last executing test programs: 18.821602631s ago: executing program 0 (id=714): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095001800000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x100000, 0x8, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) (async) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) r4 = socket$kcm(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x1b, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x11b, 0x6, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x9, 0x6, 0x63, 0x0, 0x10000, 0x1110, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbf7, 0x4, @perf_config_ext={0xd, 0x7f}, 0x4140, 0x8, 0x80000000, 0x8, 0x3, 0xffff, 0xb448, 0x0, 0x321, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) openat$cgroup_ro(r7, &(0x7f00000005c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x20e}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) 18.537723449s ago: executing program 2 (id=718): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x25, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2b, 0x1, 0x0) 18.53001494s ago: executing program 3 (id=720): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x2, &(0x7f0000000080)=@raw=[@alu={0x7, 0x0, 0x7, 0x6, 0x4, 0x8000000000000008, 0xfffffffffffffff0}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x101, 0x98, &(0x7f0000000240)=""/152, 0x41000, 0x9, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0x1, 0x4, 0x442}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xc}, {0x2, 0x2, 0xb, 0x9}], 0x10, 0x8000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r3, r5}, 0xc) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r7 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) recvmsg$kcm(r7, &(0x7f0000000dc0)={&(0x7f0000000600)=@nfc, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000680)=""/177, 0xb1}, {&(0x7f0000000740)=""/96, 0x60}, {&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/132, 0x84}], 0x5, &(0x7f0000000d00)=""/156, 0x9c}, 0x22) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003001b00850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r10}, 0xc) r11 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x1, 0x12) r12 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x1, 0x12) 18.430688436s ago: executing program 0 (id=721): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd291f11f8b66e28a}, 0x800, 0xca, 0x200002, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a) 18.289671986s ago: executing program 2 (id=722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001280)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x9, 0x0, 0x0, 0x7, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x80a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x7, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) socketpair(0x26, 0x5, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030711a5268c019e14f088a847e0ffff00124000632177fbac141416e000030a94029f02", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.176178864s ago: executing program 0 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100000400030000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0x0, 0x5c, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}, 0x40000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) syz_clone(0x81200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 17.957641498s ago: executing program 3 (id=725): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x4}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}, {0x0}], 0x2, &(0x7f0000000280)="8ade", 0x2, 0x840}, 0x8004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7030000000000008500000087000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x7}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f00000002c0), &(0x7f0000000200)=""/20}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x7, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x1, 0x0, 0x2, 0x6, 0x18, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) 17.705345616s ago: executing program 0 (id=727): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a) 17.48176707s ago: executing program 3 (id=728): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd291f11f8b66e28a}, 0x800, 0xca, 0x200002, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a) 17.457735512s ago: executing program 2 (id=729): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x82c, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r1}, &(0x7f0000000d80), &(0x7f0000000dc0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34a, 0xe633}, 0x0, 0x40080000001, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ffffdfe}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) r9 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000000000018100000", @ANYRES32, @ANYBLOB="00000000000ebcc10764634f", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000000000095000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000240000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffb5}, 0x23) sendmsg$kcm(r9, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg$inet(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014) sendmsg(r9, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000005800)={&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f00000056c0)=[{&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/4096, 0x1000}], 0x4, &(0x7f0000005700)=""/193, 0xc1}, 0x141) 17.34567037s ago: executing program 0 (id=730): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'net_cls'}, {0x2d, 'blkio'}, {0x2d, 'net_prio'}, {0x2d, 'cpuacct'}, {0x0, 'cpu'}, {0x2b, 'net_cls'}]}, 0x31) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 17.261786405s ago: executing program 3 (id=731): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="180000006a007ffa9e", 0x9}, {&(0x7f0000000740)="64cabf2dfb58fc021d6bd0dc7fa741", 0xf}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1b000000180081064e81f782db4cb904021d0800fd007c05e8fe55", 0x1b}], 0x1}, 0x0) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) 17.202650519s ago: executing program 1 (id=732): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd291f11f8b66e28a}, 0x800, 0xca, 0x200002, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a) 16.933192208s ago: executing program 1 (id=733): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x5, 0x5, 0x3, 0x0, 0x400, 0x200, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x108000, 0x8, 0x68c, 0x9, 0x7, 0x510, 0x9, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xa, r0, 0x0) 16.857709873s ago: executing program 2 (id=734): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xb6, &(0x7f0000000200)=""/182, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000)=r3, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x107}], 0x1}, 0x4000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0) 16.771945168s ago: executing program 3 (id=735): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x541b, 0xf0ff1f00000000) r1 = socket$kcm(0xa, 0x1, 0x106) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/4, 0x4}, {&(0x7f0000000680)=""/204, 0xcc}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x4, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x22) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x25, 0x1, 0x3, 0xfffffffe}, {0x28}, {0x6, 0x6}]}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0xff7b) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$kcm(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x222200, 0x0) close(0x4) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x4, 0x1, {0xa, 0x4e24, 0x8, @remote, 0x8001}}}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000200000000000000000000010500000010000000000054a9c076d167c77a9d1c5570ffe43d7033526078ede0eb6bd39c98450786cfcc91ba9c30da4787"], 0x0, 0x2a}, 0x28) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8948, &(0x7f0000000f80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\xdf\xda^\xcd\fb!\btp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\x03&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r\b\x00\x00\x00_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fv\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xe2\x8abci.\x8eH\xa3\xc2\x94E\x1d g\x99\xc7\xeb\xf9\x84\xd5\x1dQ\xef\xad)\xc3n\xf3\xf2T@\xcdB\xdfw\x8c\xd4k\xcf\xe3\xd6\xe8\xdc\xdb\xcb\x84\xb9Wb\xca\xdd\xa2\x95\x19{\xd2\xe7\x91\xe5\x1a\x98\x12\xeb\xd1\f\xb1\xea\xc2S\x17\xfaYq\xfa\x81\x03wO\f83a\xf5wf\xe0\x90\xde5\xf1\x10A\b\xb0\xbaT}\xcdj\xc4\x7fj\\\xd3X\xfa!1t\xfan\xa3 |\xc4\x007\xca\xc3\x8d\xf8\xe66\xf5m6\x96\xfa\xaaY\xd0\xc0\xb7\x1d\x1d\xfe\xfa\xc0\xfaG\xa8J\xcd\x8e\x94\xb1\x14\x9enm&\xe8,,\x95\xe6^\xb5\'\x7f\\T\xc7\x11\xa9\xddX\xef\\[t\xe0\xc7\xf2\xb5\xbf\xbf\x15\xecR?\bB)\xec\'V[\xfc\xf5s\xe6u\xdc)\xbad\xce\xee\xd8`7\xf9\x12N~\xde\xe8,\xff_nG\xafS{Q\x91!d-\xf0\xbb\xd01\xf9\x86C\xc7\xb3\xd4\xa4>\xf2A,Q\x7f\x8c\x91\xc7t\x19\xb5') sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x2000000, @dev, 0x39}, 0x80, 0x0}, 0xe07e872420dfefca) 16.74741716s ago: executing program 1 (id=736): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) close(r0) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:* '], 0x9) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRESDEC=r3], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="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", 0x12e}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x627e8a9d28790cb3, 0x80, 0xf2, 0x0, 0x2, 0xa, 0x0, 0x2b5b, 0x8001, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x8, 0x3ff}, 0xc22, 0x4, 0x338d, 0x3, 0x97, 0x0, 0x9, 0x0, 0x7, 0x0, 0x92}, r6, 0x10, r5, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="679bff2be0a341b07a5fbaf6b6a96bbf352d0d6dc8665147b17d1843632aafbaac4160c562d362bfb2cfdddfab625db9e0f4db399d3f157e6b6de2f6848b1a9c31fc68c2c0261a51e025a3c36248287b39279583ba60d79fd5754ec1eac82ad9ba8102b4c8aa7c19d0ee29fcad139b537af4eb9cb1a7458f4c9c5b34c8425725fcd355b55c90f1fb479145130118bb5da2246882af0c2c0a09244f4a544c97b1fda6a5d053ced5b5a37074614c2894", @ANYBLOB="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", @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="000000001000000000000060dbf4d94c0000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r7}, &(0x7f00000001c0), &(0x7f0000000600)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000020300000000000055212857e0000000000b03000000000000000000000902"], 0x0, 0x3e}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) 16.481706928s ago: executing program 1 (id=737): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) sendmsg$unix(r0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="5c00000013006bcd9e3fe3dc4e48aa31086b87123a0000001ffdff0000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 16.4485051s ago: executing program 2 (id=738): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a) 16.3085504s ago: executing program 2 (id=739): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x40000000, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000400000002000000000000110300000000000000000000c03d00000000020100000002000000000000080200000000005f006d479f38241e625fa2dbcf145aef8710851ff631c2a2c4ea468fca3e8da837d653403658f0c3647ce99ad39cf0fe412983614453c9bd10110d531dd0276a1b929c9eda718708cdcf0d9a50981ac2f4aacca138889e35a22747080618a2a15d69e032f292826ddf"], 0x0, 0x44}, 0x20) r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x1}, 0x1a8cc, 0x3, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x10220, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xffffffffffffffbc, 0x2}, 0x90020, 0x5, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x2, 0x0, 0x20008}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x4a121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000200000000005875e470300085000000a800000085000000d00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0x0, 0x2, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188006ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000007c0)=[{}], 0x8, 0x32, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x8, '\x00', r6, r0, 0x4, 0x3, 0x2}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x2f69, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)=r2}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x5, 0x6, 0x1, 0x1, 0x2, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r12, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r16 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r17 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0x10, &(0x7f0000000600)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8583}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x9}, @exit, @exit], &(0x7f0000000300)='syzkaller\x00', 0x1eb0ffeb, 0x0, 0x0, 0x1e00, 0x22, '\x00', r14, @fallback=0x13, r15, 0x8, &(0x7f0000000940)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0x8, 0x2, 0x4}, 0x10, 0x0, r13, 0x0, &(0x7f0000000e40)=[r16, r17], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_lsm={0x1d, 0xb, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x15}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x5, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r10}]}, &(0x7f0000001240)='GPL\x00', 0x10001, 0x4f, &(0x7f0000001280)=""/79, 0x41000, 0x0, '\x00', r14, 0x1b, r0, 0x8, &(0x7f0000001300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001340)={0x0, 0xc, 0xffffffff}, 0x10, r7, 0x0, 0x3, &(0x7f0000001380)=[0x1, 0xffffffffffffffff, r11], &(0x7f00000013c0)=[{0x4, 0x2, 0x1, 0x1}, {0x0, 0x1, 0x10, 0x9}, {0x5, 0x3, 0x7, 0xa}], 0x10, 0xffffff37}, 0x94) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x2, 0x1}, 0x50) r19 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x181d, '\x00', 0x0, r0, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) r20 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x2f, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffab, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x400}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x3c, &(0x7f00000006c0)=""/60, 0x40f00, 0x29, '\x00', r6, 0x0, r0, 0x8, &(0x7f0000000a00)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0xa, 0x5, 0xee9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000f80)=[r8, r9, r10, r11, r18, r19, r20], &(0x7f0000000fc0)=[{0x4, 0x4, 0x8}, {0x2, 0x5, 0x1}, {0x2, 0x2, 0xa, 0x3}, {0x5, 0x5, 0xd, 0xf}, {0x5, 0x3, 0x7, 0x2}, {0x1, 0x3, 0x10, 0xa}, {0x4, 0x4, 0xc, 0xe}, {0x5, 0x1, 0x3, 0xb}, {0x3, 0x5, 0x6, 0x3}], 0x10, 0x40}, 0x94) 16.249632713s ago: