last executing test programs: 52.080563787s ago: executing program 4 (id=219): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x58, 0x1, 0x0, 0xfd, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14505, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x7, 0x12) (async) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000001d00000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x12160) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x100000000, 0xaea}, 0x14105, 0x32, 0xfffffc01, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x2, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$kcm(0xa, 0x1, 0x106) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000bb76921b00000000030000008500000027000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) setsockopt$sock_attach_bpf(r6, 0x29, 0x4e, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x403, 0x1001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x18, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$kcm(0x2a, 0x2, 0x0) 50.87498524s ago: executing program 4 (id=228): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000008000000080000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000095b67b7aaa9fe4e1a4fc8ae76e21974354b355acb4e944548aaf886471f379d764eb26fe17350655c986553c7a571bf21f0d5ae9953faa1ec748b8fb0eec9e9d5ae27a3c8f6eb0cf83653413322922d598c5acd84e854bf85ffeb011f137f600d00aa9134d6d1f31158233f71f514bca22"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYBLOB="a59eb0360fe53f84aa792ca786d2c903173ec3fe846cf057cddb7ec741446576e8b76d1ba01abf06b388ae40bc87c1b4f40127ab96eaceb23a8ac339b16b009e19b7613cf59e5b4a68c31e773ca886fc9bdc50f5933bbb1fdbca509ecc1e712fda2a4f68e451629016f682de0f9259a9", @ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000ecffffff080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200009e0e0000000000000000000000444e54bcd6b6cff34f0d2b7bfb739487a547d1e86ab558000000003c17c5784bdc3fd2e493b47b6b4436", @ANYRES32=0x1, @ANYBLOB="0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040), 0x4) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={r9}) socket$kcm(0xa, 0x3, 0x3a) 50.827790404s ago: executing program 4 (id=230): socket$kcm(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x43080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x7, 0x2, 0x0, 0xfffa, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0x5, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r1, 0x84, 0x24, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="ace83d1ea70a", 0x6}, {&(0x7f00000002c0)="57a520820bcd8f0f58dbb9530501772d7d054d70253ec5b4fe863ef2309de781a45c2a4942525ed877efef714d1b31a0f4528bac015588122e23af6fdbadcb3314c2031df6412a7d620f39a756e53144", 0x50}, {&(0x7f00000003c0)="83b4a24c3e9895ed434ecb4546a1d1e966c3e56e7f179f27b3aa61095629611973364ef22d3c8ee6d30130379bf63eefdb1e24d0d05bf43cf84d4848a33dda5fc203f9d55a228aa1b4ddc182e86d88ebca835ad243b4b463caf7e0404fc4e9dc49dde117469ed8985f5e7c0bef455507e274409fcdd9cec8676619a92921fd93d200812f61da081c6f1bd18e34fd05238273993db71bc069ece700c2f43955a725a0721213521f59637dafddd2b6311f4d7c484d00e1feaec63d31985072c670b38a8ab42b68bcc6f5cd896b963aff8d7dbe924bb5961d3bec7a15a2fd8f76dd6a1f", 0xe2}], 0x3, &(0x7f0000000500)=[{0xf8, 0x6, 0x4, "fa17c97963207451e7e4797b113702cadfbf65afa4f5ee0f3994797fd6cfe72c20f295e6afd62f4e11afc1b2c2d932a06e795a68b32ede0faf80085d0cfbd14543b76eb1f04a6cebdcca4798b8e28e50c410380d8a43f7d0e810c73447661fc83f7b902d2da0bd33fbf990c78de6ad447e3564e0604d8c27db0d0906df7b295882c9d43c97d19e8583a73c3a843bb4f9fdd90f84471f4f03f77e39a7c40d0a710dc7d2f90fea2644a9988d7744df3f6266bb3e10ef8588a0b8a44bbfce4279c6227df5d2dbf4614242033a8b1d4e9ffd8f59cc44fcef7638212ee6591221a2139473"}, {0x68, 0x10d, 0x101, "9f1832626582baea15ed6a0247b06fe97603bee2ea4447b5d6fbb5d8564aa9923a7282b228d0254b5d92f9f188eacb69dc224ceb8cf4bffdd0a8623f95f0ac54d4359c45315a9bad5c6e41424ca93466355ce9b0cb"}], 0x160}, 0x4000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000005000000000000d9dbcdee3ae74e4784b13acc681e4500cb640e6aa9dfc9d8a13bee8a0f7af8da53f0dd1b859ca1ab0ab3cd5bcd8832f681676e320aebf6d847cd0b85e2be7cc10512b3bc4b756e8a52a8a731998b771de7af170a00"/109], 0x18}, 0xfc00) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[], 0x12) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r13, &(0x7f0000000b40)=ANY=[@ANYRES16=0x0, @ANYBLOB="3eca0d", @ANYRES8=r11], 0x9a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0x1a, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2532}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000800)='syzkaller\x00', 0xff, 0x33, &(0x7f0000000840)=""/51, 0x41100, 0x5c, '\x00', 0x0, @fallback=0x23, r9, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x3, 0x8, 0x73a}, 0x10, r10, r0, 0x2, &(0x7f0000000940)=[r3, r13, r14], &(0x7f0000000980)=[{0x5, 0x4, 0x10, 0x2}, {0x3, 0x3, 0x9, 0x2}], 0x10, 0xd, @void, @value}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x10, r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r15}, 0xc) socket$kcm(0xf, 0x3, 0x2) 50.614727214s ago: executing program 0 (id=232): r0 = syz_clone(0x58000000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="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") socketpair(0x25, 0x1, 0x6, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f00000011c0)={&(0x7f0000001100)=@un=@abs, 0x80, &(0x7f0000001180)}, 0x40000121) sendmsg$kcm(r2, &(0x7f00000015c0)={&(0x7f0000001200)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001280)="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", 0xfc}, {&(0x7f0000001380)="bb1e55766a60fc6c6d7f1379fef6818c9371c6d5b2b4158d90d1223597fe066d66b36d29a24ea87ffc209e7c86454953c6afd109e54a5356a89ade2586f088c196c505bae05252c735aa99a7bd5d4c99016243d1ae60825f0bc7718b6cfc8d00e14c4dc2d1d33bf7befa9c08a29211a021963bc9f2e98f321aba5cbe03dc25c2d3af8c625823bba09c915e6d86e8dfe7ef8c63430351f901010aa063443e9948454e4cb4b08ab825572bfd2614d7c0f581aa4d1034733f215f251a2feb71d9ca", 0xc0}], 0x2, &(0x7f0000001480)=[{0x108, 0x88, 0x4, "a5ad2766d9ba855b9d6a2dd5e16b224f1fa928fb501409b6d03c3ce3c35e9ea91929cfd37f9eb0d30297c0824cdefe6c08828975c60df8db3a16a2237d1c2cb59d5bc63d7cd4f3aef6f6329eb7ae8dc8c7583046602ec892469557a12e8df537119d9d4cf8098a0bfecc3977098c1e40bd04e11f3087d2ed0fa7be8d736decddb50a78ff49735c1ce1dbf13e58dc0436784c49d1f9feb65c0195253e81ac0cf4ba003de58939476487490ee7ed72d0844ceba91c474dca6e0df8810723095f9172dc921543fca38a817bb8ab06326d4ea14b5d92bcdc27e6044480f90057eeca9ebd1869738621966b7c2a0aa3dcd79fea4650"}], 0x108}, 0x8000080) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001600)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001640)=r3, 0x4) syz_open_procfs$namespace(r0, &(0x7f0000001680)='ns/mnt\x00') r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000016c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000001700)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001740)={0x0, 0x80, 0x6, 0x48, 0x9, 0x7, 0x0, 0x3, 0x10100, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x6, 0x2}, 0x24e0, 0x8, 0x9, 0x6, 0x4, 0xffff0000, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0xffffffffffffffff, r5, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000019c0)={r5, 0x58, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a80)={0x0, 0x0, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x2, &(0x7f00000017c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r5}], &(0x7f0000001800)='GPL\x00', 0x9f, 0xc9, &(0x7f0000001840)=""/201, 0x41000, 0x20, '\x00', r7, 0x0, r5, 0x8, &(0x7f0000001a00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001a40)={0x3, 0x8, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001ac0)=[r8, r5, r5, r5, r5], &(0x7f0000001b00)=[{0x1, 0x4, 0x7, 0x3}, {0x0, 0x1, 0xd, 0x6}, {0x2, 0x3, 0x4, 0xa}], 0x10, 0x4, @void, @value}, 0x94) write$cgroup_subtree(r4, &(0x7f0000001c00)={[{0x2b, 'net_cls'}, {0x2d, 'blkio'}, {0x2d, 'cpu'}, {0x0, 'hugetlb'}, {0x2b, 'cpuset'}, {0x2b, 'net'}]}, 0x2b) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001c40)={0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000001c80)={0x0, r5}, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001d80)={r8, &(0x7f0000001cc0)="fe6c07b294ff6757176e3d58ac24de659b54bb1e8c37cfce503cd5d35cc074a71a51e7664c111ad92118844e2b61d52691ec93edf833ceef13b1ca75102a51b291e2eedaa659aa711d71a9ecab9a15acd8f98d156d265d3708a95c8ed3c417ffde4dfb635812314db54cc017da96a6610b66071c3a3dd540b9bc7f398c660c41a37b761c6c05512aa3243518b3"}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001e80)={r8, &(0x7f0000001dc0)="e3411a7468013a0234e9474fb5754b1bd8831d8ecc5b147829c79dcac609303eda9bdb23a135c9d0f89c81bb20e05fbec0c951a71ee2cc20ed34f1a486bb", &(0x7f0000001e00)=""/110}, 0x20) perf_event_open(&(0x7f0000001f00)={0x3, 0x80, 0x22, 0x5, 0x0, 0xe, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000001ec0), 0xa}, 0x10086, 0x10, 0x2, 0x8, 0x1, 0x9, 0x0, 0x0, 0x5}, r0, 0x2, r5, 0x2) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001f80)={'ipvlan0\x00', 0x1000}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001fc0)={r6, 0x3, 0x10}, 0xc) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002000)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002280)={0x7fff, 0x0}, 0x8) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000024c0)={0x6, 0x10, &(0x7f00000022c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xab61, 0x0, 0x0, 0x0, 0x9}, [@exit, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18e4}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000002340)='syzkaller\x00', 0x65e8, 0x64, &(0x7f0000002380)=""/100, 0x40f00, 0x96, '\x00', r7, 0x25, r5, 0x8, &(0x7f0000002400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000002440)={0x4, 0x10, 0x4e7, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002480)=[r5, r5, r5, r5, r5, r9, r8], 0x0, 0x10, 0x8, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0x8, 0x8, &(0x7f0000002080)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f00000020c0)='syzkaller\x00', 0x5, 0xe8, &(0x7f0000002100)=""/232, 0x41100, 0x28, '\x00', r7, @cgroup_skb, r5, 0x8, &(0x7f0000002200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000002240)={0x3, 0x8, 0xffffffff, 0x3}, 0x10, r11, r12, 0x1, 0x0, &(0x7f0000002580)=[{0x5, 0x3, 0xc, 0xb}], 0x10, 0x1ff, @void, @value}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000026c0)=@o_path={&(0x7f0000002680)='./file0\x00', r10, 0x4000, r8}, 0x18) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000002700)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) openat$tun(0xffffffffffffff9c, &(0x7f0000002740), 0x400400, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000002780)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002880)={{}, &(0x7f0000002800), &(0x7f0000002840)=r13}, 0x20) 50.466284052s ago: executing program 0 (id=234): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000)=r4, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x17}, 0x12000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r8, 0x10f, 0x8a, &(0x7f0000000180)=r7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x17, &(0x7f0000000140)=""/23, 0x41000, 0x44, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000480)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xf, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000007c0)=[{0x0, 0x3, 0x8, 0xc}, {0x1, 0x4, 0xa, 0xb}, {0x1, 0x1, 0xf}, {0x2, 0x6, 0x2000009}, {0x2, 0x1, 0x8, 0x8}, {0x2, 0x5, 0x4, 0x2}], 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 49.68718418s ago: executing program 4 (id=235): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x751c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x1}, 0x800, 0x803, 0x0, 0x3, 0x6f5, 0x100, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a1bc0001000200142603600e12080005007a010401a8001600200002400400027c035c0461c9d67f6f940071342e875fab7cb6cec6cf04008000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x6a, 0x40000007, 0x84, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x700}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x52d8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x838f95c0cee01ab3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 49.503079243s ago: executing program 2 (id=237): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x9, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf03d, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x14105, 0x32, 0xfffffbff, 0x2, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0xffffff87) r4 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x114, 0x7, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x3c, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)="3504000041000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00400000", 0x2e}, {&(0x7f0000000600)="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", 0x401}, {&(0x7f0000000a40)="47f72fedcd1d", 0x6}], 0x3}, 0x10049014) 49.449478271s ago: executing program 1 (id=238): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00060000ab85f6f424693ada000000000000c8fad44721e7a5b026ef9be27550526d6fa722fea85afa89e7c5a049e5c524ec0ae4726e73a37a68cd42fc9bdd3dadcfbe9afe6c99bc2cac60970446b174b0180f505fc782247c63cc6a807b57202629518188b639c65b9825ea408cba95977d14077e4033f749729b8d5cd1d300616e4e8fc71b1929d17231f58d841de3365343933e3a0eea24"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000180), 