807c317e5a6dca6c3b88fafaf699a11e0476fe1ff7de64086681fe5f8a93c18803d348369f906979412c29c7fd95d4bff0131bac0753f0f6da181c445a7b43d7481ae6d4d2c11ada59f1e0a426545a1fe86a634dd08e922ec76094f84d36bcb", 0xa4}], 0x6, &(0x7f0000001f80)=[@rights={{0x38, 0x1, 0x1, [r1, r3, r1, r1, r5, r1, r3, r0, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r3, r2, r1, r11, r1, r3, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0xf0, 0x8040}, 0x4001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r13, 0x0, 0x1a, 0x85, &(0x7f0000000440)="e4e345e472d24c7dbfbf958276260a98a9344338a6756d5e320a", &(0x7f00000020c0)=""/133, 0x80, 0x0, 0x2, 0x1c, &(0x7f0000002180)="1330", &(0x7f00000021c0)="fd0195cfeaa60ef843e1e02ad1263c587e31f329a62d8e1d66c4dde3", 0x1, 0x0, 0x1000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0xcc0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce2200"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.555173441s ago: executing program 3 (id=2816): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={0x0}, 0x10000, 0xc8, 0x0, 0x8, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000aafe80000000000002"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) sendmsg$kcm(r2, 0x0, 0x24040810) socket$kcm(0x10, 0x3, 0x10) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) mkdir(0x0, 0x90) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r8, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000", 0x17}], 0x1}, 0x0) 18.450217665s ago: executing program 0 (id=2817): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="93443f14c10900c600c2000020991d5f334d0b16bd0000004014414fe4b2c9b011db00320ef76ca8b490a3de4374678be8cafd436ce81560dad25ff0e1f0954010b5b644ebd5100357bd948935c77bc65b7d4aba5cb64af6cc56b06c8fd2f7874222e7ca14b805a4e326b246306812c90ef8b5af7fd75318"], &(0x7f00000002c0)='GPL\x00', 0xe, 0xa9, &(0x7f0000000300)=""/169, 0x40f00, 0xc, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x9, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000780), &(0x7f00000007c0)=[{0x4, 0x5, 0x8, 0x1}, {0x0, 0x2, 0x2, 0x5}, {0x3, 0x2, 0xa, 0x9}, {0x0, 0x5, 0x8, 0x4}, {0x1, 0x4, 0xa, 0x7}, {0x2, 0x4, 0x9, 0xc}, {0x4, 0x1, 0x5, 0xb}], 0x10, 0x4}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x181, 0x181, 0x3, [@struct={0xa, 0x6, 0x0, 0x4, 0x0, 0x1, [{0xd, 0x3, 0x3}, {0x2, 0x4, 0x2}, {0x7, 0x3, 0x4}, {0x8, 0x4, 0x3b}, {0xf, 0x3, 0x7}, {0xe, 0x0, 0x9}]}, @fwd={0x6}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x1, 0x2}, {}, {0x0, 0x1}, {0x5, 0x5}, {0x6, 0x2}]}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @datasec={0x7, 0x9, 0x0, 0xf, 0x1, [{0x4, 0x80, 0x4}, {0x1, 0x401}, {0x4, 0x3, 0xcb67}, {0x1, 0x7, 0x10}, {0x4, 0x5, 0x6}, {0x5, 0x400, 0x6e1}, {0x5, 0xfffffff8}, {0x1, 0x8000, 0x4}, {0x1, 0x679, 0xffffffff}], "fd"}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0x4, [{0x0, 0x1, 0x1}, {0x0, 0x0, 0x9}, {0x1, 0x5, 0xc7}, {0x6, 0x0, 0x6}, {0xc, 0x0, 0x6a}, {0x8, 0x3, 0x7}, {0x8, 0x3, 0x3}]}]}, {0x0, [0x5f]}}, &(0x7f0000000b80)=""/41, 0x19f, 0x29, 0x0, 0xff, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x42d1, 0x0, r4, 0x4, '\x00', r6, r8, 0x3, 0x5}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r9}, 0x0, &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x8, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 18.393913797s ago: executing program 1 (id=2818): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x5, 0x4, 0x9, 0x0, 0x0, 0x7, 0x100, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x800, 0x7fffffff, 0x3, 0x5, 0xf, 0x6, 0x8, 0x0, 0x10, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x5, 0x5ba, 0x0, 0x201}, 0x0, 0x1, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002a80)={0x1, &(0x7f0000001980)="2aec44b71a47a3587a0ee8272646f0a1da8ace820b86a88109e73028c3f8f4dae8f44afaf2e7bea48ce14e693e5e88741524c47d83f12cb9e0dfed1dbcb66da2e8b12954184ad8ee63a49cc7f33bc9301db823c597b63a464cfb53925e99c99157d375cc34cf24e9f4151a3403d3f001aefa9f44eb1a17ecce5dae00fbacd0c3556cacae746b9a255bed40fe8b681baf37f9fe7753da9b97c65fdf2f8f62c2e902e4dcc730181fa92b43c70b3fc2d196a855dac08987bc6cd486943ee15624c1dcd83a664415717b8302ab43c99e11e6e1b0e89e03cbd35b3c7d8cb70bdcf63862daa7a64a766b3de30aac9682d6c3ea7cddcead8794e6ffde292afc28f4a51f34c4c384ece71b4352818fdd8df23f8cd448f040d9946efa1a15dbcc2ed09029e42b7ca25f4dda26e8f6b20fcfd30605366b8a584efca85a1aa25a983724689117387507c037304cc547cf031ef504a1f97b5ae00a1d706310d433693f9f156c524dd6f6c688c5bcf24b86ead7fc1450a5e06b9d88568ec03b93a881b87925bb4b83eabfc35660ebcd745c154a0f79e699076b8e50bcc51db8853d4730fdb44e6b8f0a41f8c906f567341a58523b5c497dc27640acab85c5b5d4fafb00fd32252b8fcb1e33178859b340cee8782e900cb1a08eac8ad6c5af84d8feca8d35abad9abefb27bf8f36c69df3df27e047d7b0d45e97ab38f758c9d636a950097551738858ceb50b5e036008b464070039242ed9d0c02962a078338a8e9204fa26948b6be7a1bfd3ad2938cef285f6d92660aadd372906ad73f40d6eb6fb08afc984a8bdeba169ae8f49b1be38cb655931ad813c990dde723264ea189b490a6f2afa2f8d3d337527ae76ea71f9fb5ab02f40eff621d0e17c6e0acea4237349e3cbd7fc45f0da5e8446fb1aa18afce6df41ee3bdf10016db1f01040cabb9219cbb7b16197c25b84d828aa29c1554d3082fa2dd2068f54a1f8331053f0bac679f11ccdb31df28eab10d19479dacf09fecff0ffe01fcad3b6384a0356b66241ca9449f2e5795d4e031724fc219dc4d78a32a8e4e2a798364e015a26fd257c226f89a331d994b025c8c358a0830d9d41e812da0bfac86218573dc7cbd7e69df3465d24fb00061336043ed31bfc3636d25ca20c0d763c5485a58ba60866b55baa90d3d05ec28585de747c19b1d8171b4c7ddf72b400858b9828fe948e27dae935f459fe50e246ff1efac58e76b66ba878d6fcaeb6cf777e7e0c0a95a991004cc62a2a4059251b73c32f2f5794f2c55732431ce9d10d68cf49295a2da016bdfc22340b48d205735517c2a4e23cd68799beb00ed059abddf2a265a2488bbbfdf5be8ccf9866801fdd861b2abdf0039e77a59e75066c7394889016029f91d00d8251c178f5ab4b640a8a960d9935d1cb13788cda0d2f8bece4eb9ebfdd42b4a7da0c0788e6f65071b1da2e1708508e313fd475abe6edae9c0af1d274491d5657089942e544ff378994814c6fc5207e18b5856c74ee31aca195c0c1db0483a0d534005f914db9a735377c4534c26da55995828bd8aa8033201d30176bd4e2870ec06b56f330e63d585341a48702f497dc3ff1352e7e2c29b20629809b3ec20045feac73fd913922b6193e52b933ce78838543a0508aeb375c457971a3246403a8c060e10da1918ef90939f7b8a4df5f4e89617c65b8ca0e9f81338af509cc5571d1a42dda08ffe6e91067ca131833fcb4f9506ebc10885da1efbe0389348c942612c089694c02b1636ee7155dfdb9335b0969300267308b5b66773b861dd9008c5d2c43438c6fc74e4768c4c76a06040af40a8f02b5b9fde0c653d261285c4149f8b9c691789a0aa12ab501a408c3f82560066832e4251f015c4aba96721cd7e1598019b567d3aa0aef99d7e6d7252064acbf3207763061406b867ea05bbf92227c040c2e098414e346e5f46f0c58f02550a87d30ff2aaf9f71ab7e6b52d9db34cf864f5a297f333de80b6754b73bf836175a4e7f0a0776763cbec9f9c29983d32d161670af4d70bc3bb9f68a54fc7c1ef53e3f54c1a1171a9232388b47cbba48847dbb7bb59a110ebd7bf9196bc038fdeaa7a0db91d87765671d7160bda933497a237aaf1635a4d0651fee5a1e2751ec5956dd723b5a6a81ac984243fe14772f7e3d7479d46da4e073281c1ec3f3619a4a0d3b139c374dbaf1ad0a0d522504fac881da276836d9da66e17e8f512bfab8ee972eccfeeb2e933241b7a035d9d07a76217f5dde308a298cf25753cc43e7ea59e55a26e5f2bf8ff58e58b4288ccdfb70b44719fdc6a2131a9a9d86f0e9f1d2f7f1aff21bb8201fd519593d8d62aff8be928ec23036b34321bd1a448cd1f190b93cfa3d8cd620c9fdaae66bd857102d3677eb9c39b13dadf381f38c6668f31856b9efc1f0e26e8eec5225ca6ddc0a3d894b316f3bfffa6a5b36b93a80dea7fa3abaab39a7df4d17373e1737db6b0636a95ea53215b48e90a4b9d6a52e352db98c1a74059a4d92e94ad6c312bf21cf114c3b637f04c95474bba350e6225d630091faa22d44e30c2614fd1d25ea1865323e78e8441383205d21bbc123404fd9fd4a373debafc6d7c899696bb21be6510d7978007bcfb04f9d7a489fb55a6934d9e4a724e68e698bf0a1c879752dcdd044169d29e696ad4007f7b956c3bb2c96c206ffb6fdd2faa76867ecfcc6e33132ea8bbd83278d265a4bd5d6bd6200858810ff27c573e750380f8ddb548d6163b24b11d3f1611036e01062d590be91f9bbbdec697e61cc9bf1a83371214e4bf88a6f1d62e7f94605c6b473e0c131235d015ae5077c3099ea9e6c16daa20b135b1277808914d5b8db1c36239f93ce72d3a21e90f8ddaf3a8b2aca4f6eb2993eb2085bd0a28a24520b09cda24061180f3b3fc4508c9025211be3e6a6f32f97b1dda6e77d4d7558c855f2caa20d1688e6231550dadf53791c8ae8887a931b7ecd74985420c4e6532153973de887c48ad96cd3ab6357ea3cd53931fb35bc8b9dcad199b2175921f853334afe19bee63c698f671b5251b1c51ee36731b502c6a8e8bf275f43e0271f33abd50d4ae57b4df1ddea2181ba8a8113bbb98c8d8d77f33cd000ff327e85a3a3727ac402e52f21d1484d0b316bfad754d0c5d69ebb8ab94a5ff42c7234827c286fae0b43d1f711373dca8161cc5503b166259bcecd1e4e94d355c0ed74c9ac664d2dbf2a311f2fdc05ecccb37bc6a0acd8a41ae0090b6b258301d9957c94166077391e4c43fa180132cb5f14bf647b06c099f61fc70bcef41978c91081fbcb241c863f1d602eb07659d7e0a129861d37156c2a08b944f2f4ec59bfae7f12692eaa1b8c4251384ab3fa2e246e95ca81a1b33de113ab9a83aba97e1fe6c6d6ef0529aded9f86a3aefb2dd12badba8765dc5f5a5efc36e4d155cfc2a6933a95c4493e4188ed762607f8c2bc719681ccd7e60b746e77b698973443eb639982355932625834d42c43d15d70aae4a75664140d2e621b8c7b5b5ceea18d64a95a52908495d8bd90f47e45e6e121fa2c29325477cfd715f83f97da436a27563fe5f3e2290bb2fa728b301fd31ce355e7b2e7b1fd9e5cbb9b7fbe80928f50fd9fa5ddd7d78ce806ef70c89d65e140ed4213de61b152206c8f6d9245118ca2e8c1fbb8aa81cd750dd7e1f92e2bf6745ed08cb295b5c3889c1abf6c410c88d0576ab6ff3ff8534b8fc99b87b7c6970aeab78c2f4cf458756bfaf4ea77fdbc56fec7f9b91c8cab81e02175c3a9bfeb6eceac76ecf70ae91054e0cf1e558ba2144f7823124fbace2afc6b13bfcaf46a1f9d86e6b4b24f31c7bc1c09f4f37b9016dd357cd4ed2b7d485df63b40720307ee4eba83be0b92645e8ef160ca0da3f623c13ec84fb847582d7bd972b7c4eb56bddfb65a207073ebc78dc0579d66040d4064db534966004cdd22fb738d88b82d8ba910c967079de3984087e97f6cefd41c16d36c568b2377625ea1caa090c8e09b82699a7c31a79d6287c2792a12fc590eb322c49007d0605d633e877fca83dc0e03b416ff6a11a66944dbf6308d0181b661d39a3818e2e383b3cd39ee4847f85583d33057ab189d6d2c99d507ad3bc770a0674ba28fc42d77c1aef40deca9c81b6abe2b75bfdd26a1a1a82d43b8c337b57e50a841101391292db50e7f94ae6383b679fe41496527f932b5b005b4b74d2ace1d984fe25c6abe090d5553a8eea9b5857200fd76a0685f5c0890beec1b8227d4159173c4344051fe14940ec63a7521d17cc52e2b18a2b729b2bd430d93aefd50194c1e69afb474b403e65e9529c17ed6e5a72a2f7174ba54d9930ac1cca491242c4522996af6176c6ccbbbdcdd9ab8c36c388063ba8693efdafc268e31564444dcbc2a01c77f5af37c40bf10f41d543adc541907d7a87655a2d562c334ab324de8a8f92876c3a0dbcf0b1504aae5d69d13ba4b36b73f9e1e328cb981d798f6f529b0072f3701a45d9d61726c8e7cb5b3b445ad54e1e49a062f413a1f794cb1dc6677d6f68d53347982a15b6eae3796850a023df7d39c2e43ed21508b1c7ebbed6c783e3a9db1b7c3ce3d68cb4bc238e15a4ce5443bd1d5b9fdf8cd506444a87c7f2b1c8a21224881d1cc3a7dd88a51d34b02887eae459532ce33e99a684fc499f48e15e9fa429e233c72883877b34b8337cdfe6d9b777191bdf8d9da263f9eb453ba9555acbad1b19019050ec8baf34ca8eb50b5fdc98509cc37d85ed2005cf78cbcf0c8bce7026c6291c112e5ee35fb9efd2d9eec8e0d1a4a1aa7c41d34822f8e26bb1953b4cb71c92f5e1af0bf5442174fb0970b0e0328c54f7805d8c6fbaa0a69466fad1a9e3fe8d31c8262721a608fa5e2afcc9a8866d7c7746fc69d2fd877444d7db53f48d88dae0bbdfb874f65f365e1e79cf7970f6fb22f5df064986920431b20da5650fb7ddc69978472028e1ec42356d70ade5198d6eaa493bc629f2dfddcaa72b29384ad0be5771980af66a8f4ebfab1c3c3f0ae1584fdb58d08a17b8d129c0fd7724a414dc798fdec053d9836d77b10f37553d341263f86a281681c87b05ad859807ee610a0c784dbc510b4513036be0c17da414e062191f08f08dd1baf85f64ec79a9edbfd13d3f4d2d8bdbae7096a7310b42aa69e54c0e23f4e47bd66dd5361421000a9afd0859c0a68d7b9552c8e0e09a405d4f12abf82e381873ae91a8d237b70f4802b559f918a68e28bcd00f54009783c0f624ed8a6b7f71cbaa6a92f278e05a796d8688c1ad70c2c914b24262b95ebaeef713f682dd5380eec8e57ab3dd3671b85b6da42c602ac246b79d26078758388375e41307b672b3f26f35b577b687bb30b427920486f16e5da52be8f0cb8c2c5e82a5ec3ca5c16dd7eeb784ee53c4592098333344b1312a4b984e6383d1b606b91d8e416b8d972b5d670742dc8b643903c0d7201be83dbb402cbeb2cae127e77b361050c2c58443bd1dc5258068de9a77bccdfabe2c4db0b65995eca8c8095cd88756562988ec666d2a3e24b09964c27b2de16070b66761c452a0254c4f2ff09da83d61023515e226c0f02e760bf99be0be3bae5b2ce8b6cd8f0e6e3132c47a7ccdffe56fc881624d35489e7f7ad6c0afd22473d0ea255f44a5993373c42d81f4e5af69d0e4a6632e7ab9fd9f19d5f1b0d0a62febd6fec88be839a66af6698b6938a8fa13d700c156adb26edfeb85d56a5bac0b44adbf7d121d5bff6e0e23f43287a09164f20e75b325807fdd7e54570d1a526e5132f507cbf66876fe5f5acf8c2677397cdb53355c0da5e3d8839", &(0x7f0000002980)=""/213}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0xffeb}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="0506000000000000000000d6c5136f00000000000000000000000040"]) socket$kcm(0x10, 0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x4000000000001000, 0x12) 18.255962351s ago: executing program 3 (id=2819): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x3}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x10010, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='(pu&\"\"\t&&') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) syz_clone(0x2000000, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0), &(0x7f0000000d40), &(0x7f0000000e00)="30ecd106d669c1592fa0d8b05152fa98e98357710331d43a0c4cd20c6f980e8778bc9f4e9b92f0a88068914d98103c16f42cab58ebc7d6e357f48676e4c6c141ed21007fd3c7c2f2d1a8c1fab27337d64f5134c86898087846232c037a4537ce4cbc798471") sendmsg$unix(r4, &(0x7f0000000f40)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000400)}, {&(0x7f0000000940)="c5536a1c690017df143d7afd16ae7fae1272c277930b0c7059d9f15e388601bf000ade3b207b6dcb8a1e27db75c32e2e7c55927aeb2d9d372f1d79f6e98fb516f6911174d01dd9f6691eb3e29c35f243707e4ffaee116719a5e0ae5f1f4459370e4bb47f976a3751b228707ee5752c6a167565d05ab80672a0f5", 0x7a}, {&(0x7f00000009c0)="d4889539d9da92da683272800c7412a26b9121c6939a40205eb341857bd2c568ecd7b6d402098300913a814a894b2a2f3f5cdd03619d08ee3629d524ca473d", 0x3f}], 0x3, &(0x7f0000000700)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r2, r0, r5, r0, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r2, r2, r0, r6]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r6, r4, r6, r2, r2, r6]}}, @rights={{0x1c, 0x1, 0x1, [r2, r6, r1]}}], 0xa8, 0x10}, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2b}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.083397737s ago: executing program 0 (id=2820): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fcffffff0000000009460000183e6200", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x50000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000006b0000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7030000000000000c0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000060000000000000085290600000400000004000000040000000700000004000000060000000061008849ed357b9c46a949d2144d1b899c6270b20ee2d473b786bfbaa9137b02541df2fdad09905587414dff"], &(0x7f0000000680)=""/246, 0x4f, 0xf6, 0x0, 0xfffffffb}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) 17.102375439s ago: executing program 0 (id=2821): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x2}, 0x1b002, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0xfffffffffffffffe}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x5ae) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r8, 0x0) 17.101760049s ago: executing program 1 (id=2822): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20) socketpair(0x25, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x24}, {0x6}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000400000f1000000000000063000000000000009500050000000000622167cc525a970268e17740a38f02925549625b01a53d0a078072b0e1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x56) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000036600000000000000700000000000000000000009500000000000000038a24104aae"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x20000000000002aa, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000001680)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x4}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001500)="b7f8a578791cbd2639916c2a692ca4ca5c3c3e7813a8afcc2f728d3f4c38ef17c2dee0034221bcfd751a9417474cbb7492fd78c9b7fa7f6c7434fe5ea27a9d0cf7ad16dfbaa593a81eb053a249460d1d1cb3f3ae9ee52498b7a7c298030cb63fdda0d555b5b937138eeaa61c5a29a0f9329d781351d713c264fcb73bfdaf8e15a8b1e0d677ddcce89ac94ba953ae12d1e6e4118a55624ca93df40db2c9ed5a93f8d36901b3ae97f4aacb0461b62c91d7f345653d70d61dc6a49f05b6b1289b9470fb2c66c38686a036e84b0f9148204d2b37625853", 0xd5}], 0x1, &(0x7f0000001640)="c660e0c1f007717539f4d57bac25208f07cdffc34cf2d4fa7afc0c6d926211d547b620965f4edb5c4e780e0783ffba", 0x2f, 0x44804}, 0x4008000) 16.955976074s ago: executing program 2 (id=2823): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0xffffffffffffff9a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x7ff, 0x80, 0x8, 0x1000, 0x1, 0x5, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x7c}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x4b}, @exit]}, &(0x7f0000000400)='syzkaller\x00', 0xfffffffa, 0xe3, &(0x7f0000000b80)=""/227, 0x41100, 0x0, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000cc0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x2, 0xa, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r0, r0], 0x0, 0x10, 0x8}, 0x94) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r9 = socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = openat$cgroup_int(r10, &(0x7f00000002c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x4, 0x12) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$sock_attach_bpf(r9, 0x84, 0x1f, &(0x7f0000000100)=r14, 0x129) 16.867607167s ago: executing program 3 (id=2824): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200"/13], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000180)="af83857089ac6640dec50234d3608b95", &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x20000844) 15.724766984s ago: executing program 2 (id=2825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000dbee000000000000d300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000900008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffde3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r4, 0x1, 0x35, &(0x7f0000000040)=r5, 0x13) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xfffff147, 0x5, 0x7, 0x400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xd}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x160, 0x160, 0x8, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x2}, @struct={0x10, 0x4, 0x0, 0x4, 0x1, 0x9, [{0xd, 0x5, 0x5ef49703}, {0x4, 0x2, 0x2}, {0x3, 0x1, 0xf}, {0x7, 0x5, 0x9}]}, @enum={0xa, 0x9, 0x0, 0x6, 0x4, [{0x1}, {0x3, 0x800}, {0x8, 0x2}, {0x9, 0x1}, {0xb, 0x1}, {0xe, 0x8001}, {0xc, 0x773}, {0x3, 0x2}, {0xc, 0x100}]}, @enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0x0, 0x3ac2}, {0xf, 0x2}, {0xf, 0xa}, {0x1, 0x9741}, {0xb, 0x7}, {0xc, 0xf}, {0xa, 0x9}]}, @fwd={0x5}, @float={0x4, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0x9, 0x3}, {0x5, 0x1}, {0xf, 0x1}, {0xe, 0x1}, {0x3, 0x1}, {0xf, 0x3}, {0x10}]}]}, {0x0, [0x61, 0x61, 0x6f, 0x0, 0x0, 0x5f]}}, &(0x7f0000000880)=""/175, 0x180, 0xaf, 0x0, 0x2, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r13) ioctl$TUNGETVNETLE(r13, 0x8955, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r15) r16 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r14, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r17, &(0x7f0000000100)=ANY=[@ANYRES8=r15, @ANYBLOB="3eca", @ANYRES32=r16], 0x9a) r18 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x1b, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x0, 0x0, 0x1, 0x2, 0x100, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x1, 0x9, 0xd, 0x2, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x71}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6a92}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa4}, @ldst={0x2, 0x1, 0x1, 0x2, 0x2, 0x8, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x57}], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x83, &(0x7f0000000300)=""/131, 0x41000, 0xa8, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000980)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x8, 0xb, 0xff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[r11, r12, r13, r17, r18], &(0x7f0000000b80)=[{0x4, 0x5, 0x1, 0x2}, {0x2, 0x5, 0x10, 0x4}], 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.143710543s ago: executing program 32 (id=2821): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x2}, 0x1b002, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0xfffffffffffffffe}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x5ae) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r8, 0x0) 1.087523814s ago: executing program 33 (id=2822): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20) socketpair(0x25, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x24}, {0x6}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000400000f1000000000000063000000000000009500050000000000622167cc525a970268e17740a38f02925549625b01a53d0a078072b0e1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x56) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000036600000000000000700000000000000000000009500000000000000038a24104aae"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x20000000000002aa, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000001680)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x4}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001500)="b7f8a578791cbd2639916c2a692ca4ca5c3c3e7813a8afcc2f728d3f4c38ef17c2dee0034221bcfd751a9417474cbb7492fd78c9b7fa7f6c7434fe5ea27a9d0cf7ad16dfbaa593a81eb053a249460d1d1cb3f3ae9ee52498b7a7c298030cb63fdda0d555b5b937138eeaa61c5a29a0f9329d781351d713c264fcb73bfdaf8e15a8b1e0d677ddcce89ac94ba953ae12d1e6e4118a55624ca93df40db2c9ed5a93f8d36901b3ae97f4aacb0461b62c91d7f345653d70d61dc6a49f05b6b1289b9470fb2c66c38686a036e84b0f9148204d2b37625853", 0xd5}], 0x1, &(0x7f0000001640)="c660e0c1f007717539f4d57bac25208f07cdffc34cf2d4fa7afc0c6d926211d547b620965f4edb5c4e780e0783ffba", 0x2f, 0x44804}, 0x4008000) 1.037109686s ago: executing program 34 (id=2824): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200"/13], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000180)="af83857089ac6640dec50234d3608b95", &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x20000844) 