last executing test programs: 4m14.738121679s ago: executing program 0 (id=435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18040000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006208000000000000180000000003000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/218, 0x0, 0x8}, 0x24) 4m13.881352772s ago: executing program 0 (id=437): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x5, 0xd, 0x5, 0x0, 0x4, 0x78d39, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x4}, 0x2, 0x1000000000000003, 0x2207, 0x0, 0x81, 0x2002005, 0x6, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0x8000000000d, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 4m13.098965175s ago: executing program 0 (id=440): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) 4m11.787886296s ago: executing program 0 (id=444): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='ext4_remove_blocks\x00'}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES8, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080)=r5, 0x12) 4m7.295010877s ago: executing program 0 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 4m5.961624588s ago: executing program 0 (id=462): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r2, 0x8982, 0x20000500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="1e00004000120000005000002df0acd92e93529179c14230e8269e17d57a82f7df69650ec6c8111e5d20aef880d5d7f2d1cd6fe47bc02e5b08c98b35ca8c9a7964f45f0b427fa1aebf962f2796454c84b41061a29aadd10286941db10bc21cbaf827e43bffb5c0ab13370eb4651e2a00fbcf22fd9b782c4f60eb0b195e520ec1dc55fcc4efe28ba2989037f0f945842c9d0cd5df95c4664ae9617698b6937b0cae46b03053870cd4aa3b4cbc94512c42676ce8f32df2e6302789e65857eb95fd342af4badef2d75c11a3ef2fa2011285e4ec24c0815cd105e289df7418d4a342fdcc42", @ANYRES64], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000e1e}, 0x50) openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="2d63707520a2fbfdbd963e6d6d64aa34d4236f3a28a3c4cecafd11885981b6388708f0789613be46592d079c548d646886"], 0x5) 3m50.574632221s ago: executing program 32 (id=462): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r2, 0x8982, 0x20000500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="1e00004000120000005000002df0acd92e93529179c14230e8269e17d57a82f7df69650ec6c8111e5d20aef880d5d7f2d1cd6fe47bc02e5b08c98b35ca8c9a7964f45f0b427fa1aebf962f2796454c84b41061a29aadd10286941db10bc21cbaf827e43bffb5c0ab13370eb4651e2a00fbcf22fd9b782c4f60eb0b195e520ec1dc55fcc4efe28ba2989037f0f945842c9d0cd5df95c4664ae9617698b6937b0cae46b03053870cd4aa3b4cbc94512c42676ce8f32df2e6302789e65857eb95fd342af4badef2d75c11a3ef2fa2011285e4ec24c0815cd105e289df7418d4a342fdcc42", @ANYRES64], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000e1e}, 0x50) openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="2d63707520a2fbfdbd963e6d6d64aa34d4236f3a28a3c4cecafd11885981b6388708f0789613be46592d079c548d646886"], 0x5) 3m39.799701181s ago: executing program 2 (id=556): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 3m39.599750954s ago: executing program 2 (id=559): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2, r1}, 0xc) 3m39.505395776s ago: executing program 2 (id=562): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)={'c', ' *:* ', 'rm\x00'}, 0x9) openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) 3m39.328110529s ago: executing program 2 (id=563): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r1 = socket$kcm(0x18, 0x0, 0x2) recvmsg$kcm(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r3, 0x29, 0x22, &(0x7f0000000100)=r4, 0x120) 3m39.171927431s ago: executing program 2 (id=566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) close(r3) 3m38.967098655s ago: executing program 2 (id=568): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x42}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m23.40444493s ago: executing program 33 (id=568): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x42}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m58.012747031s ago: executing program 5 (id=674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, 0x0) unlink(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m57.029176786s ago: executing program 5 (id=676): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc309}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000bc0), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x25, 0x0, 0x2, 0x80ffffff}, {}, {0x6}]}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) 2m56.267125549s ago: executing program 5 (id=680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2m55.672846048s ago: executing program 5 (id=681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='memory.numa_stat\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)=0x6c0000000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='rss_stat\x00'}, 0x18) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m54.162039302s ago: executing program 5 (id=696): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000008c0)=""/155, 0x9b}], 0x1, &(0x7f0000000980)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x4020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 2m53.692534979s ago: executing program 5 (id=700): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[@ANYBLOB="9feb0100180000000000000030000000"], 0x0, 0x4d, 0x0, 0x3, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000001380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}, 0x0, 0x6d99, 0x0, 0x0, 0x400fffffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 2m38.288725602s ago: executing program 34 (id=700): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[@ANYBLOB="9feb0100180000000000000030000000"], 0x0, 0x4d, 0x0, 0x3, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000001380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}, 0x0, 0x6d99, 0x0, 0x0, 0x400fffffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 1m29.143249303s ago: executing program 7 (id=1181): recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f00000047c0)=""/4051, 0xfd3}, {&(0x7f00000037c0)=""/4079, 0xfef}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f0000000580)=""/148, 0x94}, {&(0x7f00000006c0)=""/177, 0xb1}], 0x6}, 0x40000100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046bf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe8600000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 1m29.028188305s ago: executing program 7 (id=1182): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000d6080000000000008500000007000000b700"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m28.988962136s ago: executing program 7 (id=1183): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000000000003"], 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000280)="39000000140081ae0000dc676f97daf01effffff0521018701546fabca1b4e8a06a6580e88370200c5090000009c40ebb3734b49bbc51245e7", 0x39}], 0x1}, 0x0) 1m28.890960417s ago: executing program 7 (id=1184): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {0x0}, {&(0x7f0000000500)=""/79, 0x4f}, {&(0x7f0000000780)}], 0x4, &(0x7f0000000b80)=""/82, 0x52}, 0x0) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2) 1m27.903164573s ago: executing program 7 (id=1194): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000000000003"], 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000280)="39000000140081ae0000dc676f97daf01effffff0521018701546fabca1b4e8a06a6580e88370200c5090000009c40ebb3734b49bbc51245e7", 0x39}], 0x1}, 0x0) 1m27.738886706s ago: executing program 7 (id=1197): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000a80)={0x0, 0xfffffe41, 0x0, 0x0, 0x0, 0x29, 0x40400c0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xbe3, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) openat$cgroup_ro(r5, &(0x7f00000003c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xe, &(0x7f0000001dc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566, @ANYRESDEC=r0, @ANYBLOB="5c9d948a440084cd2f8a4c6df5d47a02da8279197a689bd5b704e4aa7b41dfe2f91b3a22b4936d8b0b533697ba0388729a7fe5d5f37a0c455bc426869bf8e0668ac3e5ba2eded9b4349ef4776114617f0e4ed6d625280584a724002d391bdb868a0338e2eea7812681d9afc71f5c2e246a2da587", @ANYRESHEX=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r7, @ANYRES16, @ANYBLOB="fa8b8f11085da7bdfd96cf0cf5b8c7960b314057c79691f99476b8047bf74bac63582bc9f9ffb37991e2cdb4602def463c323f1b3da34850f259820d26723e0356ee02bf2cd6031527749c6a58df2cf5e244679c1e93f8d402e3dc19ead3d90a048ebc90261840e5f08357fc0922731a5e36e17dd336fcff7251cff40f9f8fc1c77b4a160a60a9e131b8deaa205551d0ac6edfdc3a89396ff4bb245d912f9586f645f38aa0f53e33b19798b7f531ebcab8b7f303e19145edc2bbf005e3ff3908b4a9fbc11d6538ed142c7c44cb1570953d712c71938ce59adc", @ANYBLOB], 0x50) r8 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000440)=0xffc, 0x49) r9 = openat$cgroup_procs(r5, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0)=r0, 0x12) syz_clone(0x62005000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 1m12.598128475s ago: executing program 35 (id=1197): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000a80)={0x0, 0xfffffe41, 0x0, 0x0, 0x0, 0x29, 0x40400c0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xbe3, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) openat$cgroup_ro(r5, &(0x7f00000003c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xe, &(0x7f0000001dc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566, @ANYRESDEC=r0, @ANYBLOB="5c9d948a440084cd2f8a4c6df5d47a02da8279197a689bd5b704e4aa7b41dfe2f91b3a22b4936d8b0b533697ba0388729a7fe5d5f37a0c455bc426869bf8e0668ac3e5ba2eded9b4349ef4776114617f0e4ed6d625280584a724002d391bdb868a0338e2eea7812681d9afc71f5c2e246a2da587", @ANYRESHEX=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r7, @ANYRES16, @ANYBLOB="fa8b8f11085da7bdfd96cf0cf5b8c7960b314057c79691f99476b8047bf74bac63582bc9f9ffb37991e2cdb4602def463c323f1b3da34850f259820d26723e0356ee02bf2cd6031527749c6a58df2cf5e244679c1e93f8d402e3dc19ead3d90a048ebc90261840e5f08357fc0922731a5e36e17dd336fcff7251cff40f9f8fc1c77b4a160a60a9e131b8deaa205551d0ac6edfdc3a89396ff4bb245d912f9586f645f38aa0f53e33b19798b7f531ebcab8b7f303e19145edc2bbf005e3ff3908b4a9fbc11d6538ed142c7c44cb1570953d712c71938ce59adc", @ANYBLOB], 0x50) r8 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000440)=0xffc, 0x49) r9 = openat$cgroup_procs(r5, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0)=r0, 0x12) syz_clone(0x62005000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 4.47208759s ago: executing program 4 (id=2037): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x0, 0xec, 0x5, &(0x7f0000000700)="205d7a1f941e6b630e7f5660ec379f1a21b02acbf17c17f1c434e92df55aba81cd2682a3057a39332b8d819f344bc0edfe029af7265e962182da0b46eec71de7360682075ff93e844d7b07242f6a2f7b10cdc58067e53e364355e62a73e4654f0eb5017288344b0b5b0c55fa2dbe9d0c7a7740b045631fc583739e172ad180250a0e492dd29c556ee663d0c8a73dc2054c364b26000a6365a3fde650472079aa87037935b407d355fb75fd6ce344888d735f6a65333c57b59eaccfbae009ad0c7c2a7d53f1db3aed795a33f756d8d07ef9a4dc578b8fb990600000b1468776e9128adfd11490b2efb1b45acf", &(0x7f0000000800)=""/5, 0x200, 0x0, 0xe4, 0x0, &(0x7f0000000840)="d094943c99a0d8a3de8beddb7efaac54bfef6c4aec02c3771ac66d9e869340408f6281bb1b9ee3ca942ed5e9319c8e3da65326d5e9b59c842ef2e2246a4627364fee43ce49d4493cba424dd7454e15faf96182a3cd3e87e714cb20a51438a2f514c10663426114e7db325e6d45f56dbb1dfe88a59e179375c4e5c3f0ca9ed871457def9c2d0f0f19926e4ea84884687a0a8635adfcbe8f83aea98ad63586a5b81ac1b35fd71eb5347f0298ad124674ff5f932797841ee734f06ca8c38e69fd10e99b673639bba2201aace2f47f2e5fe4d15d7d7b8032b2762bbcbcf2d95f5f5a592b504a", &(0x7f0000000940), 0x6b11153b7964c0dd, 0x0, 0x210f}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d8000000ba0d0505040a003f00000f040b067c55a1bc0009001e00067e0300000015000500fe800000000000000300014002000c0901ac04000bd66f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81e60b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a", 0xbb}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 3.988702007s ago: executing program 1 (id=2041): write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000000500000085000000a00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0xf2, 0x1, 0x7ff, 0x38024, r2, 0x4, '\x00', 0x0, r2, 0x0, 0x4, 0x0, 0x0, @value=r2, @void, @value=r2}, 0x50) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/user\x00') close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 3.952302178s ago: executing program 4 (id=2042): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x4, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r2, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040c04) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 2.958782514s ago: executing program 4 (id=2054): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r2, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040c04) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 2.617522979s ago: executing program 3 (id=2057): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x400, 0x4000000000ca, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0xa, 0x2, 0x3a) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$kcm(0x1e, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 2.616651479s ago: executing program 6 (id=2058): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {0x0}, {&(0x7f0000000500)=""/79, 0x4f}, {&(0x7f0000000780)}], 0x4, &(0x7f0000000b80)=""/82, 0x52}, 0x0) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2) 2.507609221s ago: executing program 3 (id=2060): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x4, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r2, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040c04) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 2.433483762s ago: executing program 8 (id=2061): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x0, 0xec, 0x5, &(0x7f0000000700)="205d7a1f941e6b630e7f5660ec379f1a21b02acbf17c17f1c434e92df55aba81cd2682a3057a39332b8d819f344bc0edfe029af7265e962182da0b46eec71de7360682075ff93e844d7b07242f6a2f7b10cdc58067e53e364355e62a73e4654f0eb5017288344b0b5b0c55fa2dbe9d0c7a7740b045631fc583739e172ad180250a0e492dd29c556ee663d0c8a73dc2054c364b26000a6365a3fde650472079aa87037935b407d355fb75fd6ce344888d735f6a65333c57b59eaccfbae009ad0c7c2a7d53f1db3aed795a33f756d8d07ef9a4dc578b8fb990600000b1468776e9128adfd11490b2efb1b45acf", &(0x7f0000000800)=""/5, 0x200, 0x0, 0xe4, 0x0, &(0x7f0000000840)="d094943c99a0d8a3de8beddb7efaac54bfef6c4aec02c3771ac66d9e869340408f6281bb1b9ee3ca942ed5e9319c8e3da65326d5e9b59c842ef2e2246a4627364fee43ce49d4493cba424dd7454e15faf96182a3cd3e87e714cb20a51438a2f514c10663426114e7db325e6d45f56dbb1dfe88a59e179375c4e5c3f0ca9ed871457def9c2d0f0f19926e4ea84884687a0a8635adfcbe8f83aea98ad63586a5b81ac1b35fd71eb5347f0298ad124674ff5f932797841ee734f06ca8c38e69fd10e99b673639bba2201aace2f47f2e5fe4d15d7d7b8032b2762bbcbcf2d95f5f5a592b504a", &(0x7f0000000940), 0x6b11153b7964c0dd, 0x0, 0x210f}, 0x50) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000006c0)='$,&+\x00') setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 2.396502583s ago: executing program 6 (id=2062): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x0, 0xec, 0x5, &(0x7f0000000700)="205d7a1f941e6b630e7f5660ec379f1a21b02acbf17c17f1c434e92df55aba81cd2682a3057a39332b8d819f344bc0edfe029af7265e962182da0b46eec71de7360682075ff93e844d7b07242f6a2f7b10cdc58067e53e364355e62a73e4654f0eb5017288344b0b5b0c55fa2dbe9d0c7a7740b045631fc583739e172ad180250a0e492dd29c556ee663d0c8a73dc2054c364b26000a6365a3fde650472079aa87037935b407d355fb75fd6ce344888d735f6a65333c57b59eaccfbae009ad0c7c2a7d53f1db3aed795a33f756d8d07ef9a4dc578b8fb990600000b1468776e9128adfd11490b2efb1b45acf", &(0x7f0000000800)=""/5, 0x200, 0x0, 0xe4, 0x0, &(0x7f0000000840)="d094943c99a0d8a3de8beddb7efaac54bfef6c4aec02c3771ac66d9e869340408f6281bb1b9ee3ca942ed5e9319c8e3da65326d5e9b59c842ef2e2246a4627364fee43ce49d4493cba424dd7454e15faf96182a3cd3e87e714cb20a51438a2f514c10663426114e7db325e6d45f56dbb1dfe88a59e179375c4e5c3f0ca9ed871457def9c2d0f0f19926e4ea84884687a0a8635adfcbe8f83aea98ad63586a5b81ac1b35fd71eb5347f0298ad124674ff5f932797841ee734f06ca8c38e69fd10e99b673639bba2201aace2f47f2e5fe4d15d7d7b8032b2762bbcbcf2d95f5f5a592b504a", &(0x7f0000000940), 0x6b11153b7964c0dd, 0x0, 0x210f}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d8000000ba0d0505040a003f00000f040b067c55a1bc0009001e00067e0300000015000500fe800000000000000300014002000c0901ac04000bd66f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81e60b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a", 0xbb}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000006c0)='$,&+\x00') r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x10, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 2.385488443s ago: executing program 4 (id=2063): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x3ff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) close(r0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000200"], 0x50) close(0x3) 2.196950666s ago: executing program 6 (id=2064): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000bc0)=""/286, 0x11e}, {&(0x7f0000000d00)=""/222, 0xde}, {&(0x7f0000003100)=""/4056, 0xfd8}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f00000006c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/206, 0xce}, {0x0}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000f00)=""/216, 0xd8}, {&(0x7f0000000b00)=""/172, 0xac}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000a40)=""/140, 0x8c}], 0xc}, 0x40012100) 2.093314827s ago: executing program 6 (id=2065): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xd6, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.055691438s ago: executing program 1 (id=2066): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x4, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3ee901"], 0x9a) 1.995860649s ago: executing program 8 (id=2067): mkdir(0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x2}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0x0, 0x8, 0x0, 0x0, 0x802}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.92924589s ago: executing program 3 (id=2068): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) openat$tun(0xffffffffffffff9c, 0x0, 0x1c9042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20a1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0xff}, 0x4104, 0x7fffffff, 0x2, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.803502742s ago: executing program 8 (id=2069): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x0, 0xec, 0x5, &(0x7f0000000700)="205d7a1f941e6b630e7f5660ec379f1a21b02acbf17c17f1c434e92df55aba81cd2682a3057a39332b8d819f344bc0edfe029af7265e962182da0b46eec71de7360682075ff93e844d7b07242f6a2f7b10cdc58067e53e364355e62a73e4654f0eb5017288344b0b5b0c55fa2dbe9d0c7a7740b045631fc583739e172ad180250a0e492dd29c556ee663d0c8a73dc2054c364b26000a6365a3fde650472079aa87037935b407d355fb75fd6ce344888d735f6a65333c57b59eaccfbae009ad0c7c2a7d53f1db3aed795a33f756d8d07ef9a4dc578b8fb990600000b1468776e9128adfd11490b2efb1b45acf", &(0x7f0000000800)=""/5, 0x200, 0x0, 0xe4, 0x0, &(0x7f0000000840)="d094943c99a0d8a3de8beddb7efaac54bfef6c4aec02c3771ac66d9e869340408f6281bb1b9ee3ca942ed5e9319c8e3da65326d5e9b59c842ef2e2246a4627364fee43ce49d4493cba424dd7454e15faf96182a3cd3e87e714cb20a51438a2f514c10663426114e7db325e6d45f56dbb1dfe88a59e179375c4e5c3f0ca9ed871457def9c2d0f0f19926e4ea84884687a0a8635adfcbe8f83aea98ad63586a5b81ac1b35fd71eb5347f0298ad124674ff5f932797841ee734f06ca8c38e69fd10e99b673639bba2201aace2f47f2e5fe4d15d7d7b8032b2762bbcbcf2d95f5f5a592b504a", &(0x7f0000000940), 0x6b11153b7964c0dd, 0x0, 0x210f}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d8000000ba0d0505040a003f00000f040b067c55a1bc0009001e00067e0300000015000500fe800000000000000300014002000c0901ac04000bd66f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81e60b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a", 0xbb}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1.803368012s ago: executing program 3 (id=2070): r0 = socket$kcm(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f00000047c0)=""/4051, 0xfd3}, {&(0x7f00000037c0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f0000000580)=""/148, 0x94}, {&(0x7f00000006c0)=""/177, 0xb1}], 0x6}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 1.677447744s ago: executing program 1 (id=2071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.557348786s ago: executing program 1 (id=2072): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {0x0}, {&(0x7f0000000500)=""/79, 0x4f}, {&(0x7f0000000780)}], 0x4, &(0x7f0000000b80)=""/82, 0x52}, 0x0) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2) 1.533367897s ago: executing program 8 (id=2073): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r2, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040c04) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 1.447400918s ago: executing program 1 (id=2074): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x8000, 0x1c}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0xfffffffffffffd96) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/11, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x1000, 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.398309579s ago: executing program 4 (id=2075): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x0, 0xec, 0x5, &(0x7f0000000700)="205d7a1f941e6b630e7f5660ec379f1a21b02acbf17c17f1c434e92df55aba81cd2682a3057a39332b8d819f344bc0edfe029af7265e962182da0b46eec71de7360682075ff93e844d7b07242f6a2f7b10cdc58067e53e364355e62a73e4654f0eb5017288344b0b5b0c55fa2dbe9d0c7a7740b045631fc583739e172ad180250a0e492dd29c556ee663d0c8a73dc2054c364b26000a6365a3fde650472079aa87037935b407d355fb75fd6ce344888d735f6a65333c57b59eaccfbae009ad0c7c2a7d53f1db3aed795a33f756d8d07ef9a4dc578b8fb990600000b1468776e9128adfd11490b2efb1b45acf", &(0x7f0000000800)=""/5, 0x200, 0x0, 0xe4, 0x0, &(0x7f0000000840)="d094943c99a0d8a3de8beddb7efaac54bfef6c4aec02c3771ac66d9e869340408f6281bb1b9ee3ca942ed5e9319c8e3da65326d5e9b59c842ef2e2246a4627364fee43ce49d4493cba424dd7454e15faf96182a3cd3e87e714cb20a51438a2f514c10663426114e7db325e6d45f56dbb1dfe88a59e179375c4e5c3f0ca9ed871457def9c2d0f0f19926e4ea84884687a0a8635adfcbe8f83aea98ad63586a5b81ac1b35fd71eb5347f0298ad124674ff5f932797841ee734f06ca8c38e69fd10e99b673639bba2201aace2f47f2e5fe4d15d7d7b8032b2762bbcbcf2d95f5f5a592b504a", &(0x7f0000000940), 0x6b11153b7964c0dd, 0x0, 0x210f}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d8000000ba0d0505040a003f00000f040b067c55a1bc0009001e00067e0300000015000500fe800000000000000300014002000c0901ac04000bd66f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81e60b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a", 0xbb}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000006c0)='$,&+\x00') r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x10, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1.134743152s ago: executing program 6 (id=2076): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x0, 0xec, 0x5, &(0x7f0000000700)="205d7a1f941e6b630e7f5660ec379f1a21b02acbf17c17f1c434e92df55aba81cd2682a3057a39332b8d819f344bc0edfe029af7265e962182da0b46eec71de7360682075ff93e844d7b07242f6a2f7b10cdc58067e53e364355e62a73e4654f0eb5017288344b0b5b0c55fa2dbe9d0c7a7740b045631fc583739e172ad180250a0e492dd29c556ee663d0c8a73dc2054c364b26000a6365a3fde650472079aa87037935b407d355fb75fd6ce344888d735f6a65333c57b59eaccfbae009ad0c7c2a7d53f1db3aed795a33f756d8d07ef9a4dc578b8fb990600000b1468776e9128adfd11490b2efb1b45acf", &(0x7f0000000800)=""/5, 0x200, 0x0, 0xe4, 0x0, &(0x7f0000000840)="d094943c99a0d8a3de8beddb7efaac54bfef6c4aec02c3771ac66d9e869340408f6281bb1b9ee3ca942ed5e9319c8e3da65326d5e9b59c842ef2e2246a4627364fee43ce49d4493cba424dd7454e15faf96182a3cd3e87e714cb20a51438a2f514c10663426114e7db325e6d45f56dbb1dfe88a59e179375c4e5c3f0ca9ed871457def9c2d0f0f19926e4ea84884687a0a8635adfcbe8f83aea98ad63586a5b81ac1b35fd71eb5347f0298ad124674ff5f932797841ee734f06ca8c38e69fd10e99b673639bba2201aace2f47f2e5fe4d15d7d7b8032b2762bbcbcf2d95f5f5a592b504a", &(0x7f0000000940), 0x6b11153b7964c0dd, 0x0, 0x210f}, 0x50) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000006c0)='$,&+\x00') setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 877.264787ms ago: executing program 3 (id=2077): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x20810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000001, 0xfffffffffffffffe}, 0x8000, 0x0, 0x0, 0x6, 0x61, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 876.165157ms ago: executing program 4 (id=2078): write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000000500000085000000a00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0xf2, 0x1, 0x7ff, 0x38024, r2, 0x4, '\x00', 0x0, r2, 0x0, 0x4, 0x0, 0x0, @value=r2, @void, @value=r2}, 0x50) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/user\x00') close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 728.806509ms ago: executing program 8 (id=2079): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) openat$tun(0xffffffffffffff9c, 0x0, 0x1c9042, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20a1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0xff}, 0x4104, 0x7fffffff, 0x2, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 524.826672ms ago: executing program 6 (id=2080): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x4, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r2, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040c04) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 524.628822ms ago: executing program 3 (id=2081): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x4, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3ee901"], 0x9a) 317.779326ms ago: executing program 8 (id=2082): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 0s ago: executing program 1 (id=2083): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x0, 0xec, 0x5, &(0x7f0000000700)="205d7a1f941e6b630e7f5660ec379f1a21b02acbf17c17f1c434e92df55aba81cd2682a3057a39332b8d819f344bc0edfe029af7265e962182da0b46eec71de7360682075ff93e844d7b07242f6a2f7b10cdc58067e53e364355e62a73e4654f0eb5017288344b0b5b0c55fa2dbe9d0c7a7740b045631fc583739e172ad180250a0e492dd29c556ee663d0c8a73dc2054c364b26000a6365a3fde650472079aa87037935b407d355fb75fd6ce344888d735f6a65333c57b59eaccfbae009ad0c7c2a7d53f1db3aed795a33f756d8d07ef9a4dc578b8fb990600000b1468776e9128adfd11490b2efb1b45acf", &(0x7f0000000800)=""/5, 0x200, 0x0, 0xe4, 0x0, &(0x7f0000000840)="d094943c99a0d8a3de8beddb7efaac54bfef6c4aec02c3771ac66d9e869340408f6281bb1b9ee3ca942ed5e9319c8e3da65326d5e9b59c842ef2e2246a4627364fee43ce49d4493cba424dd7454e15faf96182a3cd3e87e714cb20a51438a2f514c10663426114e7db325e6d45f56dbb1dfe88a59e179375c4e5c3f0ca9ed871457def9c2d0f0f19926e4ea84884687a0a8635adfcbe8f83aea98ad63586a5b81ac1b35fd71eb5347f0298ad124674ff5f932797841ee734f06ca8c38e69fd10e99b673639bba2201aace2f47f2e5fe4d15d7d7b8032b2762bbcbcf2d95f5f5a592b504a", &(0x7f0000000940), 0x6b11153b7964c0dd, 0x0, 0x210f}, 0x50) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000006c0)='$,&+\x00') setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) kernel console output (not intermixed with test programs): RCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.502901][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.529102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 340.540269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.566561][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.591934][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 340.600473][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.614563][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.636205][ T4314] device veth0_macvtap entered promiscuous mode [ 340.645520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 340.654688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.664377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.673359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.680783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 340.694704][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.705784][ T4311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.715563][ T4311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.724561][ T4311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.734441][ T4311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.755957][ T4314] device veth1_macvtap entered promiscuous mode [ 340.765633][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 340.774475][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 340.785192][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.805982][ T4315] device veth0_vlan entered promiscuous mode [ 340.848257][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 340.856379][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 340.864547][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 340.873360][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.898712][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.909495][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.928528][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.939083][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.950069][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.962376][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.975274][ T4315] device veth1_vlan entered promiscuous mode [ 340.988035][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.996861][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.007169][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 341.015900][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.025059][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.033882][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.048412][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.057105][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.066438][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.074333][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.083487][ T4314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.092514][ T4314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.101689][ T4314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.110368][ T4314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.128046][ T4307] device veth0_vlan entered promiscuous mode [ 341.178068][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.189927][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.220777][ T4307] device veth1_vlan entered promiscuous mode [ 341.233623][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.242710][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.250342][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.259659][ T4319] device veth0_vlan entered promiscuous mode [ 341.299224][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.311163][ T4310] Bluetooth: hci0: command 0x040f tx timeout [ 341.319347][ T4315] device veth0_macvtap entered promiscuous mode [ 341.325702][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.347508][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 341.355866][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.366239][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.374757][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.381285][ T4310] Bluetooth: hci1: command 0x040f tx timeout [ 341.383638][ T4319] device veth1_vlan entered promiscuous mode [ 341.422813][ T4315] device veth1_macvtap entered promiscuous mode [ 341.429823][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.438749][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 341.448696][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 341.460927][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.470072][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.489224][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.497104][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.497148][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.497156][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.497167][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.498291][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.545864][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.546025][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 341.553296][ T4310] Bluetooth: hci2: command 0x040f tx timeout [ 341.559230][ T4308] Bluetooth: hci3: command 0x040f tx timeout [ 341.577759][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.589174][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.600300][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.610885][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.623313][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.634191][ T4315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.643050][ T4315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.652085][ T4315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.660780][ T4315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.675888][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 341.684114][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 341.692647][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 341.701231][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.709997][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 341.719780][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.740625][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.748841][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.757825][ T4307] device veth0_macvtap entered promiscuous mode [ 341.780312][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 341.795496][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.835687][ T4319] device veth0_macvtap entered promiscuous mode [ 341.870228][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.884662][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.897463][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 341.911746][ T4319] device veth1_macvtap entered promiscuous mode [ 341.922009][ T4307] device veth1_macvtap entered promiscuous mode [ 341.940456][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.957982][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.970852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 342.005174][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.025681][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.036369][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.036821][ T4423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 