0x0}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124d960", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001c40)=""/4074, 0xfea}, {&(0x7f0000000200)=""/132, 0x84}, {&(0x7f00000000c0)=""/58, 0x3a}], 0x3}, 0x100) 49.179340705s ago: executing program 2 (id=239): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x67}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9d}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x41) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x1f) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]}) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) close(r5) close(r4) socket$kcm(0x11, 0x3, 0x0) 49.120859703s ago: executing program 3 (id=240): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000008000000080000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000095b67b7aaa9fe4e1a4fc8ae76e21974354b355acb4e944548aaf886471f379d764eb26fe17350655c986553c7a571bf21f0d5ae9953faa1ec748b8fb0eec9e9d5ae27a3c8f6eb0cf83653413322922d598c5acd84e854bf85ffeb011f137f600d00aa9134d6d1f31158233f71f514bca22"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYBLOB="a59eb0360fe53f84aa792ca786d2c903173ec3fe846cf057cddb7ec741446576e8b76d1ba01abf06b388ae40bc87c1b4f40127ab96eaceb23a8ac339b16b009e19b7613cf59e5b4a68c31e773ca886fc9bdc50f5933bbb1fdbca509ecc1e712fda2a4f68e451629016f682de0f9259a9", @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000ecffffff080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040), 0x4) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r9}) socket$kcm(0xa, 0x3, 0x3a) 49.052554295s ago: executing program 0 (id=241): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 49.050452909s ago: executing program 1 (id=242): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x48, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f3f00001a00599ea10e000091d028ef80"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000019c0)={r2, 0x0, &(0x7f0000000400)=""/154}, 0x20) 48.558834513s ago: executing program 3 (id=243): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x5, 0x81, 0x1, 0x0, 0x0, 0xa100, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x3078, 0x8, 0x7ff, 0x8, 0x6, 0x101, 0x4, 0x0, 0x5, 0x0, 0xb}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000085000000070000009500000000000000"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000440)='\x00') (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ad02, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x18) (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000c2bdfc9d46204413d651a049f64ad8d0195eba5e71d817753ff88d93842e86c7ce53e9038cb73b611b88364035a6fdf5060ae96870f8644203c5f021b89eba07f69cce04d469f81dbbbb0d2f024e9735a08000192091f64d6c48fed17726ce6f2cbcc4675caafe50ba9fbe82e2f0e92cc0917239d27a705e85d2efc30dd5615c2fd00a0cbe906cb190af7c81497f19b2ffc80ffcd527f897b609fbe0bd2e96677"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, 0x0, 0x0}, 0x20) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x8000, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000280)='erofs_lookup\x00', r1, 0x0, 0x2}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000000400001"], 0x48) (async, rerun: 64) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000680)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)=0x9, 0x12) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x8009a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0xb5}, 0x14105, 0x32, 0xfffffbdf, 0x1, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (rerun: 64) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 48.558338428s ago: executing program 0 (id=244): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socket$kcm(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c0000001e006bcd9e3fe3dc6e08000007000000010000007e", 0x19}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = getpid() r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8970, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x22c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a6736d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9bd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e9f65f1328d670490be8b59fdf00fd48164be3e1fc123992cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc86ccbe1194eac69e19d73415cda2130f501150adab988dd8e12baf5cc9978fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec1f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9c2e846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000943f5205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb2594c65681c47ab56c7efbd37a54244130f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0f00"/2274], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 48.496755939s ago: executing program 2 (id=245): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1042, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x33, 0x0, 0x2900) close(r0) 48.304373068s ago: executing program 1 (id=246): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x1f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, &(0x7f0000000980)=""/4096, 0x1b, 0x1000, 0x0, 0xffff, 0x929e12d8ec4ee8ea, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x26, &(0x7f0000000200)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x17c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x85, &(0x7f0000000100)=""/133, 0x0, 0xa, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0xf, 0x3, 0x200}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x10, 0x1, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x4, 0x8f, &(0x7f0000000540)=""/143, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x1, 0x200, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000006c0)=[{0x3, 0x5, 0x2, 0x5}], 0x10, 0xca3, @void, @value}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x15) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="33000000181900"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x27, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6d02cf21}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xc8}, @printk={@ld}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x35, &(0x7f0000000300)=""/53, 0x461422d0d13f433f, 0x4, '\x00', r2, @fallback=0x31, r6, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xc, 0x1, 0x7f}, 0x10, r8, r9, 0x0, &(0x7f00000007c0)=[r10, r11, r12], 0x0, 0x10, 0x5, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x89128, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0xa0, 0xca, 0x1, 0x2, 0xfffffffffffffffc, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r13, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r16 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x9}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r16, 0x40042408, r17) write$cgroup_subtree(r15, &(0x7f0000000040)=ANY=[@ANYRES8=r14, @ANYBLOB="3e971d"], 0x9a) 48.106235696s ago: executing program 1 (id=247): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xd, &(0x7f0000000040)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000100)=""/65, 0x41}], 0x3, &(0x7f00000001c0)=""/71, 0x47}, 0x0) 48.083897835s ago: executing program 2 (id=248): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r0, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x5450, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xff, 0x80, 0x8, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x0, 0x3, 0xe, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7b) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000fc0)=""/224, 0xe0}, {&(0x7f0000000a40)=""/221, 0xdd}, {&(0x7f0000001100)=""/4061, 0xfdd}, {&(0x7f00000007c0)=""/212, 0xd4}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000d00)=""/219, 0xdb}, {&(0x7f0000003200)=""/206, 0xce}, {&(0x7f0000002200)=""/4045, 0xfcd}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000c00)=""/193, 0xc1}], 0xc}, 0x40012100) recvmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2100) recvmsg$kcm(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r5], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 48.045865804s ago: executing program 3 (id=249): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x9, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf03d, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x14105, 0x32, 0xfffffbff, 0x2, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0xffffff87) r4 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x114, 0x7, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x3c, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)="3504000041000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00400000", 0x2e}, {&(0x7f0000000600)="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", 0x401}, {&(0x7f0000000a40)="47f72fedcd1d", 0x6}], 0x3}, 0x10049014) 47.800825827s ago: executing program 1 (id=250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x10082, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x1}, 0x494f, 0x7, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x5b, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 47.7384553s ago: executing program 2 (id=251): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x19, 0x18}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd3cd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x9, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @tail_call], &(0x7f00000000c0)='GPL\x00', 0x4, 0xab, &(0x7f0000000100)=""/171, 0x40e00, 0x4, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r3, 0x1, r4, r5], &(0x7f0000000500)=[{0x2, 0x3, 0x10, 0xa}, {0x1, 0x1, 0x1, 0x4}, {0x1, 0x4, 0x0, 0xb}, {0x0, 0x4, 0xe, 0xb}, {0x5, 0x1, 0xd, 0xa}], 0x10, 0x4, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000640)={'tunl0\x00', 0x1000}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x10, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7e7b, 0x0, 0x0, 0x0, 0xfe5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xfe8d868dc4a39233}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x19, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000780)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0xc, 0x9c7, 0x57}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000800)=[r0, r5, r3], &(0x7f0000000840)=[{0x2, 0x5, 0x2, 0x3}, {0x10, 0x5, 0x1, 0x1}, {0x0, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x4, 0xf}], 0x10, 0x1, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000680)='xprtrdma_post_send\x00', r7, 0x0, 0x1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x108300, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x7, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x4, 0x3}, {0xd, 0x1}, {0x2, 0x2}, {0xb, 0x5}, {0x6}, {0x5, 0x5}]}, @enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x9, 0x2bdb, 0xfffffff5}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @fwd={0x2}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x2e, 0x61, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000a80)=""/223, 0xab, 0xdf, 0x0, 0x7fffffff, 0x10000, @value}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x6, 0x0, 0x4, 0x800, r3, 0xffffffff, '\x00', 0x0, r9, 0x4, 0x5, 0x3, 0x1, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={@map=r0, 0x22, 0x1, 0xa7, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000dc0)={0x2cc, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@fallback=r0, r6, 0x3a, 0x20, 0x0, @void, @void, @void, @value=r13, r12}, 0x20) r14 = syz_clone(0x41000, &(0x7f0000000e80)="18a0114e29856dbe93f3efcf5965acea47b6cf8ac9bc0a9720991a418daf5f1bee8804194e", 0x25, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)="51f4e653e75826c038c6b66912ea30f5ea9c0fc943e45d3091851d49a624c36e5e35a27a07f50093788070330f9358f2d50cd93066890c31461f64ca650541499e439179f7fed45c8d3139fec86d5a1929f220cbd7f7be8333fefa9fdd0c5481ab822b0bef21d78bf22c1986d2be70bdaf091ba0f4eeb1c70ffaabb6d1b99713fb705f27c796052014f2d8e17d1fc31c3efb687ce1e829ec7bc93bb4226e3ea318bc4d0763af19b972d3b375dbed31fe1062392b84755eb5a53d7fa9f975") perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0xc, 0x5, 0xf8, 0x5, 0x0, 0x5, 0x1000d, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x3ff, 0xbef}, 0x8210, 0x6, 0x8, 0x3, 0x8, 0x1be1, 0x7f, 0x0, 0x5, 0x0, 0x2}, r14, 0x1, r8, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r0, 0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)=r7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002280)={r5, 0x58, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002580)=@bpf_ext={0x1c, 0x1d, &(0x7f0000002340)=@raw=[@alu={0x4, 0x0, 0x7, 0x8, 0x9, 0xffffffffffffffff, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x2, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x10001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000002440)='syzkaller\x00', 0xffffffff, 0x73, &(0x7f0000002480)=""/115, 0x1e00, 0x6, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2998e, r7, 0x2, &(0x7f0000002500)=[r11, r4], &(0x7f0000002540)=[{0x3, 0x4, 0x5}, {0x3, 0x5, 0x6, 0x5}], 0x10, 0x4, @void, @value}, 0x94) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002640)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x380ff528, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0xb, 0x19, &(0x7f00000010c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x41c, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r15}}, @generic={0x3, 0x8, 0x8, 0x1, 0x216}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x6, 0x2, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x1, 