last executing test programs: 23.541424414s ago: executing program 0 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x9, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000001280), 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0xd, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x2}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xd, 0x1, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r6, @ANYBLOB="000000000000000018100000", @ANYRES32=r7, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r8, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100e64, 0xc74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911046000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 23.017917012s ago: executing program 0 (id=644): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xe, 0x7, 0xdb, 0x94, 0x0, 0xba6, 0x40020, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0x108006, 0x5, 0xc, 0x3, 0xc, 0x2, 0x4, 0x0, 0x1ff, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf], &(0x7f0000000780)='GPL\x00'}, 0x94) 22.965990443s ago: executing program 0 (id=645): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x75, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00e3f629c7b091ea1638d40df9056873fd7dc72e13bbb44a16d1009dfff1fc0000f800250f02000f00edaa000057d34060bc24cdb556bd05251e6194949a2756f475ce36c2ed1000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8000, 0x4, 0x4, 0x4, 0x1, 0x1}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=""/161, 0xf0, 0xa1, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x8, 0x6, 0x7, 0x8, 0x4, 0xffffffffffffffff, 0xb, '\x00', 0x0, r3, 0x0, 0x1, 0x2}, 0x50) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r4, 0x0, 0x4045) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffeffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x20000001) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x15, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9e29, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@jmp={0x5, 0x1, 0x7, 0x9, 0x8, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0xbe, &(0x7f00000003c0)=""/190, 0x60880, 0x20, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 22.740061821s ago: executing program 3 (id=649): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x6e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000500)="d2014cb877eeaa67b0e69ad898d6dfa1f1b0b5c7b27c3326b68dfacaddc0fe22df309c497863aa7edc2c4adfad13381218fb4be23e5acac128efecefb5e80cc7f1767bceee55cf9d7a0c4843423124e9beca7ea3e3ce4e53a371ce1874636a2ecaa667399a342c34e691c83b3d3c6f50956c33f273ba8849466a54aad6907e7aafc8992956f4cb3f362b54fe42667e01fa6006081180f4f5d8451f33a82d92924ae96c527ad680296247548ceeca35b4874e174dfa7033e249f9184798a2", 0xbe}, {&(0x7f0000002500)="5d2b0dd20591df8d6b470f48d58355ddf8cdce164b201b74d0d10666fb0bdba5ff4e56feb6bae79697e946d6dd34f871e1b3bf1586f85f8e47dc0ce10cc224623a120e26d683d370e8ba0a0196a111187fb51dbda7baf34c02c579f68fdb11ba0598ef94518e05d6a8123c8a2250aee2f61c074e067343ef8683f75873020be1585cd6a05a34425c46000fbe61036a2821b15049355de15e2dcdd6fb6f728ae311001d882bec312f85977a0c80dab3798d9b12e23e3e86b48612484cf4cae1c067a94745698c190c5927af5f8eb37f37c9c348990d94fa8ff4fcf916e7f939b4b7e30baac400b33b12f2af733feec5c90f3940b5a4c55b88a70b84b01c460fd0e31cc52927df79efa880d71e313afb9408790df26c23d018a8672a19bb9c59930ca23142b9e5a1cfd48bb78672035246154d12cbc79629ba63f2aae7888bbe26273001c62e3f55f3fa3802b910bdd7267d81bcdb2d281f042953ee8c20a917e8178cdaf3a45aa5d06e1652a5748c61a0d5327513032e43da8fdc5a7dbd7530e5a3eea3869e0e295b9d2a9af32c5b59d350c78fff747e93bb81d765f00c1fd56c74d9283ff39d0dc7f80666acdb11633b99d9b39abc51a3be2950753b0ba2bae315d713758cbd1ab2ff66bf5b8407e3dd0c49e7a20f2bb409f948dd986b55a4f5b397b29e68aa0f07d8383f2a3bd0b704325ac6d9f817a3250a2a6713dd6eb86c3048d375e2d9abec50e248c0206cdc7b03d69080b17025e3445257689daceac42d32d001bdab59fb6da7aa9198bd96ba9a15b3b136afbde6ee0734e519044e3cb267c8e84bf1f9710ef0e1741c3c120d3d742a71fa10884e0b42d0a57ef79734528a54c16d0cb68b4c399cc30f76860fb6e5a22513c0cf75a1747d4db0503160ee2c312bceebc4dac3d6b238b1b5e712996204297efe9c7038a90ba6b650bd94e55fee658247ee7c758cd8fb911e3855219296d0f9e7e90f8d72fdf687eccb68d4886d0428c1284bd066da978cb985b0ff1d251ae9d0ada136f6be335e8fe83b39e2ea42d65287fb0908073f9cd67ec6a603e1e7fb49083cd5ae33af9dc5b3c90550e2f2c6294729bc8537e7ed90e84607422a12b3688d32ff982f3d8b012d44254b1bf90cca7d7f0bf4b1e61c1ce3b38875cbdd96b83a4ef866bd918ad1724d9da5bf78b1eaead0d89e7b74d4decd5d75f31d6dada779a07d93a0fdbb2c0cf629039d5251730030cfe36002df7a8b9fae5f7dc0e43d255ef37752575f690993b2e7285c0bb48fa30159fbf051039746