executing program 0 (id=740): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x3}, 0x100088, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x6, 0x1, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x23fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0xa, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000081005d11", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.214860146s ago: executing program 3 (id=741): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd291f11f8b66e28a}, 0x800, 0xca, 0x200002, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a) 16.097105694s ago: executing program 1 (id=742): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000002040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f00000000c0)="90b9c6bb9bdb88503b6cdc61e1689386c5ba0119b8530e25558174862ae44dc4e78c387a1bea6d21ba853e2e020473e367677b09f1f325707ccb316e77c9c65fd6f426c048d1ecf38fd53b", &(0x7f0000000200)=""/109}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f00000000c0)="90b9c6bb9bdb88503b6cdc61e1689386c5ba0119b8530e25558174862ae44dc4e78c387a1bea6d21ba853e2e020473e367677b09f1f325707ccb316e77c9c65fd6f426c048d1ecf38fd53b", &(0x7f0000000200)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) 15.977719472s ago: executing program 1 (id=743): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3daa0080000000007110110000000000950000f55872060093e38d6b8a44b0bcd14777c02d4f14f0e0b86ec134032f35"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000020040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r0}, 0x38) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffe48, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x0, 0x10000, 0x947a, 0x1022, r0, 0x0, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1}, 0x50) (async) r5 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) (async, rerun: 64) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) (rerun: 64) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = openat$cgroup_procs(r8, 0x0, 0x2, 0x0) write$cgroup_pid(r9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, 0x0, 0x0) 411.346352ms ago: executing program 32 (id=740): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x3}, 0x100088, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x6, 0x1, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x23fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0xa, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000081005d11", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 269.908841ms ago: executing program 33 (id=743): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3daa0080000000007110110000000000950000f55872060093e38d6b8a44b0bcd14777c02d4f14f0e0b86ec134032f35"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000020040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095000000000000002f81c461b3fea834ceb0e17d802cfb227e656a3698c792bd22555161b0010095448e9f7024b45ffcd2ce278009682dc8f7c867b177ed5bd50b92aedef35b6cd87b56690b4c96f63ab02174911d5e51b76d2c31b8bece7b0f841f393c401d8f51383f0f28d4c00fa2149870f1779f204103dbebff2a0e292b42f01b0bb114fa6e1889a6437285a0c9f00c4245e4d3524af00636736e812558294430bf4b365e0a9c468c9eb4977fb1311404a36503e63d66ddcf9b8e1035383b90de09d000c223ffb7f13639e3ac52b248f92d041959c1f7985eb94aad8c0adf4e8730313d1b02662c6847a9851f40a969486ebbe7bfcb5b28fc7dbe1bb80c4a2c18a53fecc51e51de59049b0400000000000000394000000000000000d27022ca2e6e8190f483d0da08eef67837ed671c2154513111dbc0ee58c70889a1c6306b98300a49147242d3f8a6e4aea9b51d0e182153e1283089c3b42cca072dce78b07806950d2b5fd0b448fdf18269cbe47fae4cedeb356536d94534260fa7d6e6b7aa30d8dd5c8261d4ef52da9f0894bb3993edafc976a143adbe9731dd41d181a9c200000000000000000722d6bea9c421a5e3cee8a113092129714154cc28d52373ba50325730d592cfd68cd128a770f41a34b4a0b9af61eab15e7d0a24a11be1"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r0}, 0x38) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffe48, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x0, 0x10000, 0x947a, 0x1022, r0, 0x0, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1}, 0x50) (async) r5 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) (async, rerun: 64) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) (rerun: 64) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = openat$cgroup_procs(r8, 0x0, 0x2, 0x0) write$cgroup_pid(r9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, 0x0, 0x0) 131.64337ms ago: executing program 34 (id=739): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x40000000, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000400000002000000000000110300000000000000000000c03d00000000020100000002000000000000080200000000005f006d479f38241e625fa2dbcf145aef8710851ff631c2a2c4ea468fca3e8da837d653403658f0c3647ce99ad39cf0fe412983614453c9bd10110d531dd0276a1b929c9eda718708cdcf0d9a50981ac2f4aacca138889e35a22747080618a2a15d69e032f292826ddf"], 0x0, 0x44}, 0x20) r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x1}, 0x1a8cc, 0x3, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x10220, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xffffffffffffffbc, 0x2}, 0x90020, 0x5, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x2, 0x0, 0x20008}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x4a121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x400, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000200000000005875e470300085000000a800000085000000d00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0x0, 0x2, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188006ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000007c0)=[{}], 0x8, 0x32, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x8, '\x00', r6, r0, 0x4, 0x3, 0x2}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x2f69, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)=r2}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x5, 0x6, 0x1, 0x1, 0x2, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r12, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r16 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r17 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0x10, &(0x7f0000000600)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8583}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x9}, @exit, @exit], &(0x7f0000000300)='syzkaller\x00', 0x1eb0ffeb, 0x0, 0x0, 0x1e00, 0x22, '\x00', r14, @fallback=0x13, r15, 0x8, &(0x7f0000000940)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0x8, 0x2, 0x4}, 0x10, 0x0, r13, 0x0, &(0x7f0000000e40)=[r16, r17], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_lsm={0x1d, 0xb, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x15}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x5, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r10}]}, &(0x7f0000001240)='GPL\x00', 0x10001, 0x4f, &(0x7f0000001280)=""/79, 0x41000, 0x0, '\x00', r14, 0x1b, r0, 0x8, &(0x7f0000001300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001340)={0x0, 0xc, 0xffffffff}, 0x10, r7, 0x0, 0x3, &(0x7f0000001380)=[0x1, 0xffffffffffffffff, r11], &(0x7f00000013c0)=[{0x4, 0x2, 0x1, 0x1}, {0x0, 0x1, 0x10, 0x9}, {0x5, 0x3, 0x7, 0xa}], 0x10, 0xffffff37}, 0x94) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x2, 0x1}, 0x50) r19 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x181d, '\x00', 0x0, r0, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) r20 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x2f, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffab, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x400}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x3c, &(0x7f00000006c0)=""/60, 0x40f00, 0x29, '\x00', r6, 0x0, r0, 0x8, &(0x7f0000000a00)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0xa, 0x5, 0xee9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000f80)=[r8, r9, r10, r11, r18, r19, r20], &(0x7f0000000fc0)=[{0x4, 0x4, 0x8}, {0x2, 0x5, 0x1}, {0x2, 0x2, 0xa, 0x3}, {0x5, 0x5, 0xd, 0xf}, {0x5, 0x3, 0x7, 0x2}, {0x1, 0x3, 0x10, 0xa}, {0x4, 0x4, 0xc, 0xe}, {0x5, 0x1, 0x3, 0xb}, {0x3, 0x5, 0x6, 0x3}], 0x10, 0x40}, 0x94) 0s ago: executing program 35 (id=741): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd291f11f8b66e28a}, 0x800, 0xca, 0x200002, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 72.121123][ T5754] cgroup: Unknown subsys name 'net' [ 72.263688][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.942339][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.821306][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.835627][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.847246][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.856112][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.864260][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.872371][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.881417][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.887763][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.888700][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.899179][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.904099][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.911907][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.918873][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.925590][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.932956][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.938231][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.953011][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.953178][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.969275][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.977473][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.986896][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.016788][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.033966][ T5081] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.046898][ T5081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.468259][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 76.525970][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 76.613750][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 76.698370][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.709373][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.717303][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.724834][ T5767] bridge_slave_0: entered allmulticast mode [ 76.732015][ T5767] bridge_slave_0: entered promiscuous mode [ 76.751062][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.758227][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.765336][ T5768] bridge_slave_0: entered allmulticast mode [ 76.772884][ T5768] bridge_slave_0: entered promiscuous mode [ 76.787979][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.795202][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.802617][ T5768] bridge_slave_1: entered allmulticast mode [ 76.810544][ T5768] bridge_slave_1: entered promiscuous mode [ 76.818487][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.825635][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.833122][ T5767] bridge_slave_1: entered allmulticast mode [ 76.840225][ T5767] bridge_slave_1: entered promiscuous mode [ 76.922986][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.937564][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.951884][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.984447][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.041634][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.049250][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.058606][ T5766] bridge_slave_0: entered allmulticast mode [ 77.065384][ T5766] bridge_slave_0: entered promiscuous mode [ 77.107727][ T5768] team0: Port device team_slave_0 added [ 77.114253][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.121894][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.129173][ T5766] bridge_slave_1: entered allmulticast mode [ 77.135987][ T5766] bridge_slave_1: entered promiscuous mode [ 77.143532][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.152835][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.160482][ T5773] bridge_slave_0: entered allmulticast mode [ 77.169783][ T5773] bridge_slave_0: entered promiscuous mode [ 77.180179][ T5767] team0: Port device team_slave_0 added [ 77.186339][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.194283][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.201763][ T5773] bridge_slave_1: entered allmulticast mode [ 77.209537][ T5773] bridge_slave_1: entered promiscuous mode [ 77.217379][ T5768] team0: Port device team_slave_1 added [ 77.243445][ T5767] team0: Port device team_slave_1 added [ 77.303500][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.310702][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.336838][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.360059][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.369858][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.397367][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.411098][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.424072][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.431306][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.458421][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.480342][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.497659][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.504655][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.531301][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.544962][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.571613][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.622701][ T5766] team0: Port device team_slave_0 added [ 77.639028][ T5773] team0: Port device team_slave_0 added [ 77.657773][ T5766] team0: Port device team_slave_1 added [ 77.684009][ T5773] team0: Port device team_slave_1 added [ 77.725207][ T5767] hsr_slave_0: entered promiscuous mode [ 77.731720][ T5767] hsr_slave_1: entered promiscuous mode [ 77.762263][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.769733][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.796666][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.829062][ T5768] hsr_slave_0: entered promiscuous mode [ 77.835906][ T5768] hsr_slave_1: entered promiscuous mode [ 77.842721][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.850705][ T5768] Cannot create hsr debugfs directory [ 