0x8, 0x7, 0x50, 0x17}, @ldst={0x1, 0x1, 0x2, 0x8, 0xb, 0xffffffffffffffff, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000011c0)='GPL\x00', 0x14cd, 0x1000, &(0x7f0000001200)=""/4096, 0x41000, 0x0, '\x00', r16, @fallback=0x4, r2, 0x8, &(0x7f00000022c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000002300)={0x1, 0xd, 0x100, 0x4}, 0x10, 0x0, r17, 0x2, &(0x7f00000026c0)=[r18], &(0x7f0000002700)=[{0x4, 0x1, 0x6, 0x7}, {0x0, 0x1, 0x8, 0x1}], 0x10, 0x7, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002800)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002b40)={r7, 0x0, 0x6, 0xc6, &(0x7f0000002840)="239123c33c69", &(0x7f0000002880)=""/198, 0x4, 0x0, 0xa1, 0xc8, &(0x7f0000002980)="53dcf8ced6214205754fa5eaf108db6479276f9b61db28637ad10a4f5a27bfa9b4fe50c4141cd8528a77daef372b4bacca768477825bbf6e44b4d4cd95cef94a4db7b5f8a26fa551a9fe389696be7d9456c7e0aca9fe3ca09db7d33c2962764537276876abcd12c56e459deada28ac71ec2759988735869eec16a9ec2365a6bd25c27fa7c5d3dd899d19545d76f298eec8a29508d6ef059ac8d2e95b5a587031af", &(0x7f0000002a40)="91546ac21c6d30ed2b9718537005a03bbbc95422ed8499e9dfba5b4fc55992a53376ea48bc04ae30a8394953ccbea3afcdf4d2c2676c750cfd47d555d4881076759b365301e415134608f9dc7972f4157ed9fd7298cc8cc2339f48cbc1f8b7e3703622a21874914c118cb5aaf8822bf98729feb2c47490fd505a00f6e99f5601675ca5f7f6f32c996b4f9ea6836b126fdba580f85061775cb7a1ddcb5de74cba154edb121bf7dfa8100b77fda017df384993de29be5c83fb132b79536f0557b0c576a23872ab1451", 0x3, 0x0, 0xb}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002d00)={0xfffffff9, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002d40)=@bpf_lsm={0x1d, 0x9, &(0x7f0000002bc0)=@raw=[@generic={0xe, 0x0, 0x6, 0x0, 0xfffffffe}, @generic={0xe, 0xe, 0xc, 0x382c, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x31c0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], &(0x7f0000002c40)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x82300, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000002c80)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000002cc0)={0x0, 0xa, 0x6, 0x2}, 0x10, r19, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000002e00)='cgroup.procs\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000002e40)=@isdn={0x22, 0x0, 0x2, 0x2, 0x2e}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002ec0)="6470979f66597c44dbe632b4bca446839bb756959b02ff5402498679006ba78890d879ed344f2bb22b7af4b3", 0x2c}, {&(0x7f0000002f00)="eb47172209002ec7ab3f0966fa80d0f372733ef917048326", 0x18}, {&(0x7f0000002f40)="bad39f4043c45f816b382a5b28ce4b42e7db4d", 0x13}, {&(0x7f0000002f80)="abfcc9ea7a18a69b3c713e3dd12d052e5c74c105ae617f3fb8fb3d868b132f77ea66eaea8053c22fb659861a6ad8cb2a50516939b8b213a63d6a661e305439e5d1da51cd235eeb216efb8bc659104294947c0da595f57854a4d4c7daaba6f4f9467dc150207e1fdb204c6b3e7216a54d05", 0x71}, {&(0x7f0000003000)="583f5dc8096097ce04e57992d1e0081632e6d00f361766be176b1bf3516797a755062747e6fa174e0d793fc07bd3480d0b82f08cf0d65c3792f4edaf0b9dba2a7e9017d8c7d7fa5d2e10134cdb4c7dcd37d375aa68544f744d42129f76490dfe492c129b2830dc29c28f61d4281bc788595d8745418b076944f67f6b66a3ff02e94a267741cb51c9c35bfb4e70f5e0cd9ac68b352b62cc0d4baeacf33fcb1f53a8e7a536b5c79b9869961c84c930ee51e043f79c824cd550543a07c6ac2d8de4730cd37873975fd8948ca244bf99762b99b414fa33bf47b8000fff6d1d67ea", 0xdf}, {&(0x7f0000003100)="6a6f3414b4655c83cc7b9ad1d54d36501389b270048c44c9feb5b0b913cc564b8648b9016def3dddc348e94a785d8b9207bc31e0bc953462a6de6f03cd13006f40b855f4779a87390c81821dff1a87dd1d", 0x51}, {&(0x7f0000003180)="5df2810e07d91195d124147211f0e6a292c7e45dcf8594c0f746c3d1097a1f3cdb", 0x21}], 0x7}, 0x400c000) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000032c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) 47.377807421s ago: executing program 0 (id=252): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pK \x00'}, 0x20) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd1d) 47.368289277s ago: executing program 3 (id=253): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000008000000080000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000095b67b7aaa9fe4e1a4fc8ae76e21974354b355acb4e944548aaf886471f379d764eb26fe17350655c986553c7a571bf21f0d5ae9953faa1ec748b8fb0eec9e9d5ae27a3c8f6eb0cf83653413322922d598c5acd84e854bf85ffeb011f137f600d00aa9134d6d1f31158233f71f514bca22"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYBLOB="a59eb0360fe53f84aa792ca786d2c903173ec3fe846cf057cddb7ec741446576e8b76d1ba01abf06b388ae40bc87c1b4f40127ab96eaceb23a8ac339b16b009e19b7613cf59e5b4a68c31e773ca886fc9bdc50f5933bbb1fdbca509ecc1e712fda2a4f68e451629016f682de0f9259a9", @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000ecffffff080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040), 0x4) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r9}) socket$kcm(0xa, 0x3, 0x3a) 47.212674948s ago: executing program 0 (id=254): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 47.206466251s ago: executing program 1 (id=255): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x10}, 0x0, 0x1, 0x0, 0x4, 0x2, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8915, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x3a) close(r3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=0xffffffffffffffff, 0x22, 0x0, 0x5a11, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0xa, 0x300) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="6204", 0x2}], 0x1}, 0x4008001) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r2, r4}, 0xc) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001380)={@cgroup, 0xffffffffffffffff, 0xf, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x4, 0x80, 0xf, 0xa, 0x6, 0x80, 0x0, 0x4, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x2100, 0xa, 0x1, 0x3, 0x7, 0x8001, 0x8, 0x0, 0x2cda, 0x0, 0xeab}) 47.195802178s ago: executing program 2 (id=256): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0x2aea}, 0x14105, 0x2e, 0xfffffbff, 0x7, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) 47.124437007s ago: executing program 4 (id=257): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb, 0x6, 0x0, 0x20, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f0000000400), 0x4}, 0x14505, 0x2e, 0xffff, 0x2, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) close(r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r6}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback, 0xffffffffffffffff, 0x14, 0x34, 0x0, @void, @void, @void, @value=r6}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYRES8=r8], 0x9a) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r5, r2, 0x24, 0x2000, 0x0, @value=r9}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000038110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r11, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2d, 'rlimit'}, {0x2b, 'blkio'}, {0x2b, 'blkio'}]}, 0x16) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000040)="b8b2cc1e00c1dba49d23bb66cb3a", 0xe}], 0x1}, 0x0) 47.068510785s ago: executing program 3 (id=258): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/249, 0x101d0}], 0x1}, 0x0) close(r0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000010000000000000010000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xc2}}}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 46.899611833s ago: executing program 4 (id=259): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="140000002b000b6c690000000000000003000000", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0cd, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x211c, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xc7, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8d08ae394948"}) r4 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890c, &(0x7f0000000100)) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4120, 0x1018}], 0x1}, 0x42) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) recvmsg(r5, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) 44.620286239s ago: executing program 3 (id=260): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15.665842436s ago: executing program 32 (id=254): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 15.046332121s ago: executing program 33 (id=255): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x10}, 0x0, 0x1, 0x0, 0x4, 0x2, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8915, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x3a) close(r3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=0xffffffffffffffff, 0x22, 0x0, 0x5a11, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0xa, 0x300) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="6204", 0x2}], 0x1}, 0x4008001) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r2, r4}, 0xc) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001380)={@cgroup, 0xffffffffffffffff, 0xf, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x4, 0x80, 0xf, 0xa, 0x6, 0x80, 0x0, 0x4, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x2100, 0xa, 0x1, 0x3, 0x7, 0x8001, 0x8, 0x0, 0x2cda, 0x0, 0xeab}) 315.109µs ago: executing program 34 (id=256): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0x2aea}, 0x14105, 0x2e, 0xfffffbff, 0x7, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) 190.164µs ago: executing program 35 (id=260): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 36 (id=259): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="140000002b000b6c690000000000000003000000", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0cd, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x211c, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xc7, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8d08ae394948"}) r4 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890c, &(0x7f0000000100)) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4120, 0x1018}], 0x1}, 0x42) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) recvmsg(r5, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 81.946829][ T5823] cgroup: Unknown subsys name 'net' [ 82.069796][ T5823] cgroup: Unknown subsys name 'cpuset' [ 82.078823][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.767573][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.350996][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.366101][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.373931][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.382124][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.389806][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.398075][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.405859][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.419141][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.427077][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.432875][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.435003][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.442389][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.448729][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.455798][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.464932][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.471202][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.477093][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.490519][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.498927][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.509037][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.606380][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.620140][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.628179][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.641780][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.650354][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.370509][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.402733][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 87.450098][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 87.539545][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.693940][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.702207][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.709992][ T5834] bridge_slave_0: entered allmulticast mode [ 87.717655][ T5834] bridge_slave_0: entered promiscuous mode [ 87.770276][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.778038][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.785255][ T5834] bridge_slave_1: entered allmulticast mode [ 87.794948][ T5834] bridge_slave_1: entered promiscuous mode [ 87.862862][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.870129][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.877609][ T5838] bridge_slave_0: entered allmulticast mode [ 87.885084][ T5838] bridge_slave_0: entered promiscuous mode [ 87.918568][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.925670][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.933310][ T5847] bridge_slave_0: entered allmulticast mode [ 87.941683][ T5847] bridge_slave_0: entered promiscuous mode [ 87.962906][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 87.975087][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.982495][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.990175][ T5838] bridge_slave_1: entered allmulticast mode [ 87.998321][ T5838] bridge_slave_1: entered promiscuous mode [ 88.016471][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.023703][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.031026][ T5847] bridge_slave_1: entered allmulticast mode [ 88.039136][ T5847] bridge_slave_1: entered promiscuous mode [ 88.045726][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.053044][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.060282][ T5833] bridge_slave_0: entered allmulticast mode [ 88.067880][ T5833] bridge_slave_0: entered promiscuous mode [ 88.100896][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.151739][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.159185][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.166469][ T5833] bridge_slave_1: entered allmulticast mode [ 88.173539][ T5833] bridge_slave_1: entered promiscuous mode [ 88.190135][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.214285][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.227587][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.284719][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.309122][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.355521][ T5834] team0: Port device team_slave_0 added [ 88.365474][ T5834] team0: Port device team_slave_1 added [ 88.404302][ T5847] team0: Port device team_slave_0 added [ 88.413214][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.457121][ T5838] team0: Port device team_slave_0 added [ 88.463882][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.471019][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.497036][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.510537][ T5847] team0: Port device team_slave_1 added [ 88.518904][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.553010][ T5838] team0: Port device team_slave_1 added [ 88.557521][ T5835] Bluetooth: hci3: command tx timeout [ 88.558814][ T5844] Bluetooth: hci1: command tx timeout [ 88.564046][ T51] Bluetooth: hci0: command tx timeout [ 88.569448][ T5846] Bluetooth: hci2: command tx timeout [ 88.602764][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.610147][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.636618][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.664262][ T5833] team0: Port device team_slave_0 added [ 88.716271][ T51] Bluetooth: hci4: command tx timeout [ 88.724653][ T5833] team0: Port device team_slave_1 added [ 88.760753][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.768351][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.775503][ T5851] bridge_slave_0: entered allmulticast mode [ 88.783588][ T5851] bridge_slave_0: entered promiscuous mode [ 88.792137][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.800406][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.827067][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.840356][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.847391][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.873772][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.886397][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.893377][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.919545][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.956598][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.964164][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.973797][ T5851] bridge_slave_1: entered allmulticast mode [ 88.981074][ T5851] bridge_slave_1: entered promiscuous mode [ 88.994772][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.002080][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.028361][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.054912][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.061956][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.088178][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.100195][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.107256][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.133187][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.178913][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.191967][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.215051][ T5834] hsr_slave_0: entered promiscuous mode [ 89.221932][ T5834] hsr_slave_1: entered promiscuous mode [ 89.281633][ T5851] team0: Port device team_slave_0 added [ 89.372268][ T5851] team0: Port device team_slave_1 added [ 89.410984][ T5838] hsr_slave_0: entered promiscuous mode [ 89.417399][ T5838] hsr_slave_1: entered promiscuous mode [ 89.423471][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.431252][ T5838] Cannot create hsr debugfs directory [ 89.455091][ T5847] hsr_slave_0: entered promiscuous mode [ 89.462251][ T5847] hsr_slave_1: entered promiscuous mode [ 89.468641][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.476352][ T5847] Cannot create hsr debugfs directory [ 89.501938][ T5833] hsr_slave_0: entered promiscuous mode [ 89.510045][ T5833] hsr_slave_1: entered promiscuous mode [ 89.516310][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.523901][ T5833] Cannot create hsr debugfs directory [ 89.569022][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.576303][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.603082][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.653251][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.660466][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.687079][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.887583][ T5851] hsr_slave_0: entered promiscuous mode [ 89.893891][ T5851] hsr_slave_1: entered promiscuous mode [ 89.901393][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.910149][ T5851] Cannot create hsr debugfs directory [ 90.367006][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.378672][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.391501][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.411735][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.463188][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.475458][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.489790][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.517286][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.614209][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.637444][ T51] Bluetooth: hci1: command tx timeout [ 90.642947][ T51] Bluetooth: hci2: command tx timeout [ 90.643866][ T5835] Bluetooth: hci0: command tx timeout [ 90.649633][ T51] Bluetooth: hci3: command tx timeout [ 90.661214][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.694168][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.725427][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.777149][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.788616][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.796134][ T51] Bluetooth: hci4: command tx timeout [ 90.814377][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.849841][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.879404][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.933529][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.967872][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.980081][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.999168][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.013372][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.034356][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.065589][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.072907][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.116951][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.133784][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.140936][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.201023][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.208181][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.259488][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.284026][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.291165][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.384148][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.414684][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.458490][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.465704][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.498642][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.516618][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.523834][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.601079][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.651216][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.658468][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.705909][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.741630][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.748871][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.805161][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.818336][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.901931][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.953788][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.961023][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.009469][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.010204][ T24] cfg80211: failed to load regulatory.db [ 92.016709][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.060194][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.111645][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.390809][ T5834] veth0_vlan: entered promiscuous mode [ 92.455787][ T5834] veth1_vlan: entered promiscuous mode [ 92.484586][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.602358][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.683320][ T5834] veth0_macvtap: entered promiscuous mode [ 92.722491][ T51] Bluetooth: hci0: command tx timeout [ 92.722508][ T5844] Bluetooth: hci2: command tx timeout [ 92.722545][ T5844] Bluetooth: hci1: command tx timeout [ 92.728312][ T51] Bluetooth: hci3: command tx timeout [ 92.756063][ T5834] veth1_macvtap: entered promiscuous mode [ 92.797743][ T5833] veth0_vlan: entered promiscuous mode [ 92.810986][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.853629][ T5833] veth1_vlan: entered promiscuous mode [ 92.876287][ T51] Bluetooth: hci4: command tx timeout [ 92.901394][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.913814][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.941498][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.950556][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.960665][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.971639][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.021637][ T5833] veth0_macvtap: entered promiscuous mode [ 93.029859][ T5851] veth0_vlan: entered promiscuous mode [ 93.069658][ T5833] veth1_macvtap: entered promiscuous mode [ 93.089126][ T5847] veth0_vlan: entered promiscuous mode [ 93.152894][ T5851] veth1_vlan: entered promiscuous mode [ 93.188166][ T5838] veth0_vlan: entered promiscuous mode [ 93.204159][ T5847] veth1_vlan: entered promiscuous mode [ 93.213699][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.223186][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.232505][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.265942][ T5838] veth1_vlan: entered promiscuous mode [ 93.287793][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.324112][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.334141][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.343353][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.352683][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.382091][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.397465][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.413846][ T5851] veth0_macvtap: entered promiscuous mode [ 93.435060][ T5847] veth0_macvtap: entered promiscuous mode [ 93.491137][ T5838] veth0_macvtap: entered promiscuous mode [ 93.502705][ T5851] veth1_macvtap: entered promiscuous mode [ 93.513191][ T5847] veth1_macvtap: entered promiscuous mode [ 93.519690][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.594189][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.622035][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.641399][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.641481][ T5838] veth1_macvtap: entered promiscuous mode [ 93.655262][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.705753][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.721426][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.779942][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.815676][ C1] hrtimer: interrupt took 30953 ns [ 93.815864][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.832130][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.842122][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.851271][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.865765][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.875210][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.885518][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.894651][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.905486][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.926818][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.940757][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.961101][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.975098][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.984396][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.996327][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.530043][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.552732][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.802686][ T51] Bluetooth: hci3: command tx timeout [ 94.818823][ T5846] Bluetooth: hci0: command tx timeout [ 94.824291][ T5846] Bluetooth: hci2: command tx timeout [ 94.830375][ T51] Bluetooth: hci1: command tx timeout [ 94.957184][ T5844] Bluetooth: hci4: command tx timeout [ 95.147834][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.155726][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.158257][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.333060][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.546231][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.554120][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.605861][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.641045][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.704760][ T5944] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.853174][ T5940] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.894190][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.923496][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.877776][ T5844] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 98.025589][ T5976] netlink: 'syz.0.14': attribute type 40 has an invalid length. [ 98.080618][ T5977] netlink: 17 bytes leftover after parsing attributes in process `syz.4.15'. [ 98.104903][ T5977] netlink: zone id is out of range [ 98.111583][ T5977] netlink: zone id is out of range [ 98.157922][ T5977] netlink: zone id is out of range [ 98.178629][ T5977] netlink: zone id is out of range [ 98.194843][ T5977] netlink: zone id is out of range [ 98.204941][ T5977] netlink: zone id is out of range [ 98.222802][ T5977] netlink: zone id is out of range [ 98.241874][ T5977] netlink: zone id is out of range [ 98.266849][ T5977] netlink: zone id is out of range [ 98.301712][ T5977] netlink: zone id is out of range [ 98.743763][ T5990] C: renamed from team_slave_0 (while UP) [ 98.790623][ T5990] netlink: 'syz.0.19': attribute type 2 has an invalid length. [ 98.815975][ T5990] netlink: 116 bytes leftover after parsing attributes in process `syz.0.19'. [ 99.086492][ T6000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.461203][ T6006] netlink: 'syz.0.23': attribute type 13 has an invalid length. [ 99.495543][ T6006] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.23'. [ 99.842241][ T30] audit: type=1800 audit(1750594449.382:2): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.24" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 99.871153][ T6009] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 99.904576][ T6009] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 99.929128][ T6009] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 100.029011][ T6009] syz.2.24 (6009) used greatest stack depth: 17368 bytes left [ 100.915708][ T6015] Illegal XDP return value 4294967262 on prog (id 23) dev N/A, expect packet loss! [ 101.080714][ T5846] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 102.597178][ T6035] netlink: 'syz.4.30': attribute type 3 has an invalid length. [ 102.615561][ T6035] netlink: 132 bytes leftover after parsing attributes in process `syz.4.30'. [ 102.680494][ T6037] netlink: 'syz.2.31': attribute type 10 has an invalid length. [ 102.726835][ T6041] netlink: 'syz.3.32': attribute type 2 has an invalid length. [ 102.763413][ T6041] netlink: 164 bytes leftover after parsing attributes in process `syz.3.32'. [ 102.841589][ T6045] lo: entered allmulticast mode [ 103.128847][ T6054] netlink: 'syz.0.37': attribute type 17 has an invalid length. [ 104.824681][ T6063] netlink: 168 bytes leftover after parsing attributes in process `syz.4.38'. [ 105.124322][ T6071] netlink: 22 bytes leftover after parsing attributes in process `syz.4.40'. [ 105.336515][ T6074] netlink: 176 bytes leftover after parsing attributes in process `syz.1.42'. [ 105.596968][ T6083] netlink: 17 bytes leftover after parsing attributes in process `syz.3.45'. [ 105.651808][ T6083] net_ratelimit: 76 callbacks suppressed [ 105.651834][ T6083] netlink: zone id is out of range [ 105.736650][ T6083] netlink: zone id is out of range [ 105.772693][ T6083] netlink: zone id is out of range [ 105.790629][ T6083] netlink: zone id is out of range [ 105.896158][ T6083] netlink: zone id is out of range [ 105.932727][ T6083] netlink: zone id is out of range [ 105.968723][ T6083] netlink: zone id is out of range [ 106.005631][ T6083] netlink: zone id is out of range [ 106.036243][ T6083] netlink: zone id is out of range [ 106.064732][ T6083] netlink: zone id is out of range [ 106.286679][ T6092] lo: entered allmulticast mode [ 108.843031][ T6117] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 109.096516][ T6117] hsr_slave_0 (unregistering): left promiscuous mode [ 109.246493][ T6126] lo: entered allmulticast mode [ 109.303941][ T6133] netlink: 17 bytes leftover after parsing attributes in process `syz.4.60'. [ 111.195215][ T6179] lo: entered allmulticast mode [ 111.379917][ T6183] netlink: 17 bytes leftover after parsing attributes in process `syz.0.74'. [ 111.423968][ T6183] net_ratelimit: 160 callbacks suppressed [ 111.423988][ T6183] netlink: zone id is out of range [ 111.445835][ T6183] netlink: zone id is out of range [ 111.451941][ T6183] netlink: zone id is out of range [ 111.462411][ T6183] netlink: zone id is out of range [ 111.469556][ T6183] netlink: zone id is out of range [ 111.475011][ T6183] netlink: zone id is out of range [ 111.485562][ T6183] netlink: zone id is out of range [ 111.491087][ T6183] netlink: zone id is out of range [ 111.501623][ T6183] netlink: zone id is out of range [ 111.511332][ T6183] netlink: zone id is out of range [ 112.939551][ T6217] netlink: 17 bytes leftover after parsing attributes in process `syz.3.85'. [ 113.603064][ T6232] netlink: 'syz.1.90': attribute type 21 has an invalid length. [ 113.670334][ T6233] netlink: 196 bytes leftover after parsing attributes in process `syz.4.89'. [ 114.237638][ T6259] netlink: 17 bytes leftover after parsing attributes in process `syz.1.97'. [ 114.294843][ T6261] warning: `syz.3.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.199760][ T6270] netlink: 60 bytes leftover after parsing attributes in process `syz.4.102'. [ 115.398536][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.820792][ T6270] bridge_slave_0 (unregistering): left allmulticast mode [ 115.830565][ T6270] bridge_slave_0 (unregistering): left promiscuous mode [ 115.859632][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.043379][ T6282] netlink: 'syz.3.106': attribute type 10 has an invalid length. [ 116.596488][ T6311] netlink: 17 bytes leftover after parsing attributes in process `syz.3.114'. [ 116.625798][ T6305] netlink: 830 bytes leftover after parsing attributes in process `syz.0.111'. [ 116.747749][ T6311] net_ratelimit: 245 callbacks suppressed [ 116.748006][ T6311] netlink: zone id is out of range [ 116.926918][ T6311] netlink: zone id is out of range [ 116.968559][ T6311] netlink: zone id is out of range [ 117.005627][ T6311] netlink: zone id is out of range [ 117.070824][ T6311] netlink: zone id is out of range [ 117.226399][ T6311] netlink: zone id is out of range [ 117.243215][ T6311] netlink: zone id is out of range [ 117.269556][ T6311] netlink: zone id is out of range [ 117.279759][ T6311] netlink: zone id is out of range [ 117.348462][ T6318] netlink: 'syz.2.116': attribute type 17 has an invalid length. [ 117.357999][ T6318] netlink: 'syz.2.116': attribute type 16 has an invalid length. [ 117.365786][ T6318] netlink: 152 bytes leftover after parsing attributes in process `syz.2.116'. [ 117.397059][ T6311] netlink: zone id is out of range [ 118.060385][ T6329] sctp: [Deprecated]: syz.1.119 (pid 6329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.060385][ T6329] Use struct sctp_sack_info instead [ 118.233746][ T6332] netlink: 'syz.2.121': attribute type 21 has an invalid length. [ 118.355125][ T6334] netlink: 'syz.3.122': attribute type 21 has an invalid length. [ 119.126571][ T6333] delete_channel: no stack [ 119.286928][ T6354] netlink: 17 bytes leftover after parsing attributes in process `syz.4.128'. [ 120.914392][ T6392] netlink: 'syz.3.138': attribute type 21 has an invalid length. [ 123.808098][ T6418] netlink: 17 bytes leftover after parsing attributes in process `syz.0.142'. [ 123.951159][ T6423] netlink: 'syz.3.143': attribute type 9 has an invalid length. [ 123.995434][ T6420] netlink: 'syz.3.143': attribute type 9 has an invalid length. [ 124.097172][ T6420] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.143'. [ 124.108063][ T6424] netlink: 'syz.4.144': attribute type 10 has an invalid length. [ 124.120289][ T6418] net_ratelimit: 161 callbacks suppressed [ 124.120304][ T6418] netlink: zone id is out of range [ 124.159207][ T6423] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.143'. [ 124.273273][ T6418] netlink: zone id is out of range [ 124.373865][ T6418] netlink: zone id is out of range [ 124.452158][ T6418] netlink: zone id is out of range [ 124.534125][ T6418] netlink: zone id is out of range [ 124.676229][ T6418] netlink: zone id is out of range [ 124.778599][ T6418] netlink: zone id is out of range [ 124.906140][ T6418] netlink: zone id is out of range [ 125.022531][ T6418] netlink: zone id is out of range [ 125.029726][ T6418] netlink: zone id is out of range [ 126.833885][ T6437] netlink: 'syz.1.149': attribute type 2 has an invalid length. [ 126.861931][ T6437] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.149'. [ 126.911903][ T6437] nbd: must specify a device to reconfigure [ 128.321109][ T6424] batman_adv: batadv0: Adding interface: wlan0 [ 128.329609][ T6424] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.355091][ T6424] batman_adv: batadv0: Interface activated: wlan0 [ 128.672936][ T6456] netlink: 17 bytes leftover after parsing attributes in process `syz.1.155'. [ 129.156670][ T6480] netlink: 'syz.2.161': attribute type 21 has an invalid length. [ 129.169825][ T6486] sit0: entered promiscuous mode [ 129.186748][ T6486] sit0: entered allmulticast mode [ 129.216635][ T6480] netlink: 'syz.2.161': attribute type 2 has an invalid length. [ 129.224350][ T6480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.161'. [ 129.910220][ T6501] netlink: 17 bytes leftover after parsing attributes in process `syz.3.168'. [ 129.937237][ T6501] net_ratelimit: 160 callbacks suppressed [ 129.937328][ T6501] netlink: zone id is out of range [ 129.955757][ T6501] netlink: zone id is out of range [ 129.962072][ T6501] netlink: zone id is out of range [ 129.999502][ T6501] netlink: zone id is out of range [ 130.005502][ T6501] netlink: zone id is out of range [ 130.013318][ T6501] netlink: zone id is out of range [ 130.023606][ T6501] netlink: zone id is out of range [ 130.029858][ T6501] netlink: zone id is out of range [ 130.035909][ T6501] netlink: zone id is out of range [ 130.042226][ T6501] netlink: zone id is out of range [ 130.285931][ T6520] netlink: 17 bytes leftover after parsing attributes in process `syz.1.176'. [ 130.605069][ T6541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.180'. [ 130.622694][ T6538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.180'. [ 130.634061][ T6541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.180'. [ 130.874886][ T6547] netlink: 17 bytes leftover after parsing attributes in process `syz.1.183'. [ 131.280478][ T6565] netlink: 'syz.3.190': attribute type 2 has an invalid length. [ 131.316976][ T6565] netlink: 'syz.3.190': attribute type 9 has an invalid length. [ 131.324678][ T6565] netlink: 132 bytes leftover after parsing attributes in process `syz.3.190'. [ 131.336855][ T6567] netlink: 'syz.3.190': attribute type 30 has an invalid length. [ 131.520396][ T6572] lo: entered allmulticast mode [ 132.163771][ T6586] netlink: 'syz.1.196': attribute type 10 has an invalid length. [ 132.226281][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.263109][ T6586] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 132.267253][ T6588] netlink: 17 bytes leftover after parsing attributes in process `syz.0.197'. [ 133.277849][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.284937][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.527022][ T6633] netlink: 17 bytes leftover after parsing attributes in process `syz.0.210'. [ 134.560287][ T6636] netlink: 'syz.1.211': attribute type 21 has an invalid length. [ 134.617803][ T6637] netlink: 'syz.2.212': attribute type 7 has an invalid length. [ 134.625794][ T6637] netlink: 148 bytes leftover after parsing attributes in process `syz.2.212'. [ 134.727891][ T6637] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 134.740705][ T6637] syzkaller0: ignored: set checksum disabled [ 135.157637][ T6650] netlink: 14 bytes leftover after parsing attributes in process `syz.0.216'. [ 135.169812][ T6650] netlink: 14 bytes leftover after parsing attributes in process `syz.0.216'. [ 135.179241][ T6650] netlink: 14 bytes leftover after parsing attributes in process `syz.0.216'. [ 135.214064][ T6650] netlink: 14 bytes leftover after parsing attributes in process `syz.0.216'. [ 135.236177][ T6650] netlink: 14 bytes leftover after parsing attributes