ae01f7f8c2f7a528cd6dbd3ac370dc0e429a293268d3f196a83b631c638d773a15a23a1b8ea24b18d06318f9a4a8064fe1fb853b2a9eb75726df177282e98da19b499c71336b9bb8272be3970dbc9f289ea2a3c429122b4acbd1eaeb8eb8623902c8e15ec06a0d09d36ef9135f7242f29fcf42d484081101433b5b0ec000004da2b8eb9e4369e8707931c0438aa874fe1d1bb8b6cfce1b8d99bff4b4446edf398d0ced2a24c0d476c7e88c1d3bc111964b3a143488a5c012863791f86141d5a5a7637fb8905510f5fa40b158e38d4afea54969ff465993c983c653c06a97a710cdba834fc276574483274bfeaec93eb8d27f613b6c3e3992069d08ea15f624a3a966995e0bc99a7eab363e14f49f3f4aae76e942eabc68b418aee1da77d67d1a826d0c2343f022fdd979e0e213fbc2c9c56a64a728442e97516c2728702bb8bc35842199fbf91458cca42cc7c2b34a7bcecc756a5cf8465e8eda63954df4cf388ba2cb22c2c58364f4d777a03b4c4c4898f12e64a5afe68295ab6a8a3197c76385369f3cbb6e189e734031e3fa8c68d4d610bd13606cb5b8d753c94cfd0f58731b4336a1877c6f528358f253442ca9191c784ec47dacbbde7fcf2728f4b987b89a2c220f7e91e195c1bae62ebe150bdbf68a5545e2d77ecc7a32279fe9cbd35241d05b1d68d38b9362b303dfc297dbcc5be8b38f1a40f56238350d671b927dc62e9d5df7f4a78d31f9c32e92bc8843c14968de4b49f699731c26aa12f3c2fcb43dcbe397e9635de548b9ac9d0683cca71d20bf5d974321f2e03a7cc05c9f9b7129432b49e54ea3210fa4c4879279bf6aa45de12c4e8b9c16b2c7947dcb59faf87dc5c53762022013cc4c1427052a0312d3b4d534f6b45c2c9f58f4db2db38762ebd20cbc07f1c7b6e6aea50f3338e7a95f0b72cadb73c63e7d8ab2b4cc872e041e7281f07ffb24dde4bbebd7099d38f716bf075fb4b2c73b246d43810ba665ace2fdd60f2e8ab58f4d78e2869a36ac2787dc01a7188f9224d01dc9a72ebf63ae93e12999aeca48f7fe3a75b2475dc9f16efa862aec836025525767484da2d169d94913d850eeb7bd4ac55249282d28c80042d2e69cb4ba14698bbc90d4922deb25c8216ea059eb94b4cd7e8ea03ec1a1fea7ca29f17d2de1ac9b7a1635ae949a61a16f82d4ee88a4192b382b899a576df08b7e97881ee1a9be178fd97db61d68d13dbcecf6e909474cf0dc881d0aa3a96f6708aff4cbb738c2ae278bfd8245867fe0d8192418b235a6803a07d7f07c4ccd507a3501358918220ed6153aecf51d2d80a46ec3efcc92e2aa5275681603fcd093dddee9c55ab3b7475039cbd8d6c39ae2e1ca253717bc129b0e7fcd57effe9d10627bbe150d4b3ab703141e629a325e2719bd16302d06650200c333979339be51f4890563831f4bc88672c1a0d1e535a49b0da75bd6e47d44aaab74f7bbede1280d90850ccc368c72ee4602afe6c2f5235250787e497bce50b97aa6df6d23757b0d03461f2665c6dc6d68597490037259c532fd7c119094af7a3cad117bf082153189c2ca50c0d9279354bd0760860b4e82733e1550da6deda94b62c17767d1af8806e38f5d266ef703d04b19bfe17452fef21352b1fff26e4b2e0fca2963a63f3d705d450b926f224096a77261a690f8995f83a45698bde695688ffa57997a0fadf3f960067e5a76281dce620f81c296cb3fe009d92600cb6f5564cfeba9777016d77e8164b61406773b3254badbd1aacd6a6d85ccf3f9e0c6374c050bf93dd0f1f430dc6fab9017b6cd4b629cb2ab404274852a4067da369f900ff997e7a43d0450c06f97fa52c0c6b552daa49debb8373c1b3a9b1aaf6ff9897dafd76d9ff6ca6ae00ba31a9897f7e839098d01049e15bccd8e1725a03b8eb4c62365fefdf884b1b65ea163e7fcf7c8df7e7a553996ee827879879b862c70bb81e6cf61c9dd341f27f82ab965297d7ede8fac9d2ff21e295fce2411f4ec85a30e0cbbbd893f7cef7041335d9b6c8480dda3648b0416c1125ee5ea25bea84eca31fee052310f8f227d644d15af4cc0131ead6228d637fba3dc03a8526e37ff4527720b7ee8cb46bf0a98429bd527576cd8a9556a8a50893af030b60a374e0e4e2bafa1872b4be0ce9ff69eef02cff5012341223979e23eb5e3fc6f5256e38c1fe44f5e6d45881e2b3ae0ddf8af2b706b69e5bc32c986072988d82baa96603f930d42d842ae4d34f5512885d6d1b28317eb17e13595b8b4e09b0e11081d995b2b80cd424c53f9281b2051ae62ed27ae4f5597099ba399062b0d8d431ea891a86cc09a6b5c7d4727738e45af140d7473736b67a8c4841c2eac9e7174f80a1fa4245e4bb321183df565488634eaed6155df179e102d164e727a6c81d1c80c16a931915993e7a036a084dcafa6c34c51fc0bd19185eba0b482ce37cd3fbb02599823d4961433d85f3ddf333929164a72074b5fe75480d1e6bd5a11bb97340920566636020cfbaac8c0e680fcc3262d77e5b5c18d553280c5ab6373f68e5bd6973885fb7adb9d4827d53715e97acac97e005b81f3d1200310c8fe351307ddc31e80d43a548f34a2df5e86aaec8e3fb00e9c71e8c81daaed7bb7a17a1d1c7eb798eacf1df7111f0587ace4bd0bbaa220d466a78d1c80ee8c966dad4561b989998cb7bd49ed7faed8a7e9c79aa48795df6e47fa4764385614b48342ae2a5f5f8306fdf02342d548bb4f860fb8418c0d900208de2deb4db8c02dfac3f360abd4257b161b037d9d0d269aff28d90ee5b9c504de88b00caecd7d8eb819fd634a2cf0bd0d7df1a1f34fc9d5d4aac76287a4e480d876b281334326f6899dae574a1d03cf1615581aa4ddc04dd62e9b451832a08da1330a9b8d11126cda1ecc6b2182ce7b4216b4a1df874110e728c8c10b3ea896ab57325ea2b2d544cab13bbd3ce901c9c428cd8d72b9ec4ad0d29677afdc051b8b597d8fbf19842c1a4fb761f7c68ebf5dc8208a4f49f5cd4a5797190c1e4eac9a0d1140308b01443c90e12d5d1085adf34bf7ec89c577aac1a88d235968b409f820a3051f4834dfd0719fc54e1ef61e02543d20a6e6a448a9d46a33003111061ee80805786b006f30221dc94aa9a6ec2e88ac7038a0b1e8491a15a2c299fcd3ca6bb20c1840a62dc60db61c2d8d4a6d719e231c682b14a502465ead7758a0633079e59a66786bf782721b3b5b91c489a436c266a24c811c5bd