0s ago: executing program 35 (id=2825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000dbee000000000000d300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000900008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffde3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r4, 0x1, 0x35, &(0x7f0000000040)=r5, 0x13) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xfffff147, 0x5, 0x7, 0x400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xd}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x160, 0x160, 0x8, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x2}, @struct={0x10, 0x4, 0x0, 0x4, 0x1, 0x9, [{0xd, 0x5, 0x5ef49703}, {0x4, 0x2, 0x2}, {0x3, 0x1, 0xf}, {0x7, 0x5, 0x9}]}, @enum={0xa, 0x9, 0x0, 0x6, 0x4, [{0x1}, {0x3, 0x800}, {0x8, 0x2}, {0x9, 0x1}, {0xb, 0x1}, {0xe, 0x8001}, {0xc, 0x773}, {0x3, 0x2}, {0xc, 0x100}]}, @enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0x0, 0x3ac2}, {0xf, 0x2}, {0xf, 0xa}, {0x1, 0x9741}, {0xb, 0x7}, {0xc, 0xf}, {0xa, 0x9}]}, @fwd={0x5}, @float={0x4, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0x9, 0x3}, {0x5, 0x1}, {0xf, 0x1}, {0xe, 0x1}, {0x3, 0x1}, {0xf, 0x3}, {0x10}]}]}, {0x0, [0x61, 0x61, 0x6f, 0x0, 0x0, 0x5f]}}, &(0x7f0000000880)=""/175, 0x180, 0xaf, 0x0, 0x2, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r13) ioctl$TUNGETVNETLE(r13, 0x8955, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r15) r16 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r14, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r17, &(0x7f0000000100)=ANY=[@ANYRES8=r15, @ANYBLOB="3eca", @ANYRES32=r16], 0x9a) r18 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x1b, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x0, 0x0, 0x1, 0x2, 0x100, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x1, 0x9, 0xd, 0x2, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x71}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6a92}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa4}, @ldst={0x2, 0x1, 0x1, 0x2, 0x2, 0x8, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x57}], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x83, &(0x7f0000000300)=""/131, 0x41000, 0xa8, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000980)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x8, 0xb, 0xff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[r11, r12, r13, r17, r18], &(0x7f0000000b80)=[{0x4, 0x5, 0x1, 0x2}, {0x2, 0x5, 0x10, 0x4}], 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): ength. [ 309.652662][ T9690] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1450'. [ 309.978609][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 309.978641][ T5781] Bluetooth: unknown link type 101 [ 309.991016][ T5781] Bluetooth: hci2: connection err: -111 [ 310.534830][ T9718] FAULT_INJECTION: forcing a failure. [ 310.534830][ T9718] name failslab, interval 1, probability 0, space 0, times 0 [ 310.631218][ T9718] CPU: 0 PID: 9718 Comm: syz.0.1462 Not tainted syzkaller #0 [ 310.638673][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.648770][ T9718] Call Trace: [ 310.652085][ T9718] [ 310.655055][ T9718] dump_stack_lvl+0x18c/0x250 [ 310.659793][ T9718] ? show_regs_print_info+0x20/0x20 [ 310.665053][ T9718] ? load_image+0x420/0x420 [ 310.669609][ T9718] ? __might_sleep+0xe0/0xe0 [ 310.674251][ T9718] ? __lock_acquire+0x7d40/0x7d40 [ 310.679338][ T9718] should_fail_ex+0x39d/0x4d0 [ 310.684081][ T9718] should_failslab+0x9/0x20 [ 310.688622][ T9718] slab_pre_alloc_hook+0x59/0x310 [ 310.693701][ T9718] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 310.699371][ T9718] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 310.705027][ T9718] __kmem_cache_alloc_node+0x53/0x250 [ 310.710444][ T9718] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 310.716097][ T9718] __kmalloc+0xa4/0x230 [ 310.720281][ T9718] ioctl_standard_iw_point+0x51a/0xcf0 [ 310.725800][ T9718] ? cfg80211_wext_siwessid+0x120/0x120 [ 310.731358][ T9718] ? iw_handler_get_iwstats+0x110/0x110 [ 310.736919][ T9718] ? wext_ioctl_dispatch+0x115/0x600 [ 310.742218][ T9718] ? dev_load+0x21/0x1f0 [ 310.746481][ T9718] ? mutex_lock_nested+0x20/0x20 [ 310.751450][ T9718] ? cfg80211_wext_siwessid+0x120/0x120 [ 310.757012][ T9718] ioctl_standard_call+0xb7/0x2b0 [ 310.762046][ T9718] ? cfg80211_wext_siwessid+0x120/0x120 [ 310.767611][ T9718] wext_ioctl_dispatch+0x1cb/0x600 [ 310.772741][ T9718] ? wext_ioctl_dispatch+0x600/0x600 [ 310.778032][ T9718] ? iw_handler_get_private+0x1f0/0x1f0 [ 310.783595][ T9718] ? wext_handle_ioctl+0x1d0/0x1d0 [ 310.788720][ T9718] ? __might_fault+0xaa/0x120 [ 310.793413][ T9718] ? __might_fault+0xc6/0x120 [ 310.798102][ T9718] ? __might_fault+0xaa/0x120 [ 310.802807][ T9718] wext_handle_ioctl+0x117/0x1d0 [ 310.807767][ T9718] ? call_commit_handler+0xf0/0xf0 [ 310.812932][ T9718] sock_ioctl+0x15d/0x7e0 [ 310.817289][ T9718] ? sock_poll+0x3e0/0x3e0 [ 310.821749][ T9718] ? bpf_lsm_file_ioctl+0x9/0x10 [ 310.826696][ T9718] ? security_file_ioctl+0x80/0xa0 [ 310.831819][ T9718] ? sock_poll+0x3e0/0x3e0 [ 310.836253][ T9718] __se_sys_ioctl+0xfd/0x170 [ 310.840866][ T9718] do_syscall_64+0x55/0xb0 [ 310.847031][ T9718] ? clear_bhb_loop+0x40/0x90 [ 310.851716][ T9718] ? clear_bhb_loop+0x40/0x90 [ 310.856410][ T9718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.862319][ T9718] RIP: 0033:0x7f17bf59ce59 [ 310.866747][ T9718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.886363][ T9718] RSP: 002b:00007f17c0515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.894797][ T9718] RAX: ffffffffffffffda RBX: 00007f17bf815fa0 RCX: 00007f17bf59ce59 [ 310.902775][ T9718] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000005 [ 310.910756][ T9718] RBP: 00007f17c0515090 R08: 0000000000000000 R09: 0000000000000000 [ 310.918737][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.926716][ T9718] R13: 00007f17bf816038 R14: 00007f17bf815fa0 R15: 00007ffc3823af48 [ 310.934738][ T9718] [ 311.025230][ T9724] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1464'. [ 311.069543][ T9714] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 311.363017][ T5781] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 311.363048][ T5781] Bluetooth: unknown link type 101 [ 311.383542][ T5781] Bluetooth: hci1: connection err: -111 [ 312.546887][ T9748] netlink: 'syz.0.1472': attribute type 10 has an invalid length. [ 312.571467][ T9748] team0: Device hsr_slave_0 failed to register rx_handler [ 312.615622][ T9756] netlink: set zone limit has 8 unknown bytes [ 312.624770][ T9755] netlink: 163148 bytes leftover after parsing attributes in process `syz.0.1472'. [ 312.646617][ T9750] netlink: 'syz.3.1473': attribute type 49 has an invalid length. [ 312.689947][ T9761] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1475'. [ 312.997068][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 312.997112][ T5781] Bluetooth: unknown link type 101 [ 313.009631][ T5781] Bluetooth: hci2: connection err: -111 [ 313.068248][ T9769] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1479'. [ 313.159091][ T9775] FAULT_INJECTION: forcing a failure. [ 313.159091][ T9775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.177041][ T9775] CPU: 0 PID: 9775 Comm: syz.3.1480 Not tainted syzkaller #0 [ 313.184452][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.194527][ T9775] Call Trace: [ 313.197815][ T9775] [ 313.200750][ T9775] dump_stack_lvl+0x18c/0x250 [ 313.205458][ T9775] ? show_regs_print_info+0x20/0x20 [ 313.210690][ T9775] ? load_image+0x420/0x420 [ 313.215215][ T9775] ? __might_fault+0xaa/0x120 [ 313.219909][ T9775] ? __lock_acquire+0x7d40/0x7d40 [ 313.224958][ T9775] should_fail_ex+0x39d/0x4d0 [ 313.229665][ T9775] _copy_from_user+0x2f/0xe0 [ 313.234275][ T9775] ___sys_sendmsg+0x1c7/0x360 [ 313.238967][ T9775] ? get_pid_task+0x20/0x1e0 [ 313.243573][ T9775] ? __sys_sendmsg+0x2a0/0x2a0 [ 313.248369][ T9775] ? __lock_acquire+0x7d40/0x7d40 [ 313.253429][ T9775] __se_sys_sendmsg+0x1c2/0x2b0 [ 313.258296][ T9775] ? __x64_sys_sendmsg+0x80/0x80 [ 313.263261][ T9775] ? lockdep_hardirqs_on+0x98/0x150 [ 313.268477][ T9775] do_syscall_64+0x55/0xb0 [ 313.272908][ T9775] ? clear_bhb_loop+0x40/0x90 [ 313.277603][ T9775] ? clear_bhb_loop+0x40/0x90 [ 313.282292][ T9775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.288202][ T9775] RIP: 0033:0x7fb5bb99ce59 [ 313.292629][ T9775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.312245][ T9775] RSP: 002b:00007fb5bc7ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.320690][ T9775] RAX: ffffffffffffffda RBX: 00007fb5bbc15fa0 RCX: 00007fb5bb99ce59 [ 313.328669][ T9775] RDX: 00000000300060c1 RSI: 0000200000000240 RDI: 0000000000000003 [ 313.336650][ T9775] RBP: 00007fb5bc7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 313.344629][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.352606][ T9775] R13: 00007fb5bbc16038 R14: 00007fb5bbc15fa0 R15: 00007ffc791b7c08 [ 313.360605][ T9775] [ 313.378289][ T9773] netlink: 'syz.2.1479': attribute type 10 has an invalid length. [ 313.404043][ T9773] team0: Device hsr_slave_0 failed to register rx_handler [ 313.690995][ T9784] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1485'. [ 316.664985][ T9788] netlink: set zone limit has 8 unknown bytes [ 316.795662][ T9792] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1489'. [ 316.910210][ T9792] netlink: 'syz.0.1489': attribute type 10 has an invalid length. [ 316.932644][ T9792] team0: Device hsr_slave_0 failed to register rx_handler [ 317.053457][ T9801] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1493'. [ 317.137440][ T9801] netlink: 'syz.3.1493': attribute type 10 has an invalid length. [ 317.159999][ T9801] team0: Device hsr_slave_0 failed to register rx_handler [ 317.220883][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.228520][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.297374][ T9807] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1496'. [ 317.391045][ T9811] FAULT_INJECTION: forcing a failure. [ 317.391045][ T9811] name failslab, interval 1, probability 0, space 0, times 0 [ 317.419838][ T9811] CPU: 0 PID: 9811 Comm: syz.2.1498 Not tainted syzkaller #0 [ 317.427342][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.437414][ T9811] Call Trace: [ 317.440705][ T9811] [ 317.443644][ T9811] dump_stack_lvl+0x18c/0x250 [ 317.448353][ T9811] ? show_regs_print_info+0x20/0x20 [ 317.453567][ T9811] ? load_image+0x420/0x420 [ 317.458086][ T9811] ? __might_sleep+0xe0/0xe0 [ 317.462700][ T9811] ? __lock_acquire+0x7d40/0x7d40 [ 317.467745][ T9811] should_fail_ex+0x39d/0x4d0 [ 317.472447][ T9811] should_failslab+0x9/0x20 [ 317.476970][ T9811] slab_pre_alloc_hook+0x59/0x310 [ 317.482014][ T9811] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.488198][ T9811] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 317.494123][ T9811] __kmem_cache_alloc_node+0x53/0x250 [ 317.499533][ T9811] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 317.505445][ T9811] kmalloc_trace+0x2a/0xe0 [ 317.509881][ T9811] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 317.515629][ T9811] sctp_association_new+0x15d3/0x25c0 [ 317.521034][ T9811] sctp_connect_new_asoc+0x2de/0x6a0 [ 317.526346][ T9811] ? __sctp_connect+0xd80/0xd80 [ 317.531219][ T9811] ? _local_bh_enable+0xa0/0xa0 [ 317.536088][ T9811] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 317.541911][ T9811] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 317.547742][ T9811] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 317.553315][ T9811] ? security_sctp_bind_connect+0x89/0xb0 [ 317.559055][ T9811] sctp_sendmsg+0x15d2/0x2910 [ 317.563750][ T9811] ? sctp_getsockopt+0xb60/0xb60 [ 317.568705][ T9811] ? aa_sk_perm+0x83c/0x970 [ 317.573217][ T9811] ? aa_af_perm+0x330/0x330 [ 317.577717][ T9811] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 317.584133][ T9811] ? sock_rps_record_flow+0x19/0x3f0 [ 317.589423][ T9811] ? inet_sendmsg+0x7c/0x2f0 [ 317.594016][ T9811] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 317.599298][ T9811] ? security_socket_sendmsg+0x80/0xa0 [ 317.604761][ T9811] ? inet_send_prepare+0x260/0x260 [ 317.609878][ T9811] ____sys_sendmsg+0x5ba/0x960 [ 317.614654][ T9811] ? __lock_acquire+0x7d40/0x7d40 [ 317.619684][ T9811] ? __asan_memset+0x22/0x40 [ 317.624276][ T9811] ? __sys_sendmsg_sock+0x30/0x30 [ 317.629310][ T9811] ? __import_iovec+0x5f2/0x850 [ 317.634166][ T9811] ? import_iovec+0x73/0xa0 [ 317.638668][ T9811] ___sys_sendmsg+0x2a6/0x360 [ 317.643351][ T9811] ? __sys_sendmsg+0x2a0/0x2a0 [ 317.648157][ T9811] __se_sys_sendmsg+0x1c2/0x2b0 [ 317.653008][ T9811] ? __x64_sys_sendmsg+0x80/0x80 [ 317.657967][ T9811] do_syscall_64+0x55/0xb0 [ 317.662384][ T9811] ? clear_bhb_loop+0x40/0x90 [ 317.667056][ T9811] ? clear_bhb_loop+0x40/0x90 [ 317.671731][ T9811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.677629][ T9811] RIP: 0033:0x7f6bdf79ce59 [ 317.682047][ T9811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.701651][ T9811] RSP: 002b:00007f6be057a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.710066][ T9811] RAX: ffffffffffffffda RBX: 00007f6bdfa15fa0 RCX: 00007f6bdf79ce59 [ 317.718035][ T9811] RDX: 00000000000080d1 RSI: 00002000000000c0 RDI: 000000000000000a [ 317.726003][ T9811] RBP: 00007f6be057a090 R08: 0000000000000000 R09: 0000000000000000 [ 317.733971][ T9811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.741934][ T9811] R13: 00007f6bdfa16038 R14: 00007f6bdfa15fa0 R15: 00007ffe322b0ec8 [ 317.749917][ T9811] [ 318.676687][ T9825] netlink: 'syz.2.1503': attribute type 49 has an invalid length. [ 318.720121][ T9825] netlink: set zone limit has 8 unknown bytes [ 318.972743][ T9831] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1505'. [ 319.011559][ T9836] netlink: 'syz.1.1505': attribute type 10 has an invalid length. [ 319.024068][ T9836] team0: Device hsr_slave_0 failed to register rx_handler [ 319.271474][ T9844] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1508'. [ 319.567159][ T9851] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1511'. [ 319.714251][ T9851] netlink: 'syz.0.1511': attribute type 10 has an invalid length. [ 319.747339][ T9851] team0: Device hsr_slave_0 failed to register rx_handler [ 319.976255][ T9864] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.1515'. [ 319.991255][ T9861] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1516'. [ 320.008776][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1515'. [ 320.089808][ T9861] netlink: 'syz.2.1516': attribute type 10 has an invalid length. [ 320.115253][ T9861] team0: Device hsr_slave_0 failed to register rx_handler [ 320.346345][ T9873] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1519'. [ 320.927546][ T9890] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1526'. [ 320.988730][ T9890] netlink: 'syz.1.1526': attribute type 10 has an invalid length. [ 321.027531][ T9890] team0: Device hsr_slave_0 failed to register rx_handler [ 321.344171][ T9907] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1532'. [ 321.422675][ T9909] FAULT_INJECTION: forcing a failure. [ 321.422675][ T9909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.463288][ T9909] CPU: 1 PID: 9909 Comm: syz.0.1533 Not tainted syzkaller #0 [ 321.470726][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.480790][ T9909] Call Trace: [ 321.484082][ T9909] [ 321.487033][ T9909] dump_stack_lvl+0x18c/0x250 [ 321.491729][ T9909] ? show_regs_print_info+0x20/0x20 [ 321.496939][ T9909] ? load_image+0x420/0x420 [ 321.501446][ T9909] ? __might_fault+0xaa/0x120 [ 321.506127][ T9909] ? __lock_acquire+0x7d40/0x7d40 [ 321.511165][ T9909] should_fail_ex+0x39d/0x4d0 [ 321.515855][ T9909] _copy_from_iter+0x1d9/0x12e0 [ 321.520713][ T9909] ? __virt_addr_valid+0x18c/0x540 [ 321.525842][ T9909] ? __lock_acquire+0x7d40/0x7d40 [ 321.530875][ T9909] ? copyout_mc+0x70/0x70 [ 321.535207][ T9909] ? __virt_addr_valid+0x18c/0x540 [ 321.540324][ T9909] ? __virt_addr_valid+0x18c/0x540 [ 321.545436][ T9909] ? __virt_addr_valid+0x469/0x540 [ 321.550551][ T9909] ? __check_object_size+0x506/0xa20 [ 321.555838][ T9909] pep_sendmsg+0x216/0xad0 [ 321.560262][ T9909] ? pn_socket_bind+0x3ff/0x530 [ 321.565114][ T9909] ? __local_bh_enable_ip+0x13a/0x1c0 [ 321.570487][ T9909] ? lockdep_hardirqs_on+0x98/0x150 [ 321.575691][ T9909] ? pep_getsockopt+0x2e0/0x2e0 [ 321.580546][ T9909] ? __local_bh_enable_ip+0x13a/0x1c0 [ 321.585922][ T9909] ? _local_bh_enable+0xa0/0xa0 [ 321.590770][ T9909] ? do_raw_spin_unlock+0x121/0x230 [ 321.595971][ T9909] ? pn_socket_bind+0x3ff/0x530 [ 321.600824][ T9909] ? pn_socket_bind+0x3ff/0x530 [ 321.605685][ T9909] pn_socket_sendmsg+0x1df/0x240 [ 321.610634][ T9909] ? pn_socket_ioctl+0x350/0x350 [ 321.615573][ T9909] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 321.620881][ T9909] ? security_socket_sendmsg+0x80/0xa0 [ 321.626358][ T9909] sock_write_iter+0x2df/0x420 [ 321.631133][ T9909] ? sock_read_iter+0x3e0/0x3e0 [ 321.636012][ T9909] ? common_file_perm+0x198/0x1f0 [ 321.641050][ T9909] vfs_write+0x46c/0x990 [ 321.645303][ T9909] ? file_end_write+0x250/0x250 [ 321.650162][ T9909] ? __fget_files+0x43d/0x4b0 [ 321.654850][ T9909] ? __fdget_pos+0x1d8/0x330 [ 321.659443][ T9909] ? ksys_write+0x75/0x260 [ 321.663866][ T9909] ksys_write+0x150/0x260 [ 321.668196][ T9909] ? __ia32_sys_read+0x90/0x90 [ 321.672960][ T9909] ? lockdep_hardirqs_on+0x98/0x150 [ 321.678165][ T9909] do_syscall_64+0x55/0xb0 [ 321.682591][ T9909] ? clear_bhb_loop+0x40/0x90 [ 321.687267][ T9909] ? clear_bhb_loop+0x40/0x90 [ 321.691942][ T9909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.697841][ T9909] RIP: 0033:0x7f17bf59ce59 [ 321.702253][ T9909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.721858][ T9909] RSP: 002b:00007f17c0515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.730271][ T9909] RAX: ffffffffffffffda RBX: 00007f17bf815fa0 RCX: 00007f17bf59ce59 [ 321.738419][ T9909] RDX: 000000000000eaff RSI: 0000000000000000 RDI: 0000000000000006 [ 321.746387][ T9909] RBP: 00007f17c0515090 R08: 0000000000000000 R09: 0000000000000000 [ 321.754355][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.762327][ T9909] R13: 00007f17bf816038 R14: 00007f17bf815fa0 R15: 00007ffc3823af48 [ 321.770314][ T9909] [ 322.088794][ T9924] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1540'. [ 322.192539][ T9924] netlink: 'syz.3.1540': attribute type 10 has an invalid length. [ 322.215449][ T9924] team0: Device hsr_slave_0 failed to register rx_handler [ 322.385552][ T9924] syz.3.1540 (9924) used greatest stack depth: 18504 bytes left [ 323.691464][ T9958] netlink: 'syz.0.1553': attribute type 10 has an invalid length. [ 323.714065][ T9958] team0: Device hsr_slave_0 failed to register rx_handler [ 323.802456][ T9959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.045121][ T9966] __nla_validate_parse: 3 callbacks suppressed [ 324.045139][ T9966] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1556'. [ 325.035554][ T9992] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1565'. [ 325.141740][ T9992] netlink: 'syz.2.1565': attribute type 10 has an invalid length. [ 325.162423][ T9992] team0: Device hsr_slave_0 failed to register rx_handler [ 325.241400][ T9996] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1567'. [ 325.410485][T10002] FAULT_INJECTION: forcing a failure. [ 325.410485][T10002] name failslab, interval 1, probability 0, space 0, times 0 [ 325.437938][T10002] CPU: 1 PID: 10002 Comm: syz.1.1569 Not tainted syzkaller #0 [ 325.445442][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.455511][T10002] Call Trace: [ 325.458796][T10002] [ 325.461735][T10002] dump_stack_lvl+0x18c/0x250 [ 325.466432][T10002] ? show_regs_print_info+0x20/0x20 [ 325.471632][T10002] ? load_image+0x420/0x420 [ 325.476135][T10002] ? __might_sleep+0xe0/0xe0 [ 325.480724][T10002] ? __lock_acquire+0x7d40/0x7d40 [ 325.485764][T10002] ? __asan_memset+0x22/0x40 [ 325.490367][T10002] should_fail_ex+0x39d/0x4d0 [ 325.495057][T10002] should_failslab+0x9/0x20 [ 325.499569][T10002] slab_pre_alloc_hook+0x59/0x310 [ 325.504601][T10002] ? sctp_add_bind_addr+0x8c/0x360 [ 325.509712][T10002] __kmem_cache_alloc_node+0x53/0x250 [ 325.515091][T10002] ? sctp_add_bind_addr+0x8c/0x360 [ 325.520219][T10002] kmalloc_trace+0x2a/0xe0 [ 325.524643][T10002] sctp_add_bind_addr+0x8c/0x360 [ 325.529584][T10002] sctp_bind_addr_copy+0xb3/0x3c0 [ 325.534609][T10002] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 325.540941][T10002] sctp_connect_new_asoc+0x2f9/0x6a0 [ 325.546230][T10002] ? __sctp_connect+0xd80/0xd80 [ 325.551083][T10002] ? __local_bh_enable_ip+0x13a/0x1c0 [ 325.556454][T10002] ? _local_bh_enable+0xa0/0xa0 [ 325.561300][T10002] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 325.567107][T10002] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 325.572915][T10002] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 325.578457][T10002] ? security_sctp_bind_connect+0x89/0xb0 [ 325.584189][T10002] sctp_sendmsg+0x15d2/0x2910 [ 325.588880][T10002] ? sctp_getsockopt+0xb60/0xb60 [ 325.593820][T10002] ? aa_sk_perm+0x83c/0x970 [ 325.598329][T10002] ? aa_af_perm+0x330/0x330 [ 325.602825][T10002] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 325.609254][T10002] ? sock_rps_record_flow+0x19/0x3f0 [ 325.614542][T10002] ? inet_sendmsg+0x7c/0x2f0 [ 325.619219][T10002] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 325.624586][T10002] ? security_socket_sendmsg+0x80/0xa0 [ 325.630043][T10002] ? inet_send_prepare+0x260/0x260 [ 325.635155][T10002] ____sys_sendmsg+0x5ba/0x960 [ 325.639921][T10002] ? __lock_acquire+0x7d40/0x7d40 [ 325.644946][T10002] ? __asan_memset+0x22/0x40 [ 