77.857599][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.864652][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.890641][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.902386][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.909758][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.935921][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.970350][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.980100][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.006462][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.036640][ T5775] Bluetooth: hci3: command tx timeout [ 78.042370][ T5775] Bluetooth: hci1: command tx timeout [ 78.068603][ T5773] hsr_slave_0: entered promiscuous mode [ 78.075498][ T5773] hsr_slave_1: entered promiscuous mode [ 78.082644][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.090644][ T5773] Cannot create hsr debugfs directory [ 78.107144][ T5775] Bluetooth: hci0: command tx timeout [ 78.107177][ T5081] Bluetooth: hci2: command tx timeout [ 78.141042][ T5766] hsr_slave_0: entered promiscuous mode [ 78.148160][ T5766] hsr_slave_1: entered promiscuous mode [ 78.154492][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.162151][ T5766] Cannot create hsr debugfs directory [ 78.554804][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.567597][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.578110][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.590427][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.652167][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.685289][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.695164][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.710011][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.813556][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.826023][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.864268][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.898660][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.940084][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.966662][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.977626][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.992766][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.006333][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.047517][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.060010][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.094122][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.101582][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.123941][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.169722][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.176978][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.190657][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.197894][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.255859][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.263148][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.381989][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.398281][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.441669][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.482608][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.520501][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.527778][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.559852][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.567779][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.593156][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.600583][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.650788][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.658290][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.852284][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.952277][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.005153][ T5767] veth0_vlan: entered promiscuous mode [ 80.070671][ T5767] veth1_vlan: entered promiscuous mode [ 80.107628][ T5775] Bluetooth: hci1: command tx timeout [ 80.107911][ T5081] Bluetooth: hci3: command tx timeout [ 80.190804][ T5081] Bluetooth: hci0: command tx timeout [ 80.190815][ T5775] Bluetooth: hci2: command tx timeout [ 80.203340][ T5768] veth0_vlan: entered promiscuous mode [ 80.222321][ T5767] veth0_macvtap: entered promiscuous mode [ 80.245728][ T5767] veth1_macvtap: entered promiscuous mode [ 80.283288][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.301471][ T5768] veth1_vlan: entered promiscuous mode [ 80.327455][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.355591][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.377978][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.393719][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.403433][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.415305][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.424350][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.463563][ T5768] veth0_macvtap: entered promiscuous mode [ 80.520510][ T5768] veth1_macvtap: entered promiscuous mode [ 80.601323][ T5773] veth0_vlan: entered promiscuous mode [ 80.607539][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.615628][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.644483][ T5773] veth1_vlan: entered promiscuous mode [ 80.689021][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.705459][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.720555][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.738729][ T5766] veth0_vlan: entered promiscuous mode [ 80.755489][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.765344][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.777984][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.785854][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.797855][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.812645][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.822307][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.832130][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.841255][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.862072][ T5766] veth1_vlan: entered promiscuous mode [ 80.942363][ T5773] veth0_macvtap: entered promiscuous mode [ 81.003944][ T5773] veth1_macvtap: entered promiscuous mode [ 81.032562][ T5766] veth0_macvtap: entered promiscuous mode [ 81.064463][ T5766] veth1_macvtap: entered promiscuous mode [ 81.154486][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.178301][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.191123][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.201706][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.217863][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.243765][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.264456][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.275443][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.286406][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.296236][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.307221][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.319367][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.339585][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.357680][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.369928][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.387179][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.404689][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.425387][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.436765][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.444711][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.456640][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.471078][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.482349][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.492617][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.503578][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.515347][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.541429][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.552413][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.561541][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.571090][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.606413][ C1] hrtimer: interrupt took 66622 ns [ 81.615930][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.631448][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.641057][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.650355][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.717712][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.727316][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.187080][ T5081] Bluetooth: hci3: command tx timeout [ 82.192635][ T5081] Bluetooth: hci1: command tx timeout [ 82.229081][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.266589][ T5775] Bluetooth: hci2: command tx timeout [ 82.280582][ T5775] Bluetooth: hci0: command tx timeout [ 82.295468][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.399509][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.416580][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.534862][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.559858][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.657230][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.665148][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.550445][ T5847] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 83.592197][ T5847] pim6reg0: owner set to 0 [ 83.683979][ T5855] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.282333][ T5775] Bluetooth: hci1: command tx timeout [ 84.287900][ T5081] Bluetooth: hci3: command tx timeout [ 84.322767][ T5855] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 84.383019][ T5855] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.396936][ T5775] Bluetooth: hci0: command tx timeout [ 84.402486][ T5775] Bluetooth: hci2: command tx timeout [ 84.511624][ T5855] bond0: entered promiscuous mode [ 84.564046][ T5855] bond_slave_0: entered promiscuous mode [ 84.587388][ T5855] bond_slave_1: entered promiscuous mode [ 84.593721][ T5855] bridge0: port 3(bond0) entered blocking state [ 84.639283][ T5855] bridge0: port 3(bond0) entered disabled state [ 84.645807][ T5855] bond0: entered allmulticast mode [ 84.684715][ T5855] bond_slave_0: entered allmulticast mode [ 84.714856][ T5855] bond_slave_1: entered allmulticast mode [ 84.743850][ T5855] bridge0: port 3(bond0) entered blocking state [ 84.750550][ T5855] bridge0: port 3(bond0) entered forwarding state [ 84.984225][ T5864] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 85.632168][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.655101][ T5864] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 87.343365][ T28] cfg80211: failed to load regulatory.db [ 90.629477][ T5884] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 94.398085][ T5875] syzkaller0: entered promiscuous mode [ 94.403788][ T5875] syzkaller0: entered allmulticast mode [ 97.055606][ T5898] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.14'. [ 97.928753][ T5929] netlink: 132 bytes leftover after parsing attributes in process `syz.1.22'. [ 98.055661][ T5933] netlink: 'syz.2.21': attribute type 10 has an invalid length. [ 98.588996][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.603003][ T5933] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 98.969309][ T5952] netlink: 'syz.2.27': attribute type 8 has an invalid length. [ 98.987537][ T5952] netlink: 'syz.2.27': attribute type 6 has an invalid length. [ 99.013075][ T5952] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.27'. [ 99.568925][ T5964] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.30'. [ 100.673301][ T5974] netlink: 'syz.0.32': attribute type 13 has an invalid length. [ 100.681185][ T5974] netlink: 160 bytes leftover after parsing attributes in process `syz.0.32'. [ 103.269367][ T5971] mac80211_hwsim hwsim9 ..c: renamed from wlan1 (while UP) [ 104.239475][ T5992] netlink: 'syz.1.43': attribute type 13 has an invalid length. [ 104.700590][ T5992] netlink: 160 bytes leftover after parsing attributes in process `syz.1.43'. [ 104.729416][ T5999] mac80211_hwsim hwsim8 ..c: renamed from wlan1 (while UP) [ 105.198989][ T6009] netlink: 'syz.3.36': attribute type 10 has an invalid length. [ 107.399559][ T6009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.427284][ T6009] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 109.497025][ T6037] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.42'. [ 110.517714][ T6043] netlink: 'syz.1.47': attribute type 3 has an invalid length. [ 110.554151][ T6043] netlink: 132 bytes leftover after parsing attributes in process `syz.1.47'. [ 110.828929][ T6045] netlink: 'syz.2.48': attribute type 13 has an invalid length. [ 110.877505][ T6045] netlink: 160 bytes leftover after parsing attributes in process `syz.2.48'. [ 111.211226][ T6053] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.49'. [ 111.230870][ T6050] mac80211_hwsim hwsim3 ..c: renamed from wlan1 (while UP) [ 111.299843][ T6053] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.49'. [ 111.396718][ T6051] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.49'. [ 111.412478][ T6045] syz.2.48 (6045) used greatest stack depth: 19816 bytes left [ 111.414547][ T6056] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.49'. [ 111.517328][ T6060] netlink: 'syz.0.51': attribute type 10 has an invalid length. [ 111.550458][ T6060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.594054][ T6060] batadv0: entered promiscuous mode [ 111.600957][ T6060] batadv0: entered allmulticast mode [ 111.607288][ T6060] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 111.905662][ T6069] netlink: 'syz.2.54': attribute type 49 has an invalid length. [ 111.927369][ T37] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 111.937018][ T37] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 111.967407][ T6069] netlink: 'syz.2.54': attribute type 49 has an invalid length. [ 112.889911][ T6086] syz.2.56: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 112.936212][ T6086] CPU: 0 PID: 6086 Comm: syz.2.56 Not tainted syzkaller #0 [ 112.943499][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.953676][ T6086] Call Trace: [ 112.957070][ T6086] [ 112.960033][ T6086] dump_stack_lvl+0x18c/0x250 [ 112.964763][ T6086] ? show_regs_print_info+0x20/0x20 [ 112.970088][ T6086] ? load_image+0x420/0x420 [ 112.974680][ T6086] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 112.981149][ T6086] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 112.987711][ T6086] warn_alloc+0x246/0x340 [ 112.992110][ T6086] ? stack_trace_save+0xaa/0x100 [ 112.997184][ T6086] ? zone_watermark_ok_safe+0x230/0x230 [ 113.002780][ T6086] ? kasan_set_track+0x5f/0x70 [ 113.007585][ T6086] ? kasan_set_track+0x4e/0x70 [ 113.012379][ T6086] ? __kasan_kmalloc+0x8f/0xa0 [ 113.017178][ T6086] ? xsk_init_queue+0xad/0x100 [ 113.021984][ T6086] ? xsk_setsockopt+0x4e5/0x760 [ 113.026865][ T6086] ? do_sock_setsockopt+0x175/0x1a0 [ 113.032097][ T6086] ? __x64_sys_setsockopt+0x182/0x200 [ 113.037510][ T6086] __vmalloc_node_range+0x126/0x1330 [ 113.043102][ T6086] ? free_vm_area+0x50/0x50 [ 113.047677][ T6086] vmalloc_user+0x74/0x80 [ 113.052047][ T6086] ? xskq_create+0xbf/0x170 [ 113.056855][ T6086] xskq_create+0xbf/0x170 [ 113.061256][ T6086] xsk_init_queue+0xad/0x100 [ 113.065885][ T6086] xsk_setsockopt+0x4e5/0x760 [ 113.070611][ T6086] ? xsk_poll+0x680/0x680 [ 113.075157][ T6086] ? __fget_files+0x28/0x4b0 [ 113.079868][ T6086] ? __fget_files+0x28/0x4b0 [ 113.084588][ T6086] ? aa_sock_opt_perm+0x74/0x100 [ 113.089573][ T6086] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 113.095344][ T6086] ? security_socket_setsockopt+0x7e/0xa0 [ 113.101183][ T6086] ? xsk_poll+0x680/0x680 [ 113.105641][ T6086] do_sock_setsockopt+0x175/0x1a0 [ 113.110783][ T6086] ? __fdget+0x180/0x210 [ 113.115063][ T6086] __x64_sys_setsockopt+0x182/0x200 [ 113.120299][ T6086] do_syscall_64+0x55/0xa0 [ 113.124834][ T6086] ? clear_bhb_loop+0x40/0x90 [ 113.129546][ T6086] ? clear_bhb_loop+0x40/0x90 [ 113.134257][ T6086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.140273][ T6086] RIP: 0033:0x7f293619c819 [ 113.144722][ T6086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.164363][ T6086] RSP: 002b:00007f2936fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.172902][ T6086] RAX: ffffffffffffffda RBX: 00007f2936416270 RCX: 00007f293619c819 [ 113.180995][ T6086] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 113.188989][ T6086] RBP: 00007f2936232c91 R08: 0000000000000004 R09: 0000000000000000 [ 113.196991][ T6086] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 113.205260][ T6086] R13: 00007f2936416308 R14: 00007f2936416270 R15: 00007ffc989461b8 [ 113.213459][ T6086] [ 113.630246][ T6086] Mem-Info: [ 113.636521][ T6086] active_anon:16804 inactive_anon:0 isolated_anon:0 [ 113.636521][ T6086] active_file:9924 inactive_file:39938 isolated_file:0 [ 113.636521][ T6086] unevictable:768 dirty:111 writeback:0 [ 113.636521][ T6086] slab_reclaimable:9901 slab_unreclaimable:93028 [ 113.636521][ T6086] mapped:35605 shmem:12959 pagetables:610 [ 113.636521][ T6086] sec_pagetables:0 bounce:0 [ 113.636521][ T6086] kernel_misc_reclaimable:0 [ 113.636521][ T6086] free:1343380 free_pcp:9516 free_cma:0 [ 113.784871][ T6086] Node 0 active_anon:70616kB inactive_anon:0kB active_file:39696kB inactive_file:159548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144120kB dirty:440kB writeback:0kB shmem:53600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10852kB pagetables:2540kB sec_pagetables:0kB all_unreclaimable? no [ 113.843505][ T6086] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 113.996527][ T6086] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.221325][ T6086] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 114.232817][ T6086] Node 0 DMA32 free:1458324kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:77744kB inactive_anon:0kB active_file:39696kB inactive_file:158720kB unevictable:1536kB writepending:440kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:18332kB local_pcp:1384kB free_cma:0kB [ 114.359992][ T6086] lowmem_reserve[]: 0 0 0 0 0 [ 114.374915][ T6086] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 114.492041][ T6086] lowmem_reserve[]: 0 0 0 0 0 [ 114.558607][ T6086] Node 1 Normal free:3889284kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19392kB local_pcp:11584kB free_cma:0kB [ 114.628280][ T6086] lowmem_reserve[]: 0 0 0 0 0 [ 114.633122][ T6086] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 114.650203][ T6086] Node 0 DMA32: 405*4kB (UE) 597*8kB (UME) 243*16kB (U) 34*32kB (UE) 22*64kB (UME) 6*128kB (UME) 3*256kB (UM) 1*512kB (U) 2*1024kB (UM) 1*2048kB (U) 350*4096kB (M) = 1452524kB [ 114.678755][ T6086] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 114.716635][ T6086] Node 1 Normal: 239*4kB (UME) 37*8kB (UME) 34*16kB (UME) 68*32kB (UME) 20*64kB (UE) 4*128kB (ME) 0*256kB 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3889284kB [ 114.749063][ T6086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.773983][ T6086] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.794361][ T6086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.817218][ T6086] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.861139][ T6086] 66677 total pagecache pages [ 114.877166][ T6086] 0 pages in swap cache [ 114.886474][ T6086] Free swap = 124996kB [ 114.896639][ T6086] Total swap = 124996kB [ 114.900931][ T6086] 2097051 pages RAM [ 114.912906][ T6086] 0 pages HighMem/MovableOnly [ 114.939063][ T6086] 416926 pages reserved [ 114.943390][ T6086] 0 pages cma reserved [ 115.223311][ T6097] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.57'. [ 116.634729][ T6113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.64'. [ 117.115259][ T6122] netlink: 'syz.2.66': attribute type 21 has an invalid length. [ 117.148454][ T6122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.66'. [ 117.186635][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.66'. [ 118.827055][ T6106] delete_channel: no stack [ 119.373139][ T6136] syzkaller0: entered promiscuous mode [ 119.386523][ T6136] syzkaller0: entered allmulticast mode [ 120.430871][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 122.857708][ T6189] netlink: 'syz.2.87': attribute type 10 has an invalid length. [ 122.886890][ T6189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.87'. [ 122.901765][ T6189] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 122.916875][ T6189] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.975307][ T6189] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 124.252561][ T6217] netlink: 34899 bytes leftover after parsing attributes in process `syz.1.92'. [ 124.619175][ T6225] netlink: 76 bytes leftover after parsing attributes in process `syz.3.93'. [ 124.831661][ T6220] Illegal XDP return value 4294967274 on prog (id 98) dev N/A, expect packet loss! [ 124.856401][ T6220] netlink: 'syz.3.93': attribute type 27 has an invalid length. [ 124.875018][ T6220] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.93'. [ 125.395099][ T6237] warning: `syz.3.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.926710][ T5081] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 127.340334][ T6283] delete_channel: no stack [ 127.737735][ T6290] netlink: 'syz.1.105': attribute type 27 has an invalid length. [ 127.745845][ T6290] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.105'. [ 127.959270][ T5775] Bluetooth: hci3: command tx timeout [ 128.024754][ T6268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.074634][ T6289] netlink: 76 bytes leftover after parsing attributes in process `syz.1.105'. [ 128.866037][ T6310] netlink: 14 bytes leftover after parsing attributes in process `syz.0.109'. [ 128.899409][ T6318] Zero length message leads to an empty skb [ 129.002743][ T6310] bridge0: port 3(bond0) entered disabled state [ 129.120183][ T6310] bond0 (unregistering): left allmulticast mode [ 129.127338][ T6310] bond_slave_0: left allmulticast mode [ 129.133589][ T6310] bond_slave_1: left allmulticast mode [ 129.140360][ T6310] batadv0: left allmulticast mode [ 129.147718][ T6310] bridge0: port 3(bond0) entered disabled state [ 129.275153][ T6310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.371774][ T6310] bond_slave_0: left promiscuous mode [ 129.490536][ T6310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.558871][ T6310] bond_slave_1: left promiscuous mode [ 129.653507][ T6310] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 129.664117][ T6310] batadv0: left promiscuous mode [ 129.682747][ T6310] bond0 (unregistering): Released all slaves [ 129.729002][ T6321] netlink: 'syz.3.111': attribute type 5 has an invalid length. [ 130.075786][ T6326] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.113'. [ 130.383403][ T5775] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 131.153016][ T6355] syzkaller0: entered promiscuous mode [ 131.196495][ T6355] syzkaller0: entered allmulticast mode [ 132.006787][ T6380] netlink: 'syz.0.126': attribute type 27 has an invalid length. [ 132.022671][ T6380] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.126'. [ 132.436772][ T5081] Bluetooth: hci1: command tx timeout [ 133.075128][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.090072][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.082666][ T6377] netlink: 'syz.1.125': attribute type 21 has an invalid length. [ 134.098738][ T6379] netlink: 76 bytes leftover after parsing attributes in process `syz.0.126'. [ 134.265287][ T6385] netlink: 'syz.0.128': attribute type 21 has an invalid length. [ 134.284652][ T5081] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 134.292392][ T6385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.128'. [ 134.313101][ T6385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'. [ 134.628717][ T6393] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.129'. [ 136.364569][ T5775] Bluetooth: hci0: command tx timeout [ 136.459850][ T5775] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 136.467804][ T5775] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 136.477525][ T5775] CPU: 1 PID: 5775 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 136.485111][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.495217][ T5775] Workqueue: hci0 hci_rx_work [ 136.500045][ T5775] Call Trace: [ 136.503357][ T5775] [ 136.506323][ T5775] dump_stack_lvl+0x18c/0x250 [ 136.511062][ T5775] ? show_regs_print_info+0x20/0x20 [ 136.516486][ T5775] ? load_image+0x420/0x420 [ 136.521256][ T5775] sysfs_create_dir_ns+0x26e/0x2a0 [ 136.526720][ T5775] ? sysfs_warn_dup+0xa0/0xa0 [ 136.531477][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 136.536751][ T5775] kobject_add_internal+0x61c/0xcc0 [ 136.542114][ T5775] kobject_add+0x164/0x240 [ 136.546668][ T5775] ? __rwlock_init+0x150/0x150 [ 136.551488][ T5775] ? kobject_init+0x1e0/0x1e0 [ 136.556312][ T5775] ? _raw_spin_unlock+0x28/0x40 [ 136.561219][ T5775] ? get_device_parent+0x366/0x390 [ 136.566463][ T5775] device_add+0x408/0xc20 [ 136.571025][ T5775] hci_conn_add_sysfs+0xd5/0x1e0 [ 136.576196][ T5775] le_conn_complete_evt+0xf5d/0x1540 [ 136.581616][ T5775] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 136.587996][ T5775] ? bt_info+0x180/0x180 [ 136.592275][ T5775] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 136.597933][ T5775] ? skb_pull_data+0xfb/0x200 [ 136.602655][ T5775] hci_le_enh_conn_complete_evt+0x189/0x460 [ 136.608832][ T5775] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 136.615262][ T5775] ? hci_remote_host_features_evt+0x150/0x150 [ 136.621347][ T5775] hci_event_packet+0x7ba/0x1270 [ 136.626314][ T5775] ? bis_list+0x290/0x290 [ 136.630674][ T5775] ? lockdep_hardirqs_on+0x98/0x150 [ 136.635891][ T5775] ? hci_send_to_monitor+0xd7/0x4f0 [ 136.641192][ T5775] hci_rx_work+0x43a/0xd60 [ 136.645644][ T5775] ? process_scheduled_works+0x96f/0x15d0 [ 136.651396][ T5775] process_scheduled_works+0xa5d/0x15d0 [ 136.657015][ T5775] ? worker_attach_to_pool+0x380/0x380 [ 136.662501][ T5775] ? assign_work+0x3d2/0x5d0 [ 136.667114][ T5775] worker_thread+0xa55/0xfc0 [ 136.671804][ T5775] kthread+0x2fa/0x390 [ 136.675882][ T5775] ? pr_cont_work+0x560/0x560 [ 136.680580][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 136.685270][ T5775] ret_from_fork+0x48/0x80 [ 136.689704][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 136.694308][ T5775] ret_from_fork_asm+0x11/0x20 [ 136.699116][ T5775] [ 136.704185][ T5775] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 136.718963][ T5775] Bluetooth: hci0: failed to register connection device [ 136.800655][ T6428] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 136.822354][ T6428] team0: Device ipvlan1 failed to register rx_handler [ 137.026037][ T6426] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 137.045035][ T6426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 137.064030][ T6426] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 138.697675][ T6475] netlink: 'syz.3.152': attribute type 10 has an invalid length. [ 138.727224][ T6475] netlink: 55 bytes leftover after parsing attributes in process `syz.3.152'. [ 138.768456][ T5775] Bluetooth: hci0: command tx timeout [ 138.865353][ T6458] delete_channel: no stack [ 139.848336][ T6490] netlink: 60 bytes leftover after parsing attributes in process `syz.2.153'. [ 140.468601][ T6479] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 140.484294][ T6479] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 140.513555][ T6489] netlink: 'syz.2.153': attribute type 10 has an invalid length. [ 140.538113][ T6489] netlink: 2 bytes leftover after parsing attributes in process `syz.2.153'. [ 140.585408][ T6489] bond0: entered promiscuous mode [ 140.597211][ T6489] bond_slave_0: entered promiscuous mode [ 140.603144][ T6489] bond_slave_1: entered promiscuous mode [ 140.639180][ T6489] batadv0: entered promiscuous mode [ 140.645294][ T6489] bridge0: port 3(bond0) entered blocking state [ 140.653229][ T6489] bridge0: port 3(bond0) entered disabled state [ 140.660457][ T6489] bond0: entered allmulticast mode [ 140.665921][ T6489] bond_slave_0: entered allmulticast mode [ 140.682642][ T6489] bond_slave_1: entered allmulticast mode [ 140.691505][ T6489] batadv0: entered allmulticast mode [ 140.700419][ T6489] bridge0: port 3(bond0) entered blocking state [ 140.706897][ T6489] bridge0: port 3(bond0) entered forwarding state [ 140.917500][ T6490] netlink: 60 bytes leftover after parsing attributes in process `syz.2.153'. [ 140.941482][ T4208] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 140.950887][ T4208] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 141.460396][ T6508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.159'. [ 141.655121][ T6515] sctp: [Deprecated]: syz.0.159 (pid 6515) Use of