224e342377f58af2db46848bb2c32c842b06d0e25484abf328d9e822e47b2f0b6ce722f6ed3ca8613a83a8c803cc3de1ff6077c0d9840b97fed46927a111324feea64d4865b0914230f220e439fa9a4e28e2eacb9fc5c81c25b8a8b69e144129b4b7a88243d74751e5576bccf0ea030bd4d2675e2b687329688eddd79b2d77c517a5cf7278e8508753ec80d8dd63fa9f7bb95011d8735de32743339c22892667b5e2e05ff2c9290ea1c5aca94625ce924f286b2b7cafbd63ce019247ef2ad54ee2dd76b6b7d0d94bca52c5ec4361f968e7cce2b5c26b391135831baf1e790f460b13eb20cfc9267b8035b737de097e7b070be0cfb5f9d5454bbbae221c8f2063ab4a748eb94cc68d222101e637a7be04f32d0b867b29574b2ab51756e552b5ba1519527d32927d2703f3b6b00bcffcbed1a189e1f2be14878b49c895555106da5817eac618e70b66c01218ab8719bb0d2563582d756711e6c3eb3ffce9176d84028a6614d469e908c5de89b9ed5bc63de066cfc56a07f8a2ac034fdfddff6c9f87e58651d7961de64f42a9fb2be7d88b70fb645f9f053aed602b182f9d7a711406f6b710638138e5bc1334cbeee43e11ddd55f494bf895ab1756ca4c061acb3813effa401646409e87c10a426c22e3d361b8be7f01870588ca82ef2d56ef8c724b1d537e0661ed33519787aefd1b8029426ff5ca92bfee6a4d8aa4117c58a6c52e371ef1e027e865c593425e391f8142403ff50efd8c25514425ab0cf4cc396f5f1f569b43b7d0126bfc4911c9b1b3911be7e2372409bc6f68ca86780a5bf462a9b92713f835c5a2e121b14f44dd88289e1dc1070ea32a679d3a36e0bd4cd6dd5b5986c0130059fd2d5866e2b005ab988ad36ccaa9706d01d2ae016e350c573315135dad021269333644db539c1be15c0fffb66fd5d33e1ccab86a5b1c5e27b731ce33da1030576bdf811f422a37b8a9f6e1b246e62bad5eae64d9c2e0201df2d98657a320834a8b028313cb360916a00a8b3e25a8897fb91d55a8a56fe3e80b89213b3767620e69755b5bbc91517ef83b9b3f3bf1544504868533aa382373360c22cfe893bbce803ffa33ea374afae5ed89629ba1ad8ba66757eb21890e6e742fc6f6acefd6c7efa41a11ee7efe25112c41d519067cd9159587ab579ac907cea4f718b1f04a753c951ff2548178d6fb7e8a78dd0ddd7b016e8f43cdce6541237312ac8a43d5304c889f107e887b51c9fa56d001f97a4b84b244af4c4", 0x1000}, {&(0x7f0000003500)="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", 0xfb}, {&(0x7f0000003600)="1daa0e940f213b9c98ca780fb56790e0906dba8841474991976003b8c116859228474e20ba2fd8620b97b163e4e2f0e3cdb846734e1c4726138d73865c4013e4b94c6a6915a0eb99b3f5473ae024dfe0510469e813790071dd107113e9653c375e97311b7465dd4145c6c3b59a5ff1dabfea8ae4bf0a2d8f9d33a7766126d22a4ffa1273ac7a10a940e2f0f93df9520efac6c67a13981ce6a88e866018e3142bc690ed7630e9c8f2bb4696", 0xab}], 0x4, &(0x7f0000003700)=[{0xc8, 0x17, 0xff, "c686ae16815bd7a325ec4edce4fc8ca4d039c0b6dbba12fbff836afd0c77ebbe650fe6cfe835567306ee4cd0b2368b9a81e2b8e95293e06808cba888fd2668b4bc3d7586a050170de58ca8e94122b035fd2f6f2be69f89092df123f2c52f14205d7bbd2b14604bf1e561b103dd092e1302e030f5ae8b0caf132280a6a0c0c945f604e9703cf35a9a2bdb17658d45c8c90159f1d76934378f52fe19922fa57b3bdc5b233ef1094b6ae8ed6908f3bd4859eaece021"}, {0xb8, 0x10e, 0x6, "a9203f56293641b37742307f22dcb5787249de20a3b12e408d321bf454e8d9c391cecaac0d96e37ea50f2ddb61084b8bce790bac2a82324b9b5b51232bbbbfc901eebca381e6719b9488210a710b9d49442aaa55f587232424fc9b0e35258c776cb3fc2f28eb70078db79c12ff1f0f365e4f1477c59d8fa648ece1645ff0335186b3ca6e403682e1b2042a3e42c22d736d37d1bf0b5ae622906d070cb4dc60ce02663c0118"}, {0x70, 0x116, 0x6, "4c61c34500656946cb7e363e11d5441ac8dbb3f2550908bc3ed970e21d6c8f7e6e96c5be0d3a6b8bdc5aec0273fe5126e0f0e5730fee00f9a5d1cf59cb0ecef9c0850ca996e464863a9be2caeca52a1f795071a0380c9b5048dd23df"}], 0x1f0}, 0x2400c801) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000300000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x40f00}, 0x94) 22.573716946s ago: executing program 3 (id=650): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x80}, {0x6, 0x0, 0x0, 0x4}]}) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x4788, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='\'', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7c, &(0x7f0000000000), 0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) recvmsg$unix(r0, &(0x7f0000001900)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001840), 0x0, &(0x7f00000018c0)}, 0x40002000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) 22.573332166s ago: executing program 1 (id=651): r0 = socket$kcm(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@nl, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000100)=""/94, 0x5e}, {&(0x7f0000000180)=""/203, 0xcb}], 0x3, &(0x7f00000002c0)=""/244, 0xf4}, 0x2041) setsockopt$sock_attach_bpf(r0, 0x84, 0x6b, &(0x7f0000000000), 0x10) 22.384335142s ago: executing program 1 (id=652): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r6 = socket$kcm(0xf, 0x3, 0x2) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x1c, &(0x7f00000001c0), 0xa1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r8) socket$kcm(0xa, 0x2, 