last executing test programs: 29.449020598s ago: executing program 1 (id=2): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0xa010, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0xa010, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x67, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x5, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x401, 0xff, 0x4, 0x24290, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x401, 0xff, 0x4, 0x24290, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x56}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x6, 0x1, 0x2, 0xfffffffffffffff4, 0x523536af22078b50}, @ldst={0x3, 0x3, 0x1, 0x3, 0x5, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0x9b, &(0x7f0000000380)=""/155, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xe, 0x2, 0x4}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000740)=[r6, r7, r8, r9], &(0x7f0000000780)=[{0x0, 0x2, 0xc, 0x8}, {0x1, 0x3, 0xb, 0x7}, {0x3, 0x3, 0xb, 0x3}, {0x2, 0x3, 0x9, 0x9}, {0x2, 0x4, 0x2, 0x6}, {0x1, 0x2, 0xd, 0x1}, {0x2, 0x3, 0x7, 0x2}, {0x5, 0x3, 0x4, 0xb}, {0x1, 0x1, 0x8, 0x9}, {0x4, 0x1, 0x2, 0x1}], 0x10, 0x9}, 0x94) r10 = openat$cgroup_int(r3, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x2000000000009237, 0x12) 29.067908216s ago: executing program 1 (id=5): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 28.88437052s ago: executing program 0 (id=1): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x891e, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000fc0)=' \xb4\xcfhj0\x04\x9e\x92\xee\x87\xa1X\xbb\xea/\xbe\x18\xeb\xa9\bsDi\xb2\xc6E\x14\x8a\x1d\xc0\xd9\xe6\x10\xc0s\xe8\xc1\x12\xbd\xe2tX}\xa3\x1e \xfady7D -\x96x\x81\xdb.?\x16\xbb\x93\x1c') 27.56115408s ago: executing program 1 (id=7): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xc, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x82}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000807000000230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="620000001800000016000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x7b, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8c30}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x60, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[r1, r1], &(0x7f0000000ac0)=[{0x5, 0x1, 0x5, 0xa}, {0x0, 0x4, 0x2, 0x1}], 0x10, 0x80000000}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x0, 'net'}, {0x2d, 'pids'}, {0x2b, 'net_prio'}, {0x2d, 'cpu'}]}, 0x2d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000002e00), &(0x7f00000002c0), 0x8, 0x6c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01003800000000000000300000003000000003000000010000000000000700000000000000000100000400000000000000000300000000000000010000000000000801000000005f00"], &(0x7f0000000300)=""/209, 0x4b, 0xd1, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x2, 0xa, 0x2) 201.151µs ago: executing program 32 (id=6): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfd, 0x0, 0x0, 0x9, 0x640b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x3, 0x1, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={'bond_slave_0\x00', @random='\\\x00\x00 \x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x401c840) socket$kcm(0x28, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x1120) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x3}, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7fff, 0x10}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x0, 0x6, 0x2, 0x0, 0x2000, 0x0, 0xd}, 0x0, 0x10000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$kcm(0x2b, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x4, 0x7f, 0x0, 0x6, 0x0, 0x1, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x10000, 0x8, 0x0, 0x5, 0xffffffffffffff80, 0x5, 0x3ff, 0x0, 0xd7, 0x0, 0x8}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) 0s ago: executing program 33 (id=7): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xc, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x82}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000807000000230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="620000001800000016000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x7b, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8c30}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x60, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[r1, r1], &(0x7f0000000ac0)=[{0x5, 0x1, 0x5, 0xa}, {0x0, 0x4, 0x2, 0x1}], 0x10, 0x80000000}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x0, 'net'}, {0x2d, 'pids'}, {0x2b, 'net_prio'}, {0x2d, 'cpu'}]}, 0x2d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000002e00), &(0x7f00000002c0), 0x8, 0x6c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01003800000000000000300000003000000003000000010000000000000700000000000000000100000400000000000000000300000000000000010000000000000801000000005f00"], &(0x7f0000000300)=""/209, 0x4b, 0xd1, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x2, 0xa, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 422.938235][ T5810] cgroup: Unknown subsys name 'net' [ 423.102093][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 