int in maxseg socket option. [ 141.655121][ T6515] Use struct sctp_assoc_value instead [ 141.737296][ T6513] pim6reg1: entered promiscuous mode [ 141.772365][ T6513] pim6reg1: entered allmulticast mode [ 144.006300][ T5775] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 146.036577][ T5081] Bluetooth: hci2: command tx timeout [ 146.628145][ T5081] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 147.157450][ T6605] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 147.170175][ T6605] netlink: 'syz.3.187': attribute type 4 has an invalid length. [ 147.179268][ T6605] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.187'. [ 147.475655][ T6609] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.189'. [ 147.567042][ T6609] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.189'. [ 147.673241][ T6607] syzkaller0: entered promiscuous mode [ 147.691383][ T6607] syzkaller0: entered allmulticast mode [ 148.181943][ T6624] pim6reg1: entered promiscuous mode [ 148.251089][ T6624] pim6reg1: entered allmulticast mode [ 148.732947][ T5775] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 152.297911][ T6646] netlink: 'syz.1.197': attribute type 10 has an invalid length. [ 152.349072][ T6646] team0: Port device geneve1 added [ 152.660785][ T6662] netlink: 'syz.1.200': attribute type 21 has an invalid length. [ 152.742500][ T6665] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.202'. [ 152.816463][ T6666] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.202'. [ 152.827055][ T6665] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 152.848115][ T6666] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 152.992322][ T5081] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 154.214428][ T6710] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 154.261675][ T6711] netlink: 'syz.3.212': attribute type 10 has an invalid length. [ 154.293644][ T6711] netlink: 40 bytes leftover after parsing attributes in process `syz.3.212'. [ 154.350427][ T6711] team0: entered promiscuous mode [ 154.355730][ T6711] team_slave_0: entered promiscuous mode [ 154.386832][ T6711] team_slave_1: entered promiscuous mode [ 154.393009][ T6711] team0: entered allmulticast mode [ 154.402812][ T6711] team_slave_0: entered allmulticast mode [ 154.415264][ T6711] team_slave_1: entered allmulticast mode [ 154.423964][ T6711] bridge0: port 3(team0) entered blocking state [ 154.431395][ T6711] bridge0: port 3(team0) entered disabled state [ 154.440336][ T6711] bridge0: port 3(team0) entered blocking state [ 154.446909][ T6711] bridge0: port 3(team0) entered forwarding state [ 154.471534][ T6710] syz.3.212 (6710) used greatest stack depth: 18984 bytes left [ 154.915555][ T6735] syz.1.220: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 154.932076][ T6735] CPU: 1 PID: 6735 Comm: syz.1.220 Not tainted syzkaller #0 [ 154.939522][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 154.949619][ T6735] Call Trace: [ 154.952912][ T6735] [ 154.955856][ T6735] dump_stack_lvl+0x18c/0x250 [ 154.960561][ T6735] ? show_regs_print_info+0x20/0x20 [ 154.965884][ T6735] ? load_image+0x420/0x420 [ 154.970428][ T6735] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 154.976881][ T6735] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 154.983402][ T6735] warn_alloc+0x246/0x340 [ 154.987842][ T6735] ? stack_trace_save+0xaa/0x100 [ 154.992807][ T6735] ? zone_watermark_ok_safe+0x230/0x230 [ 154.998391][ T6735] ? kasan_set_track+0x5f/0x70 [ 155.003185][ T6735] ? kasan_set_track+0x4e/0x70 [ 155.007962][ T6735] ? __kasan_kmalloc+0x8f/0xa0 [ 155.012739][ T6735] ? xsk_init_queue+0xad/0x100 [ 155.017521][ T6735] ? xsk_setsockopt+0x4e5/0x760 [ 155.022385][ T6735] ? do_sock_setsockopt+0x175/0x1a0 [ 155.027594][ T6735] ? __x64_sys_setsockopt+0x182/0x200 [ 155.032982][ T6735] __vmalloc_node_range+0x126/0x1330 [ 155.038405][ T6735] ? free_vm_area+0x50/0x50 [ 155.043030][ T6735] vmalloc_user+0x74/0x80 [ 155.047465][ T6735] ? xskq_create+0xbf/0x170 [ 155.052078][ T6735] xskq_create+0xbf/0x170 [ 155.056430][ T6735] xsk_init_queue+0xad/0x100 [ 155.061066][ T6735] xsk_setsockopt+0x4e5/0x760 [ 155.065761][ T6735] ? xsk_poll+0x680/0x680 [ 155.070119][ T6735] ? __fget_files+0x28/0x4b0 [ 155.074822][ T6735] ? __fget_files+0x28/0x4b0 [ 155.079431][ T6735] ? aa_sock_opt_perm+0x74/0x100 [ 155.084390][ T6735] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 155.089950][ T6735] ? security_socket_setsockopt+0x7e/0xa0 [ 155.095685][ T6735] ? xsk_poll+0x680/0x680 [ 155.100031][ T6735] do_sock_setsockopt+0x175/0x1a0 [ 155.105162][ T6735] ? __fdget+0x180/0x210 [ 155.109422][ T6735] __x64_sys_setsockopt+0x182/0x200 [ 155.114829][ T6735] do_syscall_64+0x55/0xa0 [ 155.119258][ T6735] ? clear_bhb_loop+0x40/0x90 [ 155.124126][ T6735] ? clear_bhb_loop+0x40/0x90 [ 155.128820][ T6735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.134904][ T6735] RIP: 0033:0x7f1a67d9c819 [ 155.139337][ T6735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.159047][ T6735] RSP: 002b:00007f1a68ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.167566][ T6735] RAX: ffffffffffffffda RBX: 00007f1a68015fa0 RCX: 00007f1a67d9c819 [ 155.175640][ T6735] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000f [ 155.183636][ T6735] RBP: 00007f1a67e32c91 R08: 0000000000000004 R09: 0000000000000000 [ 155.191999][ T6735] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 155.200171][ T6735] R13: 00007f1a68016038 R14: 00007f1a68015fa0 R15: 00007fff89b1f688 [ 155.208176][ T6735] [ 155.287106][ T6735] Mem-Info: [ 155.290305][ T6735] active_anon:5007 inactive_anon:0 isolated_anon:0 [ 155.290305][ T6735] active_file:12900 inactive_file:39957 isolated_file:0 [ 155.290305][ T6735] unevictable:768 dirty:95 writeback:0 [ 155.290305][ T6735] slab_reclaimable:9877 slab_unreclaimable:91033 [ 155.290305][ T6735] mapped:24028 shmem:1361 pagetables:517 [ 155.290305][ T6735] sec_pagetables:0 bounce:0 [ 155.290305][ T6735] kernel_misc_reclaimable:0 [ 155.290305][ T6735] free:1354370 free_pcp:8618 free_cma:0 [ 155.377929][ T6735] Node 0 active_anon:19984kB inactive_anon:0kB active_file:51600kB inactive_file:159624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96092kB dirty:376kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10724kB pagetables:2016kB sec_pagetables:0kB all_unreclaimable? no [ 155.436509][ T6735] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 155.474218][ T6735] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.503414][ T6735] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 155.536483][ T6735] Node 0 DMA32 free:1512320kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20048kB inactive_anon:0kB active_file:51600kB inactive_file:158796kB unevictable:1536kB writepending:376kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:14168kB local_pcp:12720kB free_cma:0kB [ 155.612144][ T6754] Q6`Ҙ: renamed from lo (while UP) [ 155.637055][ T6735] lowmem_reserve[]: 0 0 0 0 0 [ 155.646231][ T6735] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 155.744974][ T6735] lowmem_reserve[]: 0 0 0 0 0 [ 155.770817][ T6735] Node 1 Normal free:3889800kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19264kB local_pcp:11872kB free_cma:0kB [ 155.886609][ T6735] lowmem_reserve[]: 0 0 0 0 0 [ 155.891546][ T6735] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.956499][ T6735] Node 0 DMA32: 2106*4kB (UME) 1073*8kB (UME) 951*16kB (UME) 617*32kB (UME) 214*64kB (UME) 86*128kB (UME) 14*256kB (UM) 9*512kB (UM) 8*1024kB (M) 1*2048kB (M) 346*4096kB (UM) = 1512320kB [ 155.977324][ T6735] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 155.991646][ T6735] Node 1 Normal: 240*4kB (UME) 37*8kB (UME) 34*16kB (UME) 78*32kB (UME) 23*64kB (UE) 4*128kB (ME) 0*256kB 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3889800kB [ 156.018219][ T6735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.032062][ T6735] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.043135][ T6735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.053697][ T6735] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.063575][ T6735] 54218 total pagecache pages [ 156.068788][ T6735] 0 pages in swap cache [ 156.073185][ T6735] Free swap = 124996kB [ 156.078314][ T6735] Total swap = 124996kB [ 156.102621][ T6735] 2097051 pages RAM [ 156.116490][ T6735] 0 pages HighMem/MovableOnly [ 156.126977][ T6735] 416926 pages reserved [ 156.131300][ T6735] 0 pages cma reserved [ 156.436116][ T6774] netlink: 'syz.2.229': attribute type 3 has an invalid length. [ 156.456597][ T6774] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.229'. [ 156.458290][ T6779] nr0: port 1(hsr0) entered blocking state [ 156.488098][ T6779] nr0: port 1(hsr0) entered disabled state [ 156.494473][ T6779] hsr0: entered allmulticast mode [ 156.588572][ T6779] hsr_slave_0: entered allmulticast mode [ 156.617598][ T6779] hsr_slave_1: entered allmulticast mode [ 156.641022][ T6779] hsr0: entered promiscuous mode [ 157.658913][ T6797] netlink: 'syz.2.236': attribute type 3 has an invalid length. [ 157.682285][ T6797] netlink: 'syz.2.236': attribute type 275 has an invalid length. [ 157.963042][ T6814] netlink: 'syz.0.238': attribute type 3 has an invalid length. [ 157.971605][ T6814] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.238'. [ 158.463157][ T6820] netlink: 10 bytes leftover after parsing attributes in process `syz.0.239'. [ 158.502039][ T6829] netlink: 168 bytes leftover after parsing attributes in process `syz.1.240'. [ 158.562031][ T6820] syz.0.239 (6820) used greatest stack depth: 18536 bytes left [ 159.103600][ T6857] netlink: 'syz.2.248': attribute type 9 has an invalid length. [ 159.139794][ T6857] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.248'. [ 159.738054][ T6868] netlink: 'syz.1.251': attribute type 9 has an invalid length. [ 159.745783][ T6868] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.251'. [ 159.944895][ T6874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.253'. [ 159.979472][ T6874] sctp: [Deprecated]: syz.3.253 (pid 6874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.979472][ T6874] Use struct sctp_sack_info instead [ 160.004141][ T6856] delete_channel: no stack [ 161.043654][ T6894] netlink: 'syz.1.257': attribute type 23 has an invalid length. [ 161.177317][ T6892] netlink: 'syz.3.258': attribute type 19 has an invalid length. [ 161.688250][ T6889] netlink: 'syz.2.256': attribute type 3 has an invalid length. [ 161.724644][ T6889] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.256'. [ 162.698831][ T6895] netlink: 'syz.3.258': attribute type 19 has an invalid length. [ 163.615175][ T5081] Bluetooth: hci3: ISO packet for unknown connection handle 1 [ 166.522066][ T6926] netlink: 'syz.2.267': attribute type 3 has an invalid length. [ 166.552413][ T6926] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.267'. [ 167.246227][ T6938] netlink: 'syz.3.270': attribute type 17 has an invalid length. [ 167.326660][ T6938] netlink: 148 bytes leftover after parsing attributes in process `syz.3.270'. [ 171.210322][ T6977] netlink: 'syz.3.280': attribute type 3 has an invalid length. [ 171.230438][ T6977] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.280'. [ 172.534026][ T7039] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 172.636509][ T7039] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.282'. [ 172.920428][ T7052] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.286'. [ 174.546910][ T7067] delete_channel: no stack [ 174.588265][ T7067] delete_channel: no stack [ 175.377414][ T7082] netlink: 'syz.1.294': attribute type 3 has an invalid length. [ 175.386242][ T7082] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.294'. [ 175.401829][ T7089] sctp: [Deprecated]: syz.3.295 (pid 7089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.401829][ T7089] Use struct sctp_sack_info instead [ 175.946364][ T7094] netlink: 'syz.0.297': attribute type 21 has an invalid length. [ 175.973969][ T7094] netlink: 132 bytes leftover after parsing attributes in process `syz.0.297'. [ 176.288700][ T7112] netlink: 'syz.3.302': attribute type 8 has an invalid length. [ 176.327551][ T7112] netlink: 156 bytes leftover after parsing attributes in process `syz.3.302'. [ 176.855739][ T7111] netlink: 'syz.2.300': attribute type 2 has an invalid length. [ 177.056076][ T7111] netlink: 'syz.2.300': attribute type 8 has an invalid length. [ 177.103083][ T7111] netlink: 132 bytes leftover after parsing attributes in process `syz.2.300'. [ 177.124967][ T7119] netlink: 'syz.2.300': attribute type 11 has an invalid length. [ 177.730146][ T7130] netlink: 'syz.3.305': attribute type 6 has an invalid length. [ 177.769107][ T7130] netlink: 164 bytes leftover after parsing attributes in process `syz.3.305'. [ 178.565134][ T7132] delete_channel: no stack [ 179.459593][ T7165] netlink: 'syz.1.316': attribute type 10 has an invalid length. [ 179.553070][ T7165] netlink: 55 bytes leftover after parsing attributes in process `syz.1.316'. [ 179.946846][ T7162] netlink: 'syz.2.315': attribute type 21 has an invalid length. [ 180.011219][ T7162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.315'. [ 180.719643][ T7209] bridge_slave_1: left allmulticast mode [ 180.731530][ T7209] bridge_slave_1: left promiscuous mode [ 180.804714][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.397540][ T7209] bridge_slave_0: left allmulticast mode [ 181.426486][ T7209] bridge_slave_0: left promiscuous mode [ 181.461059][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.581756][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 183.714031][ T7235] netlink: 'syz.1.335': attribute type 21 has an invalid length. [ 183.722215][ T7235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.335'. [ 191.476947][ T5081] Bluetooth: hci1: ISO packet for unknown connection handle 12 [ 192.020926][ T7358] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.369'. [ 192.333264][ T5081] Bluetooth: Frame is too long (len 149, expected len 4) [ 192.631559][ T7377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.375'. [ 194.556963][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.564542][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.511605][ T7427] delete_channel: no stack [ 196.425403][ T7470] netlink: 'syz.1.388': attribute type 29 has an invalid length. [ 197.851375][ T7464] netlink: 'syz.2.387': attribute type 10 has an invalid length. [ 197.861120][ T7464] bridge0: port 3(bond0) entered disabled