0x11) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="0210000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1}, 0x40) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22.383930312s ago: executing program 2 (id=653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000880)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000033c0)={r0, 0x20, &(0x7f0000000340)={&(0x7f0000000380)=""/168, 0xa8, 0x0, &(0x7f0000002380)=""/4096, 0x1000}}, 0x7) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003400)=r1, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x24, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x40440c4) recvmsg$unix(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0) (async) close(r6) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001700)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%-010d \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x4, 0xe, &(0x7f00000009c0)=ANY=[@ANYRES8=r4], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) (async) r8 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (rerun: 32) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x6e, &(0x7f0000000000)=r10, 0x10) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1d000000ff000000a1a300000002000002000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300ffff0000000001000000000000000000000000000000010000000000000087ba2e5716ed6949f305354d547fffded1f5bfde71dc60d085c67f6a2fecc4983a777c6a67c8bd7201008e7b2c2a94c751c05502ae24de5e5a5c5d0812187cdca09be9d91ca1b09f40c403870c46e3ce59fc9481690c5093b563565f4305ff102795a62346548721b546f7218108f1880597f60b6ecb811695f1fdd958579950b69db2d51addacb04b29fa4635b8ec9718b2a574f8ecd9b139f080d5f8c177ee4ff3458dc07889c8615272c3e7c56b243a6e8c7f5d0e4281"], 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x4008, r7}, 0x18) (async) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x10, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}], &(0x7f0000000180)='syzkaller\x00', 0x32d2f9c9, 0x41, &(0x7f00000002c0)=""/65, 0x40f00, 0x24, '\x00', r12, 0x0, r13, 0x8, &(0x7f0000000700)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xd, 0x7f0, 0x9}, 0x10, 0x5f55, r7, 0x6, &(0x7f0000000840)=[r14, r15], &(0x7f0000001780)=[{0x0, 0x1, 0x5, 0xe}, {0x1, 0x2, 0x8, 0xa}, {0x2, 0x2, 0x8}, {0x1, 0x4, 0xf, 0x9}, {0x3, 0x4, 0x7, 0x4}, {0x80002, 0x5, 0x5, 0xc}], 0x10, 0x7fff}, 0x94) 22.206984438s ago: executing program 2 (id=654): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x95c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xffff, 0x0, 0x0, 0x0, 0x8000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r1], 0x10) 22.122898601s ago: executing program 0 (id=655): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x10003}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001040)={&(0x7f0000000d80)="27b3a521f722e84690eeef06c7a37515655ca3f1cd793820717e01a53ba8c14877c0a3566b0c9a95617ee97b06a0f20ba0befe2cd87f12371024fa0c33a7732ec5160e3972908d674b38fc54c68442c51d94cd50951fbfc13006791186e0ac4d7735c3cc98cb02e33192c45e3dc6c87e60289c1d52c01ab83fe5917afbd058c7a4ca92c5ddbeeac1775b5525962fd51b131202d77d597bccabd92a970299f5e331a3138016daed0ce17e45ac546cade3f14161d4cbcb476bf2f40bf3bdf43aa8b0822f49faa5e3ab610981a1b78dc2620e75dd1f43c3", 0x0, &(0x7f0000000f40)="389ff0e703963b7388b33d8a22a8d93aabafda25e361e009b1408ba2a93653aa827f2b752ea61298048366246b234d3d048149398170bbc5", &(0x7f0000000f80)="91f0e4b86e18182cf22cb8e89d189a653d21fbdd83b58fee4393457c385cf4d353ca24f7c5107c952f5cd34fca10ee17f4c200f6b78573d701ca260be09c7b141e329b87e62d2d1e99c8b695dd892f788b0e07d067055aed7b056780e26e6759645c53d9c42339cabef8d4d515406338e6dd74bd1e2c615e40ef0cc081ccb8a3b8055feff7110f82f54cdc42b5f990da41", 0x40, r1, 0x2f6faa4babfe61bd}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000040c0)={r5, 0x0, 0x21, 0x1000, &(0x7f0000000380)="72852c354df2eaf4e0f8ba732b12adf55651ee7c7ea571771bfa8cc5a9ca759769", &(0x7f0000002f80)=""/4096, 0x5, 0x0, 0x84, 0x66, &(0x7f0000003f80)="0b61c71b229dc052ddb3c68327f70c8bc9ced2445b5ab5f689644af1c76e6ced924ea50ffddce201564a3a379b0276bce84108431ba5e8f93cbf36860409808bd8675ad944e79c931c4baee05f429fe7e59ae62a52f79c90a50387729e9543d61c2144401b04ada99d9208f6943d26b915f3e52661943b8c1497a75b9f1b89abace15efa", &(0x7f0000004040)="faa35511c248fc8bb90ee63af369e1997b7922e5a8807ba00a25458705ddb81887c4eb2c1f420f578262261e4f1717c20b07b48e974af9dbccbee17ae145b9a3aa9b7b61b308bf1b23c43fdf961bf6a3dd3555e2d853707b15151bcda5951410253591dfd1ae", 0x5, 0x0, 0x3}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) r7 = socket$kcm(0x11, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000180)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000002f40)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000940)="d59f6cbf85c5c392dde2313f0c5bb441167b01ac3f845de06d29a0f588fb04f0f17f457714d5ffde9d873e5394cc4f89f9adac83d96f01a86a1a0c10d18c4b87ab40bd29f8a132cfe5b02d1ee88fa32209842413196dc7415040815a3b78b2209f1fb3f634bf8f56be3a591aa44bc69d07728e2ccfa6c1961e5f3a83906c4f83231acddab16290ee5724c9b98af076aa8682c6b688dc050f9838e540ba47f2146c048e5a3aaea060262372e781a9a514dbaabdf98916f3e28b", 0xb9}, {&(0x7f0000000a00)="df5013642a233a01c1b7e62ef047b7fbc75a18ef9d97701e1717ffdb71fe3bb280714eef177881ae40b624b7c89d61199237ee6dcd052cd3f0a551e78d76021a2dc249e57708df2b905578c34a6fb1abaa6d7d5d5f45f00f4fcef3d6f98e740919530734757cca6ac1ec236b936f82081c9f720b1e4c9167bc92b7b8e9f959aee55041d92b1905e81ca8dbb066f688a83c700337e7a788ae4230a8d1fa9d1a87b557bcb38ed9749df11d195476f8909d1beba4428a59fc9a107126b74020324067971e1544c042474d08f137ab", 0xcd}, {&(0x7f0000000bc0)="303ef06d1aa8e8b3fca40f6c", 0xc}, {&(0x7f0000000c00)="49571b485ceb7edd2d6f3a1d130e6320ea97d0811f827a64f9cadf8108f6bf8c5323df5d04a84a966e63ee135eb979bd2128fb7a364adba52151e34090725fe8223f82f3e2f76c119218e69fcc30361225bb1fb55c0b46a24608f75de84404e8fddf6f1c8abb8a21", 0x68}, {&(0x7f0000000c80)="53670e7406c385b42cdc27e36999d32e8f85b4214efe867d17ed189820dc96c2cfd110701050c43f7e74c60db72117c3f1431bb74eb15b51b784f1ddcb8cf360f45fede79f66502df6e29ff54aedf7c071fdcc74c1be1dab9f4ba55a81a3ac31768c724ea74ea52b43f301ef6cb7f03178c0d475205bc16c2cc0755f9a8f61a3a1e027cea500d8f157f9e2c197874195f7f579491fb781ece1e5cab3bf529e1fabcdadcab6c96f7a8e30dd9423f20919f8169d25560275c0e84efed28ec823ed1a83caada5bb436b9759cb0363860cfb5f3275d0789992", 0xd7}, {&(0x7f0000001ec0)="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", 0x1000}], 0x6}, 0x4000004) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000300), &(0x7f00000003c0)='%-5lx \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r6, r1}, 0xc) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r9) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) 21.549618259s ago: executing program 2 (id=656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000240)) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x7, 0x6, 0x0, 0x40, 0x0, 0x9, 0x6daad, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000440), 0xa}, 0x100401, 0x5, 0x43a1bd76, 0x8, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = syz_clone(0x800, &(0x7f0000000300)="719297211ada89d0933c080381de8ef1c8f30dbac5d9fa9f2c37657d55effeda859c896d92bbf5e3c1ac984e4381330d8d534f89e63f68d2a7ec32066f8caa7199688ef7321f7c784d0e7f01", 0x4c, 0x0, 0x0, &(0x7f0000000bc0)="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") perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2, 0xa, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_config_ext={0x4, 0x7fffffffffffffff}, 0x10880c, 0xe628, 0xe94c, 0x2, 0x10, 0x2, 0x1, 0x0, 0x10000, 0x0, 0x100000000000f7f7}, r3, 0x0, r1, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000000000400fe08003b9ead624e071be54aa5283cfc0007ab81cb22d461b69f62466c054edda3797fa4acd71b97085f7251f78036bd376504bc8496ee96e9ea4ad0e4741e1d8beeb98e180d33e4a33c2824e7979c978117c9a59d30284a25a92d6415ba493a1eaf62bd3f9e340479836318c874b7e9c147e3492683fa154c8fdace512f2cc375781b29aeb7f51e4c"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r4}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x72, &(0x7f0000000000), 0xc) openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000f96ac9000000000000b708000000000000f172abb5767f72d5b708f1ff341200007b8af0"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00000000000000030400000009000000000000009f3fa37b567a3399548ab154dc842af04ac649ac80e551022d3efc7357f610c64c0036c7074ed7329b40b6e642", @ANYBLOB="a3dae755d6e9c748bb5f9174c76a773019b873e33a4b785604b97fadd031d729bd2faac46a0140edce", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e000000f7ffffff050000009000040000000000", @ANYRES32=r7, @ANYBLOB="00000100"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0000000003000000040000000e00"/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000040000000000000000000000000000000000f3123059d64f7738f8766ebe9fb5e3a107291d6a93c9c6e886009625fd82b26d24c87383fe9f3c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x5, &(0x7f0000001540)=ANY=[@ANYRESHEX=r2], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21.53820965s ago: executing program 1 (id=657): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x10003}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001040)={&(0x7f0000000d80)="27b3a521f722e84690eeef06c7a37515655ca3f1cd793820717e01a53ba8c14877c0a3566b0c9a95617ee97b06a0f20ba0befe2cd87f12371024fa0c33a7732ec5160e3972908d674b38fc54c68442c51d94cd50951fbfc13006791186e0ac4d7735c3cc98cb02e33192c45e3dc6c87e60289c1d52c01ab83fe5917afbd058c7a4ca92c5ddbeeac1775b5525962fd51b131202d77d597bccabd92a970299f5e331a3138016daed0ce17e45ac546cade3f14161d4cbcb476bf2f40bf3bdf43aa8b0822f49faa5e3ab610981a1b78dc2620e75dd1f43c3", 0x0, &(0x7f0000000f40)="389ff0e703963b7388b33d8a22a8d93aabafda25e361e009b1408ba2a93653aa827f2b752ea61298048366246b234d3d048149398170bbc5", &(0x7f0000000f80)="91f0e4b86e18182cf22cb8e89d189a653d21fbdd83b58fee4393457c385cf4d353ca24f7c5107c952f5cd34fca10ee17f4c200f6b78573d701ca260be09c7b141e329b87e62d2d1e99c8b695dd892f788b0e07d067055aed7b056780e26e6759645c53d9c42339cabef8d4d515406338e6dd74bd1e2c615e40ef0cc081ccb8a3b8055feff7110f82f54cdc42b5f990da41", 0x40, r1, 0x2f6faa4babfe61bd}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000040c0)={r6, 0x0, 0x21, 0x1000, &(0x7f0000000380)="72852c354df2eaf4e0f8ba732b12adf55651ee7c7ea571771bfa8cc5a9ca759769", &(0x7f0000002f80)=""/4096, 0x5, 0x0, 0x84, 0x66, &(0x7f0000003f80)="0b61c71b229dc052ddb3c68327f70c8bc9ced2445b5ab5f689644af1c76e6ced924ea50ffddce201564a3a379b0276bce84108431ba5e8f93cbf36860409808bd8675ad944e79c931c4baee05f429fe7e59ae62a52f79c90a50387729e9543d61c2144401b04ada99d9208f6943d26b915f3e52661943b8c1497a75b9f1b89abace15efa", &(0x7f0000004040)="faa35511c248fc8bb90ee63af369e1997b7922e5a8807ba00a25458705ddb81887c4eb2c1f420f578262261e4f1717c20b07b48e974af9dbccbee17ae145b9a3aa9b7b61b308bf1b23c43fdf961bf6a3dd3555e2d853707b15151bcda5951410253591dfd1ae", 0x5, 0x0, 0x3}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) r8 = socket$kcm(0x11, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000180)=r7, 0x4) sendmsg$kcm(r8, &(0x7f0000002f40)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000940)="d59f6cbf85c5c392dde2313f0c5bb441167b01ac3f845de06d29a0f588fb04f0f17f457714d5ffde9d873e5394cc4f89f9adac83d96f01a86a1a0c10d18c4b87ab40bd29f8a132cfe5b02d1ee88fa32209842413196dc7415040815a3b78b2209f1fb3f634bf8f56be3a591aa44bc69d07728e2ccfa6c1961e5f3a83906c4f83231acddab16290ee5724c9b98af076aa8682c6b688dc050f9838e540ba47f2146c048e5a3aaea060262372e781a9a514dbaabdf98916f3e28b", 0xb9}, {&(0x7f0000000a00)="df5013642a233a01c1b7e62ef047b7fbc75a18ef9d97701e1717ffdb71fe3bb280714eef177881ae40b624b7c89d61199237ee6dcd052cd3f0a551e78d76021a2dc249e57708df2b905578c34a6fb1abaa6d7d5d5f45f00f4fcef3d6f98e740919530734757cca6ac1ec236b936f82081c9f720b1e4c9167bc92b7b8e9f959aee55041d92b1905e81ca8dbb066f688a83c700337e7a788ae4230a8d1fa9d1a87b557bcb38ed9749df11d195476f8909d1beba4428a59fc9a107126b74020324067971e1544c042474d08f137ab", 0xcd}, {&(0x7f0000000bc0)="303ef06d1aa8e8b3fca40f6c", 0xc}, {&(0x7f0000000c00)="49571b485ceb7edd2d6f3a1d130e6320ea97d0811f827a64f9cadf8108f6bf8c5323df5d04a84a966e63ee135eb979bd2128fb7a364adba52151e34090725fe8223f82f3e2f76c119218e69fcc30361225bb1fb55c0b46a24608f75de84404e8fddf6f1c8abb8a21", 0x68}, {&(0x7f0000000c80)="53670e7406c385b42cdc27e36999d32e8f85b4214efe867d17ed189820dc96c2cfd110701050c43f7e74c60db72117c3f1431bb74eb15b51b784f1ddcb8cf360f45fede79f66502df6e29ff54aedf7c071fdcc74c1be1dab9f4ba55a81a3ac31768c724ea74ea52b43f301ef6cb7f03178c0d475205bc16c2cc0755f9a8f61a3a1e027cea500d8f157f9e2c197874195f7f579491fb781ece1e5cab3bf529e1fabcdadcab6c96f7a8e30dd9423f20919f8169d25560275c0e84efed28ec823ed1a83caada5bb436b9759cb0363860cfb5f3275d0789992", 0xd7}, {&(0x7f0000001ec0)="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", 0x1000}], 0x6}, 0x4000004) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r7, r3}, 0xc) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r10) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) (fail_nth: 9) 21.486634461s ago: executing program 3 (id=658): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x800000, @local, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'], 0x28}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000700)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@typedef={0x1, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @fwd={0x8}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x46, 0x0, 0x1}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x2, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f0000000400000006000000070000", @ANYRES32, @ANYBLOB="0000000000000000008000", @ANYRES32=0x0, @ANYRES32], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000d62c005401000000000000005aa7b755cbdbeb0300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3db00f6b8267e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f01000e97", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008102e00f80ecdb4cb9f207c804a00d00000088081afb0a1102000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 