424.871663][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 426.440757][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 426.449956][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.458703][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.466686][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.475245][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.482711][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.490639][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.495382][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 426.504932][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 426.516883][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 426.517258][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 426.532731][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 426.540437][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.540597][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 426.556931][ T5832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 426.557054][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 426.570940][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 426.574887][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.579832][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.593277][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 426.594697][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.608196][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.617712][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 426.627047][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 427.093484][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 427.163048][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 427.184841][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 427.259730][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 427.376789][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.385011][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.392926][ T5822] bridge_slave_0: entered allmulticast mode [ 427.400891][ T5822] bridge_slave_0: entered promiscuous mode [ 427.420105][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.427354][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.434662][ T5822] bridge_slave_1: entered allmulticast mode [ 427.442213][ T5822] bridge_slave_1: entered promiscuous mode [ 427.456361][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.463510][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.472990][ T5824] bridge_slave_0: entered allmulticast mode [ 427.480552][ T5824] bridge_slave_0: entered promiscuous mode [ 427.489694][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.497043][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.504198][ T5824] bridge_slave_1: entered allmulticast mode [ 427.511400][ T5824] bridge_slave_1: entered promiscuous mode [ 427.569685][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.576961][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.584102][ T5825] bridge_slave_0: entered allmulticast mode [ 427.591299][ T5825] bridge_slave_0: entered promiscuous mode [ 427.622003][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.633590][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.641363][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.648924][ T5825] bridge_slave_1: entered allmulticast mode [ 427.656748][ T5825] bridge_slave_1: entered promiscuous mode [ 427.666313][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.679375][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.703894][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.752618][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.760373][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.767988][ T5823] bridge_slave_0: entered allmulticast mode [ 427.775248][ T5823] bridge_slave_0: entered promiscuous mode [ 427.793938][ T5824] team0: Port device team_slave_0 added [ 427.803702][ T5824] team0: Port device team_slave_1 added [ 427.821002][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.828689][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.836208][ T5823] bridge_slave_1: entered allmulticast mode [ 427.843316][ T5823] bridge_slave_1: entered promiscuous mode [ 427.852581][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.866377][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.886222][ T5822] team0: Port device team_slave_0 added [ 427.930521][ T5822] team0: Port device team_slave_1 added [ 427.960439][ T5825] team0: Port device team_slave_0 added [ 427.968996][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.979914][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.987422][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.013606][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.028268][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.035464][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.061554][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.092142][ T5825] team0: Port device team_slave_1 added [ 