state [ 197.868054][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.876040][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.920387][ T7464] bridge0: port 3(bond0) entered blocking state [ 197.927300][ T7464] bridge0: port 3(bond0) entered forwarding state [ 197.935594][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.942984][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.950689][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.957969][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.990547][ T7464] team0: Port device bridge0 added [ 197.998837][ T7470] netlink: 'syz.1.388': attribute type 29 has an invalid length. [ 198.132882][ T7480] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 198.154491][ T7480] netlink: 'syz.3.390': attribute type 4 has an invalid length. [ 198.224462][ T7480] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.390'. [ 198.245578][ T7486] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.390'. [ 198.548174][ T7489] netlink: 'syz.1.393': attribute type 21 has an invalid length. [ 198.562668][ T7489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.393'. [ 199.048244][ T7489] netlink: 184920 bytes leftover after parsing attributes in process `syz.1.393'. [ 200.293549][ T7500] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.395'. [ 200.548808][ T7494] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.394'. [ 201.269159][ T7520] C: renamed from team_slave_0 (while UP) [ 201.387971][ T7520] netlink: 152 bytes leftover after parsing attributes in process `syz.2.402'. [ 201.792380][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 201.792397][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 201.888542][ T7541] netlink: 'syz.3.408': attribute type 29 has an invalid length. [ 201.907908][ T7541] netlink: 'syz.3.408': attribute type 29 has an invalid length. [ 201.946577][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 201.955094][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 202.066883][ T7546] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.409'. [ 202.590518][ T5780] Bluetooth: hci2: ISO packet for unknown connection handle 12 [ 203.271236][ T7558] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.411'. [ 203.360206][ T7558] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 203.784421][ T7571] netlink: 'syz.0.417': attribute type 13 has an invalid length. [ 203.796792][ T7571] netlink: 160 bytes leftover after parsing attributes in process `syz.0.417'. [ 203.814221][ T7571] erspan0: refused to change device tx_queue_len [ 203.821455][ T7571] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 203.865199][ T7569] netlink: 'syz.1.415': attribute type 2 has an invalid length. [ 203.886495][ T7569] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 203.914725][ T7569] netlink: 'syz.1.415': attribute type 8 has an invalid length. [ 203.959565][ T7569] netlink: 44 bytes leftover after parsing attributes in process `syz.1.415'. [ 204.163361][ T7579] netlink: 'syz.3.419': attribute type 29 has an invalid length. [ 204.293475][ T7577] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.419'. [ 204.357962][ T7579] netlink: 'syz.3.419': attribute type 29 has an invalid length. [ 204.427613][ T7577] netlink: 'syz.3.419': attribute type 39 has an invalid length. [ 204.520163][ T7586] netlink: 'syz.2.421': attribute type 8 has an invalid length. [ 204.547352][ T7586] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.421'. [ 208.754268][ T7603] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.426'. [ 208.771549][ T7602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.426'. [ 208.835494][ T7605] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.427'. [ 208.952099][ T7607] : port 1(ip6gretap0) entered blocking state [ 208.963947][ T7607] : port 1(ip6gretap0) entered disabled state [ 208.971028][ T7607] ip6gretap0: entered allmulticast mode [ 208.984440][ T7607] ip6gretap0: entered promiscuous mode [ 209.018788][ T7607] ip6gretap0: left allmulticast mode [ 209.028757][ T7607] ip6gretap0: left promiscuous mode [ 209.047729][ T7607] : port 1(ip6gretap0) entered disabled state [ 209.205345][ T7611] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.428'. [ 209.385531][ T7611] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 213.129590][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 213.693004][ T7636] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.750169][ T7636] netlink: 38831 bytes leftover after parsing attributes in process `syz.0.435'. [ 214.784200][ T7645] netlink: 'syz.0.438': attribute type 46 has an invalid length. [ 215.185148][ T7649] netlink: 'syz.0.438': attribute type 46 has an invalid length. [ 215.968609][ T7659] netlink: 'syz.3.440': attribute type 10 has an invalid length. [ 217.166642][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 217.544069][ T7671] netlink: 'syz.1.445': attribute type 10 has an invalid length. [ 218.495679][ T7671] team0: Device wg1 is of different type [ 219.502348][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 219.993476][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 220.384282][ T7714] netlink: 'syz.0.458': attribute type 10 has an invalid length. [ 220.715825][ T7714] team0: Device wg1 is of different type [ 221.580757][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 221.947146][ T5769] page_pool_release_retry() stalled pool shutdown 1 inflight 61 sec [ 222.132159][ T7754] netlink: 'syz.2.468': attribute type 29 has an invalid length. [ 222.141402][ T7754] netlink: 'syz.2.468': attribute type 29 has an invalid length. [ 222.363521][ T7760] netlink: 'syz.3.472': attribute type 10 has an invalid length. [ 223.284263][ T7760] wg1: entered promiscuous mode [ 223.324041][ T7760] wg1: entered allmulticast mode [ 223.339529][ T7760] team0: Device wg1 is of different type [ 223.665889][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 223.710522][ T7784] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.479'. [ 223.783805][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 224.030804][ T7791] netlink: set zone limit has 8 unknown bytes [ 224.627119][ T7799] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 224.687928][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.697824][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.809698][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.817803][ T7799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.826665][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.834518][ T7799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.909934][ T7799] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 225.263272][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 231.678198][ T7838] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 231.939480][ T7846] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.497'. [ 232.192052][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 232.853935][ T7860] netlink: 204664 bytes leftover after parsing attributes in process `syz.3.500'. [ 233.134919][ T7873] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 233.160331][ T7873] dvmrp1: linktype set to 804 [ 233.357333][ T7876] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 233.363277][ T7873] dvmrp1: tun_chr_ioctl cmd 1074025698 [ 233.379950][ T7877] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 233.684724][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 233.944645][ T7891] netlink: 'syz.1.512': attribute type 19 has an invalid length. [ 233.961502][ T7891] netlink: 156 bytes leftover after parsing attributes in process `syz.1.512'. [ 234.660344][ T7918] netlink: 'syz.2.520': attribute type 29 has an invalid length. [ 234.677368][ T7918] netlink: 'syz.2.520': attribute type 29 has an invalid length. [ 234.700090][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 234.717607][ T7918] netlink: 'syz.2.520': attribute type 29 has an invalid length. [ 234.910248][ T7921] netlink: 204664 bytes leftover after parsing attributes in process `syz.0.519'. [ 234.988928][ T7923] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.522'. [ 235.774955][ T7934] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.525'. [ 235.883666][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 236.249935][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 236.606468][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 237.428953][ T7964] netlink: 'syz.1.536': attribute type 33 has an invalid length. [ 237.438472][ T7964] netlink: 160 bytes leftover after parsing attributes in process `syz.1.536'. [ 237.456148][ T7962] netlink: 'syz.1.536': attribute type 33 has an invalid length. [ 237.464485][ T7962] netlink: 160 bytes leftover after parsing attributes in process `syz.1.536'. [ 238.526190][ T7977] netlink: 204664 bytes leftover after parsing attributes in process `syz.1.537'. [ 238.877418][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 240.260240][ T8011] netlink: 'syz.1.548': attribute type 29 has an invalid length. [ 240.317167][ T8011] netlink: 'syz.1.548': attribute type 29 has an invalid length. [ 240.668694][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 240.679682][ T5780] Bluetooth: Frame is too long (len 149, expected len 4) [ 241.527390][ T8044] netlink: 'syz.3.559': attribute type 21 has an invalid length. [ 241.593222][ T8045] netlink: 'syz.3.559': attribute type 21 has an invalid length. [ 242.771155][ T8074] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 242.781276][ T8074] netlink: 152 bytes leftover after parsing attributes in process `syz.3.567'. [ 242.822428][ T8074] .`: renamed from bond0 (while UP) [ 243.092052][ T5780] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 243.100245][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 243.110349][ T5780] CPU: 1 PID: 5780 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 243.117960][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.128233][ T5780] Workqueue: hci2 hci_rx_work [ 243.133087][ T5780] Call Trace: [ 243.136388][ T5780] [ 243.139343][ T5780] dump_stack_lvl+0x18c/0x250 [ 243.144064][ T5780] ? show_regs_print_info+0x20/0x20 [ 243.149547][ T5780] ? load_image+0x420/0x420 [ 243.154088][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 243.159248][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 243.164053][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 243.169539][ T5780] kobject_add_internal+0x61c/0xcc0 [ 243.174764][ T5780] kobject_add+0x164/0x240 [ 243.179199][ T5780] ? __rwlock_init+0x150/0x150 [ 243.183985][ T5780] ? kobject_init+0x1e0/0x1e0 [ 243.188862][ T5780] ? _raw_spin_unlock+0x28/0x40 [ 243.193734][ T5780] ? get_device_parent+0x366/0x390 [ 243.198876][ T5780] device_add+0x408/0xc20 [ 243.203317][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 243.208366][ T5780] le_conn_complete_evt+0xf5d/0x1540 [ 243.213761][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 243.220108][ T5780] ? bt_info+0x180/0x180 [ 243.224369][ T5780] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 243.230017][ T5780] ? skb_pull_data+0xfb/0x200 [ 243.234713][ T5780] hci_le_enh_conn_complete_evt+0x189/0x460 [ 243.240625][ T5780] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 243.247151][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 243.253236][ T5780] hci_event_packet+0x7ba/0x1270 [ 243.258204][ T5780] ? bis_list+0x290/0x290 [ 243.262554][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 243.267879][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 243.273119][ T5780] hci_rx_work+0x43a/0xd60 [ 243.277583][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 243.283325][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 243.288930][ T5780] ? worker_attach_to_pool+0x380/0x380 [ 243.294411][ T5780] ? assign_work+0x3d2/0x5d0 [ 243.299020][ T5780] worker_thread+0xa55/0xfc0 [ 243.303655][ T5780] kthread+0x2fa/0x390 [ 243.307753][ T5780] ? pr_cont_work+0x560/0x560 [ 243.312458][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 243.317153][ T5780] ret_from_fork+0x48/0x80 [ 243.321588][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 243.326192][ T5780] ret_from_fork_asm+0x11/0x20 [ 243.330991][ T5780] [ 243.336678][ T5780] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 243.354302][ T5780] Bluetooth: hci2: failed to register connection device [ 244.567900][ T8103] netlink: 'syz.1.575': attribute type 10 has an invalid length. [ 244.731540][ T8103] team0: Device ipvlan1 failed to register rx_handler [ 244.866247][ T8119] netlink: 'syz.2.578': attribute type 3 has an invalid length. [ 244.920341][ T8119] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 244.949138][ T8119] netlink: 'syz.2.578': attribute type 6 has an invalid length. [ 244.969947][ T5783] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 244.978068][ T5783] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 244.988447][ T5783] CPU: 1 PID: 5783 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 244.996155][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.006278][ T5783] Workqueue: hci3 hci_rx_work [ 245.011030][ T5783] Call Trace: [ 245.014368][ T5783] [ 245.017356][ T5783] dump_stack_lvl+0x18c/0x250 [ 245.022201][ T5783] ? show_regs_print_info+0x20/0x20 [ 245.026499][ T8103] syz.1.575 (8103) used greatest stack depth: 17960 bytes left [ 245.027440][ T5783] ? load_image+0x420/0x420 [ 245.039720][ T5783] sysfs_create_dir_ns+0x26e/0x2a0 [ 245.044888][ T5783] ? sysfs_warn_dup+0xa0/0xa0 [ 245.049624][ T5783] ? do_raw_spin_unlock+0x121/0x230 [ 245.054897][ T5783] kobject_add_internal+0x61c/0xcc0 [ 245.060178][ T5783] kobject_add+0x164/0x240 [ 245.064656][ T5783] ? __rwlock_init+0x150/0x150 [ 245.069489][ T5783] ? kobject_init+0x1e0/0x1e0 [ 245.074412][ T5783] ? _raw_spin_unlock+0x28/0x40 [ 245.079520][ T5783] ? get_device_parent+0x366/0x390 [ 245.084796][ T5783] device_add+0x408/0xc20 [ 245.089279][ T5783] hci_conn_add_sysfs+0xd5/0x1e0 [ 245.094292][ T5783] le_conn_complete_evt+0xf5d/0x1540 [ 245.099661][ T5783] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 245.101605][ T8119] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.578'. [ 245.105940][ T5783] ? bt_info+0x180/0x180 [ 245.105979][ T5783] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 245.125419][ T5783] ? skb_pull_data+0xfb/0x200 [ 245.130161][ T5783] hci_le_enh_conn_complete_evt+0x189/0x460 [ 245.136119][ T5783] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 