342.046872][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.046885][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.046898][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.048307][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.097723][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.108760][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.118821][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.129431][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.140346][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.151679][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.162774][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.174931][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.187088][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.198450][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.211265][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.221150][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.231914][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.242928][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.253731][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.265965][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.279060][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.290898][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.301149][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.311893][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.321985][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.332543][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.342962][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.353523][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.369927][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.377887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.386889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.396584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.405155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.415574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.425504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.434570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.443635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.452698][ T4423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 342.462406][ T4424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 342.488714][ T4307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.502994][ T4307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.533278][ T4307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.544111][ T4307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.584430][ T4319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.607058][ T4319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.637334][ T4319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.658082][ T4319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.678531][ T4308] Bluetooth: hci2: unknown advertising packet type: 0xff [ 342.678588][ T4308] Bluetooth: hci2: Malformed LE Event: 0x02 [ 342.728948][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.737043][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.779223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 342.885379][ T4430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 342.891538][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.927338][ T4430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 342.929504][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.953750][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 342.965008][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.977481][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.996379][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.027401][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.030609][ T4430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 343.047431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.057458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.097647][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.099439][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.118366][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.164456][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.175262][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.185081][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.209636][ T4438] netlink: 'syz.2.3': attribute type 13 has an invalid length. [ 343.219679][ T4438] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3'. [ 343.386768][ T4308] Bluetooth: hci0: command 0x0419 tx timeout [ 343.426341][ C1] hrtimer: interrupt took 48838 ns [ 343.468695][ T4308] Bluetooth: hci1: command 0x0419 tx timeout [ 343.623883][ T4308] Bluetooth: hci2: command 0x0419 tx timeout [ 343.631445][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 343.631532][ T4310] Bluetooth: hci4: command 0x0419 tx timeout [ 343.920663][ T4456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 343.970709][ T4456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 344.066483][ T4310] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 344.333667][ T4454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 344.570609][ T4473] syz.3.19[4473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.570710][ T4473] syz.3.19[4473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.176061][ T4482] netlink: 'syz.1.24': attribute type 28 has an invalid length. [ 345.239070][ T4497] netlink: 'syz.4.29': attribute type 7 has an invalid length. [ 345.727568][ T4515] Zero length message leads to an empty skb [ 345.790141][ T4515] device sit0 entered promiscuous mode [ 346.119119][ T4529] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 346.472951][ T4537] netlink: 'syz.0.42': attribute type 10 has an invalid length. [ 346.493723][ T4537] batman_adv: batadv0: Adding interface: virt_wifi0 [ 346.500532][ T4537] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.537729][ T4537] batman_adv: batadv0: Interface activated: virt_wifi0 [ 346.836018][ T4545] netlink: 'syz.1.45': attribute type 10 has an invalid length. [ 346.853130][ T4545] batman_adv: batadv0: Adding interface: virt_wifi0 [ 346.859888][ T4545] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.890595][ T4545] batman_adv: batadv0: Interface activated: virt_wifi0 [ 347.333563][ T4570] netlink: 'syz.1.55': attribute type 3 has an invalid length. [ 347.360914][ T4570] __nla_validate_parse: 3 callbacks suppressed [ 347.386999][ T4570] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.55'. [ 347.426389][ T4572] netlink: 'syz.4.58': attribute type 21 has an invalid length. [ 347.614425][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.632301][ T4582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.666667][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.675873][ T4582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.830840][ T4590] netlink: 'syz.3.65': attribute type 27 has an invalid length. [ 348.409085][ T4614] Dead loop on virtual device ip6_vti0, fix it urgently! [ 348.690711][ T4629] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 349.144861][ T4646] netlink: 'syz.1.85': attribute type 10 has an invalid length. [ 349.158907][ T4646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.85'. [ 349.469398][ T4652] netlink: 'syz.3.90': attribute type 29 has an invalid length. [ 349.497777][ T4652] netlink: 'syz.3.90': attribute type 29 has an invalid length. [ 349.536648][ T4658] netlink: 'syz.3.90': attribute type 29 has an invalid length. [ 349.560753][ T4655] netlink: 184 bytes leftover after parsing attributes in process `syz.1.93'. [ 349.595648][ T4659] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 349.718557][ T4658] netlink: 'syz.3.90': attribute type 29 has an invalid length. [ 349.747621][ T4658] netlink: 'syz.3.90': attribute type 29 has an invalid length. [ 350.241543][ T4656] netlink: 'syz.4.92': attribute type 10 has an invalid length. [ 350.388330][ T4656] netlink: 40 bytes leftover after parsing attributes in process `syz.4.92'. [ 350.487077][ T4656] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 351.062391][ T4695] netlink: 'syz.0.111': attribute type 29 has an invalid length. [ 351.102165][ T4695] netlink: 'syz.0.111': attribute type 29 has an invalid length. [ 351.359560][ T4712] netlink: 'syz.1.119': attribute type 2 has an invalid length. [ 351.431239][ T4712] netlink: 132 bytes leftover after parsing attributes in process `syz.1.119'. [ 352.009088][ T4739] bond0: (slave bond_slave_0): Releasing backup interface [ 352.659434][ T4759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.138'. [ 352.713817][ T4759] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.888175][ T4759] device bridge_slave_0 left promiscuous mode [ 352.958061][ T4759] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.109603][ T4773] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 354.821764][ T4800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.829263][ T4800] IPv6: NLM_F_CREATE should be set when creating new route [ 354.836540][ T4800] IPv6: NLM_F_CREATE should be set when creating new route [ 355.116142][ T4817] validate_nla: 7 callbacks suppressed [ 355.116158][ T4817] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 355.161964][ T4817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.156'. [ 355.272121][ T4817] batman_adv: batadv0: Adding interface: virt_wifi0 [ 355.291536][ T4817] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.342344][ T4817] batman_adv: batadv0: Interface activated: virt_wifi0 [ 355.462567][ T4831] netlink: 'syz.4.164': attribute type 29 has an invalid length. [ 355.481313][ T4831] netlink: 'syz.4.164': attribute type 29 has an invalid length. [ 355.552590][ T4831] netlink: 'syz.4.164': attribute type 29 has an invalid length. [ 355.593287][ T4831] netlink: 'syz.4.164': attribute type 29 has an invalid length. [ 355.657627][ T4840] netlink: 'syz.4.164': attribute type 29 has an invalid length. [ 355.826323][ T4844] netlink: 'syz.0.168': attribute type 9 has an invalid length. [ 355.839493][ T4844] netlink: 'syz.0.168': attribute type 10 has an invalid length. [ 355.850619][ T4844] netlink: 'syz.0.168': attribute type 11 has an invalid length. [ 356.337669][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.365792][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.429822][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.444809][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.482491][ T4859] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 356.521138][ T4859] batman_adv: batadv0: Removing interface: virt_wifi0 [ 356.737693][ T4863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.778291][ T4863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.815256][ T4863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.854054][ T4863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.905122][ T4863] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 356.967614][ T4863] batman_adv: batadv0: Removing interface: virt_wifi0 [ 357.501834][ T4310] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 357.518447][ T4890] netlink: 140 bytes leftover after parsing attributes in process `syz.0.184'. [ 357.539469][ T4890] netlink: 6 bytes leftover after parsing attributes in process `syz.0.184'. [ 358.149473][ T4909] netlink: 'syz.0.190': attribute type 27 has an invalid length. [ 358.157680][ T4909] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.190'. [ 360.026752][ T4943] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.203'. [ 360.131350][ T4947] Ÿë: port 1(erspan0) entered blocking state [ 360.148658][ T4947] Ÿë: port 1(erspan0) entered disabled state [ 360.184168][ T4947] device erspan0 entered promiscuous mode [ 360.248851][ T4949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.256565][ T4949] IPv6: NLM_F_CREATE should be set when creating new route [ 360.265345][ T4949] IPv6: NLM_F_CREATE should be set when creating new route [ 360.322510][ T4956] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 360.353223][ T4956] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 360.406384][ T4962] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.212'. [ 360.679581][ T4973] netlink: 'syz.1.216': attribute type 29 has an invalid length. [ 360.708556][ T4973] netlink: 'syz.1.216': attribute type 29 has an invalid length. [ 361.286255][ T4310] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 361.873360][ T4310] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 361.880791][ T4310] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 362.433142][ T5008] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 365.329433][ T5043] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 365.512498][ T4310] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 365.519943][ T4310] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 365.826242][ T5072] nr0: tun_chr_ioctl cmd 1074025677 [ 365.837388][ T5072] nr0: linktype set to 825 [ 365.874271][ T5074] netlink: 'syz.0.265': attribute type 7 has an invalid length. [ 365.924152][ T5076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.932773][ T5076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.963008][ T5076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.970583][ T5076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.933955][ T5110] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 368.083748][ T5164] device sit0 left promiscuous mode [ 368.154154][ T5164] device sit0 entered promiscuous mode [ 368.838971][ T4310] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 369.726540][ T4310] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 370.818487][ T5236] netlink: 'syz.1.327': attribute type 39 has an invalid length. [ 373.610708][ T4310] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 375.208854][ T5375] device pim6reg1 entered promiscuous mode [ 377.562426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 378.425469][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.432073][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.915881][ T5543] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 388.279693][ T5548] netlink: 164 bytes leftover after parsing attributes in process `syz.2.446'. [ 389.493673][ T5563] device syzkaller0 entered promiscuous mode [ 394.208935][ T5581] device pim6reg1 entered promiscuous mode [ 394.556255][ T5604] device pim6reg1 entered promiscuous mode [ 395.305359][ T5623] device pim6reg1 entered promiscuous mode [ 398.894856][ T5660] device pim6reg1 entered promiscuous mode [ 400.002799][ T5674] device pim6reg1 entered promiscuous mode [ 401.673213][ T4310] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 401.681805][ T4310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 401.692108][ T4310] CPU: 0 PID: 4310 Comm: kworker/u5:2 Not tainted 6.1.146-syzkaller #0 [ 401.700366][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.710430][ T4310] Workqueue: hci3 hci_rx_work [ 401.715162][ T4310] Call Trace: [ 401.718448][ T4310] [ 401.721384][ T4310] dump_stack_lvl+0x168/0x22e [ 401.726075][ T4310] ? show_regs_print_info+0x12/0x12 [ 401.731281][ T4310] ? load_image+0x3b0/0x3b0 [ 401.735830][ T4310] sysfs_create_dir_ns+0x252/0x280 [ 401.740957][ T4310] ? hci_rx_work+0x3eb/0xd40 [ 401.745567][ T4310] ? sysfs_warn_dup+0xa0/0xa0 [ 401.750260][ T4310] ? do_raw_spin_unlock+0x11d/0x230 [ 401.755487][ T4310] kobject_add_internal+0x6b8/0xc80 [ 401.760710][ T4310] kobject_add+0x152/0x210 [ 401.765143][ T4310] ? kobject_init+0x1d0/0x1d0 [ 401.769838][ T4310] ? klist_children_get+0x50/0x50 [ 401.774883][ T4310] ? get_device_parent+0x121/0x3f0 [ 401.780011][ T4310] device_add+0x483/0xfb0 [ 401.784354][ T4310] ? kmem_cache_free+0xf7/0x290 [ 401.789225][ T4310] hci_conn_add_sysfs+0xd1/0x1e0 [ 401.794175][ T4310] le_conn_complete_evt+0xd1d/0x1320 [ 401.799502][ T4310] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 401.805758][ T4310] ? bt_info+0x150/0x150 [ 401.810017][ T4310] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 401.815665][ T4310] ? skb_pull_data+0xf7/0x200 [ 401.820359][ T4310] hci_le_conn_complete_evt+0x183/0x440 [ 401.825919][ T4310] ? hci_remote_host_features_evt+0x270/0x270 [ 401.832001][ T4310] hci_event_packet+0x791/0x1210 [ 401.836966][ T4310] ? bis_list+0x280/0x280 [ 401.841311][ T4310] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 401.847236][ T4310] ? kcov_remote_start+0x4c7/0x7e0 [ 401.852358][ T4310] ? mce_start+0x60/0x140 [ 401.856705][ T4310] ? hci_send_to_monitor+0x9c/0x4a0 [ 401.861930][ T4310] hci_rx_work+0x3eb/0xd40 [ 401.866366][ T4310] ? _raw_spin_unlock+0x40/0x40 [ 401.871244][ T4310] ? process_one_work+0x7a1/0x1160 [ 401.876368][ T4310] process_one_work+0x898/0x1160 [ 401.881334][ T4310] ? worker_detach_from_pool+0x240/0x240 [ 401.886977][ T4310] ? _raw_spin_lock_irq+0xab/0xe0 [ 401.892022][ T4310] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 401.897413][ T4310] ? kthread_data+0x4b/0xc0 [ 401.901942][ T4310] worker_thread+0xaa2/0x1250 [ 401.906658][ T4310] kthread+0x29d/0x330 [ 401.910744][ T4310] ? worker_clr_flags+0x1a0/0x1a0 [ 401.915781][ T4310] ? kthread_blkcg+0xd0/0xd0 [ 401.920391][ T4310] ret_from_fork+0x1f/0x30 [ 401.924925][ T4310] [ 401.932040][ T4310] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 401.945241][ T4310] Bluetooth: hci3: failed to register connection device [ 412.751933][ T4323] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 412.769260][ T4323] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 412.783004][ T4323] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 412.793148][ T4323] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 412.807717][ T4323] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 412.816031][ T4323] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.901871][ T4323] Bluetooth: hci5: command 0x0409 tx timeout [ 415.483734][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 415.951536][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.965125][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.974164][ T4323] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 415.974363][ T5770] device bridge_slave_0 entered promiscuous mode [ 416.005383][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.012982][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.039778][ T5770] device bridge_slave_1 entered promiscuous mode [ 416.102538][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.127873][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.185430][ T4329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.289536][ T5770] team0: Port device team_slave_0 added [ 416.363870][ T5770] team0: Port device team_slave_1 added [ 416.660251][ T4329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.704266][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.712901][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.856314][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.986534][ T4310] Bluetooth: hci5: command 0x041b tx timeout [ 417.018130][ T4329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.143827][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.150824][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.318980][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.425891][ T4329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.633103][ T5770] device hsr_slave_0 entered promiscuous mode [ 417.706170][ T5770] device hsr_slave_1 entered promiscuous mode [ 417.743404][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.770338][ T5770] Cannot create hsr debugfs directory [ 417.784298][ T5850] device macsec0 entered promiscuous mode [ 418.663714][ T5770] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.833501][ T5770] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 418.893797][ T5770] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 419.061451][ T4310] Bluetooth: hci5: command 0x040f tx timeout [ 419.146370][ T5770] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 419.424903][ T4329] device erspan0 left promiscuous mode [ 419.464011][ T4329] Ÿë: port 1(erspan0) entered disabled state [ 420.008528][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.085162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 420.121494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.290457][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.350175][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 420.392538][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.413012][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.420150][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.439438][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 420.464835][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 420.484542][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.491685][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.556225][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 420.570505][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 420.613950][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 420.649504][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 420.665017][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 420.683761][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 420.702299][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 420.730602][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 420.822153][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 420.863093][ T4329] device hsr_slave_0 left promiscuous mode [ 420.889468][ T4329] device hsr_slave_1 left promiscuous mode [ 420.976439][ T4329] device bridge_slave_1 left promiscuous mode [ 421.058804][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.094089][ T4329] device bridge_slave_0 left promiscuous mode [ 421.111298][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.145088][ T4310] Bluetooth: hci5: command 0x0419 tx timeout [ 421.224674][ T4329] device veth1_macvtap left promiscuous mode [ 421.239236][ T4329] device veth0_macvtap left promiscuous mode [ 421.255780][ T4329] device veth1_vlan left promiscuous mode [ 421.275508][ T4329] device veth0_vlan left promiscuous mode [ 423.149715][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 423.248317][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 423.335792][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.550336][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.699791][ T4329] bond0 (unregistering): Released all slaves [ 424.847013][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.887236][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 424.918527][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.023660][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.277572][ T5994] syz.3.579[5994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.277666][ T5994] syz.3.579[5994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.759897][ T6013] bond_slave_1: mtu less than device minimum [ 428.620086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.631945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 429.092070][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.457511][ T6055] device veth1_macvtap left promiscuous mode [ 437.512107][ T6055] device macsec0 left promiscuous mode [ 437.552957][ T6057] device veth1_macvtap entered promiscuous mode [ 437.602285][ T6057] device macsec0 entered promiscuous mode [ 438.574271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 438.590238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 438.695578][ T4310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.703826][ T4310] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.712062][ T4310] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.720156][ T4310] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.728282][ T4310] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 438.735643][ T4310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.124592][ T6065] device pim6reg1 entered promiscuous mode [ 439.143197][ T6077] device wg2 entered promiscuous mode [ 439.476228][ T5770] device veth0_vlan entered promiscuous mode [ 439.509855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 439.518878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.654074][ T5770] device veth1_vlan entered promiscuous mode [ 439.704321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.715361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.744151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 439.864578][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.870924][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.078799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 440.123766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 440.505009][ T5770] device veth0_macvtap entered promiscuous mode [ 440.695039][ T5770] device veth1_macvtap entered promiscuous mode [ 440.725662][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 440.740042][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 440.828659][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.839220][ T4323] Bluetooth: hci2: command 0x0409 tx timeout [ 440.921200][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.933603][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.947236][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 440.984631][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 441.040107][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.137816][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.163631][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.227565][ T6070] chnl_net:caif_netlink_parms(): no params data found [ 441.281955][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 441.290658][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 441.413217][ T5770] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.433275][ T5770] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.451218][ T5770] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.491126][ T5770] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.551044][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.902798][ T4323] Bluetooth: hci2: command 0x041b tx timeout [ 442.982100][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.990278][ T6070] device bridge_slave_0 entered promiscuous mode [ 443.428278][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.480096][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.492314][ T6070] device bridge_slave_1 entered promiscuous mode [ 443.795839][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.857492][ T6070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.904088][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.111974][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 444.176135][ T6070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.328544][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.554134][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.565781][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 444.844095][ T6070] team0: Port device team_slave_0 added [ 444.981481][ T4310] Bluetooth: hci2: command 0x040f tx timeout [ 445.080227][ T6070] team0: Port device team_slave_1 added [ 447.064384][ T4310] Bluetooth: hci2: command 0x0419 tx timeout [ 448.119224][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.197984][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.392809][ T6070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.896802][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.930868][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.117461][ T6070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.365011][ T6070] device hsr_slave_0 entered promiscuous mode [ 450.402082][ T6070] device hsr_slave_1 entered promiscuous mode [ 450.486722][ T6070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.521057][ T6070] Cannot create hsr debugfs directory [ 451.364415][ T6229] device veth0_vlan left promiscuous mode [ 451.391726][ T6229] device veth0_vlan entered promiscuous mode [ 452.346744][ T6070] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 452.448084][ T6070] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 452.521504][ T6070] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 452.591252][ T6070] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 452.962834][ T6070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.990147][ T6252] device pim6reg1 entered promiscuous mode [ 453.053715][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.108620][ T6070] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.236926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 453.251810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.548132][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.817221][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 453.869513][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.957578][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.964755][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.976521][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 454.017456][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 454.027212][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.034361][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.046695][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 454.067548][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.115839][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 454.208680][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.269620][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 454.303874][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 454.377790][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 454.483625][ T6070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 454.546105][ T6070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.941456][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 454.990046][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 455.101545][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 455.431847][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 455.522789][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.609247][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 455.769088][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.842732][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 455.953211][ T6298] bridge0: port 3(gretap0) entered blocking state [ 455.959864][ T6298] bridge0: port 3(gretap0) entered disabled state [ 455.967515][ T6298] device gretap0 entered promiscuous mode [ 455.984299][ T6298] bridge0: port 3(gretap0) entered blocking state [ 455.991175][ T6298] bridge0: port 3(gretap0) entered forwarding state [ 457.234370][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 457.250501][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 457.420720][ T6070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.459275][ T6350] device veth1_macvtap left promiscuous mode [ 457.542725][ T4323] Bluetooth: hci0: command 0x0406 tx timeout [ 457.548780][ T4323] Bluetooth: hci1: command 0x0406 tx timeout [ 457.606784][ T6354] device veth1_macvtap entered promiscuous mode [ 457.626992][ T6354] device macsec0 entered promiscuous mode [ 457.656598][ T6356] bond_slave_1: mtu less than device minimum [ 458.350771][ T6370] device sit0 entered promiscuous mode [ 459.506139][ T11] device hsr_slave_0 left promiscuous mode [ 459.529589][ T11] device hsr_slave_1 left promiscuous mode [ 459.554754][ T11] device bridge_slave_1 left promiscuous mode [ 459.579935][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.628559][ T11] device veth1_macvtap left promiscuous mode [ 459.638463][ T11] device veth0_macvtap left promiscuous mode [ 459.648655][ T11] device veth1_vlan left promiscuous mode [ 459.658761][ T11] device veth0_vlan left promiscuous mode [ 460.564869][ T11] team0 (unregistering): Port device team_slave_1 removed [ 460.618989][ T11] team0 (unregistering): Port device team_slave_0 removed [ 460.718599][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.790701][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.153307][ T11] bond0 (unregistering): Released all slaves [ 461.293764][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 461.328466][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 461.456944][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 461.485448][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 461.496789][ T6070] device veth0_vlan entered promiscuous mode [ 461.510536][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 461.519021][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 461.565848][ T6070] device veth1_vlan entered promiscuous mode [ 461.637395][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 461.646544][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 461.656419][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.872146][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.982489][ T6070] device veth0_macvtap entered promiscuous mode [ 462.330819][ T6070] device veth1_macvtap entered promiscuous mode [ 462.385927][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 462.397758][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 462.431051][ T4310] Bluetooth: hci4: command 0x0406 tx timeout [ 462.568800][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.605427][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.631726][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.673632][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.694466][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.718255][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 462.733464][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 462.765900][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.800362][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.823610][ T6070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.841690][ T6070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.856519][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.871520][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 462.880326][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.924208][ T6070] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.939999][ T6070] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.959338][ T6070] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.972262][ T6070] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.292875][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.375663][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.985142][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 464.000388][ T5592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.027401][ T5592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.094830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 468.654591][ T6543] device pim6reg1 entered promiscuous mode [ 470.410753][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 483.626593][ T4323] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 483.635826][ T4323] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 483.651505][ T4323] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 483.712167][ T4323] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 483.721528][ T4323] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 483.728883][ T4323] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 485.784950][ T4323] Bluetooth: hci3: command 0x0409 tx timeout [ 486.591118][ T6751] device sit0 entered promiscuous mode [ 486.824372][ T6726] chnl_net:caif_netlink_parms(): no params data found [ 487.875376][ T4323] Bluetooth: hci3: command 0x041b tx timeout [ 487.904132][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.968091][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.090890][ T6726] device bridge_slave_0 entered promiscuous mode [ 488.832310][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.839642][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.871718][ T6726] device bridge_slave_1 entered promiscuous mode [ 489.595134][ T6726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.815034][ T6726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.942420][ T4323] Bluetooth: hci3: command 0x040f tx timeout [ 490.327429][ T6726] team0: Port device team_slave_0 added [ 490.457778][ T6726] team0: Port device team_slave_1 added [ 490.888726][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.996884][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.074386][ T6726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.126853][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.158145][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.226642][ T6726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.348774][ T6726] device hsr_slave_0 entered promiscuous mode [ 491.374186][ T6726] device hsr_slave_1 entered promiscuous mode [ 491.425484][ T6726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.441540][ T6726] Cannot create hsr debugfs directory [ 492.027443][ T4323] Bluetooth: hci3: command 0x0419 tx timeout [ 492.962945][ T6726] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 493.098591][ T6726] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 493.259600][ T6726] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 494.814182][ T6726] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 495.361337][ T6726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.406547][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 495.432897][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.515359][ T6726] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.701425][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 495.726086][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.786120][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.793328][ T5592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.865663][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 495.940859][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 496.021274][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.028408][ T5592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.078227][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 496.107500][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 496.150745][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 496.219450][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 496.286898][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 496.344951][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 496.408913][ T6866] bridge0: port 3(gretap0) entered blocking state [ 496.428792][ T6866] bridge0: port 3(gretap0) entered disabled state [ 496.468978][ T6866] device gretap0 entered promiscuous mode [ 496.491518][ T6866] bridge0: port 3(gretap0) entered blocking state [ 496.498817][ T6866] bridge0: port 3(gretap0) entered forwarding state [ 496.549291][ T6726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.584536][ T6726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.672000][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 496.687165][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 496.752326][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 496.786176][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 496.809847][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 496.836237][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 496.893455][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.326101][ T6892] Dead loop on virtual device ip6_vti0, fix it urgently! [ 497.712482][ T6907] netlink: 'syz.4.758': attribute type 29 has an invalid length. [ 497.761652][ T6907] netlink: 'syz.4.758': attribute type 29 has an invalid length. [ 497.804464][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.817364][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.855238][ T6726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.960489][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 498.980128][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 499.053283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 499.076281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 499.113735][ T6726] device veth0_vlan entered promiscuous mode [ 499.126260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 499.171677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 499.210158][ T6726] device veth1_vlan entered promiscuous mode [ 499.230743][ T6945] netlink: 'syz.1.776': attribute type 29 has an invalid length. [ 499.273233][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 499.291418][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 499.299619][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 499.313770][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 499.332586][ T6726] device veth0_macvtap entered promiscuous mode [ 499.355863][ T6945] netlink: 'syz.1.776': attribute type 29 has an invalid length. [ 499.380832][ T6726] device veth1_macvtap entered promiscuous mode [ 499.439254][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.457238][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.467937][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.484052][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.495584][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.510038][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.554936][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.559196][ T6955] Dead loop on virtual device ip6_vti0, fix it urgently! [ 499.579332][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 499.592622][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 499.632033][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 499.664619][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 499.709311][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.750091][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.814844][ T6964] netlink: 'syz.4.773': attribute type 29 has an invalid length. [ 499.820200][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.885154][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.914459][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.942444][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.961519][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.977946][ T6964] netlink: 'syz.4.773': attribute type 29 has an invalid length. [ 499.995946][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 500.014935][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 500.039795][ T6726] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.049132][ T6726] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.058118][ T6726] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.080940][ T6726] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.128664][ T6966] netlink: 'syz.4.773': attribute type 29 has an invalid length. [ 500.256052][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.287594][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.323119][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 500.343884][ T6164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.360037][ T6164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.379670][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 501.012131][ T7005] nr0: tun_chr_ioctl cmd 1074025677 [ 501.017526][ T7005] nr0: linktype set to 825 [ 501.303623][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.309952][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.187201][ T7047] device sit0 entered promiscuous mode [ 504.410544][ T7104] netlink: 'syz.3.826': attribute type 39 has an invalid length. [ 504.567247][ T7113] device sit0 entered promiscuous mode [ 507.528049][ T7196] netlink: 'syz.1.860': attribute type 39 has an invalid length. [ 508.709758][ T7235] device sit0 left promiscuous mode [ 509.316520][ T7257] netlink: 'syz.3.878': attribute type 39 has an invalid length. [ 510.009717][ T7282] device sit0 left promiscuous mode [ 510.626174][ T7309] device pim6reg1 entered promiscuous mode [ 515.874507][ T7489] netlink: 'syz.1.953': attribute type 29 has an invalid length. [ 515.955259][ T7489] netlink: 'syz.1.953': attribute type 29 has an invalid length. [ 515.994061][ T7489] netlink: 'syz.1.953': attribute type 29 has an invalid length. [ 517.139709][ T7516] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 517.153715][ T7516] syzkaller0: persist disabled [ 517.538527][ T7541] netlink: 'syz.4.970': attribute type 29 has an invalid length. [ 517.551545][ T7541] netlink: 'syz.4.970': attribute type 29 has an invalid length. [ 517.570483][ T7541] netlink: 'syz.4.970': attribute type 29 has an invalid length. [ 518.401818][ T7584] netlink: 'syz.1.987': attribute type 29 has an invalid length. [ 518.438012][ T7584] netlink: 'syz.1.987': attribute type 29 has an invalid length. [ 518.474801][ T7587] netlink: 'syz.1.987': attribute type 29 has an invalid length. [ 519.508238][ T7626] netlink: 'syz.4.1000': attribute type 39 has an invalid length. [ 520.110125][ T7636] device sit0 left promiscuous mode [ 520.522816][ T7631] device sit0 entered promiscuous mode [ 521.262933][ T7673] validate_nla: 2 callbacks suppressed [ 521.262949][ T7673] netlink: 'syz.4.1014': attribute type 29 has an invalid length. [ 521.406331][ T7673] netlink: 'syz.4.1014': attribute type 29 has an invalid length. [ 521.424498][ T7680] netlink: 'syz.4.1014': attribute type 29 has an invalid length. [ 521.494914][ T7685] netlink: 'syz.3.1016': attribute type 39 has an invalid length. [ 522.603406][ T7725] netlink: 'syz.1.1028': attribute type 29 has an invalid length. [ 522.657117][ T7725] netlink: 'syz.1.1028': attribute type 29 has an invalid length. [ 522.712205][ T7726] netlink: 'syz.1.1028': attribute type 29 has an invalid length. [ 522.782195][ T7731] netlink: 'syz.4.1030': attribute type 39 has an invalid length. [ 524.701248][ T7794] netlink: 'syz.4.1046': attribute type 29 has an invalid length. [ 524.759768][ T7794] netlink: 'syz.4.1046': attribute type 29 has an invalid length. [ 525.468438][ T4323] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 527.283456][ T7843] validate_nla: 1 callbacks suppressed [ 527.283473][ T7843] netlink: 'syz.7.1062': attribute type 29 has an invalid length. [ 527.444178][ T7843] netlink: 'syz.7.1062': attribute type 29 has an invalid length. [ 527.557705][ T7847] netlink: 'syz.7.1062': attribute type 29 has an invalid length. [ 530.241851][ T4323] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 536.187823][ T7898] netlink: 'syz.6.1075': attribute type 29 has an invalid length. [ 536.479943][ T7898] netlink: 'syz.6.1075': attribute type 29 has an invalid length. [ 536.621167][ T7900] netlink: 'syz.6.1075': attribute type 29 has an invalid length. [ 536.909007][ T7903] netlink: 'syz.3.1076': attribute type 39 has an invalid length. [ 537.503027][ T4310] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 538.403770][ T7938] netlink: 'syz.4.1087': attribute type 29 has an invalid length. [ 538.509184][ T7938] netlink: 'syz.4.1087': attribute type 29 has an invalid length. [ 538.555306][ T7941] netlink: 'syz.4.1087': attribute type 29 has an invalid length. [ 539.221133][ T4310] Bluetooth: hci5: command 0x0406 tx timeout [ 539.432299][ T4310] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 540.001810][ T7982] netlink: 'syz.4.1099': attribute type 39 has an invalid length. [ 540.737189][ T4310] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 542.563652][ T4310] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 544.412225][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1135'. [ 544.583727][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1135'. [ 544.684744][ T8112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1135'. [ 546.544132][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1152'. [ 546.604959][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1152'. [ 546.675481][ T8155] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1152'. [ 547.417008][ T8173] device syzkaller0 entered promiscuous mode [ 548.120696][ T8199] netlink: 'syz.1.1167': attribute type 29 has an invalid length. [ 549.746222][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1176'. [ 550.116964][ T8199] netlink: 'syz.1.1167': attribute type 29 has an invalid length. [ 550.139715][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1176'. [ 550.149423][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1176'. [ 551.242840][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 551.298582][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 551.391583][ T8258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 551.792432][ T8269] netlink: 'syz.1.1193': attribute type 10 has an invalid length. [ 551.855054][ T8269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1193'. [ 552.488590][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1203'. [ 552.498005][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1203'. [ 552.508806][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1203'. [ 554.593672][ T8325] netlink: 'syz.6.1216': attribute type 10 has an invalid length. [ 554.849797][ T8325] __nla_validate_parse: 11 callbacks suppressed [ 554.849811][ T8325] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1216'. [ 554.893984][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 555.147311][ T8325] batman_adv: batadv0: Adding interface: virt_wifi0 [ 555.274611][ T8325] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.306735][ T8325] batman_adv: batadv0: Interface activated: virt_wifi0 [ 555.315462][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 555.340494][ T8332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 556.786439][ T8350] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 556.899057][ T8350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1223'. [ 556.938504][ T8350] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 557.979981][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 558.007210][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1231'. [ 558.056384][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 558.084088][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1231'. [ 558.347560][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 561.237635][ T8415] netlink: 'syz.1.1249': attribute type 39 has an invalid length. [ 562.811333][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.817647][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.042984][ T4323] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 564.070261][ T8450] netlink: 'syz.4.1263': attribute type 39 has an invalid length. [ 564.301255][ T8462] __nla_validate_parse: 3 callbacks suppressed [ 564.301270][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1268'. [ 564.514168][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1268'. [ 564.523606][ T8461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1268'. [ 564.534709][ T8463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1268'. [ 564.662564][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1272'. [ 564.825671][ T4323] Bluetooth: hci2: command 0x0406 tx timeout [ 564.988990][ T8482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1275'. [ 565.206549][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1272'. [ 565.220946][ T8482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1275'. [ 565.232255][ T8485] netlink: 'syz.6.1274': attribute type 10 has an invalid length. [ 565.246469][ T8485] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1274'. [ 565.262954][ T8473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1272'. [ 566.569095][ T8503] netlink: 'syz.6.1281': attribute type 39 has an invalid length. [ 567.641483][ T8525] netlink: 'syz.3.1289': attribute type 10 has an invalid length. [ 567.721698][ T8525] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 568.321475][ T4310] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 568.330609][ T4310] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 568.338660][ T4310] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 568.348488][ T4310] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 568.358842][ T4310] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 568.368454][ T4310] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 569.688096][ T8549] __nla_validate_parse: 15 callbacks suppressed [ 569.688112][ T8549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1297'. [ 570.197342][ T8567] netlink: 'syz.4.1304': attribute type 10 has an invalid length. [ 570.406782][ T8567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1304'. [ 570.421260][ T4323] Bluetooth: hci6: command 0x0409 tx timeout [ 570.620779][ T8567] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 570.779977][ T8540] chnl_net:caif_netlink_parms(): no params data found [ 570.789643][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1307'. [ 570.887725][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1307'. [ 570.981185][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1307'. [ 571.076496][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1307'. [ 571.304829][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1310'. [ 571.422677][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1310'. [ 571.432206][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1310'. [ 571.442463][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1310'. [ 571.488462][ T8540] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.504617][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.539584][ T8540] device bridge_slave_0 entered promiscuous mode [ 571.577330][ T8540] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.628419][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.676946][ T8540] device bridge_slave_1 entered promiscuous mode [ 571.860362][ T8540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.915552][ T8540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.080938][ T8540] team0: Port device team_slave_0 added [ 572.089343][ T8540] team0: Port device team_slave_1 added [ 572.330254][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.423937][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.502642][ T4323] Bluetooth: hci6: command 0x041b tx timeout [ 572.681082][ T8540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.701923][ T8612] netlink: 'syz.3.1320': attribute type 10 has an invalid length. [ 572.718525][ T8612] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 572.862597][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.885520][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.053770][ T8540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.262206][ T8540] device hsr_slave_0 entered promiscuous mode [ 573.300108][ T8540] device hsr_slave_1 entered promiscuous mode [ 573.370938][ T8540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.442464][ T8540] Cannot create hsr debugfs directory [ 574.191122][ T8638] netlink: 'syz.6.1327': attribute type 10 has an invalid length. [ 574.581269][ T4310] Bluetooth: hci6: command 0x040f tx timeout [ 574.728825][ T8540] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 574.742614][ T8647] __nla_validate_parse: 10 callbacks suppressed [ 574.742628][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1333'. [ 574.789145][ T8540] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 574.852423][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1333'. [ 574.871609][ T8540] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 574.902307][ T8540] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 574.969438][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1333'. [ 574.999776][ T8648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1333'. [ 575.167362][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1335'. [ 575.204204][ T4310] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 575.231408][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1335'. [ 575.331063][ T8657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1335'. [ 575.411696][ T8540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.419530][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1335'. [ 575.464808][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 575.482673][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 575.525653][ T8540] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.573801][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 575.596648][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 575.678041][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.685246][ T6164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.801993][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 575.867939][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 575.920916][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 576.017309][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.024507][ T6164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.107524][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 576.121586][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 576.186608][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 576.250745][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 576.343524][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 576.371817][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 576.411405][ T8689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1343'. [ 576.411937][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 576.495007][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 576.519956][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 576.551241][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 576.592700][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 576.620804][ T8540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 576.646958][ T8689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1343'. [ 576.661213][ T4310] Bluetooth: hci6: command 0x0419 tx timeout [ 577.554417][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 577.571825][ T4323] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 577.582060][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 577.595671][ T8540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.737404][ T4396] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.843131][ T8722] netlink: 'syz.1.1355': attribute type 39 has an invalid length. [ 577.903418][ T4396] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.062740][ T4396] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.285564][ T4396] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.897883][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 578.926369][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 579.039092][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 579.072249][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 579.128718][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 579.139159][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 579.172566][ T8540] device veth0_vlan entered promiscuous mode [ 579.375492][ T8769] netlink: 'syz.4.1371': attribute type 39 has an invalid length. [ 579.405013][ T8776] netlink: 'syz.6.1370': attribute type 10 has an invalid length. [ 579.482510][ T8540] device veth1_vlan entered promiscuous mode [ 579.588880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 579.621128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 579.659712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 579.674733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 579.718318][ T8540] device veth0_macvtap entered promiscuous mode [ 579.743957][ T8540] device veth1_macvtap entered promiscuous mode [ 579.848863][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.875327][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.888372][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.911028][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.927876][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.946332][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.958471][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.982541][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.996905][ T8540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.016661][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.036743][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.057711][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.070114][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.080099][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.101151][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.123415][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.139885][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.164786][ T8540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.229760][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 580.245695][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 580.288728][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 580.312104][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 580.335620][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 580.371841][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 580.398911][ T8540] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.418669][ T8540] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.443213][ T8540] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.453710][ T8540] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.596359][ T8811] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 580.952243][ T8810] netlink: 'syz.4.1385': attribute type 10 has an invalid length. [ 580.993755][ T8810] __nla_validate_parse: 15 callbacks suppressed [ 580.993789][ T8810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1385'. [ 581.354090][ T8810] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 581.408219][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.467617][ T4396] device hsr_slave_0 left promiscuous mode [ 581.491119][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.547628][ T4396] device hsr_slave_1 left promiscuous mode [ 581.565845][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.606672][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.654424][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.675120][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.702375][ T4396] device bridge_slave_1 left promiscuous mode [ 581.731418][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.759372][ T4396] device bridge_slave_0 left promiscuous mode [ 581.781160][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.900476][ T4396] device veth1_macvtap left promiscuous mode [ 581.921564][ T4396] device veth0_macvtap left promiscuous mode [ 581.941648][ T4396] device veth1_vlan left promiscuous mode [ 581.955630][ T4396] device veth0_vlan left promiscuous mode [ 582.979679][ T4396] team0 (unregistering): Port device team_slave_1 removed [ 583.031402][ T4396] team0 (unregistering): Port device team_slave_0 removed [ 583.075532][ T4396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.125339][ T4396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.667407][ T4396] bond0 (unregistering): Released all slaves [ 583.746499][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 583.763563][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.771980][ T8875] netlink: 'syz.6.1404': attribute type 10 has an invalid length. [ 583.792584][ T8875] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1404'. [ 583.806049][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.838436][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 584.006560][ T8895] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 584.246412][ T8906] netlink: 'syz.8.1288': attribute type 10 has an invalid length. [ 584.375544][ T8906] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1288'. [ 584.432792][ T8906] batman_adv: batadv0: Adding interface: virt_wifi0 [ 584.439422][ T8906] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.534333][ T8906] batman_adv: batadv0: Interface activated: virt_wifi0 [ 585.022404][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 585.085326][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 585.176154][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 585.221577][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 585.287843][ T8942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.328580][ T8942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.372598][ T8942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.421441][ T8942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.447529][ T8942] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 585.481253][ T8942] batman_adv: batadv0: Removing interface: virt_wifi0 [ 585.584507][ T8940] netlink: 'syz.6.1425': attribute type 10 has an invalid length. [ 585.597400][ T8940] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1425'. [ 585.721461][ T8957] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 587.434120][ T9003] netlink: 'syz.8.1448': attribute type 39 has an invalid length. [ 588.285506][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1462'. [ 588.332399][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1462'. [ 588.427776][ T9042] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1462'. [ 588.509336][ T9047] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1462'. [ 588.966291][ T9057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1465'. [ 589.033521][ T9057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1465'. [ 589.083463][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1465'. [ 589.096343][ T9059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1465'. [ 589.617431][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.646070][ T9075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.683436][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.721701][ T9075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.746979][ T9075] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 589.776245][ T9075] batman_adv: batadv0: Removing interface: virt_wifi0 [ 589.857590][ T9092] netlink: 'syz.4.1475': attribute type 29 has an invalid length. [ 589.937896][ T9083] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 589.971528][ T9092] netlink: 'syz.4.1475': attribute type 29 has an invalid length. [ 590.013590][ T9098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1476'. [ 590.059034][ T9098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1476'. [ 591.043076][ T9141] netlink: 'syz.4.1492': attribute type 29 has an invalid length. [ 591.076122][ T9141] netlink: 'syz.4.1492': attribute type 29 has an invalid length. [ 591.322228][ T9152] netlink: 'syz.8.1493': attribute type 10 has an invalid length. [ 591.360366][ T9152] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 591.827189][ T9177] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 591.968916][ T9183] netlink: 'syz.6.1507': attribute type 39 has an invalid length. [ 592.053058][ T9188] netlink: 'syz.1.1509': attribute type 29 has an invalid length. [ 592.105651][ T9188] netlink: 'syz.1.1509': attribute type 29 has an invalid length. [ 592.619575][ T9209] netlink: 'syz.8.1516': attribute type 29 has an invalid length. [ 592.648997][ T9209] netlink: 'syz.8.1516': attribute type 29 has an invalid length. [ 593.683363][ T9257] __nla_validate_parse: 28 callbacks suppressed [ 593.683379][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1532'. [ 593.720166][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1532'. [ 593.756934][ T9256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1532'. [ 593.794698][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1532'. [ 594.076445][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1536'. [ 594.103878][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1536'. [ 594.132829][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1536'. [ 594.219849][ T9282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1536'. [ 594.626100][ T9296] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1543'. [ 594.793535][ T9296] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 595.098576][ T9305] validate_nla: 12 callbacks suppressed [ 595.098592][ T9305] netlink: 'syz.4.1547': attribute type 39 has an invalid length. [ 595.120547][ T4323] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 595.128037][ T4323] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 595.470480][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1549'. [ 595.472396][ T4323] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 595.514885][ T9322] netlink: 'syz.1.1550': attribute type 29 has an invalid length. [ 595.559068][ T9322] netlink: 'syz.1.1550': attribute type 29 has an invalid length. [ 595.576654][ T9327] netlink: 'syz.1.1550': attribute type 29 has an invalid length. [ 596.398799][ T9350] netlink: 'syz.4.1558': attribute type 39 has an invalid length. [ 597.378994][ T4323] Bluetooth: hci6: unexpected subevent 0x01 length: 150 > 18 [ 597.568760][ T4323] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 597.578249][ T4323] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 597.590393][ T4323] CPU: 0 PID: 4323 Comm: kworker/u5:6 Not tainted 6.1.146-syzkaller #0 [ 597.598676][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.608746][ T4323] Workqueue: hci4 hci_rx_work [ 597.613447][ T4323] Call Trace: [ 597.616718][ T4323] [ 597.619643][ T4323] dump_stack_lvl+0x168/0x22e [ 597.624319][ T4323] ? show_regs_print_info+0x12/0x12 [ 597.629532][ T4323] ? load_image+0x3b0/0x3b0 [ 597.634069][ T4323] sysfs_create_dir_ns+0x252/0x280 [ 597.639194][ T4323] ? hci_rx_work+0x3eb/0xd40 [ 597.643794][ T4323] ? sysfs_warn_dup+0xa0/0xa0 [ 597.648473][ T4323] ? do_raw_spin_unlock+0x11d/0x230 [ 597.653674][ T4323] kobject_add_internal+0x6b8/0xc80 [ 597.658878][ T4323] kobject_add+0x152/0x210 [ 597.663296][ T4323] ? kobject_init+0x1d0/0x1d0 [ 597.667970][ T4323] ? klist_children_get+0x50/0x50 [ 597.672998][ T4323] ? get_device_parent+0x121/0x3f0 [ 597.678120][ T4323] device_add+0x483/0xfb0 [ 597.682445][ T4323] ? kmem_cache_free+0xf7/0x290 [ 597.687296][ T4323] hci_conn_add_sysfs+0xd1/0x1e0 [ 597.692228][ T4323] le_conn_complete_evt+0xd1d/0x1320 [ 597.697521][ T4323] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 597.703771][ T4323] ? bt_info+0x150/0x150 [ 597.708025][ T4323] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 597.713651][ T4323] ? skb_pull_data+0xf7/0x200 [ 597.718326][ T4323] hci_le_conn_complete_evt+0x183/0x440 [ 597.723873][ T4323] ? hci_remote_host_features_evt+0x270/0x270 [ 597.729932][ T4323] hci_event_packet+0x791/0x1210 [ 597.734870][ T4323] ? bis_list+0x280/0x280 [ 597.739189][ T4323] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 597.745077][ T4323] ? kcov_remote_start+0x4c7/0x7e0 [ 597.750179][ T4323] ? mce_start+0x60/0x140 [ 597.754503][ T4323] ? hci_send_to_monitor+0x9c/0x4a0 [ 597.759701][ T4323] hci_rx_work+0x3eb/0xd40 [ 597.764112][ T4323] ? _raw_spin_unlock+0x40/0x40 [ 597.768968][ T4323] ? process_one_work+0x7a1/0x1160 [ 597.774074][ T4323] process_one_work+0x898/0x1160 [ 597.779021][ T4323] ? worker_detach_from_pool+0x240/0x240 [ 597.784649][ T4323] ? _raw_spin_lock_irq+0xab/0xe0 [ 597.789670][ T4323] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 597.795036][ T4323] ? kthread_data+0x4b/0xc0 [ 597.799536][ T4323] worker_thread+0xaa2/0x1250 [ 597.804221][ T4323] ? __kthread_parkme+0x162/0x1c0 [ 597.809247][ T4323] kthread+0x29d/0x330 [ 597.813308][ T4323] ? worker_clr_flags+0x1a0/0x1a0 [ 597.818321][ T4323] ? kthread_blkcg+0xd0/0xd0 [ 597.822907][ T4323] ret_from_fork+0x1f/0x30 [ 597.827328][ T4323] [ 597.832576][ T4323] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 597.846408][ T4323] Bluetooth: hci4: failed to register connection device [ 598.029793][ T9394] netlink: 'syz.1.1569': attribute type 29 has an invalid length. [ 598.038677][ T9394] netlink: 'syz.1.1569': attribute type 29 has an invalid length. [ 598.068701][ T9394] netlink: 'syz.1.1569': attribute type 29 