325.649535][T10002] ? __sys_sendmsg_sock+0x30/0x30 [ 325.654554][T10002] ? __import_iovec+0x5f2/0x850 [ 325.659414][T10002] ? import_iovec+0x73/0xa0 [ 325.663916][T10002] ___sys_sendmsg+0x2a6/0x360 [ 325.668590][T10002] ? get_pid_task+0x20/0x1e0 [ 325.673182][T10002] ? __sys_sendmsg+0x2a0/0x2a0 [ 325.677956][T10002] ? __lock_acquire+0x7d40/0x7d40 [ 325.682999][T10002] __se_sys_sendmsg+0x1c2/0x2b0 [ 325.687852][T10002] ? __x64_sys_sendmsg+0x80/0x80 [ 325.692799][T10002] ? lockdep_hardirqs_on+0x98/0x150 [ 325.697999][T10002] do_syscall_64+0x55/0xb0 [ 325.702409][T10002] ? clear_bhb_loop+0x40/0x90 [ 325.707080][T10002] ? clear_bhb_loop+0x40/0x90 [ 325.711753][T10002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.717646][T10002] RIP: 0033:0x7fc710d9ce59 [ 325.722060][T10002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.741686][T10002] RSP: 002b:00007fc711c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.750098][T10002] RAX: ffffffffffffffda RBX: 00007fc711015fa0 RCX: 00007fc710d9ce59 [ 325.758063][T10002] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 325.766030][T10002] RBP: 00007fc711c67090 R08: 0000000000000000 R09: 0000000000000000 [ 325.773993][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.781955][T10002] R13: 00007fc711016038 R14: 00007fc711015fa0 R15: 00007ffdd3649208 [ 325.789942][T10002] [ 326.407651][T10015] FAULT_INJECTION: forcing a failure. [ 326.407651][T10015] name failslab, interval 1, probability 0, space 0, times 0 [ 326.466924][T10015] CPU: 0 PID: 10015 Comm: syz.3.1575 Not tainted syzkaller #0 [ 326.474441][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.484516][T10015] Call Trace: [ 326.487820][T10015] [ 326.490776][T10015] dump_stack_lvl+0x18c/0x250 [ 326.493121][T10023] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1577'. [ 326.495476][T10015] ? show_regs_print_info+0x20/0x20 [ 326.495526][T10015] ? load_image+0x420/0x420 [ 326.495547][T10015] ? __might_sleep+0xe0/0xe0 [ 326.495569][T10015] ? __lock_acquire+0x7d40/0x7d40 [ 326.495595][T10015] should_fail_ex+0x39d/0x4d0 [ 326.528806][T10015] should_failslab+0x9/0x20 [ 326.533331][T10015] slab_pre_alloc_hook+0x59/0x310 [ 326.538374][T10015] kmem_cache_alloc+0x5a/0x2d0 [ 326.543135][T10015] ? rxrpc_alloc_call+0x272/0xc20 [ 326.548160][T10015] ? rxrpc_alloc_call+0x78/0xc20 [ 326.553091][T10015] rxrpc_alloc_call+0x272/0xc20 [ 326.557943][T10015] rxrpc_new_client_call+0xed/0x1410 [ 326.563230][T10015] rxrpc_do_sendmsg+0xe03/0x12d0 [ 326.568260][T10015] ? rxrpc_propose_abort+0x200/0x200 [ 326.573542][T10015] ? __local_bh_enable_ip+0x13a/0x1c0 [ 326.578929][T10015] ? rxrpc_sendmsg+0x391/0x5b0 [ 326.583691][T10015] ? rxrpc_getsockopt+0x150/0x150 [ 326.588714][T10015] ____sys_sendmsg+0x5ba/0x960 [ 326.593475][T10015] ? __lock_acquire+0x7d40/0x7d40 [ 326.598586][T10015] ? __sys_sendmsg_sock+0x30/0x30 [ 326.603602][T10015] ? __import_iovec+0x3fa/0x850 [ 326.608452][T10015] ? import_iovec+0x73/0xa0 [ 326.612952][T10015] ___sys_sendmsg+0x2a6/0x360 [ 326.617623][T10015] ? get_pid_task+0x20/0x1e0 [ 326.622212][T10015] ? __sys_sendmsg+0x2a0/0x2a0 [ 326.626986][T10015] ? __lock_acquire+0x7d40/0x7d40 [ 326.632022][T10015] __se_sys_sendmsg+0x1c2/0x2b0 [ 326.636871][T10015] ? __x64_sys_sendmsg+0x80/0x80 [ 326.641818][T10015] ? lockdep_hardirqs_on+0x98/0x150 [ 326.647016][T10015] do_syscall_64+0x55/0xb0 [ 326.651427][T10015] ? clear_bhb_loop+0x40/0x90 [ 326.656099][T10015] ? clear_bhb_loop+0x40/0x90 [ 326.660770][T10015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.666676][T10015] RIP: 0033:0x7fb5bb99ce59 [ 326.671085][T10015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.690683][T10015] RSP: 002b:00007fb5bc7ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.699091][T10015] RAX: ffffffffffffffda RBX: 00007fb5bbc15fa0 RCX: 00007fb5bb99ce59 [ 326.707058][T10015] RDX: 000000000000fc40 RSI: 0000200000000080 RDI: 0000000000000008 [ 326.715035][T10015] RBP: 00007fb5bc7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 326.722997][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.730963][T10015] R13: 00007fb5bbc16038 R14: 00007fb5bbc15fa0 R15: 00007ffc791b7c08 [ 326.738945][T10015] [ 326.851702][T10023] netlink: 'syz.1.1577': attribute type 10 has an invalid length. [ 326.912494][T10023] team0: Device hsr_slave_0 failed to register rx_handler [ 327.002560][T10028] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1579'. [ 327.913707][ T5781] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 327.913748][ T5781] Bluetooth: unknown link type 101 [ 327.927132][ T5781] Bluetooth: hci1: connection err: -111 [ 328.232936][T10058] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1591'. [ 328.305893][T10058] netlink: 'syz.2.1591': attribute type 10 has an invalid length. [ 328.325524][T10058] team0: Device hsr_slave_0 failed to register rx_handler [ 328.401055][T10062] netlink: 'syz.0.1593': attribute type 9 has an invalid length. [ 328.402884][T10060] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1592'. [ 328.423572][T10062] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1593'. [ 328.542826][T10066] netlink: 'syz.0.1593': attribute type 9 has an invalid length. [ 328.563571][T10066] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1593'. [ 329.172411][ T5781] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 329.172444][ T5781] Bluetooth: unknown link type 101 [ 329.185222][ T5781] Bluetooth: hci3: connection err: -111 [ 329.210533][T10086] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1604'. [ 329.378867][T10086] netlink: 'syz.0.1604': attribute type 10 has an invalid length. [ 329.411422][T10086] team0: Device hsr_slave_0 failed to register rx_handler [ 329.655107][T10092] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1605'. [ 330.522558][T10114] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1614'. [ 330.550170][ T5781] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 330.550203][ T5781] Bluetooth: unknown link type 101 [ 330.563273][ T5781] Bluetooth: hci1: connection err: -111 [ 330.808257][T10118] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1616'. [ 330.917254][T10124] netlink: 'syz.3.1616': attribute type 10 has an invalid length. [ 330.933950][T10124] team0: Device hsr_slave_0 failed to register rx_handler [ 331.758108][T10129] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1619'. [ 332.092454][T10138] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1631'. [ 332.208499][ T5781] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 332.208532][ T5781] Bluetooth: unknown link type 101 [ 332.220866][ T5781] Bluetooth: hci0: connection err: -111 [ 332.581839][T10155] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1630'. [ 332.678567][T10155] netlink: 'syz.2.1630': attribute type 10 has an invalid length. [ 332.723041][T10155] team0: Device hsr_slave_0 failed to register rx_handler [ 335.417823][T10179] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1637'. [ 335.521478][T10179] netlink: 'syz.1.1637': attribute type 10 has an invalid length. [ 335.566818][T10179] team0: Device hsr_slave_0 failed to register rx_handler [ 335.658032][T10186] netlink: 'syz.2.1640': attribute type 9 has an invalid length. [ 335.693655][T10186] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1640'. [ 335.772585][T10192] netlink: 'syz.2.1640': attribute type 9 has an invalid length. [ 335.792100][T10192] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1640'. [ 336.277742][T10208] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1648'. [ 336.327135][T10208] netlink: 'syz.0.1648': attribute type 10 has an invalid length. [ 336.358082][T10208] team0: Device hsr_slave_0 failed to register rx_handler [ 337.320877][T10238] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1662'. [ 337.396749][T10238] netlink: 'syz.0.1662': attribute type 10 has an invalid length. [ 337.408892][T10238] team0: Device hsr_slave_0 failed to register rx_handler [ 337.432131][T10241] netlink: 'syz.1.1663': attribute type 9 has an invalid length. [ 337.456058][T10241] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1663'. [ 337.598486][T10241] netlink: 'syz.1.1663': attribute type 9 has an invalid length. [ 337.609000][T10241] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1663'. [ 338.222484][T10257] netlink: 'syz.3.1671': attribute type 10 has an invalid length. [ 338.233559][T10257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1671'. [ 338.247443][T10257] team0: entered promiscuous mode [ 338.255109][T10257] team_slave_0: entered promiscuous mode [ 338.264329][T10257] team_slave_1: entered promiscuous mode [ 338.272553][T10257] geneve1: entered promiscuous mode [ 338.278805][T10257] team0: entered allmulticast mode [ 338.284424][T10257] team_slave_0: entered allmulticast mode [ 338.290543][T10257] team_slave_1: entered allmulticast mode [ 338.296636][T10257] geneve1: entered allmulticast mode [ 338.303268][T10257] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 338.762370][T10266] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1675'. [ 338.868063][T10266] netlink: 'syz.1.1675': attribute type 10 has an invalid length. [ 338.898713][T10266] team0: Device hsr_slave_0 failed to register rx_handler [ 339.548954][T10291] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1686'. [ 339.653399][T10291] netlink: 'syz.2.1686': attribute type 10 has an invalid length. [ 339.676206][T10291] team0: Device hsr_slave_0 failed to register rx_handler [ 340.820863][T10322] __nla_validate_parse: 1 callbacks suppressed [ 340.820894][T10322] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1697'. [ 340.888968][T10322] netlink: 'syz.2.1697': attribute type 10 has an invalid length. [ 340.930304][T10322] team0: Device hsr_slave_0 failed to register rx_handler [ 342.347574][T10344] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1706'. [ 342.441795][T10344] netlink: 'syz.0.1706': attribute type 10 has an invalid length. [ 342.458051][T10344] team0: Device hsr_slave_0 failed to register rx_handler [ 342.489640][T10350] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1709'. [ 342.574882][T10350] netlink: 'syz.3.1709': attribute type 10 has an invalid length. [ 342.592045][T10350] team0: Device hsr_slave_0 failed to register rx_handler [ 349.941950][T10414] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1735'. [ 350.024831][T10414] netlink: 'syz.2.1735': attribute type 10 has an invalid length. [ 350.040114][T10414] team0: Device hsr_slave_0 failed to register rx_handler [ 351.032531][T10445] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1746'. [ 351.092561][T10445] netlink: 'syz.0.1746': attribute type 10 has an invalid length. [ 351.109407][T10445] team0: Device hsr_slave_0 failed to register rx_handler [ 351.215206][ T5781] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 351.215248][ T5781] Bluetooth: unknown link type 101 [ 351.227799][ T5781] Bluetooth: hci1: connection err: -111 [ 352.462973][ T5781] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 352.463007][ T5781] Bluetooth: unknown link type 101 [ 352.483437][ T5781] Bluetooth: hci3: connection err: -111 [ 352.514865][T10478] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1759'. [ 352.617678][T10478] netlink: 'syz.3.1759': attribute type 10 has an invalid length. [ 352.657800][T10478] team0: Device hsr_slave_0 failed to register rx_handler [ 352.746212][T10485] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1762'. [ 352.937805][T10485] netlink: 'syz.0.1762': attribute type 10 has an invalid length. [ 352.984242][T10485] team0: Device hsr_slave_0 failed to register rx_handler [ 353.705837][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 353.705877][ T5781] Bluetooth: unknown link type 101 [ 353.718562][ T5781] Bluetooth: hci2: connection err: -111 [ 354.459224][T10520] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1779'. [ 354.536197][T10520] netlink: 'syz.2.1779': attribute type 10 has an invalid length. [ 354.570863][T10520] team0: Device hsr_slave_0 failed to register rx_handler [ 356.011235][T10563] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1795'. [ 356.074597][T10563] netlink: 'syz.3.1795': attribute type 10 has an invalid length. [ 356.105006][T10563] team0: Device hsr_slave_0 failed to register rx_handler [ 357.666892][T10602] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1811'. [ 357.790544][T10602] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 357.817773][T10602] team0: Device hsr_slave_0 failed to register rx_handler [ 357.960193][T10612] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1818'. [ 358.047073][T10614] netlink: 'syz.2.1818': attribute type 10 has an invalid length. [ 358.090603][T10614] team0: Device hsr_slave_0 failed to register rx_handler [ 359.499476][T10649] tap0: tun_chr_ioctl cmd 2148553947 [ 359.548122][T10651] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1833'. [ 359.617077][T10651] netlink: 'syz.1.1833': attribute type 10 has an invalid length. [ 359.634321][T10651] team0: Device hsr_slave_0 failed to register rx_handler [ 360.490523][T10669] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1840'. [ 361.977085][T10691] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1849'. [ 362.034615][T10691] netlink: 'syz.1.1849': attribute type 10 has an invalid length. [ 362.061726][T10691] team0: Device hsr_slave_0 failed to register rx_handler [ 363.196632][T10717] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1860'. [ 363.283128][T10719] netlink: 'syz.3.1860': attribute type 10 has an invalid length. [ 363.303871][T10719] team0: Device hsr_slave_0 failed to register rx_handler [ 364.149745][T10727] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1864'. [ 364.222069][T10727] netlink: 'syz.3.1864': attribute type 10 has an invalid length. [ 364.280070][T10727] team0: Device hsr_slave_0 failed to register rx_handler [ 367.912585][T10765] netlink: 'syz.2.1878': attribute type 10 has an invalid length. [ 367.936826][T10765] team0: Device hsr_slave_0 failed to register rx_handler [ 368.187276][T10774] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1881'. [ 368.267967][T10774] netlink: 'syz.0.1881': attribute type 10 has an invalid length. [ 368.287106][T10774] team0: Device hsr_slave_0 failed to register rx_handler [ 369.022044][T10801] netlink: 'syz.3.1893': attribute type 10 has an invalid length. [ 369.071171][T10801] team0: Device hsr_slave_0 failed to register rx_handler [ 369.186658][T10808] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1896'. [ 369.366557][T10808] netlink: 'syz.2.1896': attribute type 10 has an invalid length. [ 369.402974][T10808] team0: Device hsr_slave_0 failed to register rx_handler [ 369.923737][T10831] netlink: 'syz.0.1906': attribute type 10 has an invalid length. [ 369.953264][T10831] team0: Device hsr_slave_0 failed to register rx_handler [ 370.599765][T10859] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1919'. [ 370.757225][T10868] netlink: 'syz.2.1921': attribute type 10 has an invalid length. [ 370.766113][T10868] team0: Device hsr_slave_0 failed to register rx_handler [ 371.454663][T10891] netlink: 'syz.0.1933': attribute type 10 has an invalid length. [ 371.476970][T10891] team0: Device hsr_slave_0 failed to register rx_handler [ 371.819058][ T5781] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 371.819093][ T5781] Bluetooth: unknown link type 101 [ 371.831982][ T5781] Bluetooth: hci3: connection err: -111 [ 372.358321][T10930] netlink: 'syz.1.1949': attribute type 10 has an invalid length. [ 372.381597][T10930] team0: Device hsr_slave_0 failed to register rx_handler [ 372.544963][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 372.544996][ T5781] Bluetooth: unknown link type 101 [ 372.557469][ T5781] Bluetooth: hci2: connection err: -111 [ 373.274801][T10963] netlink: 'syz.2.1963': attribute type 10 has an invalid length. [ 373.294123][T10963] team0: Device hsr_slave_0 failed to register rx_handler [ 373.365549][ T5781] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 373.365590][ T5781] Bluetooth: unknown link type 101 [ 373.377978][ T5781] Bluetooth: hci0: connection err: -111 [ 374.231703][ T5781] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 374.231736][ T5781] Bluetooth: unknown link type 101 [ 374.244543][ T5781] Bluetooth: hci0: connection err: -111 [ 374.275995][T10996] netlink: 'syz.0.1977': attribute type 10 has an invalid length. [ 374.289084][T10996] team0: Device hsr_slave_0 failed to register rx_handler [ 375.092020][T11027] netlink: 'syz.2.1988': attribute type 10 has an invalid length. [ 375.117350][T11027] team0: Device hsr_slave_0 failed to register rx_handler [ 375.144205][ T5781] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 375.144236][ T5781] Bluetooth: unknown link type 101 [ 375.156549][ T5781] Bluetooth: hci0: connection err: -111 [ 375.996107][ T5781] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 375.996141][ T5781] Bluetooth: unknown link type 101 [ 376.012370][ T5781] Bluetooth: hci3: connection err: -111 [ 376.502702][T11059] netlink: 'syz.2.2003': attribute type 10 has an invalid length. [ 376.546882][T11059] team0: Device hsr_slave_0 failed to register rx_handler [ 376.954501][T11078] netlink: 'syz.2.2012': attribute type 10 has an invalid length. [ 376.980930][T11078] team0: Device hsr_slave_0 failed to register rx_handler [ 378.650137][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.656852][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.394788][T11141] netlink: 'syz.3.2036': attribute type 10 has an invalid length. [ 379.410591][T11141] team0: Device hsr_slave_0 failed to register rx_handler [ 380.029829][T11148] netlink: 'syz.3.2040': attribute type 10 has an invalid length. [ 380.052477][T11148] team0: Device hsr_slave_0 failed to register rx_handler [ 380.825938][T11174] netlink: 'syz.3.2052': attribute type 10 has an invalid length. [ 380.845622][T11174] team0: Device hsr_slave_0 failed to register rx_handler [ 381.607621][T11187] netlink: 'syz.0.2055': attribute type 10 has an invalid length. [ 381.635514][T11187] team0: Device hsr_slave_0 failed to register rx_handler [ 382.334691][T11210] netlink: 'syz.0.2065': attribute type 10 has an invalid length. [ 382.350716][T11210] team0: Device hsr_slave_0 failed to register rx_handler [ 384.662850][T11231] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 384.682298][T11231] team0: Device hsr_slave_0 failed to register rx_handler [ 388.132453][T11247] netlink: 'syz.3.2079': attribute type 10 has an invalid length. [ 388.171841][T11247] team0: Device hsr_slave_0 failed to register rx_handler [ 388.451712][T11261] netlink: 'syz.1.2085': attribute type 10 has an invalid length. [ 388.465941][T11261] team0: Device hsr_slave_0 failed to register rx_handler [ 388.811369][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 388.811409][ T5781] Bluetooth: unknown link type 101 [ 388.824064][ T5781] Bluetooth: hci2: connection err: -111 [ 389.098573][T11269] netlink: 'syz.1.2089': attribute type 10 has an invalid length. [ 389.126293][T11269] team0: Device hsr_slave_0 failed to register rx_handler [ 389.505406][T11275] netlink: 'syz.3.2093': attribute type 10 has an invalid length. [ 389.566477][T11275] team0: Device hsr_slave_0 failed to register rx_handler [ 389.983720][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 389.983752][ T5781] Bluetooth: unknown link type 101 [ 390.003368][ T5781] Bluetooth: hci2: connection err: -111 [ 390.484870][ T5781] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 390.484916][ T5781] Bluetooth: unknown link type 101 [ 390.497400][ T5781] Bluetooth: hci0: connection err: -111 [ 391.280885][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 391.280919][ T5781] Bluetooth: unknown link type 101 [ 391.291821][ T5780] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 391.293584][ T5780] Bluetooth: unknown link type 101 [ 391.305802][ T5781] Bluetooth: hci2: connection err: -111 [ 391.311653][ T5780] Bluetooth: hci1: connection err: -111 [ 391.567746][T11329] netlink: 'syz.0.2115': attribute type 10 has an invalid length. [ 391.585536][T11329] team0: Device hsr_slave_0 failed to register rx_handler [ 391.963700][T11339] netlink: 'syz.2.2120': attribute type 10 has an invalid length. [ 391.994547][T11339] team0: Device hsr_slave_0 failed to register rx_handler [ 392.385369][ T5780] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 392.385401][ T5780] Bluetooth: unknown link type 101 [ 392.397989][ T5780] Bluetooth: hci0: connection err: -111 [ 392.856988][T11362] netlink: 'syz.2.2130': attribute type 10 has an invalid length. [ 392.875493][T11362] team0: Device hsr_slave_0 failed to register rx_handler [ 393.577414][ T5780] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 393.577456][ T5780] Bluetooth: unknown link type 101 [ 393.589882][ T5780] Bluetooth: hci1: connection err: -111 [ 393.755411][T11380] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.2139'. [ 393.937544][T11390] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.2144'. [ 393.963554][T11390] netlink: 'syz.2.2144': attribute type 1 has an invalid length. [ 394.149028][T11392] netlink: 'syz.1.2145': attribute type 10 has an invalid length. [ 394.186952][T11392] team0: Device hsr_slave_0 failed to register rx_handler [ 394.305436][ T5780] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 394.305474][ T5780] Bluetooth: unknown link type 101 [ 394.317859][ T5780] Bluetooth: hci0: connection err: -111 [ 394.696052][T11410] netlink: 'syz.2.2153': attribute type 10 has an invalid length. [ 394.733463][T11410] team0: Device hsr_slave_0 failed to register rx_handler [ 395.112755][T11415] netlink: 