245.142863][ T5783] ? hci_remote_host_features_evt+0x150/0x150 [ 245.149096][ T5783] hci_event_packet+0x7ba/0x1270 [ 245.154121][ T5783] ? bis_list+0x290/0x290 [ 245.158610][ T5783] ? lockdep_hardirqs_on+0x98/0x150 [ 245.163882][ T5783] ? hci_send_to_monitor+0xd7/0x4f0 [ 245.169226][ T5783] hci_rx_work+0x43a/0xd60 [ 245.173864][ T5783] ? process_scheduled_works+0x96f/0x15d0 [ 245.179638][ T5783] process_scheduled_works+0xa5d/0x15d0 [ 245.185286][ T5783] ? worker_attach_to_pool+0x380/0x380 [ 245.190819][ T5783] ? assign_work+0x3d2/0x5d0 [ 245.195469][ T5783] worker_thread+0xa55/0xfc0 [ 245.200216][ T5783] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 245.206346][ T5783] ? _raw_spin_unlock+0x40/0x40 [ 245.211251][ T5783] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 245.217233][ T5783] kthread+0x2fa/0x390 [ 245.221437][ T5783] ? pr_cont_work+0x560/0x560 [ 245.226164][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 245.230898][ T5783] ret_from_fork+0x48/0x80 [ 245.235361][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 245.240027][ T5783] ret_from_fork_asm+0x11/0x20 [ 245.244860][ T5783] [ 245.256426][ T5783] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 245.270687][ T5783] Bluetooth: hci3: failed to register connection device [ 245.368440][ T8127] netlink: 830 bytes leftover after parsing attributes in process `syz.1.582'. [ 245.387699][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 245.468251][ T8120] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 245.527817][ T8120] dvmrp1: linktype set to 804 [ 245.555853][ T8127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.611361][ T8127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.707074][ T8127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.736032][ T8127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.128477][ T8127] bond0: (slave batadv0): Releasing backup interface [ 246.168016][ T8121] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 246.174839][ T8120] dvmrp1: tun_chr_ioctl cmd 1074025698 [ 246.181835][ T8130] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 246.425549][ T8141] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.587'. [ 247.282540][ T5780] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 247.291018][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 247.300723][ T5780] CPU: 0 PID: 5780 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 247.308324][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.318514][ T5780] Workqueue: hci0 hci_rx_work [ 247.323257][ T5780] Call Trace: [ 247.326576][ T5780] [ 247.329549][ T5780] dump_stack_lvl+0x18c/0x250 [ 247.334294][ T5780] ? show_regs_print_info+0x20/0x20 [ 247.339545][ T5780] ? load_image+0x420/0x420 [ 247.344118][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 247.349273][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 247.353999][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 247.359336][ T5780] kobject_add_internal+0x61c/0xcc0 [ 247.364598][ T5780] kobject_add+0x164/0x240 [ 247.366656][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 247.369384][ T5780] ? __rwlock_init+0x150/0x150 [ 247.380207][ T5780] ? kobject_init+0x1e0/0x1e0 [ 247.384916][ T5780] ? _raw_spin_unlock+0x28/0x40 [ 247.389966][ T5780] ? get_device_parent+0x366/0x390 [ 247.395100][ T5780] device_add+0x408/0xc20 [ 247.399630][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 247.404587][ T5780] le_conn_complete_evt+0xf5d/0x1540 [ 247.409901][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 247.416157][ T5780] ? bt_info+0x180/0x180 [ 247.420423][ T5780] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 247.426167][ T5780] ? skb_pull_data+0xfb/0x200 [ 247.430865][ T5780] hci_le_enh_conn_complete_evt+0x189/0x460 [ 247.436863][ T5780] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 247.443295][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 247.449466][ T5780] hci_event_packet+0x7ba/0x1270 [ 247.454433][ T5780] ? bis_list+0x290/0x290 [ 247.458793][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 247.464012][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 247.470014][ T5780] hci_rx_work+0x43a/0xd60 [ 247.474463][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 247.480292][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 247.485890][ T5780] ? worker_attach_to_pool+0x380/0x380 [ 247.491375][ T5780] ? assign_work+0x3d2/0x5d0 [ 247.495994][ T5780] worker_thread+0xa55/0xfc0 [ 247.500630][ T5780] kthread+0x2fa/0x390 [ 247.504713][ T5780] ? pr_cont_work+0x560/0x560 [ 247.509409][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 247.514007][ T5780] ret_from_fork+0x48/0x80 [ 247.518527][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 247.523128][ T5780] ret_from_fork_asm+0x11/0x20 [ 247.527926][ T5780] [ 247.532204][ T5780] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 247.547216][ T5780] Bluetooth: hci0: failed to register connection device [ 247.946237][ T8178] netlink: 188 bytes leftover after parsing attributes in process `syz.2.598'. [ 247.967739][ T8181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.599'. [ 247.980772][ T8181] netlink: 'syz.3.599': attribute type 21 has an invalid length. [ 247.991785][ T8181] netlink: 132 bytes leftover after parsing attributes in process `syz.3.599'. [ 248.004605][ T8181] netlink: 'syz.3.599': attribute type 1 has an invalid length. [ 248.039428][ T8180] Dead loop on virtual device ip6_vti0, fix it urgently! [ 248.416031][ T8188] netlink: 'syz.0.601': attribute type 9 has an invalid length. [ 248.426314][ T8188] netlink: 163196 bytes leftover after parsing attributes in process `syz.0.601'. [ 249.443964][ T8214] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.609'. [ 249.636392][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 249.878834][ T8226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.615'. [ 249.925376][ T8226] netlink: 'syz.1.615': attribute type 17 has an invalid length. [ 249.942091][ T8226] netlink: 152 bytes leftover after parsing attributes in process `syz.1.615'. [ 249.971715][ T8226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.060357][ T8226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.615'. [ 250.080200][ T8217] netlink: 192440 bytes leftover after parsing attributes in process `syz.0.612'. [ 250.127787][ T8217] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 250.239118][ T8236] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.617'. [ 250.289774][ T8238] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 250.421209][ T8239] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 250.957908][ T8256] netlink: 'syz.0.623': attribute type 21 has an invalid length. [ 251.008606][ T8255] netlink: 'syz.1.622': attribute type 14 has an invalid length. [ 252.245072][ T5783] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 252.253325][ T5783] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 252.263350][ T5783] CPU: 1 PID: 5783 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 252.270946][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.277985][ T8252] netlink: 'syz.1.622': attribute type 9 has an invalid length. [ 252.281020][ T5783] Workqueue: hci0 hci_rx_work [ 252.281067][ T5783] Call Trace: [ 252.281076][ T5783] [ 252.281086][ T5783] dump_stack_lvl+0x18c/0x250 [ 252.281125][ T5783] ? show_regs_print_info+0x20/0x20 [ 252.281155][ T5783] ? load_image+0x420/0x420 [ 252.281201][ T5783] sysfs_create_dir_ns+0x26e/0x2a0 [ 252.281227][ T5783] ? sysfs_warn_dup+0xa0/0xa0 [ 252.281250][ T5783] ? do_raw_spin_unlock+0x121/0x230 [ 252.281282][ T5783] kobject_add_internal+0x61c/0xcc0 [ 252.281318][ T5783] kobject_add+0x164/0x240 [ 252.281342][ T5783] ? __rwlock_init+0x150/0x150 [ 252.281372][ T5783] ? kobject_init+0x1e0/0x1e0 [ 252.281397][ T5783] ? _raw_spin_unlock+0x28/0x40 [ 252.281426][ T5783] ? get_device_parent+0x366/0x390 [ 252.281459][ T5783] device_add+0x408/0xc20 [ 252.281491][ T5783] hci_conn_add_sysfs+0xd5/0x1e0 [ 252.281519][ T5783] le_conn_complete_evt+0xf5d/0x1540 [ 252.281557][ T5783] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 252.281580][ T5783] ? bt_info+0x180/0x180 [ 252.281608][ T5783] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 252.281633][ T5783] ? skb_pull_data+0xfb/0x200 [ 252.281662][ T5783] hci_le_enh_conn_complete_evt+0x189/0x460 [ 252.281685][ T5783] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 252.281709][ T5783] ? hci_remote_host_features_evt+0x150/0x150 [ 252.281734][ T5783] hci_event_packet+0x7ba/0x1270 [ 252.281772][ T5783] ? bis_list+0x290/0x290 [ 252.281800][ T5783] ? lockdep_hardirqs_on+0x98/0x150 [ 252.281827][ T5783] ? hci_send_to_monitor+0xd7/0x4f0 [ 252.281853][ T5783] hci_rx_work+0x43a/0xd60 [ 252.281897][ T5783] ? process_scheduled_works+0x96f/0x15d0 [ 252.281923][ T5783] process_scheduled_works+0xa5d/0x15d0 [ 252.281985][ T5783] ? worker_attach_to_pool+0x380/0x380 [ 252.282018][ T5783] ? assign_work+0x3d2/0x5d0 [ 252.282059][ T5783] worker_thread+0xa55/0xfc0 [ 252.282085][ T5783] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 252.282109][ T5783] ? _raw_spin_unlock+0x40/0x40 [ 252.282130][ T5783] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 252.282181][ T5783] kthread+0x2fa/0x390 [ 252.282199][ T5783] ? pr_cont_work+0x560/0x560 [ 252.282225][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 252.282244][ T5783] ret_from_fork+0x48/0x80 [ 252.282266][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 252.282287][ T5783] ret_from_fork_asm+0x11/0x20 [ 252.282335][ T5783] [ 252.283377][ T5783] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 252.411273][ T8278] netlink: 'syz.0.631': attribute type 21 has an invalid length. [ 252.417744][ T5783] Bluetooth: hci0: failed to register connection device [ 254.235987][ T8296] netlink: 'syz.2.638': attribute type 9 has an invalid length. [ 254.257607][ T8296] __nla_validate_parse: 9 callbacks suppressed [ 254.257667][ T8296] netlink: 163196 bytes leftover after parsing attributes in process `syz.2.638'. [ 254.426600][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 254.606914][ T5780] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 255.313989][ T8318] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.645'. [ 255.926202][ T8329] netlink: 164 bytes leftover after parsing attributes in process `syz.3.651'. [ 255.956330][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962932][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.978097][ T8329] netlink: 'syz.3.651': attribute type 33 has an invalid length. [ 255.985991][ T8329] netlink: 36 bytes leftover after parsing attributes in process `syz.3.651'. [ 257.418606][ T8378] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.667'. [ 257.546167][ T8379] netlink: 'syz.3.667': attribute type 10 has an invalid length. [ 258.247993][ T8379] bridge0: port 3(team0) entered disabled state [ 258.324369][ T8379] team0: left allmulticast mode [ 258.336483][ T8379] team_slave_0: left allmulticast mode [ 258.342008][ T8379] team_slave_1: left allmulticast mode [ 258.360362][ T8379] team0: left promiscuous mode [ 258.365288][ T8379] team_slave_0: left promiscuous mode [ 258.371705][ T8379] team_slave_1: left promiscuous mode [ 258.396862][ T8379] bridge0: port 3(team0) entered disabled state [ 258.533873][ T8388] netlink: 'syz.1.671': attribute type 3 has an invalid length. [ 258.578004][ T8388] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 258.592357][ T8379] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.596957][ T8388] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.671'. [ 258.625355][ T8379] .`: (slave team0): Enslaving as an active interface with an up link [ 258.655173][ T8378] netlink: 'syz.3.667': attribute type 7 has an invalid length. [ 259.002220][ T8405] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.675'. [ 259.125570][ T8400] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.672'. [ 259.571694][ T8417] netlink: 'syz.0.677': attribute type 1 has an invalid length. [ 259.594653][ T8417] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.677'. [ 259.886761][ T8422] netlink: 60 bytes leftover after parsing attributes in process `syz.1.681'. [ 259.911112][ T8422] netlink: 60 bytes leftover after parsing attributes in process `syz.1.681'. [ 259.947384][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.681'. [ 260.764628][ T8442] netlink: 168 bytes leftover after parsing attributes in process `syz.2.688'. [ 260.822934][ T8446] netlink: 14 bytes leftover after parsing attributes in process `syz.0.689'. [ 261.129083][ T8445] netlink: 14 bytes leftover after parsing attributes in process `syz.0.689'. [ 261.665810][ T8471] netlink: 60 bytes leftover after parsing attributes in process `syz.1.697'. [ 262.127651][ T5780] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 262.529354][ T8485] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.700'. [ 266.198641][ T8537] netlink: 'syz.1.719': attribute type 21 has an invalid length. [ 266.841977][ T8555] syz.3.725[8555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.842266][ T8555] syz.3.725[8555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.960341][ T8559] netlink: 'syz.1.726': attribute type 9 has an invalid length. [ 267.024670][ T8559] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.726'. [ 267.528225][ T8573] : renamed from vlan1 (while UP) [ 268.273728][ T8587] netlink: 'syz.1.737': attribute type 10 has an invalid length. [ 268.326896][ T8587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.737'. [ 268.371073][ T8587] macvlan1: entered promiscuous mode [ 268.397591][ T8587] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 268.760500][ T8600] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.739'. [ 285.947847][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.957993][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.966981][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.976655][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.984646][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.992269][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.132452][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.141981][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.151083][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.159742][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.171445][ T5780] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 