21.393513584s ago: executing program 0 (id=659): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000040)="a41d7bf402352108ecf4a8a096037bd4cdca67ff", &(0x7f0000000180)=""/140, 0x4}, 0x20) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYRES16], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000000000028c00600040000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x88020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x617731a7}, 0x0, 0x101, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x20000000, 0x54}, 0x1988, 0x100000000, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000007111a800000000008510000002000000850000002a0000009500a24600a50500"/56], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r6, &(0x7f0000000740)={&(0x7f00000007c0)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f00000007c0)=ANY=[], 0x10b8}, 0x48000) r7 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x9e, 0x3, 0x2, 0x62, 0x0, 0xe1, 0x20, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x6, 0x1d}, 0x80, 0x8ee9, 0x22, 0xae35a400e37fa46e, 0x9, 0xfffffc00, 0x8, 0x0, 0x3, 0x0, 0x3}, r0, 0x81, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x4, 0xa, 0x7, 0x6, 0x0, 0x7, 0x40, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6a37, 0x0, @perf_bp={&(0x7f00000002c0), 0xa}, 0x2800, 0x8, 0xff, 0x4, 0x0, 0x4, 0x3, 0x0, 0x5, 0x0, 0x2e10}, r0, 0x4, r7, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x21) 21.393014374s ago: executing program 3 (id=660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x95c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xffff, 0x0, 0x0, 0x0, 0x8000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES16=r0], 0x10) 21.325747476s ago: executing program 2 (id=661): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xe80, 0x32, 0x2000009, 0x7, 0x9, 0x20006, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x9080, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x3, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047459, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2f9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r6 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$TUNSETFILTEREBPF(r7, 0xb702, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="62202b626c6b696f2000000000000000ff0f0000001d00"], 0x19) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000600)=ANY=[], 0x5) 20.526776103s ago: executing program 1 (id=662): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYRES16=r0, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x3, 0x4, 0x0, 0x0, 0x80820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x11a226, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) 20.29379841s ago: executing program 1 (id=663): socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff5"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000017c0)={&(0x7f0000000080)="fadf8737dbd73b", 0x0, 0x0, 0x0, 0x7, r1, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000000000000000000008000e7ff000000", @ANYRES32, @ANYBLOB="0300"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffffffd, 0x1, 0x0, 0x0, 0x704a, 0x0, 0x0, 0x9}, 0x0, 0x2000000000007, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000080)=[{&(0x7f0000000c40)="c106020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0xffffffc2}, 0x4000804) socket$kcm(0x2, 0x3, 0x84) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) 20.252055652s ago: executing program 2 (id=664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x95c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xffff, 0x0, 0x0, 0x0, 0x8000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r1], 0x10) 20.114165816s ago: executing program 0 (id=665): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93824fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x1) 20.048962068s ago: executing program 3 (id=666): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) syz_clone(0x3234000, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="fc2950b7dfda18a392b084cb823d4d37c36742aecf869c6cb2aede087f3b9ae4ad6acc1bb8e2bc8a3e34274efd2d33d9c67d0006f2") (async) r0 = socket$kcm(0xa, 0x1, 