'syz.2.2155': attribute type 10 has an invalid length. [ 395.131280][T11415] team0: Device hsr_slave_0 failed to register rx_handler [ 395.336688][T11417] netlink: 'syz.1.2156': attribute type 10 has an invalid length. [ 395.353650][T11417] team0: Device hsr_slave_0 failed to register rx_handler [ 395.591100][ T5780] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 395.591135][ T5780] Bluetooth: unknown link type 101 [ 395.602111][T11421] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2158'. [ 395.604082][ T5780] Bluetooth: hci0: connection err: -111 [ 395.893010][T11426] netlink: 'syz.0.2160': attribute type 10 has an invalid length. [ 395.931112][T11426] team0: Device hsr_slave_0 failed to register rx_handler [ 396.192714][T11443] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2167'. [ 396.273703][T11440] netlink: 'syz.2.2167': attribute type 10 has an invalid length. [ 396.281908][T11440] hsr_slave_0: left promiscuous mode [ 396.325531][T11440] hsr_slave_1: left promiscuous mode [ 399.933432][T11465] netlink: 'syz.3.2174': attribute type 10 has an invalid length. [ 399.970316][T11465] team0: Device hsr_slave_0 failed to register rx_handler [ 400.412735][T11482] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2181'. [ 400.433449][T11482] netlink: 'syz.1.2181': attribute type 1 has an invalid length. [ 401.416075][T11491] netlink: 'syz.2.2185': attribute type 10 has an invalid length. [ 401.458470][T11491] team0: Port device hsr_slave_0 added [ 401.664927][T11501] netlink: 'syz.0.2189': attribute type 10 has an invalid length. [ 401.701477][T11501] team0: Device hsr_slave_0 failed to register rx_handler [ 403.235818][T11529] netlink: 'syz.1.2200': attribute type 10 has an invalid length. [ 403.258189][T11529] team0: Device hsr_slave_0 failed to register rx_handler [ 404.820215][T11574] netlink: 'syz.1.2219': attribute type 17 has an invalid length. [ 404.888861][T11574] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2219'. [ 404.938374][T11574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.984475][T11598] netlink: 'syz.1.2228': attribute type 10 has an invalid length. [ 405.999009][T11598] team0: Device hsr_slave_0 failed to register rx_handler [ 407.410640][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.425079][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.434817][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.451906][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.463955][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.475591][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.561464][T11631] netlink: 'syz.2.2239': attribute type 10 has an invalid length. [ 407.800864][T11637] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 407.849459][T11637] team0: Device hsr_slave_0 failed to register rx_handler [ 407.919166][T11647] netlink: 'syz.1.2244': attribute type 10 has an invalid length. [ 407.944945][T11647] team0: Device hsr_slave_0 failed to register rx_handler [ 408.044735][T11632] chnl_net:caif_netlink_parms(): no params data found [ 408.253210][T11632] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.260790][T11632] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.268293][T11632] bridge_slave_0: entered allmulticast mode [ 408.275962][T11632] bridge_slave_0: entered promiscuous mode [ 408.284651][T11632] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.291830][T11632] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.299267][T11632] bridge_slave_1: entered allmulticast mode [ 408.306445][T11632] bridge_slave_1: entered promiscuous mode [ 408.348666][T11632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.360803][T11632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.425768][T11632] team0: Port device team_slave_0 added [ 408.441571][T11632] team0: Port device team_slave_1 added [ 408.487541][T11632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.494692][T11632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.546530][T11632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.591138][T11632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.633209][T11632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.724333][T11632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.860250][T11671] netlink: 'syz.1.2253': attribute type 10 has an invalid length. [ 408.887989][T11671] team0: Device hsr_slave_0 failed to register rx_handler [ 408.975001][T11632] hsr_slave_0: entered promiscuous mode [ 409.010269][T11632] hsr_slave_1: entered promiscuous mode [ 409.027951][T11632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.038482][T11632] Cannot create hsr debugfs directory [ 409.050455][T11675] netlink: 'syz.3.2254': attribute type 10 has an invalid length. [ 409.064859][T11675] team0: Device hsr_slave_0 failed to register rx_handler [ 409.297270][T11632] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.408067][T11632] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.474678][T11681] netlink: 'syz.3.2256': attribute type 10 has an invalid length. [ 409.507208][T11681] team0: Device hsr_slave_0 failed to register rx_handler [ 409.524519][ T5780] Bluetooth: hci2: command tx timeout [ 409.606821][T11632] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.642471][T11678] netlink: 'syz.2.2255': attribute type 10 has an invalid length. [ 409.718376][T11632] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.945286][T11632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 409.960343][T11632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 409.974678][T11632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.997169][T11632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.148186][T11632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.168593][T11632] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.233271][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.240468][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.280277][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.287512][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.672700][T11632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.732991][T11708] netlink: 'syz.3.2264': attribute type 10 has an invalid length. [ 410.747752][T11708] team0: Device hsr_slave_0 failed to register rx_handler [ 410.892653][T11632] veth0_vlan: entered promiscuous mode [ 410.934913][T11632] veth1_vlan: entered promiscuous mode [ 411.000272][T11632] veth0_macvtap: entered promiscuous mode [ 411.025696][T11632] veth1_macvtap: entered promiscuous mode [ 411.059555][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.073665][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.084429][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.100527][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.110615][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.134480][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.160346][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.190381][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.202512][T11632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.269812][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.313321][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.342151][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.379760][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.413392][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.424086][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.434175][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.471078][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.492927][T11632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.541997][T11632] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.583388][T11632] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.592238][T11632] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.601861][T11632] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.603881][ T5780] Bluetooth: hci2: command tx timeout [ 411.995523][ T8247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.004301][ T8247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.095908][ T8247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.132680][ T8247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.589025][T11739] netlink: 'syz.1.2275': attribute type 29 has an invalid length. [ 412.597516][T11739] netlink: 'syz.1.2275': attribute type 29 has an invalid length. [ 412.607794][T11739] netlink: 'syz.1.2275': attribute type 29 has an invalid length. [ 412.616471][T11739] netlink: 'syz.1.2275': attribute type 29 has an invalid length. [ 412.626724][T11739] netlink: 'syz.1.2275': attribute type 29 has an invalid length. [ 412.683145][T11739] netlink: 'syz.1.2275': attribute type 3 has an invalid length. [ 412.705182][T11739] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2275'. [ 412.807698][T11743] netlink: 'syz.0.2276': attribute type 10 has an invalid length. [ 412.908132][T11743] team0: Device hsr_slave_0 failed to register rx_handler [ 413.688570][ T5780] Bluetooth: hci2: command tx timeout [ 415.764560][ T5780] Bluetooth: hci2: command tx timeout [ 417.440895][T11797] FAULT_INJECTION: forcing a failure. [ 417.440895][T11797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.456294][T11797] CPU: 1 PID: 11797 Comm: syz.1.2297 Not tainted syzkaller #0 [ 417.463794][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 417.473853][T11797] Call Trace: [ 417.477125][T11797] [ 417.480077][T11797] dump_stack_lvl+0x18c/0x250 [ 417.484908][T11797] ? show_regs_print_info+0x20/0x20 [ 417.490183][T11797] ? load_image+0x420/0x420 [ 417.494705][T11797] ? __lock_acquire+0x7d40/0x7d40 [ 417.499764][T11797] ? __virt_addr_valid+0x18c/0x540 [ 417.504883][T11797] should_fail_ex+0x39d/0x4d0 [ 417.509604][T11797] _copy_from_user+0x2f/0xe0 [ 417.514205][T11797] bpf_test_init+0xde/0x140 [ 417.518817][T11797] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 417.524204][T11797] ? dev_put+0x80/0x80 [ 417.528267][T11797] ? dev_put+0x80/0x80 [ 417.532333][T11797] bpf_prog_test_run+0x321/0x390 [ 417.537271][T11797] __sys_bpf+0x49d/0x890 [ 417.541502][T11797] ? bpf_link_show_fdinfo+0x390/0x390 [ 417.546873][T11797] ? lock_chain_count+0x20/0x20 [ 417.551708][T11797] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 417.557680][T11797] __x64_sys_bpf+0x7c/0x90 [ 417.562120][T11797] do_syscall_64+0x55/0xb0 [ 417.566549][T11797] ? clear_bhb_loop+0x40/0x90 [ 417.571308][T11797] ? clear_bhb_loop+0x40/0x90 [ 417.575991][T11797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.581946][T11797] RIP: 0033:0x7fc710d9ce59 [ 417.586350][T11797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.605943][T11797] RSP: 002b:00007fc711c67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.614354][T11797] RAX: ffffffffffffffda RBX: 00007fc711015fa0 RCX: 00007fc710d9ce59 [ 417.622337][T11797] RDX: 000000000000002c RSI: 0000200000000280 RDI: 000000000000000a [ 417.630295][T11797] RBP: 00007fc711c67090 R08: 0000000000000000 R09: 0000000000000000 [ 417.638254][T11797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.646213][T11797] R13: 00007fc711016038 R14: 00007fc711015fa0 R15: 00007ffdd3649208 [ 417.654180][T11797] [ 421.134697][T11826] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2308'. [ 424.658575][T11846] netlink: 'syz.1.2317': attribute type 2 has an invalid length. [ 424.684973][T11846] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2317'. [ 425.198428][T11863] netlink: 'syz.3.2323': attribute type 10 has an invalid length. [ 425.229484][T11863] team0: Device hsr_slave_0 failed to register rx_handler [ 425.552066][T11868] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2324'. [ 425.908588][T11877] FAULT_INJECTION: forcing a failure. [ 425.908588][T11877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.924038][T11877] CPU: 0 PID: 11877 Comm: syz.3.2328 Not tainted syzkaller #0 [ 425.931540][T11877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 425.941614][T11877] Call Trace: [ 425.944910][T11877] [ 425.947857][T11877] dump_stack_lvl+0x18c/0x250 [ 425.952558][T11877] ? show_regs_print_info+0x20/0x20 [ 425.957780][T11877] ? load_image+0x420/0x420 [ 425.962305][T11877] ? __might_fault+0xaa/0x120 [ 425.967117][T11877] ? __lock_acquire+0x7d40/0x7d40 [ 425.972162][T11877] ? unix_ioctl+0x261/0x670 [ 425.976807][T11877] should_fail_ex+0x39d/0x4d0 [ 425.981522][T11877] _copy_from_user+0x2f/0xe0 [ 425.986136][T11877] sock_do_ioctl+0x190/0x310 [ 425.990838][T11877] ? sock_show_fdinfo+0xb0/0xb0 [ 425.995727][T11877] sock_ioctl+0x5ba/0x7e0 [ 426.000086][T11877] ? sock_poll+0x3e0/0x3e0 [ 426.004531][T11877] ? bpf_lsm_file_ioctl+0x9/0x10 [ 426.009485][T11877] ? security_file_ioctl+0x80/0xa0 [ 426.014647][T11877] ? sock_poll+0x3e0/0x3e0 [ 426.019081][T11877] __se_sys_ioctl+0xfd/0x170 [ 426.023718][T11877] do_syscall_64+0x55/0xb0 [ 426.028148][T11877] ? clear_bhb_loop+0x40/0x90 [ 426.032828][T11877] ? clear_bhb_loop+0x40/0x90 [ 426.037509][T11877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.043416][T11877] RIP: 0033:0x7fb5bb99ce59 [ 426.047839][T11877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.067456][T11877] RSP: 002b:00007fb5bc7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.075883][T11877] RAX: ffffffffffffffda RBX: 00007fb5bbc15fa0 RCX: 00007fb5bb99ce59 [ 426.083863][T11877] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000001a [ 426.091843][T11877] RBP: 00007fb5bc7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 426.099828][T11877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.107806][T11877] R13: 00007fb5bbc16038 R14: 00007fb5bbc15fa0 R15: 00007ffc791b7c08 [ 426.115824][T11877] [ 426.182577][T11881] netlink: 'syz.0.2329': attribute type 10 has an invalid length. [ 426.211617][T11881] team0: Device hsr_slave_0 failed to register rx_handler [ 429.223091][T11901] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2337'. [ 429.498933][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 429.515168][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.528090][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.543746][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.551925][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 429.559689][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.809463][T11903] chnl_net:caif_netlink_parms(): no params data found [ 429.900410][T11911] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2339'. [ 430.132830][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.166705][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.187542][T11903] bridge_slave_0: entered allmulticast mode [ 430.227646][T11903] bridge_slave_0: entered promiscuous mode [ 430.250197][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.257859][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.265485][T11903] bridge_slave_1: entered allmulticast mode [ 430.280417][T11903] bridge_slave_1: entered promiscuous mode [ 430.313053][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.337993][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.444243][T11903] team0: Port device team_slave_0 added [ 430.486643][T11903] team0: Port device team_slave_1 added [ 430.564471][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.572105][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.604942][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.619018][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.626809][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.653372][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.545151][T11903] hsr_slave_0: entered promiscuous mode [ 431.843424][ T5781] Bluetooth: hci4: command tx timeout [ 433.091461][T11903] hsr_slave_1: entered promiscuous mode [ 433.100861][T11903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.113764][T11903] Cannot create hsr debugfs directory [ 433.358557][T11903] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.508335][T11951] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2349'. [ 433.880211][T11903] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.923885][ T5781] Bluetooth: hci4: command tx timeout [ 433.996067][T11903] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.019041][T11953] netlink: 'syz.1.2353': attribute type 10 has an invalid length. [ 434.042760][T11953] team0: Device hsr_slave_0 failed to register rx_handler [ 434.088272][T11955] netlink: 'syz.3.2354': attribute type 10 has an invalid length. [ 434.117453][T11955] team0: Device hsr_slave_0 failed to register rx_handler [ 434.235165][T11903] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.567226][T11903] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 434.619365][T11903] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 434.643121][T11903] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 434.693808][T11903] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 434.736404][T11967] netlink: 'syz.1.2359': attribute type 10 has an invalid length. [ 434.768434][T11967] team0: Device hsr_slave_0 failed to register rx_handler [ 434.946397][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.968631][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.996310][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.003497][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.032168][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.039327][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.172477][T11978] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2362'. [ 435.875943][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.995475][T11903] veth0_vlan: entered promiscuous mode [ 436.003799][ T5781] Bluetooth: hci4: command tx timeout [ 436.032047][T11903] veth1_vlan: entered promiscuous mode [ 436.084864][T11903] veth0_macvtap: entered promiscuous mode [ 436.096306][T11903] veth1_macvtap: entered promiscuous mode [ 436.127253][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.153340][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.172309][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.202849][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.266498][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.278327][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.288328][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.298938][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.308927][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.319645][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.359409][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.398911][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.425533][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.435671][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.450936][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.469771][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.480534][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.491069][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.509543][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.521122][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.538146][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.551919][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.585100][T11989] netlink: 'syz.3.2364': attribute type 10 has an invalid length. [ 436.612456][T11989] team0: Device hsr_slave_0 failed to register rx_handler [ 436.672126][T11995] netlink: 'syz.0.2366': attribute type 3 has an invalid length. [ 436.700534][T11995] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2366'. [ 436.733798][T11903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.746000][T11903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.755201][T11903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.764444][T11903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.933778][ T8243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.947807][ T8243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.085205][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.106669][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.160853][T12004] netlink: 'syz.1.2371': attribute type 10 has an invalid length. [ 437.194867][T12004] team0: Device hsr_slave_0 failed to register rx_handler [ 437.338542][T12009] netlink: 'syz.3.2380': attribute type 10 has an invalid length. [ 437.368558][T12009] team0: Device hsr_slave_0 failed to register rx_handler [ 437.664966][T12016] netlink: 'syz.3.2374': attribute type 10 has an invalid length. [ 437.700927][T12016] team0: Device hsr_slave_0 failed to register rx_handler [ 438.083374][ T5781] Bluetooth: hci4: command tx timeout [ 438.306963][T12029] netlink: 'syz.2.2378': attribute type 10 has an invalid length. [ 438.430962][T12029] team0: Device hsr_slave_0 failed to register rx_handler [ 438.540376][T12034] netlink: 'syz.0.2384': attribute type 10 has an invalid length. [ 438.565527][T12034] team0: Device hsr_slave_0 failed to register rx_handler [ 438.574462][T12029] syz.2.2378 (12029) used greatest stack depth: 17640 bytes left [ 438.871331][T12041] team0: Device hsr_slave_0 failed to register rx_handler [ 439.129758][T12051] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2392'. [ 439.292294][T12055] validate_nla: 1 callbacks suppressed [ 439.292309][T12055] netlink: 'syz.2.2394': attribute type 5 has an invalid length. [ 439.616707][T12062] netlink: 'syz.1.2397': attribute type 3 has an invalid length. [ 439.625119][T12062] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2397'. [ 439.769021][T12065] netlink: 'syz.2.2398': attribute type 10 has an invalid length. [ 439.796917][T12065] team0: Device hsr_slave_0 