has an invalid length. [ 598.420758][ T9402] netlink: 'syz.8.1572': attribute type 39 has an invalid length. [ 598.815258][ T9420] __nla_validate_parse: 19 callbacks suppressed [ 598.815274][ T9420] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1579'. [ 598.859372][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1580'. [ 598.883468][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1580'. [ 598.898961][ T9423] netlink: 'syz.1.1581': attribute type 29 has an invalid length. [ 598.903884][ T9420] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1579'. [ 598.919872][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1579'. [ 598.929760][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1579'. [ 598.956212][ T9419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1580'. [ 598.980950][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1580'. [ 599.026342][ T4323] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 599.035293][ T4323] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 600.313300][ T9470] validate_nla: 3 callbacks suppressed [ 600.313316][ T9470] netlink: 'syz.3.1595': attribute type 29 has an invalid length. [ 600.329088][ T9471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1593'. [ 600.346390][ T9470] netlink: 'syz.3.1595': attribute type 29 has an invalid length. [ 600.355437][ T9471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1593'. [ 600.366065][ T9470] netlink: 'syz.3.1595': attribute type 29 has an invalid length. [ 600.625864][ T9480] netlink: 'syz.4.1599': attribute type 39 has an invalid length. [ 602.027834][ T9522] netlink: 'syz.1.1611': attribute type 29 has an invalid length. [ 602.079971][ T9522] netlink: 'syz.1.1611': attribute type 29 has an invalid length. [ 602.121438][ T9523] netlink: 'syz.1.1611': attribute type 29 has an invalid length. [ 602.244280][ T9534] netlink: 'syz.6.1618': attribute type 39 has an invalid length. [ 602.858333][ T9556] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 603.035456][ T4310] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 603.231634][ T4310] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 604.221662][ T9618] netlink: 'syz.4.1644': attribute type 29 has an invalid length. [ 604.307850][ T9618] netlink: 'syz.4.1644': attribute type 29 has an invalid length. [ 604.390842][ T9628] __nla_validate_parse: 18 callbacks suppressed [ 604.390860][ T9628] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1646'. [ 604.485700][ T4310] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 604.724821][ T4310] Bluetooth: hci6: unexpected subevent 0x01 length: 150 > 18 [ 604.732475][ T4310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 604.742912][ T4310] CPU: 1 PID: 4310 Comm: kworker/u5:2 Not tainted 6.1.146-syzkaller #0 [ 604.751185][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 604.761254][ T4310] Workqueue: hci6 hci_rx_work [ 604.765964][ T4310] Call Trace: [ 604.769254][ T4310] [ 604.772198][ T4310] dump_stack_lvl+0x168/0x22e [ 604.776897][ T4310] ? show_regs_print_info+0x12/0x12 [ 604.782116][ T4310] ? load_image+0x3b0/0x3b0 [ 604.786655][ T4310] sysfs_create_dir_ns+0x252/0x280 [ 604.791792][ T4310] ? hci_rx_work+0x3eb/0xd40 [ 604.796410][ T4310] ? sysfs_warn_dup+0xa0/0xa0 [ 604.801113][ T4310] ? do_raw_spin_unlock+0x11d/0x230 [ 604.806338][ T4310] kobject_add_internal+0x6b8/0xc80 [ 604.811572][ T4310] kobject_add+0x152/0x210 [ 604.816014][ T4310] ? kobject_init+0x1d0/0x1d0 [ 604.820719][ T4310] ? klist_children_get+0x50/0x50 [ 604.825761][ T4310] ? get_device_parent+0x121/0x3f0 [ 604.830896][ T4310] device_add+0x483/0xfb0 [ 604.835244][ T4310] ? kmem_cache_free+0xf7/0x290 [ 604.840120][ T4310] hci_conn_add_sysfs+0xd1/0x1e0 [ 604.845083][ T4310] le_conn_complete_evt+0xd1d/0x1320 [ 604.850408][ T4310] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 604.856675][ T4310] ? bt_info+0x150/0x150 [ 604.860947][ T4310] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 604.866601][ T4310] ? skb_pull_data+0xf7/0x200 [ 604.871311][ T4310] hci_le_conn_complete_evt+0x183/0x440 [ 604.876885][ T4310] ? hci_remote_host_features_evt+0x270/0x270 [ 604.882967][ T4310] hci_event_packet+0x791/0x1210 [ 604.887931][ T4310] ? bis_list+0x280/0x280 [ 604.892279][ T4310] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 604.898202][ T4310] ? kcov_remote_start+0x4c7/0x7e0 [ 604.903333][ T4310] ? mce_start+0x60/0x140 [ 604.907686][ T4310] ? hci_send_to_monitor+0x9c/0x4a0 [ 604.912919][ T4310] hci_rx_work+0x3eb/0xd40 [ 604.917360][ T4310] ? _raw_spin_unlock+0x40/0x40 [ 604.922244][ T4310] ? process_one_work+0x7a1/0x1160 [ 604.927374][ T4310] process_one_work+0x898/0x1160 [ 604.932344][ T4310] ? worker_detach_from_pool+0x240/0x240 [ 604.938000][ T4310] ? _raw_spin_lock_irq+0xab/0xe0 [ 604.943050][ T4310] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 604.948451][ T4310] ? kthread_data+0x4b/0xc0 [ 604.952991][ T4310] worker_thread+0xaa2/0x1250 [ 604.957716][ T4310] kthread+0x29d/0x330 [ 604.961806][ T4310] ? worker_clr_flags+0x1a0/0x1a0 [ 604.966846][ T4310] ? kthread_blkcg+0xd0/0xd0 [ 604.971463][ T4310] ret_from_fork+0x1f/0x30 [ 604.975920][ T4310] [ 604.980066][ T4310] kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 604.993986][ T4310] Bluetooth: hci6: failed to register connection device [ 605.746423][ T4310] Bluetooth: hci2: unknown advertising packet type: 0xff [ 605.787425][ T9676] validate_nla: 1 callbacks suppressed [ 605.787440][ T9676] netlink: 'syz.3.1662': attribute type 29 has an invalid length. [ 605.871406][ T9676] netlink: 'syz.3.1662': attribute type 29 has an invalid length. [ 605.900693][ T9679] netlink: 'syz.3.1662': attribute type 29 has an invalid length. [ 605.905557][ T9684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1663'. [ 605.931132][ T9684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1663'. [ 605.954668][ T9678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1663'. [ 605.987027][ T9688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1663'. [ 606.118018][ T4310] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 606.125953][ T4310] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 606.332537][ T4310] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 606.344478][ T4310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 606.354106][ T4310] CPU: 1 PID: 4310 Comm: kworker/u5:2 Not tainted 6.1.146-syzkaller #0 [ 606.362369][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.372438][ T4310] Workqueue: hci0 hci_rx_work [ 606.377148][ T4310] Call Trace: [ 606.380439][ T4310] [ 606.383387][ T4310] dump_stack_lvl+0x168/0x22e [ 606.388092][ T4310] ? show_regs_print_info+0x12/0x12 [ 606.393309][ T4310] ? load_image+0x3b0/0x3b0 [ 606.397848][ T4310] sysfs_create_dir_ns+0x252/0x280 [ 606.402977][ T4310] ? hci_rx_work+0x3eb/0xd40 [ 606.407591][ T4310] ? sysfs_warn_dup+0xa0/0xa0 [ 606.412289][ T4310] ? do_raw_spin_unlock+0x11d/0x230 [ 606.417517][ T4310] kobject_add_internal+0x6b8/0xc80 [ 606.422750][ T4310] kobject_add+0x152/0x210 [ 606.427198][ T4310] ? kobject_init+0x1d0/0x1d0 [ 606.431902][ T4310] ? klist_children_get+0x50/0x50 [ 606.436948][ T4310] ? get_device_parent+0x121/0x3f0 [ 606.442084][ T4310] device_add+0x483/0xfb0 [ 606.446431][ T4310] ? kmem_cache_free+0xf7/0x290 [ 606.451304][ T4310] hci_conn_add_sysfs+0xd1/0x1e0 [ 606.456255][ T4310] le_conn_complete_evt+0xd1d/0x1320 [ 606.461578][ T4310] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 606.467845][ T4310] ? bt_info+0x150/0x150 [ 606.472113][ T4310] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 606.477756][ T4310] ? skb_pull_data+0xf7/0x200 [ 606.482443][ T4310] hci_le_conn_complete_evt+0x183/0x440 [ 606.488003][ T4310] ? hci_remote_host_features_evt+0x270/0x270 [ 606.494072][ T4310] hci_event_packet+0x791/0x1210 [ 606.499011][ T4310] ? bis_list+0x280/0x280 [ 606.503331][ T4310] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 606.509222][ T4310] ? kcov_remote_start+0x4c7/0x7e0 [ 606.514327][ T4310] ? mce_start+0x60/0x140 [ 606.518653][ T4310] ? hci_send_to_monitor+0x9c/0x4a0 [ 606.523869][ T4310] hci_rx_work+0x3eb/0xd40 [ 606.528297][ T4310] ? _raw_spin_unlock+0x40/0x40 [ 606.533163][ T4310] ? process_one_work+0x7a1/0x1160 [ 606.538285][ T4310] process_one_work+0x898/0x1160 [ 606.543235][ T4310] ? worker_detach_from_pool+0x240/0x240 [ 606.548866][ T4310] ? _raw_spin_lock_irq+0xab/0xe0 [ 606.553889][ T4310] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 606.559257][ T4310] ? kthread_data+0x4b/0xc0 [ 606.563762][ T4310] worker_thread+0xaa2/0x1250 [ 606.568453][ T4310] kthread+0x29d/0x330 [ 606.572517][ T4310] ? worker_clr_flags+0x1a0/0x1a0 [ 606.577535][ T4310] ? kthread_blkcg+0xd0/0xd0 [ 606.582128][ T4310] ret_from_fork+0x1f/0x30 [ 606.586567][ T4310] [ 606.599619][ T4310] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 606.612742][ T4310] Bluetooth: hci0: failed to register connection device [ 606.867481][ T4310] Bluetooth: hci6: unknown advertising packet type: 0xff [ 606.945345][ T9721] netlink: 'syz.3.1677': attribute type 29 has an invalid length. [ 606.976607][ T9721] netlink: 'syz.3.1677': attribute type 29 has an invalid length. [ 607.012699][ T9724] netlink: 'syz.3.1677': attribute type 29 has an invalid length. [ 607.217437][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1680'. [ 607.228307][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1679'. [ 607.237049][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1680'. [ 607.258865][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1679'. [ 607.292347][ T9733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1680'. [ 607.301641][ T4310] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 607.301891][ T4310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 607.301923][ T4310] CPU: 1 PID: 4310 Comm: kworker/u5:2 Not tainted 6.1.146-syzkaller #0 [ 607.301948][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 607.301960][ T4310] Workqueue: hci1 hci_rx_work [ 607.301989][ T4310] Call Trace: [ 607.301996][ T4310] [ 607.302004][ T4310] dump_stack_lvl+0x168/0x22e [ 607.352527][ T4310] ? show_regs_print_info+0x12/0x12 [ 607.357759][ T4310] ? load_image+0x3b0/0x3b0 [ 607.362303][ T4310] sysfs_create_dir_ns+0x252/0x280 [ 607.367442][ T4310] ? hci_rx_work+0x3eb/0xd40 [ 607.372058][ T4310] ? sysfs_warn_dup+0xa0/0xa0 [ 607.376758][ T4310] ? do_raw_spin_unlock+0x11d/0x230 [ 607.381990][ T4310] kobject_add_internal+0x6b8/0xc80 [ 607.387219][ T4310] kobject_add+0x152/0x210 [ 607.391666][ T4310] ? kobject_init+0x1d0/0x1d0 [ 607.396389][ T4310] ? klist_children_get+0x50/0x50 [ 607.401434][ T4310] ? get_device_parent+0x121/0x3f0 [ 607.406572][ T4310] device_add+0x483/0xfb0 [ 607.410917][ T4310] ? kmem_cache_free+0xf7/0x290 [ 607.415786][ T4310] hci_conn_add_sysfs+0xd1/0x1e0 [ 607.420745][ T4310] le_conn_complete_evt+0xd1d/0x1320 [ 607.426071][ T4310] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 607.432346][ T4310] ? bt_info+0x150/0x150 [ 607.436630][ T4310] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 607.442286][ T4310] ? skb_pull_data+0xf7/0x200 [ 607.446993][ T4310] hci_le_conn_complete_evt+0x183/0x440 [ 607.452567][ T4310] ? hci_remote_host_features_evt+0x270/0x270 [ 607.458655][ T4310] hci_event_packet+0x791/0x1210 [ 607.463624][ T4310] ? bis_list+0x280/0x280 [ 607.467969][ T4310] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 607.473890][ T4310] ? kcov_remote_start+0x4c7/0x7e0 [ 607.479018][ T4310] ? mce_start+0x60/0x140 [ 607.483382][ T4310] ? hci_send_to_monitor+0x9c/0x4a0 [ 607.488615][ T4310] hci_rx_work+0x3eb/0xd40 [ 607.493056][ T4310] ? _raw_spin_unlock+0x40/0x40 [ 607.497942][ T4310] ? process_one_work+0x7a1/0x1160 [ 607.503072][ T4310] process_one_work+0x898/0x1160 [ 607.508044][ T4310] ? worker_detach_from_pool+0x240/0x240 [ 607.513700][ T4310] ? _raw_spin_lock_irq+0xab/0xe0 [ 607.518751][ T4310] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 607.524149][ T4310] ? kthread_data+0x4b/0xc0 [ 607.528684][ T4310] worker_thread+0xaa2/0x1250 [ 607.533416][ T4310] kthread+0x29d/0x330 [ 607.537514][ T4310] ? worker_clr_flags+0x1a0/0x1a0 [ 607.542556][ T4310] ? kthread_blkcg+0xd0/0xd0 [ 607.547173][ T4310] ret_from_fork+0x1f/0x30 [ 607.551625][ T4310] [ 607.556568][ T4310] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 607.576497][ T4310] Bluetooth: hci1: failed to register connection device [ 608.286183][ T9768] netlink: 'syz.3.1694': attribute type 29 has an invalid length. [ 608.510317][ T9768] netlink: 'syz.3.1694': attribute type 29 has an invalid length. [ 608.563083][ T9769] netlink: 'syz.3.1694': attribute type 29 has an invalid length. [ 608.740682][ T9777] netlink: 'syz.1.1697': attribute type 39 has an invalid length. [ 609.259869][ T4310] Bluetooth: hci6: unexpected subevent 0x01 length: 150 > 18 [ 609.267394][ T4310] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 609.621313][ T9815] __nla_validate_parse: 11 callbacks suppressed [ 609.621329][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1712'. [ 609.642068][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1712'. [ 609.654368][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1712'. [ 609.662631][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 609.674125][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1712'. [ 609.709694][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 609.749027][ T9814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 609.760227][ T9820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 610.594746][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1725'. [ 610.638910][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1725'. [ 611.068597][ T9879] validate_nla: 7 callbacks suppressed [ 611.068611][ T9879] netlink: 'syz.1.1734': attribute type 29 has an invalid length. [ 611.089438][ T9879] netlink: 'syz.1.1734': attribute type 29 has an invalid length. [ 611.112415][ T9879] netlink: 'syz.1.1734': attribute type 29 has an invalid length. [ 611.427714][ T9893] netlink: 'syz.6.1740': attribute type 39 has an invalid length. [ 612.682078][ T4310] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 612.689561][ T4310] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 613.720365][T10000] netlink: 'syz.1.1774': attribute type 29 has an invalid length. [ 613.777717][T10000] netlink: 'syz.1.1774': attribute type 29 has an invalid length. [ 613.868480][T10004] netlink: 'syz.1.1774': attribute type 29 has an invalid length. [ 614.315732][T10015] netlink: 'syz.1.1777': attribute type 39 has an invalid length. [ 615.569494][T10061] netlink: 'syz.1.1790': attribute type 39 has an invalid length. [ 615.598745][ T4310] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 615.606552][ T4310] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 615.710028][ T4310] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 616.811523][ T4310] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 616.819032][ T4310] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 617.152031][T10123] netlink: 'syz.6.1809': attribute type 29 has an invalid length. [ 617.241658][T10123] netlink: 'syz.6.1809': attribute type 29 has an invalid length. [ 617.293505][T10128] netlink: 'syz.6.1809': attribute type 29 has an invalid length. [ 617.461166][T10129] netlink: 'syz.6.1809': attribute type 29 has an invalid length. [ 617.476942][T10130] netlink: 'syz.6.1809': attribute type 29 has an invalid length. [ 617.669694][ T4310] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 617.677220][ T4310] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 617.805647][ T4310] Bluetooth: hci6: unexpected subevent 0x01 length: 150 > 18 [ 617.813215][ T4310] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 617.834092][T10153] netlink: 'syz.4.1819': attribute type 29 has an invalid length. [ 617.856420][T10153] netlink: 'syz.4.1819': attribute type 29 has an invalid length. [ 617.867566][T10153] netlink: 'syz.4.1819': attribute type 29 has an invalid length. [ 618.392311][T10178] __nla_validate_parse: 14 callbacks suppressed [ 618.392328][T10178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1826'. [ 618.456347][T10178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1826'. [ 618.566934][T10176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1826'. [ 618.609757][T10180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1826'. [ 618.888939][T10196] netlink: 'syz.1.1832': attribute type 29 has an invalid length. [ 618.929704][T10196] netlink: 'syz.1.1832': attribute type 29 has an invalid length. [ 619.279387][ T4310] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 619.287146][ T4310] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 619.501979][ T4310] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 619.509426][ T4310] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 619.770299][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1842'. [ 619.805116][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1842'. [ 619.820201][T10232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1842'. [ 619.854346][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1842'. [ 620.408745][ T4323] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 621.877641][ T4323] Bluetooth: hci6: unexpected subevent 0x01 length: 150 > 18 [ 621.885205][ T4323] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 622.765066][T10347] validate_nla: 15 callbacks suppressed [ 622.765083][T10347] netlink: 'syz.3.1884': attribute type 29 has an invalid length. [ 622.789324][T10347] netlink: 'syz.3.1884': attribute type 29 has an invalid length. [ 622.816859][T10347] netlink: 'syz.3.1884': attribute type 29 has an invalid length. [ 622.829027][T10347] netlink: 'syz.3.1884': attribute type 29 has an invalid length. [ 622.839066][T10347] netlink: 'syz.3.1884': attribute