in process `syz.0.216'. [ 135.268050][ T6650] netlink: 14 bytes leftover after parsing attributes in process `syz.0.216'. [ 135.316272][ T6650] netlink: 14 bytes leftover after parsing attributes in process `syz.0.216'. [ 135.346212][ T6650] netlink: 14 bytes leftover after parsing attributes in process `syz.0.216'. [ 136.212540][ T6681] net_ratelimit: 412 callbacks suppressed [ 136.212561][ T6681] netlink: zone id is out of range [ 136.283311][ T6681] netlink: zone id is out of range [ 136.334443][ T6681] netlink: zone id is out of range [ 136.376325][ T6681] netlink: zone id is out of range [ 136.381512][ T6681] netlink: zone id is out of range [ 136.453504][ T6681] netlink: zone id is out of range [ 136.461900][ T6681] netlink: zone id is out of range [ 136.471005][ T6681] netlink: zone id is out of range [ 136.480930][ T6681] netlink: zone id is out of range [ 136.488745][ T6681] netlink: zone id is out of range [ 137.164741][ T6699] netlink: 'syz.2.231': attribute type 10 has an invalid length. [ 137.393141][ T6699] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 137.465669][ T6699] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 137.536537][ T6699] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 137.897590][ T6717] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 137.970181][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.998830][ T6714] bridge0: entered allmulticast mode [ 138.151384][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.159358][ T6714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.233962][ T6714] bridge0: entered promiscuous mode [ 138.590860][ T6731] netlink: 'syz.1.242': attribute type 10 has an invalid length. [ 138.786712][ T6731] team0: Cannot enslave team device to itself [ 139.504578][ T6753] netlink: 'syz.1.247': attribute type 10 has an invalid length. [ 139.514885][ T6754] netlink: 'syz.2.248': attribute type 29 has an invalid length. [ 139.564266][ T6754] netlink: 'syz.2.248': attribute type 29 has an invalid length. [ 139.580382][ T6754] netlink: 'syz.2.248': attribute type 29 has an invalid length. [ 139.602214][ T6754] netlink: 'syz.2.248': attribute type 29 has an invalid length. [ 139.657534][ T6756] __nla_validate_parse: 61 callbacks suppressed [ 139.657574][ T6756] netlink: 17 bytes leftover after parsing attributes in process `syz.3.249'. [ 141.331874][ T6786] netlink: 'syz.4.259': attribute type 6 has an invalid length. [ 141.406196][ T6786] netlink: 'syz.4.259': attribute type 7 has an invalid length. [ 141.714847][ T6786] netlink: 'syz.4.259': attribute type 7 has an invalid length. [ 142.432563][ T6786] netlink: 12902 bytes leftover after parsing attributes in process `syz.4.259'. [ 145.725987][ C1] sched: DL replenish lagged too much [ 210.747079][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.753457][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.663657][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 217.669789][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 217.675838][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 217.682759][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 221.654352][ T6799] Bluetooth: hci3: command 0x0406 tx timeout [ 275.122782][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.146093][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 276.260318][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.285266][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.311030][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.319994][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.328534][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.676879][ T6806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.685843][ T6806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.706199][ T6806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.741836][ T6806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.750358][ T6806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.302033][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 145s! [ 287.352898][ C0] Showing busy workqueues and worker pools: [ 287.371889][ C0] workqueue events: flags=0x0 [ 287.382953][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=9 refcnt=10 [ 287.382994][ C0] pending: nsim_dev_hwstats_traffic_work, psi_avgs_work, 2*ovs_dp_masks_rebalance, 2*psi_avgs_work, vmstat_shepherd, bpf_prog_free_deferred, free_obj_work [ 287.383894][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=11 refcnt=12 [ 287.383928][ C0] in-flight: 43:free_ipc [ 287.383960][ C0] pending: 4*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, 4*ovs_dp_masks_rebalance [ 287.384889][ C0] workqueue events_long: flags=0x0 [ 287.453763][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 287.453796][ C0] pending: 2*defense_work_handler [ 287.453837][ C0] workqueue events_unbound: flags=0x2 [ 287.472421][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 287.472451][ C0] pending: 3*cfg80211_wiphy_work [ 287.472489][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=10 refcnt=11 [ 287.472511][ C0] pending: toggle_allocation_gate, 5*nsim_dev_trap_report_work, 3*cfg80211_wiphy_work, flush_memcg_stats_dwork [ 287.472582][ C0] workqueue events_freezable: flags=0x4 [ 287.509636][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 287.509666][ C0] pending: update_balloon_stats_func [ 287.509702][ C0] workqueue events_power_efficient: flags=0x80 [ 287.528961][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=8 refcnt=9 [ 287.528989][ C0] pending: 2*neigh_managed_work, neigh_periodic_work, wg_ratelimiter_gc_entries, neigh_periodic_work, do_cache_clean, 2*check_lifetime [ 287.529076][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 287.529100][ C0] in-flight: 5892:gc_worker [ 287.529148][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 287.568776][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 287.568806][ C0] pending: kfree_rcu_monitor [ 287.568844][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=5 refcnt=6 [ 287.568871][ C0] pending: kfree_rcu_monitor, 4*kfree_rcu_work [ 287.568915][ C0] workqueue mm_percpu_wq: flags=0x8 [ 287.599502][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 287.599532][ C0] pending: vmstat_update [ 287.599574][ C0] workqueue kblockd: flags=0x18 [ 287.616589][ C0] pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 287.616624][ C0] pending: blk_mq_timeout_work [ 287.616970][ C0] workqueue bat_events: flags=0x6000a [ 287.635102][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=50 [ 287.635127][ C0] in-flight: 2988:batadv_iv_send_outstanding_bat_ogm_packet [ 287.635153][ C0] inactive: 5*batadv_nc_worker, 5*batadv_mcast_mla_update, 4*batadv_iv_send_outstanding_bat_ogm_packet, 5*batadv_purge_orig, 5*batadv_iv_send_outstanding_bat_ogm_packet, batadv_bla_periodic_work, 2*batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, 7*batadv_iv_send_outstanding_bat_ogm_packet, 5*batadv_tt_purge, 3*batadv_bla_periodic_work, 2*batadv_dat_purge [ 287.635306][ C0] workqueue hci0: flags=0x20012 [ 287.689644][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 287.689670][ C0] in-flight: 51:hci_cmd_sync_work [ 287.689706][ C0] workqueue hci1: flags=0x20012 [ 287.707680][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 287.707703][ C0] in-flight: 5844:hci_cmd_sync_work [ 287.707736][ C0] workqueue hci2: flags=0x20012 [ 287.726069][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 287.726102][ C0] in-flight: 5835:hci_cmd_sync_work [ 287.726162][ C0] workqueue hci3: flags=0x20012 [ 287.744416][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 287.744448][ C0] in-flight: 5841:hci_cmd_sync_work [ 287.744509][ C0] workqueue hci4: flags=0x20012 [ 287.762815][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 287.762844][ C0] in-flight: 5846:hci_cmd_sync_work [ 287.762896][ C0] workqueue wg-kex-wg0: flags=0x6 [ 287.781340][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 287.781366][ C0] pending: 2*wg_packet_handshake_send_worker [ 287.781404][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 287.799974][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 287.800002][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 287.800066][ C0] workqueue wg-kex-wg1: flags=0x6 [ 287.819921][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 287.819947][ C0] pending: wg_packet_handshake_send_worker [ 287.819980][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 287.838476][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 287.838504][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 287.838549][ C0] workqueue wg-kex-wg2: flags=0x6 [ 287.858384][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 287.858406][ C0] pending: 2*wg_packet_handshake_send_worker [ 287.858441][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 287.877138][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 287.877172][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 287.877219][ C0] workqueue wg-kex-wg0: flags=0x6 [ 287.897093][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 287.897120][ C0] pending: 2*wg_packet_handshake_send_worker [ 287.897163][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 287.915751][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 287.915778][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 287.915824][ C0] workqueue wg-kex-wg1: flags=0x6 [ 287.935724][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 287.935750][ C0] pending: wg_packet_handshake_send_worker [ 287.935783][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 287.954235][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 287.954263][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 287.954307][ C0] workqueue wg-kex-wg0: flags=0x6 [ 287.974156][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 287.974182][ C0] pending: 2*wg_packet_handshake_send_worker [ 287.974216][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 287.992867][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 287.992893][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 287.992953][ C0] workqueue wg-kex-wg0: flags=0x6 [ 288.012782][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 288.012808][ C0] pending: 2*wg_packet_handshake_send_worker [ 288.012845][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 288.031557][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 288.031583][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 288.031634][ C0] workqueue wg-kex-wg1: flags=0x6 [ 288.051547][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 288.051572][ C0] pending: 2*wg_packet_handshake_send_worker [ 288.051607][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 288.070321][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 288.070357][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 288.070409][ C0] workqueue wg-kex-wg1: flags=0x6 [ 288.090432][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 288.090466][ C0] pending: 2*wg_packet_handshake_send_worker [ 288.090507][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 288.109187][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 288.109219][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 288.109280][ C0] workqueue wg-kex-wg2: flags=0x6 [ 288.129201][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 288.129227][ C0] pending: 2*wg_packet_handshake_send_worker [ 288.129263][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 288.147976][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 288.148005][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 288.148050][ C0] workqueue wg-kex-wg2: flags=0x6 [ 288.167894][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 288.167919][ C0] pending: wg_packet_handshake_send_worker [ 288.167967][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 288.186459][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 288.186497][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 288.186555][ C0] workqueue wg-kex-wg0: flags=0x6 [ 288.206716][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 288.206756][ C0] pending: wg_packet_handshake_send_worker [ 288.206806][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 288.225300][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 288.225330][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 288.225387][ C0] workqueue wg-kex-wg1: flags=0x6 [ 288.245314][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 288.245341][ C0] pending: 2*wg_packet_handshake_send_worker [ 288.245376][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 288.264073][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 288.264107][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 288.264158][ C0] workqueue wg-kex-wg2: flags=0x6 [ 288.284151][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 288.284182][ C0] pending: 2*wg_packet_handshake_send_worker [ 288.284223][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 288.302883][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 288.302914][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 288.302977][ C0] workqueue hci5: flags=0x20012 [ 288.322660][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=5 [ 288.322689][ C0] in-flight: 6799:hci_rx_work [ 288.322712][ C0] inactive: hci_cmd_work [ 288.322749][ C0] workqueue hci6: flags=0x20012 [ 288.345139][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=5 [ 288.345169][ C0] in-flight: 5155:hci_rx_work [ 288.345195][ C0] inactive: hci_cmd_work [ 288.345307][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=0s workers=8 idle: 24 5839 5894 2154 5936 5895 [ 288.345389][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=10s workers=10 idle: 12 13 49 67 1086 6802 36 3029 2961 [ 288.345484][ C0] pool 9: cpus=0-1 node=0 flags=0x4 nice=-20 hung=0s workers=9 idle: 6806 5849 [ 288.345535][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: [ 288.636757][ T31] INFO: task syz.4.259:6781 blocked for more than 144 seconds. [ 288.644377][ T31] Not tainted 6.15.0-syzkaller-g99fe8af069a9 #0 [ 288.815975][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.824720][ T31] task:syz.4.259 state:D stack:26704 pid:6781 tgid:6781 ppid:5838 task_flags:0x400040 flags:0x00004004 [ 288.976869][ T31] Call Trace: [ 288.980227][ T31] [ 288.983193][ T31] __schedule+0x16f5/0x4d00 [ 289.086025][ T31] ? perf_trace_lock+0xec/0x3b0 [ 289.090958][ T31] ? schedule+0x165/0x360 [ 289.185725][ T31] ? __pfx___schedule+0x10/0x10 [ 289.259210][ T31] ? schedule+0x91/0x360 [ 289.263559][ T31] schedule+0x165/0x360 [ 289.335972][ T31] schedule_preempt_disabled+0x13/0x30 [ 289.341518][ T31] __mutex_lock+0x724/0xe80 [ 289.466040][ T31] ? __mutex_lock+0x51b/0xe80 [ 289.470813][ T31] ? perf_event_ctx_lock_nested+0x38f/0x460 [ 289.535961][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 289.541096][ T31] ? perf_event_ctx_lock_nested+0xb3/0x460 [ 289.636285][ T31] perf_event_ctx_lock_nested+0x38f/0x460 [ 289.642089][ T31] ? perf_event_ctx_lock_nested+0xb3/0x460 [ 289.726287][ T31] ? __pfx_perf_event_ctx_lock_nested+0x10/0x10 [ 289.732607][ T31] ? perf_remove_from_owner+0x458/0x500 [ 289.806002][ T31] ? perf_remove_from_owner+0x22/0x500 [ 289.812649][ T31] ? __pfx_perf_release+0x10/0x10 [ 289.886010][ T31] perf_event_release_kernel+0xda/0x510 [ 289.891650][ T31] ? evm_file_release+0x101/0x1e0 [ 290.049032][ T31] ? __pfx_perf_release+0x10/0x10 [ 290.054172][ T31] perf_release+0x38/0x50 [ 290.155964][ T31] __fput+0x449/0xa70 [ 290.185968][ T31] task_work_run+0x1d1/0x260 [ 290.190652][ T31] ? __pfx_task_work_run+0x10/0x10 [ 290.195805][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 290.335965][ T31] exit_to_user_mode_loop+0xec/0x110 [ 290.341357][ T31] do_syscall_64+0x2bd/0x3b0 [ 290.396257][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.401545][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.455960][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.460717][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.506025][ T31] RIP: 0033:0x7f2bd4f8e929 [ 290.510508][ T31] RSP: 002b:00007fff04163c88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 290.545986][ T31] RAX: 0000000000000000 RBX: 00007f2bd51b7ba0 RCX: 00007f2bd4f8e929 [ 290.554029][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 290.615991][ T31] RBP: 00007f2bd51b7ba0 R08: 000000000000016c R09: 0000001504163f7f [ 290.624036][ T31] R10: 00007f2bd51b7ac0 R11: 0000000000000246 R12: 000000000002288a [ 290.696082][ T31] R13: 00007fff04163d80 R14: ffffffffffffffff R15: 00007fff04163da0 [ 290.704157][ T31] [ 290.746027][ T31] [ 290.746027][ T31] Showing all locks held in the system: [ 290.753807][ T31] 3 locks held by kworker/u8:0/12: [ 290.785965][ T31] #0: ffff8880b873b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 290.816736][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 290.942166][ T6813] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 290.950479][ T6813] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 290.958248][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 291.073715][ T31] 2 locks held by rcu_tasks_trace/29: [ 291.120743][ T31] #0: ffffffff8e13fd90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0 [ 291.146555][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 291.154313][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 291.192199][ T31] #1: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 291.247098][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 291.254256][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 291.326482][ T31] 1 lock held by khungtaskd/31: [ 291.372372][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 291.452415][ T31] 5 locks held by kworker/u9:0/51: [ 291.505950][ T31] #0: ffff88814cf4e148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 291.626097][ T31] #1: ffffc90000bc7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 291.696393][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 291.706308][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 291.766504][ T31] #2: ffff888033734d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 291.876081][ T31] #3: ffff888033734078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0 [ 291.885849][ T31] #4: ffffffff8e144b78 (rcu_state.exp_mutex [ 291.936506][ T6817] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.975999][ T31] ){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 291.983307][ T31] 4 locks held by kworker/u9:1/5155: [ 292.026076][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 292.033281][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 292.106161][ T31] #0: ffff888034c95948 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 292.166527][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz-executor Not tainted 6.15.0-syzkaller-g99fe8af069a9 #0 PREEMPT(full) [ 292.166554][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.166573][ T6817] Call Trace: [ 292.166581][ T6817] [ 292.166590][ T6817] dump_stack_lvl+0x189/0x250 [ 292.166628][ T6817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.166656][ T6817] ? __pfx__printk+0x10/0x10 [ 292.166677][ T6817] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 292.166697][ T6817] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 292.166720][ T6817] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 292.166744][ T6817] warn_alloc+0x214/0x310 [ 292.166775][ T6817] ? __pfx_warn_alloc+0x10/0x10 [ 292.166811][ T6817] ? __get_vm_area_node+0x28f/0x300 [ 292.166832][ T6817] ? kcov_ioctl+0x55/0x640 [ 292.166861][ T6817] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 292.166922][ T6817] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.166951][ T6817] ? perf_trace_preemptirq_template+0xa3/0x340 [ 292.166975][ T6817] ? __pfx_kcov_ioctl+0x10/0x10 [ 292.166999][ T6817] vmalloc_user_noprof+0xad/0xf0 [ 292.167021][ T6817] ? kcov_ioctl+0x55/0x640 [ 292.167045][ T6817] kcov_ioctl+0x55/0x640 [ 292.167069][ T6817] ? bpf_lsm_file_ioctl+0x9/0x20 [ 292.167086][ T6817] ? __pfx_kcov_ioctl+0x10/0x10 [ 292.167109][ T6817] __se_sys_ioctl+0xfc/0x170 [ 292.167141][ T6817] do_syscall_64+0xfa/0x3b0 [ 292.167164][ T6817] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.167186][ T6817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.167203][ T6817] ? clear_bhb_loop+0x60/0xb0 [ 292.167226][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.167242][ T6817] RIP: 0033:0x7efcf218e52b [ 292.167260][ T6817] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 292.167274][ T6817] RSP: 002b:00007ffc9a7e8e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.167295][ T6817] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007efcf218e52b [ 292.167308][ T6817] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000da [ 292.167318][ T6817] RBP: 00007efcf23b61f8 R08: 00000000000000d9 R09: 0000000000000000 [ 292.167330][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.167339][ T6817] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 292.167373][ T6817] [ 292.167381][ T6817] Mem-Info: [ 292.239909][ T31] #1: [ 292.445967][ T6817] active_anon:18880 inactive_anon:0 isolated_anon:0 [ 292.445967][ T6817] active_file:12936 inactive_file:39868 isolated_file:0 [ 292.445967][ T6817] unevictable:768 dirty:9 writeback:0 [ 292.445967][ T6817] slab_reclaimable:10197 slab_unreclaimable:98258 [ 292.445967][ T6817] mapped:26043 shmem:16636 pagetables:1211 [ 292.445967][ T6817] sec_pagetables:0 bounce:0 [ 292.445967][ T6817] kernel_misc_reclaimable:0 [ 292.445967][ T6817] free:1258786 free_pcp:20133 free_cma:0 [ 292.505002][ T6817] Node 0 active_anon:75220kB inactive_anon:0kB active_file:51144kB inactive_file:159272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99072kB dirty:36kB writeback:0kB shmem:65008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10764kB pagetables:4708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 292.541337][ T6817] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 292.596018][ T31] ffffc9000f217bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 292.620841][ T31] #2: ffff888079a88078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 292.656288][ T6817] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.661610][ T31] #3: ffffffff8f6776e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 292.703587][ T31] 2 locks held by getty/5599: [ 292.725952][ T6817] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 292.735992][ T6817] Node 0 DMA32 free:1120048kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:74476kB inactive_anon:0kB active_file:51144kB inactive_file:157452kB unevictable:1536kB writepending:36kB present:3129332kB managed:2561056kB mlocked:0kB bounce:0kB free_pcp:79044kB local_pcp:47124kB free_cma:0kB [ 292.742345][ T31] #0: ffff88814d4440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 292.805867][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 292.830697][ T31] 6 locks held by kworker/u9:2/5835: [ 292.836375][ T31] #0: ffff8880344c5948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 292.845953][ T6817] lowmem_reserve[]: 0 0 1 1 1 [ 292.852021][ T6817] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 292.866537][ T31] #1: [ 292.886988][ T6817] lowmem_reserve[]: 0 0 0 0 0 [ 292.894568][ T6817] Node 1 Normal free:3899508kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20692kB local_pcp:6004kB free_cma:0kB [ 292.901894][ T31] ffffc9000471fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 292.931256][ T6817] lowmem_reserve[]: 0 0 0 0 0 [ 292.954733][ T6817] Node 0 DMA: 0*4kB [ 292.954791][ T31] #2: [ 292.958954][ T6817] 0*8kB 0*16kB [ 292.961743][ T31] ffff888033730d80 [ 292.961748][ T6817] 0*32kB 0*64kB [ 292.965213][ T31] (&hdev->req_lock [ 292.968966][ T6817] 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 292.985979][ T31] ){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 293.002660][ T31] #3: ffff888033730078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0 [ 293.006938][ T6817] Node 0 DMA32: 3*4kB (UME) 2*8kB (UM) 1*16kB (U) 2*32kB (ME) 2*64kB (UE) 2*128kB (UM) 1*256kB (M) 2*512kB (UE) 2*1024kB (UM) 3*2048kB (UME) 271*4096kB (M) = 1119980kB [ 293.029416][ T31] #4: ffffffff8f6776e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 293.029488][ T31] #5: ffff88814c30a338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 293.029556][ T31] 5 locks held by kworker/u9:3/5841: [ 293.029569][ T31] #0: ffff888143b37148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 293.029632][ T31] #1: ffffc9000477fbc0 ( [ 293.043856][ T6817] Node 0 [ 293.066034][ T31] (work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 293.078856][ T6817] Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 293.088402][ T31] #2: ffff88803302cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 293.101743][ T6817] Node 1 Normal: 142*4kB (UME) 63*8kB (UME) 48*16kB (UME) 72*32kB (UME) 31*64kB (UME) 3*128kB (UME) 4*256kB (UM) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (UM) = 3899760kB [ 293.114909][ T31] #3: ffff88803302c078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0 [ 293.138706][ T6817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.150816][ T6817] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 293.163753][ T6817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.175981][ T31] #4: ffffffff8f6776e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 293.183550][ T6817] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 293.185803][ T31] 5 locks held by kworker/u9:5/5846: [ 293.203391][ T6817] 69287 total pagecache pages [ 293.208711][ T6817] 0 pages in swap cache [ 293.212909][ T6817] Free swap = 124996kB [ 293.223814][ T6817] Total swap = 124996kB [ 293.228343][ T6817] 2097051 pages RAM [ 293.232180][ T6817] 0 pages HighMem/MovableOnly [ 293.235955][ T31] #0: ffff888030eb5148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 293.241699][ T6817] 424681 pages reserved [ 293.252221][ T6817] 0 pages cma reserved [ 293.271468][ T31] #1: ffffc900047bfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 293.330352][ T31] #2: ffff888033708d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 293.355712][ T31] #3: ffff888033708078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0 [ 293.365749][ T6809] chnl_net:caif_netlink_parms(): no params data found [ 293.388236][ T31] #4: ffffffff8f6776e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 293.419506][ T31] 4 locks held by kworker/u9:6/5849: [ 293.424875][ T31] #0: ffff888059708948 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 293.447828][ T31] #1: ffffc9000478fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 293.460000][ T31] #2: ffff8880250e8078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 293.470095][ T31] #3: ffffffff8f6776e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 293.480706][ T31] 3 locks held by syz.3.229/6696: [ 293.485762][ T31] #0: ffff88807b518d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 293.495779][ T31] #1: ffff88807b518078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 293.507730][ T31] #2: ffffffff8f6776e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 293.517954][ T31] 1 lock held by syz.1.255/6774: [ 293.524410][ T31] #0: ffffffff8e1a3068 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150 [ 293.534043][ T31] 1 lock held by syz.4.259/6781: [ 293.539170][ T31] #0: ffffffff8e1a3068 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150 [ 293.548820][ T31] 4 locks held by kworker/u9:7/6799: [ 293.554128][ T31] #0: ffff88805cf0d148 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 293.565297][ T31] #1: ffffc90004a8fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 293.577436][ T31] #2: ffff888029a34078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 293.587487][ T31] #3: ffffffff8f6776e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 293.598191][ T31] 4 locks held by kworker/u9:8/6806: [ 293.604838][ T31] #0: ffff88807eff9148 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 293.615884][ T31] #1: ffffc9000472fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 293.628298][ T31] #2: ffff88807ed98078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 293.638402][ T31] #3: ffffffff8f6776e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 293.649206][ T31] 1 lock held by syz-executor/6808: [ 293.654442][ T31] #0: ffffffff8f50f6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 293.663594][ T31] 2 locks held by syz-executor/6809: [ 293.668989][ T31] #0: ffffffff8eca5160 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 293.678690][ T31] #1: ffffffff8f50f6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 293.691616][ T31] [ 293.694008][ T31] ============================================= [ 293.694008][ T31] [ 293.703820][ T31] NMI backtrace for cpu 0 [ 293.703835][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-g99fe8af069a9 #0 PREEMPT(full) [ 293.703855][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.703865][ T31] Call Trace: [ 293.703873][ T31] [ 293.703880][ T31] dump_stack_lvl+0x189/0x250 [ 293.703910][ T31] ? __wake_up_klogd+0xd9/0x110 [ 293.703935][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.703961][ T31] ? __pfx__printk+0x10/0x10 [ 293.703997][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 293.704022][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 293.704038][ T31] ? _printk+0xcf/0x120 [ 293.704063][ T31] ? __pfx__printk+0x10/0x10 [ 293.704085][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 293.704112][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 293.704136][ T31] watchdog+0xfee/0x1030 [ 293.704163][ T31] ? watchdog+0x1de/0x1030 [ 293.704196][ T31] kthread+0x70e/0x8a0 [ 293.704221][ T31] ? __pfx_watchdog+0x10/0x10 [ 293.704243][ T31] ? __pfx_kthread+0x10/0x10 [ 293.704267][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.704287][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.704307][ T31] ? __pfx_kthread+0x10/0x10 [ 293.704329][ T31] ret_from_fork+0x3f9/0x770 [ 293.704357][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 293.704388][ T31] ? __switch_to_asm+0x39/0x70 [ 293.704404][ T31] ? __switch_to_asm+0x33/0x70 [ 293.704420][ T31] ? __pfx_kthread+0x10/0x10 [ 293.704442][ T31] ret_from_fork_asm+0x1a/0x30 [ 293.704480][ T31] [ 293.704486][ T31] Sending NMI from CPU 0 to CPUs 1: [ 293.862620][ C1] NMI backtrace for cpu 1 [ 293.862638][ C1] CPU: 1 UID: 0 PID: 6770 Comm: syz.2.256 Not tainted 6.15.0-syzkaller-g99fe8af069a9 #0 PREEMPT(full) [ 293.862657][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.862665][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 293.862687][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 a2 16 87 03 66 [ 293.862699][ C1] RSP: 0018:ffffc90000a08488 EFLAGS: 00000046 [ 293.862714][ C1] RAX: 00000000000001db RBX: ffff8880b8723900 RCX: 0000000000000838 [ 293.862724][ C1] RDX: 0000000000000000 RSI: 00000000000001db RDI: 0000000000000838 [ 293.862733][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81aec01e [ 293.862742][ C1] R10: 0000000000000003 R11: ffffffff81701790 R12: 0000000010000a10 [ 293.862752][ C1] R13: dffffc0000000000 R14: 00000000000001db R15: 0000000000000020 [ 293.862763][ C1] FS: 0000000000000000(0000) GS:ffff888125d54000(0000) knlGS:0000000000000000 [ 293.862775][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.862786][ C1] CR2: 00007fd99ef59e9c CR3: 000000000df38000 CR4: 00000000003526f0 [ 293.862801][ C1] DR0: 0000200000000180 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.862810][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 293.862819][ C1] Call Trace: [ 293.862825][ C1] [ 293.862831][ C1] lapic_next_event+0x11/0x20 [ 293.862852][ C1] clockevents_program_event+0x1cf/0x360 [ 293.862874][ C1] hrtimer_interrupt+0x620/0xaa0 [ 293.862921][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 293.862937][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 293.862956][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.862971][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 293.862985][ C1] Code: e8 8b fb be 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 60 2c ba 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 cc 08 7d 00 48 c7 c3 58 ef 9d 92 49 03 1e 48 89 [ 293.862996][ C1] RSP: 0018:ffffc90000a086f8 EFLAGS: 00000246 [ 293.863008][ C1] RAX: 1ffffffff1b7458d RBX: 0000000000000001 RCX: 7505ac5df0fc9200 [ 293.863018][ C1] RDX: 0000000000000000 RSI: ffffffff8be287e0 RDI: ffffffff8be287a0 [ 293.863028][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81729de5 [ 293.863038][ C1] R10: ffffc90000a08838 R11: ffffffff81acf670 R12: 1ffff920001410fd [ 293.863048][ C1] R13: ffffc90000a08820 R14: ffffffff8dba2c68 R15: dffffc0000000000 [ 293.863062][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 293.863078][ C1] ? unwind_next_frame+0xa5/0x2390 [ 293.863105][ C1] ? rcu_is_watching+0x15/0xb0 [ 293.863116][ C1] ? _raw_spin_lock_nested+0x32/0x50 [ 293.863134][ C1] ? unwind_next_frame+0xa5/0x2390 [ 293.863152][ C1] unwind_next_frame+0xd4/0x2390 [ 293.863177][ C1] ? unwind_next_frame+0xa5/0x2390 [ 293.863197][ C1] ? lock_acquire+0x5f/0x360 [ 293.863219][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 293.863235][ C1] arch_stack_walk+0x11c/0x150 [ 293.863253][ C1] ? _raw_spin_lock_nested+0x32/0x50 [ 293.863279][ C1] stack_trace_save+0x9c/0xe0 [ 293.863295][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 293.863313][ C1] ? __irq_exit_rcu+0xd8/0x1f0 [ 293.863334][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 293.863356][ C1] kasan_save_track+0x3e/0x80 [ 293.863369][ C1] ? kasan_save_track+0x3e/0x80 [ 293.863381][ C1] ? kasan_save_free_info+0x46/0x50 [ 293.863399][ C1] ? __kasan_slab_free+0x62/0x70 [ 293.863411][ C1] ? kmem_cache_free+0x18f/0x400 [ 293.863425][ C1] ? rcu_core+0xca5/0x1710 [ 293.863443][ C1] ? handle_softirqs+0x286/0x870 [ 293.863461][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 293.863479][ C1] ? irq_exit_rcu+0x9/0x30 [ 293.863497][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 293.863513][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.863527][ C1] ? check_preemption_disabled+0x49/0x120 [ 293.863545][ C1] ? rcu_is_watching+0x15/0xb0 [ 293.863557][ C1] ? lock_acquire+0x5f/0x360 [ 293.863574][ C1] ? _raw_spin_lock_nested+0x32/0x50 [ 293.863620][ C1] ? rcu_core+0xca5/0x1710 [ 293.863638][ C1] kasan_save_free_info+0x46/0x50 [ 293.863656][ C1] __kasan_slab_free+0x62/0x70 [ 293.863671][ C1] kmem_cache_free+0x18f/0x400 [ 293.863687][ C1] ? __pfx_i_callback+0x10/0x10 [ 293.863702][ C1] ? rcu_core+0xc34/0x1710 [ 293.863721][ C1] rcu_core+0xca5/0x1710 [ 293.863753][ C1] ? __pfx_rcu_core+0x10/0x10 [ 293.863773][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 293.863795][ C1] ? perf_trace_preemptirq_template+0x280/0x340 [ 293.863818][ C1] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 293.863837][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 293.863867][ C1] handle_softirqs+0x286/0x870 [ 293.863890][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 293.863920][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 293.863944][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 293.863963][ C1] __irq_exit_rcu+0xca/0x1f0 [ 293.863983][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 293.864010][ C1] irq_exit_rcu+0x9/0x30 [ 293.864029][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 293.864046][ C1] [ 293.864051][ C1] [ 293.864057][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.864072][ C1] RIP: 0010:check_preemption_disabled+0x49/0x120 [ 293.864092][ C1] Code: 8b 0d fb 9d 36 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d db 9d 36 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f <5d> e9 41 b7 02 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 [ 293.864102][ C1] RSP: 0018:ffffc9000b62f820 EFLAGS: 00000282 [ 293.864114][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 7505ac5df0fc9200 [ 293.864123][ C1] RDX: 0000000000000000 RSI: ffffffff8be287e0 RDI: ffffffff8be287a0 [ 293.864133][ C1] RBP: ffffffff823b12c8 R08: 0000000000000001 R09: 0000000000000000 [ 293.864142][ C1] R10: dffffc0000000000 R11: ffffed100ba501bf R12: 0000000000000000 [ 293.864152][ C1] R13: ffff88805d280c90 R14: 0000000000000000 R15: 0000000000000001 [ 293.864164][ C1] ? d_walk+0x1c8/0x780 [ 293.864189][ C1] ? d_walk+0x1c8/0x780 [ 293.864205][ C1] rcu_is_watching+0x15/0xb0 [ 293.864219][ C1] lock_acquire+0x5f/0x360 [ 293.864247][ C1] _raw_spin_lock_nested+0x32/0x50 [ 293.864263][ C1] ? d_walk+0x1c8/0x780 [ 293.864279][ C1] ? __pfx_d_genocide_kill+0x10/0x10 [ 293.864292][ C1] d_walk+0x1c8/0x780 [ 293.864315][ C1] kill_litter_super+0x4b/0xb0 [ 293.864331][ C1] deactivate_locked_super+0xbc/0x130 [ 293.864353][ C1] cleanup_mnt+0x425/0x4c0 [ 293.864373][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.864392][ C1] task_work_run+0x1d1/0x260 [ 293.864412][ C1] ? __pfx_task_work_run+0x10/0x10 [ 293.864437][ C1] do_exit+0x6ad/0x22e0 [ 293.864453][ C1] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 293.864479][ C1] ? __pfx_do_exit+0x10/0x10 [ 293.864495][ C1] ? irqentry_exit+0x74/0x90 [ 293.864522][ C1] do_group_exit+0x21c/0x2d0 [ 293.864543][ C1] get_signal+0x1286/0x1340 [ 293.864579][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 293.864599][ C1] ? perf_trace_preemptirq_template+0x280/0x340 [ 293.864618][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 293.864647][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 293.864669][ C1] exit_to_user_mode_loop+0x75/0x110 [ 293.864689][ C1] do_syscall_64+0x2bd/0x3b0 [ 293.864708][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.864722][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.864737][ C1] ? clear_bhb_loop+0x60/0xb0 [ 293.864754][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.864768][ C1] RIP: 0033:0x7fab5698e929 [ 293.864780][ C1] Code: Unable to access opcode bytes at 0x7fab5698e8ff. [ 293.864788][ C1] RSP: 002b:00007fab57858038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 293.864802][ C1] RAX: 0000000000000004 RBX: 00007fab56bb5fa0 RCX: 00007fab5698e929 [ 293.864812][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500 [ 293.864822][ C1] RBP: 00007fab56a10b39 R08: 0000000000000009 R09: 0000000000000000 [ 293.864831][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 293.864841][ C1] R13: 0000000000000000 R14: 00007fab56bb5fa0 R15: 00007ffc44e654f8 [ 293.864863][ C1] [ 294.816019][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 294.822953][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-g99fe8af069a9 #0 PREEMPT(full) [ 294.833920][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.844005][ T31] Call Trace: [ 294.847305][ T31] [ 294.850262][ T31] dump_stack_lvl+0x99/0x250 [ 294.854889][ T31] ? __asan_memcpy+0x40/0x70 [ 294.859509][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.864743][ T31] ? __pfx__printk+0x10/0x10 [ 294.869373][ T31] panic+0x2db/0x790 [ 294.873304][ T31] ? __pfx_panic+0x10/0x10 [ 294.877751][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 294.883605][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 294.889004][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 294.895192][ T31] watchdog+0x102d/0x1030 [ 294.899551][ T31] ? watchdog+0x1de/0x1030 [ 294.904007][ T31] kthread+0x70e/0x8a0 [ 294.908104][ T31] ? __pfx_watchdog+0x10/0x10 [ 294.912814][ T31] ? __pfx_kthread+0x10/0x10 [ 294.917429][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.922652][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.927959][ T31] ? __pfx_kthread+0x10/0x10 [ 294.932576][ T31] ret_from_fork+0x3f9/0x770 [ 294.937197][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 294.942344][ T31] ? __switch_to_asm+0x39/0x70 [ 294.947131][ T31] ? __switch_to_asm+0x33/0x70 [ 294.951922][ T31] ? __pfx_kthread+0x10/0x10 [ 294.956541][ T31] ret_from_fork_asm+0x1a/0x30 [ 294.961349][ T31] [ 294.964643][ T31] Kernel Offset: disabled [ 294.968967][ T31] Rebooting in 86400 seconds..