428.099852][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.143213][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.151365][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.177886][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.221093][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.228639][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.254995][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.284041][ T5823] team0: Port device team_slave_0 added [ 428.296096][ T5824] hsr_slave_0: entered promiscuous mode [ 428.302537][ T5824] hsr_slave_1: entered promiscuous mode [ 428.330423][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.337545][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.363820][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.377598][ T5823] team0: Port device team_slave_1 added [ 428.384231][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.391823][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.418253][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.462071][ T5822] hsr_slave_0: entered promiscuous mode [ 428.468884][ T5822] hsr_slave_1: entered promiscuous mode [ 428.478343][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.486365][ T5822] Cannot create hsr debugfs directory [ 428.555922][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.563182][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.589448][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.602204][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.609403][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.635696][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.645491][ T5085] Bluetooth: hci0: command tx timeout [ 428.704773][ T5085] Bluetooth: hci3: command tx timeout [ 428.710555][ T5085] Bluetooth: hci2: command tx timeout [ 428.716841][ T51] Bluetooth: hci1: command tx timeout [ 428.730531][ T5825] hsr_slave_0: entered promiscuous mode [ 428.737546][ T5825] hsr_slave_1: entered promiscuous mode [ 428.744242][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.752777][ T5825] Cannot create hsr debugfs directory [ 428.826224][ T5823] hsr_slave_0: entered promiscuous mode [ 428.833075][ T5823] hsr_slave_1: entered promiscuous mode [ 428.839506][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.847238][ T5823] Cannot create hsr debugfs directory [ 429.125132][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 429.161264][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 429.172811][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 429.203394][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 429.265036][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 429.278341][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 429.288067][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 429.307592][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 429.413934][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.450927][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.461996][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.489755][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.542956][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.563554][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.573858][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.593814][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.611470][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.676839][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.717193][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.743069][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.759491][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.766877][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.798988][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.806138][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.817287][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.824397][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.883484][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.890717][ T5866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.943482][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.013353][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.032379][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.058349][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.090482][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.097747][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.113188][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.120552][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.138332][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.220943][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.228302][ T5871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.281313][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.288885][ T5866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.480168][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.623313][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.689781][ T5824] veth0_vlan: entered promiscuous mode [ 430.712326][ T5085] Bluetooth: hci0: command tx timeout [ 430.749891][ T5824] veth1_vlan: entered promiscuous mode [ 430.785387][ T5085] Bluetooth: hci3: command tx timeout [ 430.790870][ T5085] Bluetooth: hci2: command tx timeout [ 430.794651][ T51] Bluetooth: hci1: command tx timeout [ 430.800765][ T5824] veth0_macvtap: entered promiscuous mode [ 430.834064][ T5824] veth1_macvtap: entered promiscuous mode [ 430.874328][ T5822] veth0_vlan: entered promiscuous mode [ 430.923798][ T5822] veth1_vlan: entered promiscuous mode [ 430.950891][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.987566][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.000080][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.010273][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.039414][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.048434][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.060206][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.069302][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.100625][ T5822] veth0_macvtap: entered promiscuous mode [ 431.117022][ T5822] veth1_macvtap: entered promiscuous mode [ 431.205753][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.221629][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.233190][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.246598][ T5825] veth0_vlan: entered promiscuous mode [ 431.297507][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.311341][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.323281][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.333269][ T5825] veth1_vlan: entered promiscuous mode [ 431.353069][ T5823] veth0_vlan: entered promiscuous mode [ 431.372896][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.381904][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.391609][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.400704][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.438382][ T5823] veth1_vlan: entered promiscuous mode [ 431.457644][ T654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.473455][ T654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.560517][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.575463][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.598023][ T5825] veth0_macvtap: entered promiscuous mode [ 431.624114][ T5825] veth1_macvtap: entered promiscuous mode [ 431.669110][ T5823] veth0_macvtap: entered promiscuous mode [ 431.682659][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.697431][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.713385][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.726931][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.738737][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.751128][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.765352][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.777412][ T5823] veth1_macvtap: entered promiscuous mode [ 431.801653][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.812507][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.823131][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.852468][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.896385][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.943080][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.954701][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.964769][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.975645][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.985924][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.996772][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.008601][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.018442][ T5867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.040601][ T5867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.052416][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.065008][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.073950][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.082754][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.099364][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.112121][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.122699][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.133262][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.143231][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.154887][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.167109][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.190212][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.202540][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.222983][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.233643][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.435781][ T654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.443765][ T654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.629863][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.644557][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.658290][ T5867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.678582][ T5867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.763055][ T5866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.787364][ T5833] Bluetooth: hci0: command tx