type 29 has an invalid length. [ 622.889451][T10350] netlink: 'syz.4.1887': attribute type 29 has an invalid length. [ 622.938166][T10350] netlink: 'syz.4.1887': attribute type 29 has an invalid length. [ 622.963013][T10354] netlink: 'syz.4.1887': attribute type 29 has an invalid length. [ 622.973292][T10355] netlink: 'syz.3.1889': attribute type 29 has an invalid length. [ 622.982227][T10355] netlink: 'syz.3.1889': attribute type 29 has an invalid length. [ 623.159319][T10362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1892'. [ 623.189834][T10362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1892'. [ 624.210834][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.217440][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.891897][T10421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.899797][T10421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.915393][T10421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.923438][T10421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.933172][T10421] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 624.940675][T10421] batman_adv: batadv0: Removing interface: virt_wifi0 [ 626.513881][ T4310] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 626.521626][ T4310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 626.534083][ T4310] CPU: 1 PID: 4310 Comm: kworker/u5:2 Not tainted 6.1.146-syzkaller #0 [ 626.542361][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 626.552479][ T4310] Workqueue: hci2 hci_rx_work [ 626.557197][ T4310] Call Trace: [ 626.560485][ T4310] [ 626.563429][ T4310] dump_stack_lvl+0x168/0x22e [ 626.568140][ T4310] ? show_regs_print_info+0x12/0x12 [ 626.573362][ T4310] ? load_image+0x3b0/0x3b0 [ 626.577906][ T4310] sysfs_create_dir_ns+0x252/0x280 [ 626.583051][ T4310] ? hci_rx_work+0x3eb/0xd40 [ 626.587669][ T4310] ? sysfs_warn_dup+0xa0/0xa0 [ 626.592374][ T4310] ? do_raw_spin_unlock+0x11d/0x230 [ 626.597607][ T4310] kobject_add_internal+0x6b8/0xc80 [ 626.602837][ T4310] kobject_add+0x152/0x210 [ 626.607284][ T4310] ? kobject_init+0x1d0/0x1d0 [ 626.611990][ T4310] ? klist_children_get+0x50/0x50 [ 626.617043][ T4310] ? get_device_parent+0x121/0x3f0 [ 626.622177][ T4310] device_add+0x483/0xfb0 [ 626.626527][ T4310] ? kmem_cache_free+0xf7/0x290 [ 626.631404][ T4310] hci_conn_add_sysfs+0xd1/0x1e0 [ 626.636365][ T4310] le_conn_complete_evt+0xd1d/0x1320 [ 626.641693][ T4310] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 626.647964][ T4310] ? bt_info+0x150/0x150 [ 626.652244][ T4310] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 626.657905][ T4310] ? skb_pull_data+0xf7/0x200 [ 626.662609][ T4310] hci_le_conn_complete_evt+0x183/0x440 [ 626.668185][ T4310] ? hci_remote_host_features_evt+0x270/0x270 [ 626.674277][ T4310] hci_event_packet+0x791/0x1210 [ 626.679246][ T4310] ? bis_list+0x280/0x280 [ 626.683589][ T4310] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 626.689510][ T4310] ? kcov_remote_start+0x4c7/0x7e0 [ 626.694643][ T4310] ? mce_start+0x60/0x140 [ 626.698994][ T4310] ? hci_send_to_monitor+0x9c/0x4a0 [ 626.704232][ T4310] hci_rx_work+0x3eb/0xd40 [ 626.708680][ T4310] ? _raw_spin_unlock+0x40/0x40 [ 626.713560][ T4310] ? process_one_work+0x7a1/0x1160 [ 626.718689][ T4310] process_one_work+0x898/0x1160 [ 626.723657][ T4310] ? worker_detach_from_pool+0x240/0x240 [ 626.729311][ T4310] ? _raw_spin_lock_irq+0xab/0xe0 [ 626.734363][ T4310] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 626.739757][ T4310] ? kthread_data+0x4b/0xc0 [ 626.744289][ T4310] worker_thread+0xaa2/0x1250 [ 626.749020][ T4310] kthread+0x29d/0x330 [ 626.753110][ T4310] ? worker_clr_flags+0x1a0/0x1a0 [ 626.758156][ T4310] ? kthread_blkcg+0xd0/0xd0 [ 626.762773][ T4310] ret_from_fork+0x1f/0x30 [ 626.767223][ T4310] [ 626.774973][ T4310] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 626.788086][ T4310] Bluetooth: hci2: failed to register connection device [ 627.485127][ T4310] Bluetooth: hci6: unexpected subevent 0x01 length: 150 > 18 [ 627.492654][ T4310] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 627.619595][ T4310] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 627.627113][ T4310] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 628.184649][T10529] validate_nla: 20 callbacks suppressed [ 628.184667][T10529] netlink: 'syz.1.1956': attribute type 29 has an invalid length. [ 628.465093][T10529] netlink: 'syz.1.1956': attribute type 29 has an invalid length. [ 628.490264][T10533] netlink: 'syz.1.1956': attribute type 29 has an invalid length. [ 628.953397][ T4310] Bluetooth: hci6: unexpected subevent 0x01 length: 150 > 18 [ 628.960835][ T4310] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 628.978222][ T4323] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 628.985913][ T4323] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 629.200637][T10562] netlink: 'syz.6.1967': attribute type 39 has an invalid length. [ 629.404331][T10567] netlink: 'syz.3.1969': attribute type 29 has an invalid length. [ 629.482066][T10567] netlink: 'syz.3.1969': attribute type 29 has an invalid length. [ 629.495500][T10567] netlink: 'syz.3.1969': attribute type 29 has an invalid length. [ 630.357502][ T4323] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 630.359490][ T4310] Bluetooth: hci6: unexpected subevent 0x01 length: 150 > 18 [ 630.365248][ T4323] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 630.372659][ T4310] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 631.909262][ T4323] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 631.916946][ T4323] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 633.583394][T10687] netlink: 'syz.6.2020': attribute type 29 has an invalid length. [ 633.606490][T10687] netlink: 'syz.6.2020': attribute type 29 has an invalid length. [ 633.639161][T10687] netlink: 'syz.6.2020': attribute type 29 has an invalid length. [ 634.076934][ T4323] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 634.084548][ T4323] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 634.543055][T10719] netlink: 'syz.8.2031': attribute type 29 has an invalid length. [ 634.582911][T10719] netlink: 'syz.8.2031': attribute type 29 has an invalid length. [ 634.593349][T10723] netlink: 'syz.8.2031': attribute type 29 has an invalid length. [ 634.748971][T10728] netlink: 'syz.4.2045': attribute type 29 has an invalid length. [ 634.819084][T10728] netlink: 'syz.4.2045': attribute type 29 has an invalid length. [ 634.902965][T10733] netlink: 'syz.4.2045': attribute type 29 has an invalid length. [ 635.284371][ T4323] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 635.292628][ T4323] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 635.827431][ T4323] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 635.835021][ T4323] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 636.360605][T10769] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 636.774403][ T4310] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 636.781906][ T4310] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 637.092729][ T4310] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 637.100821][ T4310] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 638.099171][ T4310] Bluetooth: hci6: unexpected subevent 0x01 length: 150 > 18 [ 638.107101][ T4310] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 639.259325][ T4323] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 639.266795][ T4323] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 639.638097][ T28] INFO: task syz.5.700:6517 blocked for more than 143 seconds. [ 639.645939][ T28] Not tainted 6.1.146-syzkaller #0 [ 639.651691][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 639.661366][ T28] task:syz.5.700 state:D stack:22976 pid:6517 ppid:5770 flags:0x00004006 [ 639.670592][ T28] Call Trace: [ 639.677629][ T28] [ 639.680672][ T28] __schedule+0x10e9/0x40d0 [ 639.686100][ T28] ? lock_chain_count+0x20/0x20 [ 639.693887][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 639.699372][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 639.709447][ T28] ? _free_event+0xfd/0x10a0 [ 639.714174][ T28] ? _free_event+0xfd/0x10a0 [ 639.718848][ T28] schedule+0xb9/0x180 [ 639.723272][ T28] _free_event+0x171/0x10a0 [ 639.729185][ T28] ? perf_mmap+0x13e0/0x13e0 [ 639.744100][ T28] perf_event_release_kernel+0x832/0x8c0 [ 639.757056][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 639.773847][ T28] ? calc_timer_values+0x410/0x410 [ 639.779081][ T28] ? perf_mmap+0x13e0/0x13e0 [ 639.787285][ T28] perf_release+0x37/0x40 [ 639.797496][ T28] __fput+0x22c/0x920 [ 639.807397][ T28] task_work_run+0x1ca/0x250 [ 639.842239][ T28] ? task_work_cancel+0x230/0x230 [ 639.855307][ T28] get_signal+0x11a6/0x1350 [ 639.866264][ T28] ? crng_reseed+0x180/0x180 [ 639.875211][ T28] ? __lock_acquire+0x7c50/0x7c50 [ 639.880411][ T28] ? kernel_clone+0x23f/0x8b0 [ 639.885562][ T28] ? ktime_get+0x7b/0x270 [ 639.890361][ T28] ? ktime_get+0x7b/0x270 [ 639.896733][ T28] arch_do_signal_or_restart+0xb0/0x1230 [ 639.903231][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 639.909388][ T28] ? get_sigframe_size+0x10/0x10 [ 639.914664][ T28] ? rcu_is_watching+0x11/0xa0 [ 639.919667][ T28] exit_to_user_mode_loop+0x70/0x110 [ 639.925026][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 639.930704][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 639.936419][ T28] do_syscall_64+0x58/0xa0 [ 639.941114][ T28] ? clear_bhb_loop+0x60/0xb0 [ 639.945881][ T28] ? clear_bhb_loop+0x60/0xb0 [ 639.950633][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.956745][ T28] RIP: 0033:0x7f1c02f8e9a9 [ 639.967917][ T28] RSP: 002b:00007f1c03d8cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 639.984214][ T28] RAX: fffffffffffffffc RBX: 00007f1c031b5fa0 RCX: 00007f1c02f8e9a9 [ 639.998995][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 640.012694][ T28] RBP: 00007f1c03010d69 R08: 0000000000000000 R09: 0000000000000000 [ 640.040625][ T28] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 640.048911][ T28] R13: 0000000000000000 R14: 00007f1c031b5fa0 R15: 00007fffdf2d88d8 [ 640.057217][ T28] [ 640.066009][ T28] [ 640.066009][ T28] Showing all locks held in the system: [ 640.074334][ T28] 1 lock held by rcu_tasks_kthre/12: [ 640.079706][ T28] #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 640.091197][ T28] 1 lock held by rcu_tasks_trace/13: [ 640.096563][ T28] #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 640.108160][ T28] 3 locks held by kworker/1:1/26: [ 640.113411][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 640.124050][ T28] #1: ffffc90000a1fd00 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 640.134117][ T28] #2: ffffffff8cb309c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x600 [ 640.144278][ T28] 1 lock held by khungtaskd/28: [ 640.149273][ T28] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 640.159315][ T28] 2 locks held by getty/4030: [ 640.164032][ T28] #0: ffff88814d4a1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 640.174258][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 640.185164][ T28] 4 locks held by kworker/u4:8/5592: [ 640.190456][ T28] #0: ffff8880b8f3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 640.200404][ T28] #1: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x13c/0x630 [ 640.210034][ T28] #2: ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 640.219383][ T28] #3: ffffffff96e78de8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6a/0x490 [ 640.229704][ T28] 2 locks held by kworker/1:10/6040: [ 640.235035][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 640.245446][ T28] #1: ffffc90004847d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 640.256902][ T28] 3 locks held by kworker/u4:9/6164: [ 640.262276][ T28] #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 640.273081][ T28] #1: ffffc90004a77d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 640.283085][ T28] #2: ffffffff8cb309c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x600 [ 640.293147][ T28] 3 locks held by syz.4.2078/10847: [ 640.298328][ T28] #0: ffffffff8dd332d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x32e/0x5b0 [ 640.307771][ T28] #1: ffffffff8dd3ff68 (rtnl_mutex){+.+.}-{3:3}, at: vti6_exit_batch_net+0xb3/0x410 [ 640.317317][ T28] #2: ffffffff8cb30af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 640.328326][ T28] [ 640.330651][ T28] ============================================= [ 640.330651][ T28] [ 640.339828][ T28] NMI backtrace for cpu 1 [ 640.344166][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 640.352036][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.362092][ T28] Call Trace: [ 640.365379][ T28] [ 640.368310][ T28] dump_stack_lvl+0x168/0x22e [ 640.372989][ T28] ? irq_work_queue+0xb8/0x140 [ 640.377762][ T28] ? show_regs_print_info+0x12/0x12 [ 640.382955][ T28] ? load_image+0x3b0/0x3b0 [ 640.387472][ T28] ? vprintk_emit+0x571/0x680 [ 640.392155][ T28] ? printk_sprint+0x460/0x460 [ 640.396907][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 640.401830][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 640.407965][ T28] ? _printk+0xcc/0x110 [ 640.412105][ T28] ? load_image+0x3b0/0x3b0 [ 640.416592][ T28] ? load_image+0x3b0/0x3b0 [ 640.421090][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 640.427152][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 640.433114][ T28] watchdog+0xeee/0xf30 [ 640.437258][ T28] ? watchdog+0x1ed/0xf30 [ 640.441568][ T28] kthread+0x29d/0x330 [ 640.445620][ T28] ? hungtask_pm_notify+0x40/0x40 [ 640.450620][ T28] ? kthread_blkcg+0xd0/0xd0 [ 640.455196][ T28] ret_from_fork+0x1f/0x30 [ 640.459599][ T28] [ 640.463563][ T28] Sending NMI from CPU 1 to CPUs 0: [ 640.469087][ C0] NMI backtrace for cpu 0 [ 640.469097][ C0] CPU: 0 PID: 4396 Comm: kworker/u4:4 Not tainted 6.1.146-syzkaller #0 [ 640.469112][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.469120][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 640.469143][ C0] RIP: 0010:__lock_acquire+0xed/0x7c50 [ 640.469163][ C0] Code: 84 c0 0f 85 53 65 00 00 83 3d 32 8d bc 0c 00 0f 84 c0 27 00 00 83 3d a1 9a 3c 0b 00 74 29 48 89 d8 48 c1 e8 03 42 80 3c 00 00 <74> 12 48 89 df e8 b9 f2 6d 00 49 b8 00 00 00 00 00 fc ff df 48 81 [ 640.469180][ C0] RSP: 0018:ffffc90004327540 EFLAGS: 00000046 [ 640.469191][ C0] RAX: 1ffffffff2dda6d4 RBX: ffffffff96ed36a0 RCX: 1ffff92000864ecc [ 640.469202][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff96ed36a0 [ 640.469211][ C0] RBP: ffffc90004327790 R08: dffffc0000000000 R09: 0000000000000001 [ 640.469220][ C0] R10: fffffbfff1c3e91e R11: 1ffffffff1c3e91d R12: ffff88802b115940 [ 640.469230][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 640.469239][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 640.469251][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.469261][ C0] CR2: 00007f2288891700 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 640.469273][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 640.469282][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 640.469291][ C0] Call Trace: [ 640.469295][ C0] [ 640.469301][ C0] ? deref_stack_reg+0x19f/0x230 [ 640.469323][ C0] ? chacha_permute+0x4e4/0xef0 [ 640.469340][ C0] ? verify_lock_unused+0x140/0x140 [ 640.469361][ C0] ? mark_lock+0x94/0x320 [ 640.469379][ C0] lock_acquire+0x1b4/0x490 [ 640.469393][ C0] ? debug_check_no_obj_freed+0x136/0x530 [ 640.469411][ C0] ? read_lock_is_recursive+0x10/0x10 [ 640.469430][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 640.469448][ C0] ? debug_check_no_obj_freed+0x136/0x530 [ 640.469461][ C0] ? _raw_spin_lock+0x40/0x40 [ 640.469480][ C0] debug_check_no_obj_freed+0x136/0x530 [ 640.469495][ C0] ? mark_lock+0x94/0x320 [ 640.469511][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 640.469527][ C0] ? skb_release_data+0x5db/0x7c0 [ 640.469542][ C0] __kmem_cache_free+0xb6/0x1f0 [ 640.469557][ C0] skb_release_data+0x5db/0x7c0 [ 640.469575][ C0] consume_skb+0xa2/0x100 [ 640.469589][ C0] nsim_dev_trap_report_work+0x76b/0xaf0 [ 640.469612][ C0] ? process_one_work+0x7a1/0x1160 [ 640.469626][ C0] process_one_work+0x898/0x1160 [ 640.469644][ C0] ? worker_detach_from_pool+0x240/0x240 [ 640.469659][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 640.469675][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 640.469691][ C0] ? kthread_data+0x4b/0xc0 [ 640.469708][ C0] worker_thread+0xaa2/0x1250 [ 640.469731][ C0] kthread+0x29d/0x330 [ 640.469746][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 640.469759][ C0] ? kthread_blkcg+0xd0/0xd0 [ 640.469776][ C0] ret_from_fork+0x1f/0x30 [ 640.469802][ C0] [ 640.773626][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 640.780501][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 640.788393][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.798431][ T28] Call Trace: [ 640.801702][ T28] [ 640.804629][ T28] dump_stack_lvl+0x168/0x22e [ 640.809293][ T28] ? memcpy+0x3c/0x60 [ 640.813261][ T28] ? show_regs_print_info+0x12/0x12 [ 640.818439][ T28] ? load_image+0x3b0/0x3b0 [ 640.822933][ T28] panic+0x2c9/0x710 [ 640.826816][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 640.832430][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 640.836916][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 640.842451][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 640.848590][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 640.854726][ T28] watchdog+0xf2d/0xf30 [ 640.858866][ T28] ? watchdog+0x1ed/0xf30 [ 640.863180][ T28] kthread+0x29d/0x330 [ 640.867236][ T28] ? hungtask_pm_notify+0x40/0x40 [ 640.872257][ T28] ? kthread_blkcg+0xd0/0xd0 [ 640.876851][ T28] ret_from_fork+0x1f/0x30 [ 640.881264][ T28] [ 640.884494][ T28] Kernel Offset: disabled [ 640.888805][ T28] Rebooting in 86400 seconds..