failed to register rx_handler [ 440.106137][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.112510][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.224340][T12081] FAULT_INJECTION: forcing a failure. [ 440.224340][T12081] name failslab, interval 1, probability 0, space 0, times 0 [ 440.250021][T12081] CPU: 1 PID: 12081 Comm: syz.3.2403 Not tainted syzkaller #0 [ 440.257529][T12081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 440.267599][T12081] Call Trace: [ 440.270893][T12081] [ 440.273837][T12081] dump_stack_lvl+0x18c/0x250 [ 440.278548][T12081] ? show_regs_print_info+0x20/0x20 [ 440.283768][T12081] ? load_image+0x420/0x420 [ 440.288291][T12081] ? __might_sleep+0xe0/0xe0 [ 440.292933][T12081] ? __lock_acquire+0x7d40/0x7d40 [ 440.297990][T12081] should_fail_ex+0x39d/0x4d0 [ 440.302700][T12081] should_failslab+0x9/0x20 [ 440.307217][T12081] slab_pre_alloc_hook+0x59/0x310 [ 440.312265][T12081] ? rtnl_newlink+0x10d/0x20a0 [ 440.317080][T12081] __kmem_cache_alloc_node+0x53/0x250 [ 440.322455][T12081] ? rtnl_newlink+0x10d/0x20a0 [ 440.327217][T12081] kmalloc_trace+0x2a/0xe0 [ 440.331630][T12081] ? rtnl_setlink+0x4e0/0x4e0 [ 440.336299][T12081] rtnl_newlink+0x10d/0x20a0 [ 440.340887][T12081] ? arch_stack_walk+0x160/0x190 [ 440.345839][T12081] ? __mutex_trylock_common+0x159/0x260 [ 440.351379][T12081] ? rtnl_setlink+0x4e0/0x4e0 [ 440.356049][T12081] ? trace_raw_output_contention_end+0xd0/0xd0 [ 440.362206][T12081] ? rcu_is_watching+0x15/0xb0 [ 440.366965][T12081] ? trace_contention_end+0x39/0xe0 [ 440.372156][T12081] ? __mutex_lock+0x315/0xcc0 [ 440.376899][T12081] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 440.382006][T12081] ? mutex_lock_nested+0x20/0x20 [ 440.386942][T12081] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 440.392049][T12081] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 440.397157][T12081] ? rtnl_setlink+0x4e0/0x4e0 [ 440.401827][T12081] rtnetlink_rcv_msg+0x869/0xfa0 [ 440.406763][T12081] ? lockdep_hardirqs_on+0x98/0x150 [ 440.411959][T12081] ? rtnetlink_bind+0x80/0x80 [ 440.416630][T12081] ? perf_trace_preemptirq_template+0xac/0x330 [ 440.422809][T12081] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 440.428783][T12081] ? lock_chain_count+0x20/0x20 [ 440.433626][T12081] ? __local_bh_enable_ip+0x13a/0x1c0 [ 440.438988][T12081] ? lockdep_hardirqs_on+0x98/0x150 [ 440.444187][T12081] ? __local_bh_enable_ip+0x13a/0x1c0 [ 440.449553][T12081] ? _local_bh_enable+0xa0/0xa0 [ 440.454400][T12081] ? __dev_queue_xmit+0x265/0x3660 [ 440.459580][T12081] ? __dev_queue_xmit+0x265/0x3660 [ 440.464689][T12081] ? __dev_queue_xmit+0x1b2c/0x3660 [ 440.469892][T12081] ? __dev_queue_xmit+0x265/0x3660 [ 440.475014][T12081] ? ref_tracker_free+0x690/0x840 [ 440.480036][T12081] netlink_rcv_skb+0x241/0x4d0 [ 440.484901][T12081] ? rtnetlink_bind+0x80/0x80 [ 440.489572][T12081] ? netlink_ack+0x1180/0x1180 [ 440.494336][T12081] ? __lock_acquire+0x7d40/0x7d40 [ 440.499359][T12081] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.504552][T12081] netlink_unicast+0x751/0x8d0 [ 440.509317][T12081] netlink_sendmsg+0x8d0/0xbf0 [ 440.514080][T12081] ? netlink_getsockopt+0x590/0x590 [ 440.519277][T12081] ? aa_sock_msg_perm+0x94/0x150 [ 440.524215][T12081] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 440.529493][T12081] ? security_socket_sendmsg+0x80/0xa0 [ 440.534942][T12081] ? netlink_getsockopt+0x590/0x590 [ 440.540143][T12081] ____sys_sendmsg+0x5ba/0x960 [ 440.544909][T12081] ? __asan_memset+0x22/0x40 [ 440.549496][T12081] ? __sys_sendmsg_sock+0x30/0x30 [ 440.554522][T12081] ? __import_iovec+0x5f2/0x850 [ 440.559380][T12081] ? import_iovec+0x73/0xa0 [ 440.563877][T12081] ___sys_sendmsg+0x2a6/0x360 [ 440.568552][T12081] ? get_pid_task+0x20/0x1e0 [ 440.573153][T12081] ? __sys_sendmsg+0x2a0/0x2a0 [ 440.577925][T12081] ? __lock_acquire+0x7d40/0x7d40 [ 440.582960][T12081] __se_sys_sendmsg+0x1c2/0x2b0 [ 440.587807][T12081] ? __x64_sys_sendmsg+0x80/0x80 [ 440.592747][T12081] ? lockdep_hardirqs_on+0x98/0x150 [ 440.597952][T12081] do_syscall_64+0x55/0xb0 [ 440.602368][T12081] ? clear_bhb_loop+0x40/0x90 [ 440.607039][T12081] ? clear_bhb_loop+0x40/0x90 [ 440.611709][T12081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.617602][T12081] RIP: 0033:0x7fb5bb99ce59 [ 440.622013][T12081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.641627][T12081] RSP: 002b:00007fb5bc7ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.650044][T12081] RAX: ffffffffffffffda RBX: 00007fb5bbc15fa0 RCX: 00007fb5bb99ce59 [ 440.658012][T12081] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000007 [ 440.665976][T12081] RBP: 00007fb5bc7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 440.673938][T12081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.681901][T12081] R13: 00007fb5bbc16038 R14: 00007fb5bbc15fa0 R15: 00007ffc791b7c08 [ 440.689877][T12081] [ 441.106623][T12097] netlink: 'syz.2.2409': attribute type 10 has an invalid length. [ 441.132732][T12097] team0: Device hsr_slave_0 failed to register rx_handler [ 441.371700][T12104] netlink: 'syz.2.2412': attribute type 5 has an invalid length. [ 441.884085][T12114] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2416'. [ 441.976735][T12114] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2416'. [ 442.053470][T12114] tipc: Started in network mode [ 442.058601][T12114] tipc: Node identity b, cluster identity 73 [ 442.079871][T12114] tipc: Node number set to 11 [ 442.124993][T12117] netlink: 'syz.2.2418': attribute type 10 has an invalid length. [ 442.157419][T12117] syz_tun: entered promiscuous mode [ 442.266258][T12117] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 442.510609][T12135] netlink: 'syz.3.2421': attribute type 10 has an invalid length. [ 442.529248][T12135] team0: Device hsr_slave_0 failed to register rx_handler [ 443.217547][T12154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2428'. [ 443.495483][T12159] FAULT_INJECTION: forcing a failure. [ 443.495483][T12159] name failslab, interval 1, probability 0, space 0, times 0 [ 443.605618][T12159] CPU: 1 PID: 12159 Comm: syz.1.2430 Not tainted syzkaller #0 [ 443.613142][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.623221][T12159] Call Trace: [ 443.626519][T12159] [ 443.629462][T12159] dump_stack_lvl+0x18c/0x250 [ 443.634168][T12159] ? show_regs_print_info+0x20/0x20 [ 443.639390][T12159] ? load_image+0x420/0x420 [ 443.643911][T12159] ? __might_sleep+0xe0/0xe0 [ 443.648517][T12159] ? __lock_acquire+0x7d40/0x7d40 [ 443.653565][T12159] should_fail_ex+0x39d/0x4d0 [ 443.658277][T12159] should_failslab+0x9/0x20 [ 443.662809][T12159] slab_pre_alloc_hook+0x59/0x310 [ 443.667862][T12159] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 443.673782][T12159] kmem_cache_alloc+0x5a/0x2d0 [ 443.678563][T12159] ? rxrpc_alloc_call+0x272/0xc20 [ 443.683716][T12159] ? rxrpc_alloc_call+0x78/0xc20 [ 443.688802][T12159] rxrpc_alloc_call+0x272/0xc20 [ 443.693692][T12159] rxrpc_new_client_call+0xed/0x1410 [ 443.699013][T12159] rxrpc_do_sendmsg+0xe03/0x12d0 [ 443.704053][T12159] ? rxrpc_propose_abort+0x200/0x200 [ 443.709371][T12159] ? rxrpc_sendmsg+0x391/0x5b0 [ 443.714153][T12159] ? bpf_lsm_socket_accept+0x10/0x10 [ 443.719463][T12159] ? rxrpc_getsockopt+0x150/0x150 [ 443.724509][T12159] ____sys_sendmsg+0x5ba/0x960 [ 443.729301][T12159] ? __lock_acquire+0x7d40/0x7d40 [ 443.734353][T12159] ? __sys_sendmsg_sock+0x30/0x30 [ 443.739398][T12159] ? __import_iovec+0x3fa/0x850 [ 443.744278][T12159] ? import_iovec+0x73/0xa0 [ 443.748808][T12159] ___sys_sendmsg+0x2a6/0x360 [ 443.753519][T12159] ? __sys_sendmsg+0x2a0/0x2a0 [ 443.758358][T12159] __se_sys_sendmsg+0x1c2/0x2b0 [ 443.763241][T12159] ? __x64_sys_sendmsg+0x80/0x80 [ 443.768213][T12159] ? syscall_enter_from_user_mode+0x2e/0x80 [ 443.774136][T12159] do_syscall_64+0x55/0xb0 [ 443.778571][T12159] ? clear_bhb_loop+0x40/0x90 [ 443.783263][T12159] ? clear_bhb_loop+0x40/0x90 [ 443.787959][T12159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.793877][T12159] RIP: 0033:0x7fc710d9ce59 [ 443.798309][T12159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.817932][T12159] RSP: 002b:00007fc711c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.826368][T12159] RAX: ffffffffffffffda RBX: 00007fc711015fa0 RCX: 00007fc710d9ce59 [ 443.834358][T12159] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000006 [ 443.842337][T12159] RBP: 00007fc711c67090 R08: 0000000000000000 R09: 0000000000000000 [ 443.850303][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.858269][T12159] R13: 00007fc711016038 R14: 00007fc711015fa0 R15: 00007ffdd3649208 [ 443.866433][T12159] [ 444.334581][T12170] netlink: 'syz.0.2432': attribute type 10 has an invalid length. [ 444.343094][T12170] team0: Device hsr_slave_0 failed to register rx_handler [ 444.476327][T12174] netlink: 'syz.1.2434': attribute type 10 has an invalid length. [ 444.510647][T12174] syz_tun: entered promiscuous mode [ 444.548660][T12174] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 445.274641][T12197] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 445.289909][T12197] team0: Device hsr_slave_0 failed to register rx_handler [ 445.509914][T12204] FAULT_INJECTION: forcing a failure. [ 445.509914][T12204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.542790][T12204] CPU: 1 PID: 12204 Comm: syz.2.2448 Not tainted syzkaller #0 [ 445.550300][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 445.560374][T12204] Call Trace: [ 445.563673][T12204] [ 445.564589][T12206] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2447'. [ 445.566604][T12204] dump_stack_lvl+0x18c/0x250 [ 445.580320][T12204] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.586504][T12204] ? show_regs_print_info+0x20/0x20 [ 445.591725][T12204] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.597918][T12204] should_fail_ex+0x39d/0x4d0 [ 445.602630][T12204] _copy_from_iter+0x1d9/0x12e0 [ 445.607496][T12204] ? __virt_addr_valid+0x18c/0x540 [ 445.612631][T12204] ? __lock_acquire+0x7d40/0x7d40 [ 445.617673][T12204] ? copyout_mc+0x70/0x70 [ 445.622019][T12204] ? __virt_addr_valid+0x18c/0x540 [ 445.627146][T12204] ? __virt_addr_valid+0x18c/0x540 [ 445.632271][T12204] ? __virt_addr_valid+0x469/0x540 [ 445.637401][T12204] ? __check_object_size+0x506/0xa20 [ 445.642706][T12204] netlink_sendmsg+0x76b/0xbf0 [ 445.647491][T12204] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 445.653323][T12204] ? netlink_getsockopt+0x590/0x590 [ 445.658538][T12204] ? aa_sock_msg_perm+0x94/0x150 [ 445.663494][T12204] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 445.668791][T12204] ? security_socket_sendmsg+0x80/0xa0 [ 445.674270][T12204] ? netlink_getsockopt+0x590/0x590 [ 445.679488][T12204] ____sys_sendmsg+0x5ba/0x960 [ 445.684273][T12204] ? __asan_memset+0x22/0x40 [ 445.688876][T12204] ? __sys_sendmsg_sock+0x30/0x30 [ 445.693906][T12204] ? __import_iovec+0x5f2/0x850 [ 445.698788][T12204] ? import_iovec+0x73/0xa0 [ 445.703304][T12204] ___sys_sendmsg+0x2a6/0x360 [ 445.707996][T12204] ? __sys_sendmsg+0x2a0/0x2a0 [ 445.712802][T12204] ? trace_call_bpf+0xc3/0x6c0 [ 445.717579][T12204] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 445.723854][T12204] __se_sys_sendmsg+0x1c2/0x2b0 [ 445.728716][T12204] ? __x64_sys_sendmsg+0x80/0x80 [ 445.733683][T12204] ? lockdep_hardirqs_on+0x98/0x150 [ 445.738901][T12204] do_syscall_64+0x55/0xb0 [ 445.743321][T12204] ? clear_bhb_loop+0x40/0x90 [ 445.748002][T12204] ? clear_bhb_loop+0x40/0x90 [ 445.752686][T12204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.758590][T12204] RIP: 0033:0x7f2f8319ce59 [ 445.763010][T12204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.782630][T12204] RSP: 002b:00007f2f813f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.791052][T12204] RAX: ffffffffffffffda RBX: 00007f2f83415fa0 RCX: 00007f2f8319ce59 [ 445.799032][T12204] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000b [ 445.807010][T12204] RBP: 00007f2f813f6090 R08: 0000000000000000 R09: 0000000000000000 [ 445.814984][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.822959][T12204] R13: 00007f2f83416038 R14: 00007f2f83415fa0 R15: 00007ffcf727d5c8 [ 445.830951][T12204] [ 446.726225][T12219] netlink: 'syz.3.2454': attribute type 10 has an invalid length. [ 446.743716][T12219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2454'. [ 447.037542][T12224] netlink: 'syz.0.2456': attribute type 10 has an invalid length. [ 447.061008][T12224] team0: Device hsr_slave_0 failed to register rx_handler [ 448.128450][T12256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2466'. [ 449.664230][T12272] netlink: 'syz.1.2471': attribute type 10 has an invalid length. [ 449.692264][T12272] team0: Device hsr_slave_0 failed to register rx_handler [ 449.970604][T12280] netlink: 'syz.0.2476': attribute type 10 has an invalid length. [ 450.009248][T12280] syz_tun: entered promiscuous mode [ 450.244882][T12278] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2475'. [ 450.270145][T12280] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 450.280327][T12278] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2475'. [ 450.302259][T12278] tipc: Started in network mode [ 450.325725][T12278] tipc: Node identity b, cluster identity 73 [ 450.332600][T12278] tipc: Node number set to 11 [ 451.536637][T12314] netlink: 'syz.2.2487': attribute type 10 has an invalid length. [ 451.595242][T12314] team0: Device hsr_slave_0 failed to register rx_handler [ 452.109872][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 452.130405][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 452.138308][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 452.152704][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 452.167411][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 452.175099][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.206799][ T5774] bond0: (slave syz_tun): Releasing backup interface [ 452.291170][T12321] netlink: 'syz.0.2496': attribute type 10 has an invalid length. [ 452.327293][T12321] team0: Device hsr_slave_0 failed to register rx_handler [ 452.424146][T12325] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2489'. [ 452.508054][ T8247] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.601356][T12325] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2489'. [ 452.749970][ T8247] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.850051][ T8247] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.935771][ T8247] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.000736][T12320] chnl_net:caif_netlink_parms(): no params data found [ 453.095801][T12339] netlink: 'syz.3.2493': attribute type 10 has an invalid length. [ 453.146850][T12339] syz_tun: entered promiscuous mode [ 453.217969][T12339] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 453.535653][T12320] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.542831][T12320] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.556421][T12320] bridge_slave_0: entered allmulticast mode [ 453.569663][T12320] bridge_slave_0: entered promiscuous mode [ 453.581671][ T8247] tipc: Left network mode [ 453.617381][T12320] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.634030][T12320] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.641266][T12320] bridge_slave_1: entered allmulticast mode [ 453.669033][T12320] bridge_slave_1: entered promiscuous mode [ 453.878670][T12320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.928133][T12320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.119545][T12320] team0: Port device team_slave_0 added [ 454.228636][T12320] team0: Port device team_slave_1 added [ 454.243415][ T5781] Bluetooth: hci1: command tx timeout [ 454.270200][T12370] netlink: 'syz.0.2500': attribute type 10 has an invalid length. [ 454.307907][T12370] team0: Device hsr_slave_0 failed to register rx_handler [ 454.529639][T12320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.561075][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.606234][T12320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.636610][ T5781] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 454.636640][ T5781] Bluetooth: unknown link type 101 [ 454.654641][ T5781] Bluetooth: hci4: connection err: -111 [ 454.710495][T12320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.722400][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.759624][T12320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.953986][T12320] hsr_slave_0: entered promiscuous mode [ 454.961917][T12320] hsr_slave_1: entered promiscuous mode [ 454.969651][T12320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.980001][T12320] Cannot create hsr debugfs directory [ 455.487702][ T8247] hsr_slave_0: left promiscuous mode [ 455.508347][ T8247] hsr_slave_1: left promiscuous mode [ 455.517090][ T8247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.525774][ T8247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.535071][ T8247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.542494][ T8247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.566044][ T8247] veth1_macvtap: left promiscuous mode [ 455.571952][ T8247] veth0_macvtap: left promiscuous mode [ 455.969587][ T8247] team0 (unregistering): Port device team_slave_1 removed [ 456.009713][ T8247] team0 (unregistering): Port device team_slave_0 removed [ 456.048830][ T8247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.091425][ T8247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.323363][ T5781] Bluetooth: hci1: command tx timeout [ 456.351952][ T8247] bond0 (unregistering): Released all slaves [ 456.709552][T12320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 456.731876][T12320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 456.743133][T12320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 456.760939][T12320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 456.916239][T12320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.955402][T12320] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.983297][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.990473][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.011130][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.018322][ T8253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.072279][T12320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 457.090418][T12320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.312536][T12320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.391411][T12320] veth0_vlan: entered promiscuous mode [ 457.412661][T12320] veth1_vlan: entered promiscuous mode [ 457.472383][T12320] veth0_macvtap: entered promiscuous mode [ 457.491329][T12320] veth1_macvtap: entered promiscuous mode [ 457.522840][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.540828][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.551186][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.569812][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.580955][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.598172][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.609546][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.625700][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.639091][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.656463][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.671693][T12320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.702222][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.720044][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.730014][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.740689][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.750684][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.761155][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.776523][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.790665][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.802838][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.818507][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.829931][T12320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.861592][T12320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.870627][T12320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.879932][T12320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.892210][T12320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.014799][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.022762][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.050896][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.059424][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.423516][ T5781] Bluetooth: hci1: command tx timeout [ 458.645349][T12462] netlink: 'syz.1.2506': attribute type 10 has an invalid length. [ 458.706975][T12462] syz_tun: entered promiscuous mode [ 458.882569][T12462] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 458.954903][T12476] netlink: 'syz.0.2509': attribute type 10 has an invalid length. [ 458.992575][T12476] team0: Device hsr_slave_0 failed to register rx_handler [ 459.115905][ T5771] bond0: (slave syz_tun): Releasing backup interface [ 459.148941][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.162689][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.176591][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.200560][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.209970][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 459.218013][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.338007][ T8247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.389880][T12485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2511'. [ 459.547766][ T8247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.433230][ T8247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.494024][ T5781] Bluetooth: hci1: command tx timeout [ 460.581178][ T8247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.594683][ T5781] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 460.594713][ T5781] Bluetooth: unknown link type 101 [ 460.607075][ T5781] Bluetooth: hci1: connection err: -111 [ 460.984461][ T8247] tipc: Left network mode [ 461.017131][T12518] netlink: 'syz.2.2519': attribute type 10 has an invalid length. [ 461.052598][T12518] team0: Device hsr_slave_0 failed to register rx_handler [ 461.147034][T12515] netlink: 'syz.0.2517': attribute type 10 has an invalid length. [ 461.192243][T12515] team0: Device hsr_slave_0 failed to register rx_handler [ 461.253115][T12480] chnl_net:caif_netlink_parms(): no params data found [ 461.284524][ T5781] Bluetooth: hci0: command tx timeout [ 461.457919][T12521] netlink: 'syz.2.2520': attribute type 10 has an invalid length. [ 461.519963][T12521] team0: Device hsr_slave_0 failed to register rx_handler [ 461.811094][T12480] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.822308][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.830831][T12480] bridge_slave_0: entered allmulticast mode [ 461.842909][T12480] bridge_slave_0: entered promiscuous mode [ 461.906750][T12480] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.933766][T12480] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.941080][T12480] bridge_slave_1: entered allmulticast mode [ 461.969214][T12480] bridge_slave_1: entered promiscuous mode [ 462.073607][T12547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2525'. [ 462.236915][T12480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.266248][T12480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.437933][T12480] team0: Port device team_slave_0 added [ 462.471452][T12480] team0: Port device team_slave_1 added [ 462.593573][T12480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.615764][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.675988][T12480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.902324][T12480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.929371][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.005585][T12480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.286795][T12480] hsr_slave_0: entered promiscuous mode [ 463.321807][T12480] hsr_slave_1: entered promiscuous mode [ 463.347773][T12567] netlink: 'syz.1.2528': attribute type 10 has an invalid length. [ 463.364497][ T5781] Bluetooth: hci0: command tx timeout [ 463.451160][T12567] team0: Device hsr_slave_0 failed to register rx_handler [ 464.588221][T12580] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 464.615468][T12580] team0: Device hsr_slave_0 failed to register rx_handler [ 464.673653][T12581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2537'. [ 464.791687][T12584] netlink: 'syz.0.2539': attribute type 10 has an invalid length. [ 464.904717][ T8247] hsr_slave_0: left promiscuous mode [ 464.953636][ T8247] hsr_slave_1: left promiscuous mode [ 465.013103][ T8247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.038080][ T8247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.232839][ T8247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.261461][ T8247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.302490][ T8247] veth1_macvtap: left promiscuous mode [ 465.310169][ T8247] veth0_macvtap: left promiscuous mode [ 465.443428][ T5781] Bluetooth: hci0: command tx timeout [ 465.567704][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 465.567735][ T5781] Bluetooth: unknown link type 101 [ 465.580558][ T5781] Bluetooth: hci2: connection err: -111 [ 465.608562][ T8247] geneve1 (unregistering): left promiscuous mode [ 465.615306][ T8247] geneve1 (unregistering): left allmulticast mode [ 465.628528][ T8247] team0 (unregistering): Port device geneve1 removed [ 465.907963][ T8247] team_slave_1 (unregistering): left promiscuous mode [ 465.914936][ T8247] team_slave_1 (unregistering): left allmulticast mode [ 465.926138][ T8247] team0 (unregistering): Port device team_slave_1 removed [ 465.961874][ T8247] team_slave_0 (unregistering): left promiscuous mode [ 465.968940][ T8247] team_slave_0 (unregistering): left allmulticast mode [ 465.977009][ T8247] team0 (unregistering): Port device team_slave_0 removed [ 466.016077][ T8247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.059981][ T8247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.314135][ T8247] bond0 (unregistering): Released all slaves [ 466.364874][T12586] netlink: 'syz.1.2530': attribute type 10 has an invalid length. [ 466.381072][T12586] team0: Device hsr_slave_0 failed to register rx_handler [ 466.439636][T12608] netlink: 'syz.2.2532': attribute type 10 has an invalid length. [ 466.470018][T12608] team0: Device hsr_slave_0 failed to register rx_handler [ 466.966653][T12622] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2538'. [ 467.282734][T12622] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2538'. [ 467.527367][ T5781] Bluetooth: hci0: command tx timeout [ 467.762651][T12480] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.787913][T12480] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.807886][T12480] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.834953][T12480] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.939088][T12635] netlink: 'syz.2.2542': attribute type 10 has an invalid length. [ 467.960303][T12635] team0: Device hsr_slave_0 failed to register rx_handler [ 468.176849][T12480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.241359][T12480] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.332166][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.340203][ T8247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.422565][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.429811][ T8247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.731163][T12652] netlink: 'syz.0.2545': attribute type 10 has an invalid length. [ 468.760240][T12652] team0: Device hsr_slave_0 failed to register rx_handler [ 469.119903][T12480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.314018][T12676] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2549'. [ 469.400949][T12480] veth0_vlan: entered promiscuous mode [ 469.438979][T12676] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2549'. [ 469.539507][T12480] veth1_vlan: entered promiscuous mode [ 469.667979][T12480] veth0_macvtap: entered promiscuous mode [ 469.698237][T12480] veth1_macvtap: entered promiscuous mode [ 469.774538][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.819296][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.838125][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.859166][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.877057][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.902611][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.927609][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.951523][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.973593][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.004308][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.019336][T12480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.039804][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.067922][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.078685][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.090334][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.100972][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.111885][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.122673][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.139977][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.151729][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.175357][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.197385][T12480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.236315][T12480] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.270644][T12480] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.293309][T12480] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.302113][T12480] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.394971][ T8253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.402835][ T8253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.445215][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.453080][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.034804][T12703] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2560'. [ 471.073804][T12703] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2560'. [ 471.744328][T12724] netlink: 'syz.3.2553': attribute type 10 has an invalid length. [ 471.787300][T12720] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2564'. [ 472.009124][T12724] team0: Device hsr_slave_0 failed to register rx_handler [ 472.215487][T12736] netlink: 'syz.1.2555': attribute type 10 has an invalid length. [ 472.247341][T12736] team0: Device hsr_slave_0 failed to register rx_handler [ 472.267179][T12720] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2564'. [ 472.721703][T12749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2557'. [ 472.855752][T12754] netlink: 'syz.3.2563': attribute type 10 has an invalid length. [ 473.365443][T12754] syz_tun: entered promiscuous mode [ 473.452840][T12754] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 474.227164][T12792] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2571'. [ 474.236811][T12792] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2571'. [ 474.593865][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 474.593903][ T5781] Bluetooth: unknown link type 101 [ 474.606544][ T5781] Bluetooth: hci2: connection err: -111 [ 474.669066][T12805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2577'. [ 475.622440][T12820] netlink: 'syz.0.2582': attribute type 10 has an invalid length. [ 476.685911][T12828] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2585'. [ 476.697935][T12828] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2585'. [ 476.880839][ T5781] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 476.880871][ T5781] Bluetooth: unknown link type 101 [ 476.903644][ T5781] Bluetooth: hci0: connection err: -111 [ 477.055728][T12848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2592'. [ 478.675710][T12870] netlink: 'syz.2.2599': attribute type 10 has an invalid length. [ 479.067908][ T5781] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 479.067942][ T5781] Bluetooth: unknown link type 101 [ 479.083362][ T5781] Bluetooth: hci1: connection err: -111 [ 479.508903][T12894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2609'. [ 479.971572][T12900] netlink: 'syz.0.2610': attribute type 10 has an invalid length. [ 480.838371][T12913] netlink: 'syz.1.2615': attribute type 10 has an invalid length. [ 480.873435][T12917] netlink: 'syz.2.2617': attribute type 10 has an invalid length. [ 481.110464][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 481.110496][ T5781] Bluetooth: unknown link type 101 [ 481.122957][ T5781] Bluetooth: hci2: connection err: -111 [ 481.184993][T12928] netlink: 'syz.3.2620': attribute type 10 has an invalid length. [ 481.862734][T12934] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2621'. [ 481.886818][T12934] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2621'. [ 481.923734][T12934] tipc: Started in network mode [ 481.928918][T12934] tipc: Node identity b, cluster identity 73 [ 481.973471][T12934] tipc: Node number set to 11 [ 482.059668][T12944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2624'. [ 483.400991][T12964] netlink: 'syz.0.2631': attribute type 10 has an invalid length. [ 483.667943][ T5781] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 483.667981][ T5781] Bluetooth: unknown link type 101 [ 483.680429][ T5781] Bluetooth: hci1: connection err: -111 [ 483.792145][T12976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2634'. [ 484.344861][T12981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2635'. [ 485.136387][T12991] netlink: 'syz.3.2639': attribute type 10 has an invalid length. [ 485.620956][T13004] netlink: 'syz.3.2644': attribute type 10 has an invalid length. [ 485.698632][ T5781] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 485.698665][ T5781] Bluetooth: unknown link type 101 [ 485.711071][ T5781] Bluetooth: hci4: connection err: -111 [ 486.820099][T13022] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2648'. [ 488.053469][T13038] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2656'. [ 488.337041][ T5781] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 488.337080][ T5781] Bluetooth: unknown link type 101 [ 488.349798][ T5781] Bluetooth: hci4: connection err: -111 [ 488.396166][T13045] netlink: 'syz.0.2657': attribute type 10 has an invalid length. [ 488.731629][T13047] netlink: 'syz.1.2659': attribute type 10 has an invalid length. [ 489.419198][T13066] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2665'. [ 489.460717][T13066] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2665'. [ 489.472929][T13066] tipc: Started in network mode [ 489.478264][T13066] tipc: Node identity b, cluster identity 73 [ 489.494380][T13066] tipc: Node number set to 11 [ 489.722853][T13072] netlink: 'syz.1.2668': attribute type 10 has an invalid length. [ 490.148130][T13081] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2669'. [ 490.908612][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 490.908644][ T5781] Bluetooth: unknown link type 101 [ 490.921168][ T5781] Bluetooth: hci2: connection err: -111 [ 491.308039][T13104] ipvlan1: entered promiscuous mode [ 491.323973][T13104] ipvlan1: entered allmulticast mode [ 491.333376][T13104] veth0_vlan: entered allmulticast mode [ 491.352175][T13105] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2678'. [ 491.428520][T13105] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2678'. [ 491.550886][T13111] netlink: 'syz.3.2681': attribute type 10 has an invalid length. [ 492.068089][T13122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2683'. [ 493.558138][ T5781] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 493.558184][ T5781] Bluetooth: unknown link type 101 [ 493.570704][ T5781] Bluetooth: hci0: connection err: -111 [ 493.726757][T13136] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2691'. [ 493.754733][T13136] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2691'. [ 493.865323][T13147] netlink: 'syz.2.2694': attribute type 10 has an invalid length. [ 494.210909][T13157] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2697'. [ 495.771326][T13168] netlink: 'syz.0.2700': attribute type 10 has an invalid length. [ 496.204822][T13182] netlink: 'syz.0.2705': attribute type 10 has an invalid length. [ 496.309817][T13180] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2704'. [ 496.357557][T13180] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2704'. [ 496.460709][ T5781] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 496.460747][ T5781] Bluetooth: unknown link type 101 [ 496.473673][ T5781] Bluetooth: hci4: connection err: -111 [ 496.897079][T13200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2712'. [ 497.432085][T13208] netlink: 'syz.1.2715': attribute type 10 has an invalid length. [ 498.654236][T13222] netlink: 'syz.2.2721': attribute type 10 has an invalid length. [ 498.764446][T13225] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2718'. [ 498.804008][T13225] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2718'. [ 499.216295][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 499.216326][ T5781] Bluetooth: unknown link type 101 [ 499.228771][ T5781] Bluetooth: hci2: connection err: -111 [ 499.529810][T13246] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2727'. [ 500.995444][T13264] netlink: 'syz.1.2735': attribute type 10 has an invalid length. [ 500.995635][T13262] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2733'. [ 501.025420][T13262] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2733'. [ 501.529311][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.535975][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.637361][T13280] ipvlan1: entered promiscuous mode [ 501.644280][T13280] ipvlan1: entered allmulticast mode [ 501.649972][T13280] veth0_vlan: entered allmulticast mode [ 501.844244][T13286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2742'. [ 503.271948][T13306] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2747'. [ 503.314768][T13306] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2747'. [ 503.663031][T13316] netlink: 'syz.1.2752': attribute type 10 has an invalid length. [ 503.955102][T13328] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2757'. [ 504.039603][T13330] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2756'. [ 505.418568][T13339] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2760'. [ 505.467714][T13339] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2760'. [ 506.517445][T13360] netlink: 'syz.2.2768': attribute type 10 has an invalid length. [ 506.621315][T13362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2766'. [ 507.226063][T13370] netlink: 'syz.1.2771': attribute type 10 has an invalid length. [ 507.244172][T13370] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2771'. [ 508.622133][T13382] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2775'. [ 513.593429][ T8253] tipc: Left network mode [ 513.621058][ T8253] tipc: Left network mode [ 513.960958][T13431] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2792'. [ 514.021455][T13431] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2792'. [ 514.312572][T13444] netlink: 'syz.3.2796': attribute type 3 has an invalid length. [ 514.320797][T13444] netlink: 16110 bytes leftover after parsing attributes in process `syz.3.2796'. [ 518.191730][T13457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2801'. [ 518.213415][T13452] netlink: 'syz.2.2800': attribute type 10 has an invalid length. [ 518.931833][T13476] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2807'. [ 519.046430][T13476] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2807'. [ 519.279144][ T5781] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 519.279175][ T5781] Bluetooth: unknown link type 101 [ 519.301719][ T5781] Bluetooth: hci0: connection err: -111 [ 522.307638][T13500] netlink: 'syz.1.2814': attribute type 10 has an invalid length. [ 522.554142][T13507] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2815'. [ 522.860917][T13515] netlink: 'syz.3.2819': attribute type 10 has an invalid length. [ 523.975830][T13522] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2822'. [ 524.068722][T13522] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2822'. [ 524.204647][ T8253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.228004][ T8253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.248599][ T8253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.265278][ T8253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.275468][ T8253] hsr_slave_0: left promiscuous mode [ 524.281312][ T8253] hsr_slave_1: left promiscuous mode [ 524.287449][ T8253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.294948][ T8253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.302523][ T8253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.310144][ T8253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.364793][ T8253] veth1_macvtap: left promiscuous mode [ 524.370660][ T8253] veth0_macvtap: left promiscuous mode [ 524.382086][ T8253] veth1_macvtap: left promiscuous mode [ 524.388219][ T8253] veth0_macvtap: left promiscuous mode [ 534.323979][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 540.249345][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 540.259386][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 540.267685][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 540.276638][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 540.284610][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 540.292300][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 540.379459][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 540.388507][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 540.400795][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 540.412035][T13538] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 540.420150][T13538] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 540.428596][T13552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 540.436063][T13552] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 540.445580][T13552] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 540.454681][T13552] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 540.462928][T13552] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 540.470746][T13552] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 540.485159][T13552] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 541.101576][ T5780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 541.109917][ T5780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 541.118026][ T5780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 541.126998][ T5780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 541.137369][ T5780] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 541.144872][ T5780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 542.323583][ T5780] Bluetooth: hci3: command tx timeout [ 542.485626][ T5780] Bluetooth: hci5: command tx timeout [ 542.564429][ T5780] Bluetooth: hci6: command tx timeout [ 543.203353][ T5780] Bluetooth: hci7: command tx timeout [ 544.403960][ T5780] Bluetooth: hci3: command tx timeout [ 544.563477][ T5780] Bluetooth: hci5: command tx timeout [ 544.643322][ T5780] Bluetooth: hci6: command tx timeout [ 545.283430][ T5780] Bluetooth: hci7: command tx timeout [ 546.483532][ T5780] Bluetooth: hci3: command tx timeout [ 546.643395][ T5780] Bluetooth: hci5: command tx timeout [ 546.723307][ T5780] Bluetooth: hci6: command tx timeout [ 547.363307][ T5780] Bluetooth: hci7: command tx timeout [ 548.563590][ T5780] Bluetooth: hci3: command tx timeout [ 548.723312][ T5780] Bluetooth: hci5: command tx timeout [ 548.803474][ T5780] Bluetooth: hci6: command tx timeout [ 549.443409][ T5780] Bluetooth: hci7: command tx timeout [ 554.816350][ T5780] Bluetooth: hci4: command 0x0406 tx timeout [ 562.969378][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.975870][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.286670][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 585.523366][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 600.782641][ T5780] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 600.803601][ T5780] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 600.811370][ T5780] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 600.820010][ T5780] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 600.828747][ T5780] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 600.836868][ T5780] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 600.930965][T13552] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 600.940183][T13552] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 600.948082][T13552] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 600.956776][T13552] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 600.966731][T13552] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 600.974342][T13538] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 600.996656][ T5780] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 601.009155][ T5780] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 601.017571][ T5780] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 601.026995][ T5780] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 601.037959][ T5780] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 601.046098][ T5780] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 601.654964][ T5781] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 601.663161][ T5781] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 601.673917][ T5781] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 601.682305][ T5781] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 601.691254][ T5781] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 601.698745][ T5781] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 602.883476][ T5780] Bluetooth: hci8: command tx timeout [ 603.043444][ T5780] Bluetooth: hci9: command tx timeout [ 603.123711][ T5780] Bluetooth: hci10: command tx timeout [ 603.763446][ T5780] Bluetooth: hci11: command tx timeout [ 604.963561][ T5780] Bluetooth: hci8: command tx timeout [ 605.123279][ T5780] Bluetooth: hci9: command tx timeout [ 605.203955][ T5780] Bluetooth: hci10: command tx timeout [ 605.843356][ T5780] Bluetooth: hci11: command tx timeout [ 607.043455][ T5780] Bluetooth: hci8: command tx timeout [ 607.203313][ T5780] Bluetooth: hci9: command tx timeout [ 607.283364][ T5780] Bluetooth: hci10: command tx timeout [ 607.933301][ T5780] Bluetooth: hci11: command tx timeout [ 609.134306][ T5780] Bluetooth: hci8: command tx timeout [ 609.283421][ T5780] Bluetooth: hci9: command tx timeout [ 609.363282][ T5780] Bluetooth: hci10: command tx timeout [ 610.003397][ T5780] Bluetooth: hci11: command tx timeout [ 624.407725][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.414245][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.474267][ T5781] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 661.484799][ T5781] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 661.493372][ T5781] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 661.505949][ T5781] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 661.528138][ T5781] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 661.535788][ T5781] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 661.577396][ T5781] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 661.587195][ T5781] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 661.595318][T13552] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 661.600863][ T5781] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 661.605044][T13552] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 661.617420][ T5781] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 661.625808][T13552] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 661.626398][ T5781] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 661.633854][T13552] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 661.641059][ T5781] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 661.647928][T13552] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 661.662254][T13552] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 662.271276][T13538] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 662.280654][T13538] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 662.289855][T13538] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 662.298923][T13538] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 662.309198][T13538] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 662.317002][T13538] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 663.603375][T13552] Bluetooth: hci12: command tx timeout [ 663.683532][T13552] Bluetooth: hci13: command tx timeout [ 663.683555][T13538] Bluetooth: hci14: command tx timeout [ 664.403420][T13552] Bluetooth: hci15: command tx timeout [ 665.683317][T13602] Bluetooth: hci12: command tx timeout [ 665.763433][T13602] Bluetooth: hci14: command tx timeout [ 665.769618][T13553] Bluetooth: hci13: command tx timeout [ 666.483285][T13603] Bluetooth: hci15: command tx timeout [ 667.448645][T13553] Bluetooth: hci7: command 0x0406 tx timeout [ 667.451357][T13602] Bluetooth: hci6: command 0x0406 tx timeout [ 667.455631][T13603] Bluetooth: hci3: command 0x0406 tx timeout [ 667.461084][T13602] Bluetooth: hci5: command 0x0406 tx timeout [ 667.763407][T13552] Bluetooth: hci12: command tx timeout [ 667.843775][T13552] Bluetooth: hci14: command tx timeout [ 667.843809][ T5780] Bluetooth: hci13: command tx timeout [ 668.563488][ T5780] Bluetooth: hci15: command tx timeout [ 669.843329][ T5780] Bluetooth: hci12: command tx timeout [ 669.923360][ T5780] Bluetooth: hci13: command tx timeout [ 669.923476][T13552] Bluetooth: hci14: command tx timeout [ 670.643580][T13552] Bluetooth: hci15: command tx timeout [ 685.848713][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.855177][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.123446][ T29] INFO: task kworker/u4:2:42 blocked for more than 143 seconds. [ 687.131122][ T29] Not tainted syzkaller #0 [ 687.137216][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.145966][ T29] task:kworker/u4:2 state:D stack:21928 pid:42 ppid:2 flags:0x00004000 [ 687.155258][ T29] Workqueue: events_unbound linkwatch_event [ 687.161187][ T29] Call Trace: [ 687.164568][ T29] [ 687.167516][ T29] __schedule+0x1553/0x45a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 687.172035][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 687.183597][ T29] ? asan.module_dtor+0x20/0x20 [ 687.188473][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 687.203206][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 687.208703][ T29] ? kthread_data+0x4f/0xc0 [ 687.223507][ T29] ? wq_worker_sleeping+0x63/0x240 [ 687.228662][ T29] schedule+0xbd/0x170 [ 687.232745][ T29] schedule_preempt_disabled+0x13/0x20 [ 687.245998][ T29] __mutex_lock+0x6a9/0xcc0 [ 687.251622][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 687.259900][ T29] ? linkwatch_event+0xe/0x60 [ 687.268866][ T29] ? mutex_lock_nested+0x20/0x20 [ 687.279168][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 687.289412][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 687.296733][ T29] linkwatch_event+0xe/0x60 [ 687.302732][ T29] process_scheduled_works+0xa5d/0x15d0 [ 687.316348][ T29] ? worker_attach_to_pool+0x380/0x380 [ 687.322407][ T29] ? assign_work+0x3d2/0x5d0 [ 687.330609][ T29] worker_thread+0xa55/0xfc0 [ 687.338751][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 687.349009][ T29] ? _raw_spin_unlock+0x40/0x40 [ 687.357337][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 687.366834][ T29] kthread+0x2fa/0x390 [ 687.371029][ T29] ? pr_cont_work+0x560/0x560 [ 687.381230][ T29] ? kthread_blkcg+0xd0/0xd0 [ 687.391264][ T29] ret_from_fork+0x48/0x80 [ 687.399954][ T29] ? kthread_blkcg+0xd0/0xd0 [ 687.407560][ T29] ret_from_fork_asm+0x11/0x20 [ 687.430413][ T29] [ 687.433848][ T29] INFO: task kworker/u4:16:8241 blocked for more than 143 seconds. [ 687.456599][ T29] Not tainted syzkaller #0 [ 687.468814][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.477587][ T29] task:kworker/u4:16 state:D stack:26536 pid:8241 ppid:2 flags:0x00004000 [ 687.487020][ T29] Workqueue: ipv6_addrconf addrconf_verify_work [ 687.493435][ T29] Call Trace: [ 687.496799][ T29] [ 687.499834][ T29] __schedule+0x1553/0x45a0 [ 687.504434][ T29] ? verify_lock_unused+0x140/0x140 [ 687.509654][ T29] ? asan.module_dtor+0x20/0x20 [ 687.514576][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 687.519276][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 687.524804][ T29] ? kthread_data+0x4f/0xc0 [ 687.529320][ T29] ? wq_worker_sleeping+0x63/0x240 [ 687.534486][ T29] schedule+0xbd/0x170 [ 687.538573][ T29] schedule_preempt_disabled+0x13/0x20 [ 687.544109][ T29] __mutex_lock+0x6a9/0xcc0 [ 687.548633][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 687.553470][ T29] ? addrconf_verify_work+0x19/0x30 [ 687.558692][ T29] ? mutex_lock_nested+0x20/0x20 [ 687.563734][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 687.569740][ T29] ? read_lock_is_recursive+0x20/0x20 [ 687.575179][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 687.580413][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 687.586220][ T29] addrconf_verify_work+0x19/0x30 [ 687.591259][ T29] process_scheduled_works+0xa5d/0x15d0 [ 687.596887][ T29] ? worker_attach_to_pool+0x380/0x380 [ 687.602361][ T29] ? assign_work+0x3d2/0x5d0 [ 687.607032][ T29] worker_thread+0xa55/0xfc0 [ 687.611664][ T29] kthread+0x2fa/0x390 [ 687.615782][ T29] ? pr_cont_work+0x560/0x560 [ 687.620568][ T29] ? kthread_blkcg+0xd0/0xd0 [ 687.625245][ T29] ret_from_fork+0x48/0x80 [ 687.629680][ T29] ? kthread_blkcg+0xd0/0xd0 [ 687.634318][ T29] ret_from_fork_asm+0x11/0x20 [ 687.639104][ T29] [ 687.642219][ T29] INFO: task syz.1.2822:13521 blocked for more than 143 seconds. [ 687.650574][ T29] Not tainted syzkaller #0 [ 687.656489][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.665316][ T29] task:syz.1.2822 state:D stack:27016 pid:13521 ppid:12320 flags:0x00004004 [ 687.674581][ T29] Call Trace: [ 687.677872][ T29] [ 687.680903][ T29] __schedule+0x1553/0x45a0 [ 687.691681][ T29] ? asan.module_dtor+0x20/0x20 [ 687.696605][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 687.701293][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 687.706810][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 687.712984][ T29] schedule+0xbd/0x170 [ 687.717167][ T29] schedule_preempt_disabled+0x13/0x20 [ 687.722653][ T29] __mutex_lock+0x6a9/0xcc0 [ 687.727427][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 687.732134][ T29] ? tun_chr_close+0x41/0x1c0 [ 687.739095][ T29] ? mutex_lock_nested+0x20/0x20 [ 687.746236][ T29] ? __fput+0x61c/0x970 [ 687.750418][ T29] ? tun_chr_open+0x510/0x510 [ 687.757726][ T29] tun_chr_close+0x41/0x1c0 [ 687.762496][ T29] __fput+0x234/0x970 [ 687.769937][ T29] task_work_run+0x1d4/0x260 [ 687.775278][ T29] ? task_work_cancel+0x220/0x220 [ 687.780696][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 687.786267][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 687.791580][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 687.799069][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 687.806841][ T29] do_syscall_64+0x61/0xb0 [ 687.811263][ T29] ? clear_bhb_loop+0x40/0x90 [ 687.818513][ T29] ? clear_bhb_loop+0x40/0x90 [ 687.824688][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.830617][ T29] RIP: 0033:0x7f0add59ce59 [ 687.835180][ T29] RSP: 002b:00007ffec96cf098 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 687.843791][ T29] RAX: 0000000000000000 RBX: 00007f0add817da0 RCX: 00007f0add59ce59 [ 687.851780][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 687.859778][ T29] RBP: 00007f0add817da0 R08: 00007f0add816038 R09: 0000000000000000 [ 687.867802][ T29] R10: 00000000003fcc80 R11: 0000000000000246 R12: 000000000008012f [ 687.875886][ T29] R13: 00007f0add81609c R14: 000000000007fef6 R15: 00007f0add816090 [ 687.884037][ T29] [ 687.887073][ T29] INFO: task syz.0.2821:13524 blocked for more than 144 seconds. [ 687.894852][ T29] Not tainted syzkaller #0 [ 687.899797][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.908528][ T29] task:syz.0.2821 state:D stack:22600 pid:13524 ppid:11632 flags:0x00004004 [ 687.917777][ T29] Call Trace: [ 687.921065][ T29] [ 687.925861][ T29] __schedule+0x1553/0x45a0 [ 687.930400][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 687.937658][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 687.946104][ T29] ? asan.module_dtor+0x20/0x20 [ 687.950978][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 687.957916][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 687.965656][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 687.971817][ T29] schedule+0xbd/0x170 [ 687.978241][ T29] schedule_preempt_disabled+0x13/0x20 [ 687.983815][ T29] __mutex_lock+0x6a9/0xcc0 [ 687.988342][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 687.993039][ T29] ? wext_ioctl_dispatch+0x115/0x600 [ 687.999433][ T29] ? mutex_lock_nested+0x20/0x20 [ 688.004614][ T29] ? dev_load+0x21/0x1f0 [ 688.008944][ T29] ? dev_load+0x21/0x1f0 [ 688.013258][ T29] wext_ioctl_dispatch+0x115/0x600 [ 688.018378][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 688.024614][ T29] ? wext_ioctl_dispatch+0x600/0x600 [ 688.029907][ T29] ? iw_handler_get_private+0x1f0/0x1f0 [ 688.037454][ T29] ? wext_handle_ioctl+0x1d0/0x1d0 [ 688.042581][ T29] ? rep_movs_alternative+0x33/0x90 [ 688.049791][ T29] wext_handle_ioctl+0x117/0x1d0 [ 688.054842][ T29] ? call_commit_handler+0xf0/0xf0 [ 688.059972][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 688.066058][ T29] sock_ioctl+0x15d/0x7e0 [ 688.070416][ T29] ? sock_poll+0x3e0/0x3e0 [ 688.074907][ T29] ? __fdget+0x180/0x210 [ 688.079180][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 688.084220][ T29] ? security_file_ioctl+0x80/0xa0 [ 688.089340][ T29] ? sock_poll+0x3e0/0x3e0 [ 688.093794][ T29] __se_sys_ioctl+0xfd/0x170 [ 688.098408][ T29] do_syscall_64+0x55/0xb0 [ 688.102822][ T29] ? clear_bhb_loop+0x40/0x90 [ 688.107569][ T29] ? clear_bhb_loop+0x40/0x90 [ 688.112263][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.118297][ T29] RIP: 0033:0x7f547339ce59 [ 688.122734][ T29] RSP: 002b:00007f54741a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.131220][ T29] RAX: ffffffffffffffda RBX: 00007f5473615fa0 RCX: 00007f547339ce59 [ 688.139243][ T29] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 000000000000000e [ 688.147283][ T29] RBP: 00007f5473432d6f R08: 0000000000000000 R09: 0000000000000000 [ 688.157222][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.166318][ T29] R13: 00007f5473616038 R14: 00007f5473615fa0 R15: 00007ffdd4c44398 [ 688.174570][ T29] [ 688.177657][ T29] INFO: task syz.3.2824:13530 blocked for more than 144 seconds. [ 688.185765][ T29] Not tainted syzkaller #0 [ 688.190705][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 688.199411][ T29] task:syz.3.2824 state:D stack:26856 pid:13530 ppid:12480 flags:0x00004004 [ 688.208837][ T29] Call Trace: [ 688.212131][ T29] [ 688.215099][ T29] __schedule+0x1553/0x45a0 [ 688.219759][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.226078][ T29] ? asan.module_dtor+0x20/0x20 [ 688.230958][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 688.235664][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 688.241266][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 688.247609][ T29] schedule+0xbd/0x170 [ 688.251806][ T29] schedule_preempt_disabled+0x13/0x20 [ 688.257349][ T29] __mutex_lock+0x6a9/0xcc0 [ 688.261881][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 688.266836][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 688.271974][ T29] ? mutex_lock_nested+0x20/0x20 [ 688.277023][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 688.281980][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 688.287177][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 688.292396][ T29] ? rtnetlink_bind+0x80/0x80 [ 688.297348][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 688.303907][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 688.309903][ T29] ? lock_chain_count+0x20/0x20 [ 688.315136][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 688.320535][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 688.326613][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 688.332017][ T29] ? _local_bh_enable+0xa0/0xa0 [ 688.337026][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 688.342156][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 688.347544][ T29] ? __dev_queue_xmit+0x1b2c/0x3660 [ 688.352779][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 688.358133][ T29] ? ref_tracker_free+0x690/0x840 [ 688.363249][ T29] netlink_rcv_skb+0x241/0x4d0 [ 688.368037][ T29] ? rtnetlink_bind+0x80/0x80 [ 688.372711][ T29] ? netlink_ack+0x1180/0x1180 [ 688.377547][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 688.382594][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 688.387858][ T29] netlink_unicast+0x751/0x8d0 [ 688.392650][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 688.397479][ T29] ? netlink_getsockopt+0x590/0x590 [ 688.402698][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 688.407779][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 688.413090][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 688.418814][ T29] ? netlink_getsockopt+0x590/0x590 [ 688.424286][ T29] ____sys_sendmsg+0x5ba/0x960 [ 688.429089][ T29] ? __asan_memset+0x22/0x40 [ 688.434071][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 688.439131][ T29] ? __import_iovec+0x5f2/0x850 [ 688.444480][ T29] ? import_iovec+0x73/0xa0 [ 688.449030][ T29] ___sys_sendmsg+0x2a6/0x360 [ 688.454061][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 688.460694][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 688.465619][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 688.470700][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 688.475996][ T29] do_syscall_64+0x55/0xb0 [ 688.480510][ T29] ? clear_bhb_loop+0x40/0x90 [ 688.485426][ T29] ? clear_bhb_loop+0x40/0x90 [ 688.490125][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.496223][ T29] RIP: 0033:0x7f982999ce59 [ 688.500650][ T29] RSP: 002b:00007f982a889028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.509107][ T29] RAX: ffffffffffffffda RBX: 00007f9829c15fa0 RCX: 00007f982999ce59 [ 688.517286][ T29] RDX: 0000000020000844 RSI: 0000200000000000 RDI: 0000000000000003 [ 688.525337][ T29] RBP: 00007f9829a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 688.533356][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.541488][ T29] R13: 00007f9829c16038 R14: 00007f9829c15fa0 R15: 00007ffd31f838f8 [ 688.549557][ T29] [ 688.552661][ T29] INFO: task syz.2.2825:13536 blocked for more than 144 seconds. [ 688.560626][ T29] Not tainted syzkaller #0 [ 688.565657][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 688.574992][ T29] task:syz.2.2825 state:D stack:25800 pid:13536 ppid:11903 flags:0x00004004 [ 688.584303][ T29] Call Trace: [ 688.587588][ T29] [ 688.590513][ T29] __schedule+0x1553/0x45a0 [ 688.595349][ T29] ? asan.module_dtor+0x20/0x20 [ 688.600228][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 688.605136][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 688.610628][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 688.617047][ T29] schedule+0xbd/0x170 [ 688.621148][ T29] schedule_preempt_disabled+0x13/0x20 [ 688.626664][ T29] __mutex_lock+0x6a9/0xcc0 [ 688.631182][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 688.635919][ T29] ? dev_ioctl+0x83c/0x1140 [ 688.640441][ T29] ? mutex_lock_nested+0x20/0x20 [ 688.645548][ T29] ? dev_load+0x21/0x1f0 [ 688.649955][ T29] ? dev_load+0x21/0x1f0 [ 688.654267][ T29] dev_ioctl+0x83c/0x1140 [ 688.658624][ T29] sock_ioctl+0x74c/0x7e0 [ 688.662986][ T29] ? sock_poll+0x3e0/0x3e0 [ 688.667589][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 688.672547][ T29] ? security_file_ioctl+0x80/0xa0 [ 688.677986][ T29] ? sock_poll+0x3e0/0x3e0 [ 688.682431][ T29] __se_sys_ioctl+0xfd/0x170 [ 688.687362][ T29] do_syscall_64+0x55/0xb0 [ 688.691801][ T29] ? clear_bhb_loop+0x40/0x90 [ 688.696521][ T29] ? clear_bhb_loop+0x40/0x90 [ 688.701305][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.707298][ T29] RIP: 0033:0x7f2f8319ce59 [ 688.711720][ T29] RSP: 002b:00007f2f813d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.721013][ T29] RAX: ffffffffffffffda RBX: 00007f2f83416090 RCX: 00007f2f8319ce59 [ 688.734809][ T29] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000009 [ 688.742806][ T29] RBP: 00007f2f83232d6f R08: 0000000000000000 R09: 0000000000000000 [ 688.750887][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.759038][ T29] R13: 00007f2f83416128 R14: 00007f2f83416090 R15: 00007ffcf727d5c8 [ 688.767116][ T29] [ 688.770228][ T29] INFO: task syz-executor:13543 blocked for more than 145 seconds. [ 688.778262][ T29] Not tainted syzkaller #0 [ 688.783320][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 688.791998][ T29] task:syz-executor state:D stack:25320 pid:13543 ppid:1 flags:0x00004004 [ 688.801260][ T29] Call Trace: [ 688.804590][ T29] [ 688.807535][ T29] __schedule+0x1553/0x45a0 [ 688.812081][ T29] ? asan.module_dtor+0x20/0x20 [ 688.817434][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 688.822135][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 688.827662][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 688.833901][ T29] schedule+0xbd/0x170 [ 688.837993][ T29] schedule_preempt_disabled+0x13/0x20 [ 688.843532][ T29] __mutex_lock+0x6a9/0xcc0 [ 688.848046][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 688.852717][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 688.858237][ T29] ? mutex_lock_nested+0x20/0x20 [ 688.863398][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 688.868529][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 688.873702][ T29] ? rtnetlink_bind+0x80/0x80 [ 688.878401][ T29] ? mark_lock+0x94/0x320 [ 688.882756][ T29] ? __lock_acquire+0x1273/0x7d40 [ 688.888044][ T29] ? __kernel_text_address+0xd/0x30 [ 688.893326][ T29] ? mark_lock+0x94/0x320 [ 688.897678][ T29] ? mark_lock+0x94/0x320 [ 688.902020][ T29] ? __lock_acquire+0x1273/0x7d40 [ 688.907121][ T29] ? kmalloc_reserve+0x95/0x240 [ 688.911995][ T29] ? verify_lock_unused+0x140/0x140 [ 688.917252][ T29] ? verify_lock_unused+0x140/0x140 [ 688.922490][ T29] netlink_rcv_skb+0x241/0x4d0 [ 688.928199][ T29] ? rtnetlink_bind+0x80/0x80 [ 688.932907][ T29] ? netlink_ack+0x1180/0x1180 [ 688.938090][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 688.943132][ T29] ? net_generic+0x1e/0x240 [ 688.947805][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 688.953042][ T29] netlink_unicast+0x751/0x8d0 [ 688.957953][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 688.962770][ T29] ? netlink_getsockopt+0x590/0x590 [ 688.968462][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 688.973676][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 688.978981][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 688.984782][ T29] __sys_sendto+0x4a9/0x6b0 [ 688.989318][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 688.995199][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 689.000257][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 689.006656][ T29] ? lock_chain_count+0x20/0x20 [ 689.011522][ T29] ? lock_chain_count+0x20/0x20 [ 689.016602][ T29] __x64_sys_sendto+0xde/0xf0 [ 689.021307][ T29] do_syscall_64+0x55/0xb0 [ 689.025789][ T29] ? clear_bhb_loop+0x40/0x90 [ 689.030485][ T29] ? clear_bhb_loop+0x40/0x90 [ 689.035527][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.041454][ T29] RIP: 0033:0x7f3c8c75d68e [ 689.046529][ T29] RSP: 002b:00007ffc15931a08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 689.055223][ T29] RAX: ffffffffffffffda RBX: 000055557dea2500 RCX: 00007f3c8c75d68e [ 689.063441][ T29] RDX: 0000000000000028 RSI: 00007f3c8d544670 RDI: 0000000000000003 [ 689.071437][ T29] RBP: 0000000000000001 R08: 00007ffc15931a84 R09: 000000000000000c [ 689.079482][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 689.087481][ T29] R13: 0000000000000000 R14: 00007f3c8d544670 R15: 0000000000000000 [ 689.095524][ T29] [ 689.098564][ T29] INFO: task syz-executor:13548 blocked for more than 145 seconds. [ 689.106637][ T29] Not tainted syzkaller #0 [ 689.111578][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.120338][ T29] task:syz-executor state:D stack:25320 pid:13548 ppid:1 flags:0x00004004 [ 689.129645][ T29] Call Trace: [ 689.132934][ T29] [ 689.135949][ T29] __schedule+0x1553/0x45a0 [ 689.140504][ T29] ? asan.module_dtor+0x20/0x20 [ 689.145435][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 689.150136][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 689.155668][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 689.161856][ T29] schedule+0xbd/0x170 [ 689.166225][ T29] schedule_preempt_disabled+0x13/0x20 [ 689.171708][ T29] __mutex_lock+0x6a9/0xcc0 [ 689.176641][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 689.181346][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 689.186872][ T29] ? mutex_lock_nested+0x20/0x20 [ 689.191839][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 689.197031][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 689.202082][ T29] ? rtnetlink_bind+0x80/0x80 [ 689.207758][ T29] ? mark_lock+0x94/0x320 [ 689.212171][ T29] ? __lock_acquire+0x1273/0x7d40 [ 689.217364][ T29] ? __kernel_text_address+0xd/0x30 [ 689.222597][ T29] ? mark_lock+0x94/0x320 [ 689.226988][ T29] ? mark_lock+0x94/0x320 [ 689.231337][ T29] ? __lock_acquire+0x1273/0x7d40 [ 689.236653][ T29] ? kmalloc_reserve+0x95/0x240 [ 689.241524][ T29] ? verify_lock_unused+0x140/0x140 [ 689.246975][ T29] ? verify_lock_unused+0x140/0x140 [ 689.252217][ T29] netlink_rcv_skb+0x241/0x4d0 [ 689.257057][ T29] ? rtnetlink_bind+0x80/0x80 [ 689.261747][ T29] ? netlink_ack+0x1180/0x1180 [ 689.266569][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 689.271604][ T29] ? net_generic+0x1e/0x240 [ 689.276187][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 689.281398][ T29] netlink_unicast+0x751/0x8d0 [ 689.286523][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 689.291332][ T29] ? netlink_getsockopt+0x590/0x590 [ 689.296982][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 689.301945][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 689.307545][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 689.313030][ T29] __sys_sendto+0x4a9/0x6b0 [ 689.317616][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 689.323119][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 689.328301][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 689.334420][ T29] ? lock_chain_count+0x20/0x20 [ 689.339280][ T29] ? lock_chain_count+0x20/0x20 [ 689.344203][ T29] __x64_sys_sendto+0xde/0xf0 [ 689.349039][ T29] do_syscall_64+0x55/0xb0 [ 689.353531][ T29] ? clear_bhb_loop+0x40/0x90 [ 689.358224][ T29] ? clear_bhb_loop+0x40/0x90 [ 689.362908][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.369253][ T29] RIP: 0033:0x7fc592b5d68e [ 689.373747][ T29] RSP: 002b:00007ffea6c1b2a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 689.382244][ T29] RAX: ffffffffffffffda RBX: 0000555574483500 RCX: 00007fc592b5d68e [ 689.390247][ T29] RDX: 0000000000000028 RSI: 00007fc593944670 RDI: 0000000000000003 [ 689.398367][ T29] RBP: 0000000000000001 R08: 00007ffea6c1b324 R09: 000000000000000c [ 689.406416][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 689.414560][ T29] R13: 0000000000000000 R14: 00007fc593944670 R15: 0000000000000000 [ 689.422563][ T29] [ 689.425854][ T29] INFO: task syz-executor:13550 blocked for more than 145 seconds. [ 689.434033][ T29] Not tainted syzkaller #0 [ 689.438977][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.447688][ T29] task:syz-executor state:D stack:24104 pid:13550 ppid:1 flags:0x00004004 [ 689.456956][ T29] Call Trace: [ 689.460237][ T29] [ 689.463229][ T29] __schedule+0x1553/0x45a0 [ 689.467764][ T29] ? asan.module_dtor+0x20/0x20 [ 689.472638][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 689.477703][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 689.483464][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 689.489646][ T29] schedule+0xbd/0x170 [ 689.493989][ T29] schedule_preempt_disabled+0x13/0x20 [ 689.499459][ T29] __mutex_lock+0x6a9/0xcc0 [ 689.504163][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 689.508869][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 689.514219][ T29] ? mutex_lock_nested+0x20/0x20 [ 689.519191][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 689.525068][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 689.530034][ T29] ? rtnetlink_bind+0x80/0x80 [ 689.535014][ T29] ? mark_lock+0x94/0x320 [ 689.539385][ T29] ? __lock_acquire+0x1273/0x7d40 [ 689.544560][ T29] ? __kernel_text_address+0xd/0x30 [ 689.549790][ T29] ? mark_lock+0x94/0x320 [ 689.554205][ T29] ? mark_lock+0x94/0x320 [ 689.558554][ T29] ? __lock_acquire+0x1273/0x7d40 [ 689.563635][ T29] ? kmalloc_reserve+0x95/0x240 [ 689.568498][ T29] ? verify_lock_unused+0x140/0x140 [ 689.573756][ T29] ? verify_lock_unused+0x140/0x140 [ 689.578991][ T29] netlink_rcv_skb+0x241/0x4d0 [ 689.583827][ T29] ? rtnetlink_bind+0x80/0x80 [ 689.588528][ T29] ? netlink_ack+0x1180/0x1180 [ 689.593395][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 689.598435][ T29] ? net_generic+0x1e/0x240 [ 689.603031][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 689.608270][ T29] netlink_unicast+0x751/0x8d0 [ 689.613051][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 689.617889][ T29] ? netlink_getsockopt+0x590/0x590 [ 689.623105][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 689.628107][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 689.633464][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 689.638945][ T29] __sys_sendto+0x4a9/0x6b0 [ 689.643532][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 689.648932][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 689.654129][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 689.660139][ T29] ? lock_chain_count+0x20/0x20 [ 689.665061][ T29] ? lock_chain_count+0x20/0x20 [ 689.669928][ T29] __x64_sys_sendto+0xde/0xf0 [ 689.674689][ T29] do_syscall_64+0x55/0xb0 [ 689.679119][ T29] ? clear_bhb_loop+0x40/0x90 [ 689.683982][ T29] ? clear_bhb_loop+0x40/0x90 [ 689.688898][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.694893][ T29] RIP: 0033:0x7f1891b5d68e [ 689.699329][ T29] RSP: 002b:00007ffc24b68ae8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 689.707781][ T29] RAX: ffffffffffffffda RBX: 0000555568af6500 RCX: 00007f1891b5d68e [ 689.715823][ T29] RDX: 0000000000000028 RSI: 00007f1892944670 RDI: 0000000000000003 [ 689.723820][ T29] RBP: 0000000000000001 R08: 00007ffc24b68b64 R09: 000000000000000c [ 689.731782][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 689.739793][ T29] R13: 0000000000000000 R14: 00007f1892944670 R15: 0000000000000000 [ 689.747839][ T29] [ 689.750866][ T29] INFO: task syz-executor:13555 blocked for more than 145 seconds. [ 689.758805][ T29] Not tainted syzkaller #0 [ 689.769006][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.777759][ T29] task:syz-executor state:D stack:25320 pid:13555 ppid:1 flags:0x00004004 [ 689.787019][ T29] Call Trace: [ 689.790305][ T29] [ 689.793317][ T29] __schedule+0x1553/0x45a0 [ 689.797864][ T29] ? asan.module_dtor+0x20/0x20 [ 689.802744][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 689.807554][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 689.813030][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 689.819253][ T29] schedule+0xbd/0x170 [ 689.823376][ T29] schedule_preempt_disabled+0x13/0x20 [ 689.828852][ T29] __mutex_lock+0x6a9/0xcc0 [ 689.833423][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 689.838116][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 689.843267][ T29] ? mutex_lock_nested+0x20/0x20 [ 689.848243][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 689.853441][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 689.858407][ T29] ? rtnetlink_bind+0x80/0x80 [ 689.863093][ T29] ? mark_lock+0x94/0x320 [ 689.867467][ T29] ? __lock_acquire+0x1273/0x7d40 [ 689.872507][ T29] ? __kernel_text_address+0xd/0x30 [ 689.877875][ T29] ? mark_lock+0x94/0x320 [ 689.882222][ T29] ? mark_lock+0x94/0x320 [ 689.886634][ T29] ? __lock_acquire+0x1273/0x7d40 [ 689.891691][ T29] ? kmalloc_reserve+0x95/0x240 [ 689.896603][ T29] ? verify_lock_unused+0x140/0x140 [ 689.901822][ T29] ? verify_lock_unused+0x140/0x140 [ 689.907190][ T29] netlink_rcv_skb+0x241/0x4d0 [ 689.911976][ T29] ? rtnetlink_bind+0x80/0x80 [ 689.916737][ T29] ? netlink_ack+0x1180/0x1180 [ 689.921535][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 689.926774][ T29] ? net_generic+0x1e/0x240 [ 689.931435][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 689.936716][ T29] netlink_unicast+0x751/0x8d0 [ 689.941514][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 689.946338][ T29] ? netlink_getsockopt+0x590/0x590 [ 689.951560][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 689.956588][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 689.961888][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 689.967406][ T29] __sys_sendto+0x4a9/0x6b0 [ 689.971918][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 689.977358][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 689.982406][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 689.988533][ T29] ? lock_chain_count+0x20/0x20 [ 689.993445][ T29] ? lock_chain_count+0x20/0x20 [ 689.998315][ T29] __x64_sys_sendto+0xde/0xf0 [ 690.003002][ T29] do_syscall_64+0x55/0xb0 [ 690.007482][ T29] ? clear_bhb_loop+0x40/0x90 [ 690.012169][ T29] ? clear_bhb_loop+0x40/0x90 [ 690.016919][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.022827][ T29] RIP: 0033:0x7fe689b5d68e [ 690.027304][ T29] RSP: 002b:00007ffd4dc3d758 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 690.035793][ T29] RAX: ffffffffffffffda RBX: 0000555584806500 RCX: 00007fe689b5d68e [ 690.043816][ T29] RDX: 0000000000000028 RSI: 00007fe68a944670 RDI: 0000000000000003 [ 690.051807][ T29] RBP: 0000000000000001 R08: 00007ffd4dc3d7d4 R09: 000000000000000c [ 690.059846][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 690.067853][ T29] R13: 0000000000000000 R14: 00007fe68a944670 R15: 0000000000000000 [ 690.075903][ T29] [ 690.078929][ T29] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 690.088019][ T29] [ 690.088019][ T29] Showing all locks held in the system: [ 690.095900][ T29] 1 lock held by khungtaskd/29: [ 690.100760][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 690.110685][ T29] 3 locks held by kworker/u4:2/42: [ 690.115866][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 690.127618][ T29] #1: ffffc90000b37d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 690.138660][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 690.147725][ T29] 2 locks held by getty/5526: [ 690.152403][ T29] #0: ffff88814c3a40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 690.162251][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 690.172408][ T29] 3 locks held by kworker/1:4/5812: [ 690.177658][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 690.188690][ T29] #1: ffffc9000474fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 690.199739][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 690.210330][ T29] 3 locks held by kworker/1:7/5837: [ 690.215590][ T29] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 690.228006][ T29] #1: ffffc900049bfd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 690.239132][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 690.248959][ T29] 3 locks held by kworker/u4:16/8241: [ 690.254392][ T29] #0: ffff88802c959138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 690.266062][ T29] #1: ffffc900033c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 690.279800][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 690.289384][ T29] 4 locks held by kworker/u4:22/8253: [ 690.294825][ T29] 1 lock held by syz.1.2822/13521: [ 690.299942][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 690.308973][ T29] 1 lock held by syz.0.2821/13524: [ 690.314306][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0x115/0x600 [ 690.324674][ T29] 1 lock held by syz.3.2824/13530: [ 690.329810][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.339570][ T29] 1 lock held by syz.2.2825/13536: [ 690.345018][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x83c/0x1140 [ 690.354105][ T29] 1 lock held by syz-executor/13543: [ 690.359407][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.368902][ T29] 1 lock held by syz-executor/13548: [ 690.374268][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.383755][ T29] 1 lock held by syz-executor/13550: [ 690.389079][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.398602][ T29] 1 lock held by syz-executor/13555: [ 690.403925][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.413434][ T29] 1 lock held by syz-executor/13569: [ 690.418733][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.428327][ T29] 1 lock held by syz-executor/13572: [ 690.433685][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.443127][ T29] 1 lock held by syz-executor/13574: [ 690.448461][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.457961][ T29] 1 lock held by syz-executor/13578: [ 690.463298][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.472736][ T29] 1 lock held by syz-executor/13589: [ 690.478094][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.487700][ T29] 1 lock held by syz-executor/13592: [ 690.492980][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.502430][ T29] 1 lock held by syz-executor/13594: [ 690.507759][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.517240][ T29] 1 lock held by syz-executor/13599: [ 690.522547][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 690.531993][ T29] [ 690.534473][ T29] ============================================= [ 690.534473][ T29] [ 690.542903][ T29] NMI backtrace for cpu 0 [ 690.547237][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 690.554442][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.564506][ T29] Call Trace: [ 690.567803][ T29] [ 690.570735][ T29] dump_stack_lvl+0x18c/0x250 [ 690.575412][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 690.580566][ T29] ? show_regs_print_info+0x20/0x20 [ 690.585774][ T29] ? load_image+0x420/0x420 [ 690.590284][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 690.595223][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 690.601371][ T29] ? _printk+0xde/0x130 [ 690.605519][ T29] ? load_image+0x420/0x420 [ 690.610013][ T29] ? load_image+0x420/0x420 [ 690.614517][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 690.620589][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 690.626570][ T29] watchdog+0xf3d/0xf80 [ 690.630729][ T29] ? watchdog+0x1e1/0xf80 [ 690.635062][ T29] kthread+0x2fa/0x390 [ 690.639122][ T29] ? hungtask_pm_notify+0x90/0x90 [ 690.644141][ T29] ? kthread_blkcg+0xd0/0xd0 [ 690.648723][ T29] ret_from_fork+0x48/0x80 [ 690.653568][ T29] ? kthread_blkcg+0xd0/0xd0 [ 690.658150][ T29] ret_from_fork_asm+0x11/0x20 [ 690.662918][ T29] [ 690.666143][ T29] Sending NMI from CPU 0 to CPUs 1: [ 690.671374][ C1] NMI backtrace for cpu 1 [ 690.671383][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 690.671397][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.671405][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 690.671429][ C1] Code: 88 1f 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 e4 3f 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 690.671441][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 690.671454][ C1] RAX: 848a63e0bcfce900 RBX: ffffffff8162af3d RCX: 848a63e0bcfce900 [ 690.671465][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 690.671475][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 690.671487][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 690.671497][ C1] R13: dffffc0000000000 R14: 1ffff110037cc780 R15: 0000000000000000 [ 690.671507][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 690.671519][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.671529][ C1] CR2: 000055858ef92000 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 690.671541][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 690.671549][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 690.671558][ C1] Call Trace: [ 690.671564][ C1] [ 690.671568][ C1] default_idle+0x13/0x20 [ 690.671587][ C1] default_idle_call+0x6c/0xa0 [ 690.671607][ C1] do_idle+0x33d/0x590 [ 690.671626][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 690.671641][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 690.671659][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 690.671686][ C1] cpu_startup_entry+0x43/0x60 [ 690.671702][ C1] start_secondary+0xee/0xf0 [ 690.671716][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 690.671742][ C1] [ 690.713238][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 690.713252][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 690.713268][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.713285][ T29] Call Trace: [ 690.713292][ T29] [ 690.713300][ T29] dump_stack_lvl+0x18c/0x250 [ 690.713326][ T29] ? show_regs_print_info+0x20/0x20 [ 690.713347][ T29] ? load_image+0x420/0x420 [ 690.713381][ T29] panic+0x2dc/0x730 [ 690.713402][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 690.713423][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 690.713443][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 690.713465][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 690.713491][ T29] watchdog+0xf7c/0xf80 [ 690.713511][ T29] ? watchdog+0x1e1/0xf80 [ 690.713536][ T29] kthread+0x2fa/0x390 [ 690.713556][ T29] ? hungtask_pm_notify+0x90/0x90 [ 690.713575][ T29] ? kthread_blkcg+0xd0/0xd0 [ 690.713591][ T29] ret_from_fork+0x48/0x80 [ 690.713608][ T29] ? kthread_blkcg+0xd0/0xd0 [ 690.713624][ T29] ret_from_fork_asm+0x11/0x20 [ 690.713655][ T29] [ 690.720049][ T29] Kernel Offset: disabled [ 690.971664][ T29] Rebooting in 86400 seconds..