timeout [ 432.789407][ T5866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.865558][ T5833] Bluetooth: hci2: command tx timeout [ 432.865803][ T51] Bluetooth: hci3: command tx timeout [ 432.871006][ T5833] Bluetooth: hci1: command tx timeout [ 433.294464][ C1] hrtimer: interrupt took 57705 ns [ 433.620782][ T5910] Zero length message leads to an empty skb [ 433.694908][ T5914] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 435.018439][ T5085] Bluetooth: hci3: command tx timeout [ 435.025704][ T5085] Bluetooth: hci2: command tx timeout [ 438.280802][ T5833] Bluetooth: hci0: command tx timeout [ 438.373006][ T5833] Bluetooth: hci1: command tx timeout [ 444.744074][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.753793][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 538.294412][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 538.301144][ C1] rcu: 1-....: (1 GPs behind) idle=2e6c/1/0x4000000000000000 softirq=11704/11707 fqs=5246 [ 538.311909][ C1] rcu: hardirqs softirqs csw/system [ 538.318336][ C1] rcu: number: 1327480 0 0 [ 538.324760][ C1] rcu: cputime: 16302 36187 43 ==> 52510(ms) [ 538.332609][ C1] rcu: (t=10502 jiffies g=10649 q=1316 ncpus=2) [ 538.338978][ C1] CPU: 1 PID: 5904 Comm: syz.0.6 Not tainted syzkaller #0 [ 538.346164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 538.356228][ C1] RIP: 0010:__unwind_start+0x5/0x730 [ 538.361607][ C1] Code: 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 3d ff ff ff 4c 89 ff e8 ec 0a a4 00 e9 30 ff ff ff 0f 1f 80 00 00 00 00 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 28 48 89 4c 24 08 49 89 d4 49 [ 538.381450][ C1] RSP: 0018:ffffc900001ef018 EFLAGS: 00000246 [ 538.387519][ C1] RAX: ffffffff81329000 RBX: ffffc900001ef0e0 RCX: ffffc900001ef0b0 [ 538.395484][ C1] RDX: 0000000000000000 RSI: ffff888024710000 RDI: ffffc900001ef028 [ 538.403451][ C1] RBP: ffffc900001ef0b0 R08: dffffc0000000000 R09: 0000000000000000 [ 538.411416][ C1] R10: ffffc900001ef170 R11: fffffbfff223ceb9 R12: ffff888024710000 [ 538.419382][ C1] R13: ffffc900001ef450 R14: ffffffff81758be0 R15: 0000000000000000 [ 538.427345][ C1] FS: 00007f2088dca6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 538.436356][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.442937][ C1] CR2: 0000200000a22000 CR3: 000000003127e000 CR4: 00000000003506e0 [ 538.450926][ C1] Call Trace: [ 538.454263][ C1] [ 538.457132][ C1] arch_stack_walk+0xf8/0x190 [ 538.461846][ C1] stack_trace_save+0xaa/0x100 [ 538.466612][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 538.471749][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 538.476955][ C1] ? sched_clock+0x3f/0x60 [ 538.481395][ C1] ? ktime_get+0x24b/0x280 [ 538.485848][ C1] kasan_set_track+0x4e/0x70 [ 538.490493][ C1] ? kmem_cache_free+0xf8/0x290 [ 538.495360][ C1] kasan_save_free_info+0x28/0x40 [ 538.500389][ C1] ____kasan_slab_free+0x126/0x1f0 [ 538.505501][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 538.510959][ C1] ? packet_rcv+0x15b/0x1420 [ 538.515553][ C1] kmem_cache_free+0xf8/0x290 [ 538.520255][ C1] packet_rcv+0x15b/0x1420 [ 538.524772][ C1] ? packet_sock_destruct+0x160/0x160 [ 538.530170][ C1] dev_queue_xmit_nit+0xb0c/0xba0 [ 538.535325][ C1] ? dev_queue_xmit_nit+0x2d/0xba0 [ 538.540489][ C1] dev_hard_start_xmit+0x150/0x790 [ 538.545671][ C1] sch_direct_xmit+0x251/0x4a0 [ 538.550457][ C1] ? mrp_pdu_parse_vecattr_event+0x230/0x230 [ 538.556440][ C1] __dev_queue_xmit+0x162a/0x3630 [ 538.561477][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 538.566674][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 538.571869][ C1] ? read_seqbegin+0x184/0x250 [ 538.576628][ C1] ? read_seqbegin+0x1b6/0x250 [ 538.581395][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 538.586673][ C1] ? __asan_memcpy+0x40/0x70 [ 538.591360][ C1] ? eth_header+0x11b/0x200 [ 538.595867][ C1] ? llc_sysctl_exit+0x70/0x70 [ 538.600633][ C1] ? neigh_resolve_output+0x5f5/0x710 [ 538.606007][ C1] ? ip_finish_output2+0x45a/0x1260 [ 538.611215][ C1] ip_finish_output2+0xd97/0x1260 [ 538.616232][ C1] ? ip_finish_output2+0x45a/0x1260 [ 538.621684][ C1] ? ip_skb_dst_mtu+0x33a/0x9c0 [ 538.626523][ C1] ? ip_fragment+0x210/0x210 [ 538.631112][ C1] ? ip_skb_dst_mtu+0x39d/0x9c0 [ 538.635967][ C1] ? ip_skb_dst_mtu+0x586/0x9c0 [ 538.640810][ C1] ? ip_finish_output+0x3ec/0x4c0 [ 538.645830][ C1] ip_output+0x2a5/0x3a0 [ 538.650065][ C1] ? ip_output+0x5a/0x3a0 [ 538.654426][ C1] ? __ip_queue_xmit+0x5d/0x1960 [ 538.659364][ C1] __ip_queue_xmit+0x1056/0x1960 [ 538.664423][ C1] ? __ip_queue_xmit+0x5d/0x1960 [ 538.669406][ C1] __tcp_transmit_skb+0x1dd6/0x3470 [ 538.674655][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 538.679503][ C1] ? __alloc_skb+0x1b2/0x2c0 [ 538.684106][ C1] ? __tcp_send_ack+0x176/0x5a0 [ 538.688953][ C1] tcp_validate_incoming+0xf37/0x22b0 [ 538.694330][ C1] tcp_rcv_established+0x7e1/0x1d70 [ 538.699529][ C1] ? tcp_check_space+0xa80/0xa80 [ 538.704467][ C1] ? tcp_v4_do_rcv+0x63c/0xba0 [ 538.709230][ C1] ? tcp_rcv_established+0x5/0x1d70 [ 538.714535][ C1] tcp_v4_do_rcv+0x6d3/0xba0 [ 538.719124][ C1] tcp_v4_rcv+0x2358/0x2a60 [ 538.723623][ C1] ? tcp_v4_rcv+0x1091/0x2a60 [ 538.728323][ C1] ? tcp_filter+0x90/0x90 [ 538.732692][ C1] ? read_lock_is_recursive+0x20/0x20 [ 538.738092][ C1] ip_protocol_deliver_rcu+0x20a/0x3f0 [ 538.743549][ C1] ? ip_local_deliver_finish+0x1c2/0x510 [ 538.749178][ C1] ip_local_deliver_finish+0x2c3/0x510 [ 538.754644][ C1] NF_HOOK+0x32d/0x3b0 [ 538.758707][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 538.762941][ C1] ? NF_HOOK+0x9f/0x3b0 [ 538.767093][ C1] ? ip_local_deliver+0x180/0x180 [ 538.772113][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 538.776357][ C1] ? ip_local_deliver+0x10b/0x180 [ 538.781408][ C1] ip_sublist_rcv+0xa36/0xd60 [ 538.786087][ C1] ? ip_list_rcv+0x440/0x440 [ 538.790675][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 538.795873][ C1] ? ip_rcv_core+0xd80/0xd80 [ 538.800459][ C1] ? ip_rcv_core+0x898/0xd80 [ 538.805047][ C1] ip_list_rcv+0x3ed/0x440 [ 538.809462][ C1] ? ip_rcv_finish+0x250/0x250 [ 538.814224][ C1] ? ip_rcv_finish+0x250/0x250 [ 538.818996][ C1] __netif_receive_skb_list_core+0x582/0x770 [ 538.824982][ C1] ? set_rps_cpu+0x6a0/0x6a0 [ 538.829562][ C1] ? read_tsc+0x9/0x20 [ 538.833627][ C1] netif_receive_skb_list_internal+0x943/0xca0 [ 538.839784][ C1] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 538.846105][ C1] ? netif_receive_skb_core+0x230/0x230 [ 538.851642][ C1] ? dev_gro_receive+0x1050/0x22a0 [ 538.856762][ C1] napi_gro_receive+0x553/0xaf0 [ 538.861608][ C1] receive_buf+0x219d/0x37a0 [ 538.866205][ C1] ? virtnet_poll_tx+0x530/0x530 [ 538.871141][ C1] virtnet_poll+0x60e/0x11e0 [ 538.875744][ C1] ? refill_work+0x220/0x220 [ 538.880343][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.886495][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 538.891690][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.897862][ C1] __napi_poll+0xbb/0x460 [ 538.902187][ C1] net_rx_action+0x65f/0xcc0 [ 538.906773][ C1] ? net_tx_action+0x950/0x950 [ 538.911526][ C1] ? detach_timer+0x2b0/0x2b0 [ 538.916201][ C1] handle_softirqs+0x27d/0x820 [ 538.920954][ C1] ? read_tsc+0x9/0x20 [ 538.925024][ C1] ? ktime_get+0x24b/0x280 [ 538.929446][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 538.934214][ C1] ? do_softirq+0x1a0/0x1a0 [ 538.938734][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 538.943949][ C1] __irq_exit_rcu+0xd3/0x190 [ 538.948543][ C1] ? irq_exit_rcu+0x20/0x20 [ 538.953064][ C1] irq_exit_rcu+0x9/0x20 [ 538.957322][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 538.962990][ C1] [ 538.965924][ C1] [ 538.968916][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.974915][ C1] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 538.980821][ C1] Code: 75 11 e8 4c 00 0b 00 48 85 db 75 16 e8 42 00 0b 00 eb 15 e8 3b 00 0b 00 e8 06 e3 0f 09 48 85 db 74 ea e8 2c 00 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 539.000513][ C1] RSP: 0018:ffffc90004c8fa00 EFLAGS: 00000246 [ 539.006590][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 539.014642][ C1] RDX: ffffc9000ccc9000 RSI: 0000000000003a40 RDI: 0000000000003a41 [ 539.022606][ C1] RBP: ffffc90004c8fad0 R08: ffffffff911e75ff R09: 1ffffffff223cebf [ 539.030570][ C1] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: 1ffff92000991f44 [ 539.038622][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000991f65 [ 539.046595][ C1] ? event_function+0x300/0x300 [ 539.051447][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 539.057183][ C1] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 539.062927][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 539.068136][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 539.073787][ C1] smp_call_function_single+0x36d/0x5a0 [ 539.079339][ C1] ? event_function+0x300/0x300 [ 539.084342][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 539.090533][ C1] ? event_function+0x300/0x300 [ 539.095428][ C1] perf_install_in_context+0x5bb/0x920 [ 539.100906][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 539.106907][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 539.112123][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 539.117327][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 539.123493][ C1] __se_sys_perf_event_open+0x1841/0x1c60 [ 539.129300][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 539.134945][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 539.140589][ C1] do_syscall_64+0x55/0xb0 [ 539.145018][ C1] ? clear_bhb_loop+0x40/0x90 [ 539.149714][ C1] ? clear_bhb_loop+0x40/0x90 [ 539.154386][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.160297][ C1] RIP: 0033:0x7f2087f9de99 [ 539.164727][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.184329][ C1] RSP: 002b:00007f2088dca028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 539.192766][ C1] RAX: ffffffffffffffda RBX: 00007f2088225fa0 RCX: 00007f2087f9de99 [ 539.200733][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 539.208713][ C1] RBP: 00007f2088033eaf R08: 0000000000000002 R09: 0000000000000000 [ 539.216678][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 539.224648][ C1] R13: 00007f2088226038 R14: 00007f2088225fa0 R15: 00007ffe1df8bbe8 [ 539.232647][ C1]