286.179190][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.323033][ T5783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 286.336834][ T5783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 286.345116][ T5783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 286.353572][ T5783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 286.362611][ T5783] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 286.371390][ T5783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 286.455005][ T5780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.464513][ T5780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.474015][ T5780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.482453][ T5780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.495792][ T5780] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 286.504481][ T5780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 288.106540][ T5780] Bluetooth: hci4: command tx timeout [ 288.268301][ T5780] Bluetooth: hci5: command tx timeout [ 288.426533][ T5780] Bluetooth: hci6: command tx timeout [ 288.586682][ T5780] Bluetooth: hci7: command tx timeout [ 290.196549][ T5780] Bluetooth: hci4: command tx timeout [ 290.352844][ T5780] Bluetooth: hci5: command tx timeout [ 290.506395][ T5780] Bluetooth: hci6: command tx timeout [ 290.666418][ T5780] Bluetooth: hci7: command tx timeout [ 292.266401][ T5780] Bluetooth: hci4: command tx timeout [ 292.446330][ T5780] Bluetooth: hci5: command tx timeout [ 292.586479][ T5780] Bluetooth: hci6: command tx timeout [ 292.756504][ T5780] Bluetooth: hci7: command tx timeout [ 294.365825][ T5783] Bluetooth: hci4: command tx timeout [ 294.516653][ T5780] Bluetooth: hci5: command tx timeout [ 294.666516][ T5780] Bluetooth: hci6: command tx timeout [ 294.826417][ T5780] Bluetooth: hci7: command tx timeout [ 317.403048][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.409742][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.452018][ T5081] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 346.461858][ T5081] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 346.470354][ T5081] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 346.480510][ T5081] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 346.517049][ T5081] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 346.525431][ T5081] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 346.534729][ T5081] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 346.544053][ T5081] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 346.554681][ T5772] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 346.583600][ T5772] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 346.591866][ T5772] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 346.600238][ T5772] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 346.727770][ T5783] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 346.738408][ T5783] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 346.747255][ T5783] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 346.758374][ T5783] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 346.770699][ T5783] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 346.779066][ T5783] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 347.258703][ T5772] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 347.273455][ T5772] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 347.294964][ T5772] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 347.304607][ T5772] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 347.318431][ T5772] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 347.326045][ T5772] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 348.586563][ T5783] Bluetooth: hci8: command tx timeout [ 348.666566][ T5783] Bluetooth: hci9: command tx timeout [ 348.826702][ T5783] Bluetooth: hci10: command tx timeout [ 349.386531][ T5783] Bluetooth: hci11: command tx timeout [ 350.715172][ T5783] Bluetooth: hci8: command tx timeout [ 350.746613][ T5783] Bluetooth: hci9: command tx timeout [ 350.906572][ T5783] Bluetooth: hci10: command tx timeout [ 351.466479][ T5783] Bluetooth: hci11: command tx timeout [ 352.746536][ T5783] Bluetooth: hci8: command tx timeout [ 352.827093][ T5783] Bluetooth: hci9: command tx timeout [ 352.986583][ T5783] Bluetooth: hci10: command tx timeout [ 353.546453][ T5783] Bluetooth: hci11: command tx timeout [ 354.828218][ T5783] Bluetooth: hci8: command tx timeout [ 354.907210][ T5783] Bluetooth: hci9: command tx timeout [ 355.066522][ T5783] Bluetooth: hci10: command tx timeout [ 355.626485][ T5783] Bluetooth: hci11: command tx timeout [ 386.848820][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.855309][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.186254][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 415.193025][ C1] rcu: 1-....: (10402 ticks this GP) idle=e54c/1/0x4000000000000000 softirq=23205/23208 fqs=4144 [ 415.204442][ C1] rcu: hardirqs softirqs csw/system [ 415.210872][ C1] rcu: number: 1357016 1 0 [ 415.217298][ C1] rcu: cputime: 15866 36622 43 ==> 52500(ms) [ 415.225278][ C1] rcu: (t=10502 jiffies g=26805 q=4946 ncpus=2) [ 415.231715][ C1] CPU: 1 PID: 8591 Comm: syz.2.739 Not tainted syzkaller #0 [ 415.239179][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.249249][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 415.256303][ C1] Code: 00 4d 85 e4 75 16 e8 95 c6 0f 00 eb 15 e8 8e c6 0f 00 e8 19 ca 0e 09 4d 85 e4 74 ea e8 7f c6 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 415.276674][ C1] RSP: 0018:ffffc900001ef4a0 EFLAGS: 00000246 [ 415.282851][ C1] RAX: ffffffff81775b51 RBX: 0000000000000000 RCX: ffff888079689e00 [ 415.290951][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.298924][ C1] RBP: ffffc900001ef558 R08: ffffffff911c45c7 R09: 1ffffffff22388b8 [ 415.307176][ C1] R10: dffffc0000000000 R11: fffffbfff22388b9 R12: 0000000000000200 [ 415.315430][ C1] R13: ffff88805dfc6a00 R14: 1ffff9200003de94 R15: dffffc0000000000 [ 415.323484][ C1] FS: 00007f293703a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 415.332524][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.339594][ C1] CR2: 000055dbbe40fc70 CR3: 000000002f87c000 CR4: 00000000003506e0 [ 415.347733][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.355998][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 415.364055][ C1] Call Trace: [ 415.367452][ C1] [ 415.370479][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 415.375857][ C1] ? __skb_clone+0x480/0x790 [ 415.381177][ C1] ktime_get_with_offset+0x103/0x330 [ 415.386946][ C1] dev_queue_xmit_nit+0x8ce/0xbb0 [ 415.392011][ C1] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 415.397313][ C1] dev_hard_start_xmit+0x148/0x740 [ 415.402536][ C1] sch_direct_xmit+0x25e/0x4c0 [ 415.407326][ C1] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 415.414052][ C1] ? __dev_queue_xmit+0x12cf/0x3660 [ 415.419678][ C1] __dev_queue_xmit+0x165d/0x3660 [ 415.425060][ C1] ? __dev_queue_xmit+0x265/0x3660 [ 415.430171][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.436416][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 415.441752][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.448130][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 415.453701][ C1] ? __asan_memcpy+0x40/0x70 [ 415.458423][ C1] ? eth_header+0x11b/0x200 [ 415.463080][ C1] ? llc_sysctl_exit+0x70/0x70 [ 415.467963][ C1] ? neigh_resolve_output+0x618/0x730 [ 415.473555][ C1] ? ip_finish_output2+0x457/0x11e0 [ 415.478956][ C1] ip_finish_output2+0xd3a/0x11e0 [ 415.484003][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.490178][ C1] ? ip_fragment+0x210/0x210 [ 415.495021][ C1] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 415.499887][ C1] ? ip_finish_output+0x3ef/0x4c0 [ 415.504933][ C1] ip_output+0x2a1/0x3b0 [ 415.509192][ C1] ? ip_output+0x60/0x3b0 [ 415.513517][ C1] ? __ip_queue_xmit+0x5d/0x1950 [ 415.518446][ C1] __ip_queue_xmit+0x1049/0x1950 [ 415.523404][ C1] ? __ip_queue_xmit+0x5d/0x1950 [ 415.528343][ C1] __tcp_transmit_skb+0x1d6b/0x33f0 [ 415.533546][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 415.538401][ C1] ? __tcp_send_ack+0xaa/0x5a0 [ 415.543261][ C1] ? __tcp_send_ack+0x176/0x5a0 [ 415.548197][ C1] tcp_rcv_established+0xb06/0x1d20 [ 415.553408][ C1] ? rt_is_expired+0x1c/0x2d0 [ 415.558173][ C1] ? rt_is_expired+0x235/0x2d0 [ 415.562933][ C1] ? tcp_check_space+0xad0/0xad0 [ 415.567874][ C1] ? rt_is_expired+0x1c/0x2d0 [ 415.572659][ C1] ? rt_is_expired+0x250/0x2d0 [ 415.577438][ C1] tcp_v4_do_rcv+0x4ed/0xb80 [ 415.582166][ C1] tcp_v4_rcv+0x23bf/0x2af0 [ 415.586949][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 415.591982][ C1] ? tcp_v4_rcv+0x10c1/0x2af0 [ 415.596953][ C1] ? tcp_filter+0x90/0x90 [ 415.601376][ C1] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 415.607013][ C1] ? ip_local_deliver_finish+0x1cb/0x510 [ 415.612746][ C1] ip_local_deliver_finish+0x2ca/0x510 [ 415.618408][ C1] NF_HOOK+0x32d/0x3b0 [ 415.622496][ C1] ? fib_multipath_hash+0x1b10/0x1b10 [ 415.627866][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 415.632196][ C1] ? NF_HOOK+0x9f/0x3b0 [ 415.636350][ C1] ? ip_local_deliver+0x1b0/0x1b0 [ 415.641471][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 415.645833][ C1] ? ip_rcv_finish_core+0xd92/0x1bd0 [ 415.651137][ C1] ? ip_local_deliver+0x122/0x1b0 [ 415.656275][ C1] ip_sublist_rcv+0xa4c/0xd70 [ 415.661061][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 415.666382][ C1] ? ip_list_rcv+0x440/0x440 [ 415.671015][ C1] ? ip_rcv_core+0xdb0/0xdb0 [ 415.675799][ C1] ip_list_rcv+0x3f2/0x440 [ 415.680325][ C1] ? ip_rcv_finish+0x250/0x250 [ 415.685105][ C1] ? ip_rcv_finish+0x250/0x250 [ 415.689981][ C1] __netif_receive_skb_list_core+0x583/0x750 [ 415.696089][ C1] ? set_rps_cpu+0x6a0/0x6a0 [ 415.700876][ C1] ? read_tsc+0x9/0x20 [ 415.705049][ C1] netif_receive_skb_list_internal+0x943/0xca0 [ 415.711346][ C1] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 415.718011][ C1] ? dev_gro_receive+0x10ce/0x22c0 [ 415.723131][ C1] ? netif_receive_skb_core+0x230/0x230 [ 415.728696][ C1] napi_gro_receive+0x565/0xb00 [ 415.733554][ C1] receive_buf+0x2203/0x3820 [ 415.738155][ C1] ? virtnet_poll_tx+0x530/0x530 [ 415.743165][ C1] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 415.748718][ C1] virtnet_poll+0x5dd/0x1280 [ 415.753490][ C1] ? refill_work+0x220/0x220 [ 415.758165][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.764317][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 415.769694][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.775853][ C1] __napi_poll+0xc0/0x460 [ 415.780181][ C1] net_rx_action+0x616/0xc40 [ 415.784779][ C1] ? net_tx_action+0x980/0x980 [ 415.789543][ C1] ? detach_timer+0x2b0/0x2b0 [ 415.794245][ C1] handle_softirqs+0x280/0x820 [ 415.799095][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 415.804046][ C1] ? do_softirq+0x1a0/0x1a0 [ 415.808694][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 415.814024][ C1] __irq_exit_rcu+0xd3/0x190 [ 415.818799][ C1] ? irq_exit_rcu+0x20/0x20 [ 415.823313][ C1] irq_exit_rcu+0x9/0x20 [ 415.827763][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 415.833496][ C1] [ 415.836425][ C1] [ 415.839465][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.845539][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 415.851368][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 b0 63 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 415.871177][ C1] RSP: 0018:ffffc90019de7758 EFLAGS: 00000282 [ 415.877442][ C1] RAX: 2e9ab85a6bbb9200 RBX: 0000000000000000 RCX: 2e9ab85a6bbb9200 [ 415.885699][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 415.893685][ C1] RBP: ffffc90019de77b0 R08: ffffffff911c45ff R09: 1ffffffff22388bf [ 415.901650][ C1] R10: dffffc0000000000 R11: fffffbfff22388c0 R12: ffff888079689e00 [ 415.909700][ C1] R13: dffffc0000000000 R14: ffff88801ca45a00 R15: ffff8880b8f3cac8 [ 415.917677][ C1] ? finish_task_switch+0x265/0x8f0 [ 415.922878][ C1] __schedule+0x155b/0x45a0 [ 415.927564][ C1] ? mark_lock+0x94/0x320 [ 415.931889][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 415.937864][ C1] ? lock_chain_count+0x20/0x20 [ 415.942881][ C1] ? asan.module_dtor+0x20/0x20 [ 415.947738][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.953910][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 415.959130][ C1] ? preempt_schedule+0xc0/0xd0 [ 415.964085][ C1] preempt_schedule_common+0x82/0xc0 [ 415.969370][ C1] preempt_schedule+0xc0/0xd0 [ 415.974162][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 415.979991][ C1] ? event_function+0x300/0x300 [ 415.984855][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 415.990671][ C1] preempt_schedule_thunk+0x1a/0x30 [ 415.995881][ C1] ? smp_call_function_single+0x488/0x5a0 [ 416.001606][ C1] smp_call_function_single+0x48d/0x5a0 [ 416.007347][ C1] ? event_function+0x300/0x300 [ 416.012207][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 416.018378][ C1] ? event_function+0x300/0x300 [ 416.023302][ C1] perf_install_in_context+0x5be/0x920 [ 416.028884][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 416.034875][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 416.040428][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 416.045731][ C1] ? perf_event__header_size+0x165/0x220 [ 416.051364][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 416.057087][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 416.062809][ C1] ? lock_chain_count+0x20/0x20 [ 416.067750][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 416.073233][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 416.078911][ C1] do_syscall_64+0x55/0xa0 [ 416.083345][ C1] ? clear_bhb_loop+0x40/0x90 [ 416.088139][ C1] ? clear_bhb_loop+0x40/0x90 [ 416.092824][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.098825][ C1] RIP: 0033:0x7f293619c819 [ 416.103397][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.123795][ C1] RSP: 002b:00007f293703a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 416.132739][ C1] RAX: ffffffffffffffda RBX: 00007f2936415fa0 RCX: 00007f293619c819 [ 416.140710][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 416.148678][ C1] RBP: 00007f2936232c91 R08: 0000000000000000 R09: 0000000000000000 [ 416.156828][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 416.165085][ C1] R13: 00007f2936416038 R14: 00007f2936415fa0 R15: 00007ffc989461b8 [ 416.174059][ C1]