0x106) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000011c0)='B--\x00') (async) perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) (async) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000005370a56295616a8b87d1f0839749ce7237bef1be9b3366b18482aba85de63fdb963d64bd024df663261eb686e7bf7916c7b55e81104012f8e1184f19efdeeeae5ba2e39c9280a5f12d6e97b09f6c5f53f834d230497b49ca2b98504dc6c2a59e90202344c3303846c65fb66b4b32ea022f5e9068c6d041c09b68dff1b24487d193249637166bcae779c0c1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="180800006000000000000000000000801811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYBLOB="acd334624292617225701284955e1521199161f770fe0715714dd7ed8e3e1ce3a15e39130ffead4b11a66514f072cc31bb5831518b0be1672e8bc50a69221b111a3c8eda777c95d1c3380184", @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x20000010) 20.048095078s ago: executing program 1 (id=667): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x10003}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001040)={&(0x7f0000000d80)="27b3a521f722e84690eeef06c7a37515655ca3f1cd793820717e01a53ba8c14877c0a3566b0c9a95617ee97b06a0f20ba0befe2cd87f12371024fa0c33a7732ec5160e3972908d674b38fc54c68442c51d94cd50951fbfc13006791186e0ac4d7735c3cc98cb02e33192c45e3dc6c87e60289c1d52c01ab83fe5917afbd058c7a4ca92c5ddbeeac1775b5525962fd51b131202d77d597bccabd92a970299f5e331a3138016daed0ce17e45ac546cade3f14161d4cbcb476bf2f40bf3bdf43aa8b0822f49faa5e3ab610981a1b78dc2620e75dd1f43c3", 0x0, &(0x7f0000000f40)="389ff0e703963b7388b33d8a22a8d93aabafda25e361e009b1408ba2a93653aa827f2b752ea61298048366246b234d3d048149398170bbc5", &(0x7f0000000f80)="91f0e4b86e18182cf22cb8e89d189a653d21fbdd83b58fee4393457c385cf4d353ca24f7c5107c952f5cd34fca10ee17f4c200f6b78573d701ca260be09c7b141e329b87e62d2d1e99c8b695dd892f788b0e07d067055aed7b056780e26e6759645c53d9c42339cabef8d4d515406338e6dd74bd1e2c615e40ef0cc081ccb8a3b8055feff7110f82f54cdc42b5f990da41", 0x40, r1, 0x2f6faa4babfe61bd}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000b40)=""/140, 0x8c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000d40)=""/4099, 0x1003}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000880)=""/120, 0x78}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000000940)=""/94, 0x5e}, {&(0x7f0000000400)=""/105, 0x69}, {&(0x7f0000000480)=""/48, 0x30}], 0x12}, 0x2122) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000040c0)={r6, 0x0, 0x21, 0x1000, &(0x7f0000000380)="72852c354df2eaf4e0f8ba732b12adf55651ee7c7ea571771bfa8cc5a9ca759769", &(0x7f0000002f80)=""/4096, 0x5, 0x0, 0x84, 0x66, &(0x7f0000003f80)="0b61c71b229dc052ddb3c68327f70c8bc9ced2445b5ab5f689644af1c76e6ced924ea50ffddce201564a3a379b0276bce84108431ba5e8f93cbf36860409808bd8675ad944e79c931c4baee05f429fe7e59ae62a52f79c90a50387729e9543d61c2144401b04ada99d9208f6943d26b915f3e52661943b8c1497a75b9f1b89abace15efa", &(0x7f0000004040)="faa35511c248fc8bb90ee63af369e1997b7922e5a8807ba00a25458705ddb81887c4eb2c1f420f578262261e4f1717c20b07b48e974af9dbccbee17ae145b9a3aa9b7b61b308bf1b23c43fdf961bf6a3dd3555e2d853707b15151bcda5951410253591dfd1ae", 0x5, 0x0, 0x3}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) r9 = socket$kcm(0x11, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000180)=r8, 0x4) sendmsg$kcm(r9, &(0x7f0000002f40)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000940)="d59f6cbf85c5c392dde2313f0c5bb441167b01ac3f845de06d29a0f588fb04f0f17f457714d5ffde9d873e5394cc4f89f9adac83d96f01a86a1a0c10d18c4b87ab40bd29f8a132cfe5b02d1ee88fa32209842413196dc7415040815a3b78b2209f1fb3f634bf8f56be3a591aa44bc69d07728e2ccfa6c1961e5f3a83906c4f83231acddab16290ee5724c9b98af076aa8682c6b688dc050f9838e540ba47f2146c048e5a3aaea060262372e781a9a514dbaabdf98916f3e28b", 0xb9}, {&(0x7f0000000a00)="df5013642a233a01c1b7e62ef047b7fbc75a18ef9d97701e1717ffdb71fe3bb280714eef177881ae40b624b7c89d61199237ee6dcd052cd3f0a551e78d76021a2dc249e57708df2b905578c34a6fb1abaa6d7d5d5f45f00f4fcef3d6f98e740919530734757cca6ac1ec236b936f82081c9f720b1e4c9167bc92b7b8e9f959aee55041d92b1905e81ca8dbb066f688a83c700337e7a788ae4230a8d1fa9d1a87b557bcb38ed9749df11d195476f8909d1beba4428a59fc9a107126b74020324067971e1544c042474d08f137ab", 0xcd}, {&(0x7f0000000bc0)="303ef06d1aa8e8b3fca40f6c", 0xc}, {&(0x7f0000000c00)="49571b485ceb7edd2d6f3a1d130e6320ea97d0811f827a64f9cadf8108f6bf8c5323df5d04a84a966e63ee135eb979bd2128fb7a364adba52151e34090725fe8223f82f3e2f76c119218e69fcc30361225bb1fb55c0b46a24608f75de84404e8fddf6f1c8abb8a21", 0x68}, {&(0x7f0000000c80)="53670e7406c385b42cdc27e36999d32e8f85b4214efe867d17ed189820dc96c2cfd110701050c43f7e74c60db72117c3f1431bb74eb15b51b784f1ddcb8cf360f45fede79f66502df6e29ff54aedf7c071fdcc74c1be1dab9f4ba55a81a3ac31768c724ea74ea52b43f301ef6cb7f03178c0d475205bc16c2cc0755f9a8f61a3a1e027cea500d8f157f9e2c197874195f7f579491fb781ece1e5cab3bf529e1fabcdadcab6c96f7a8e30dd9423f20919f8169d25560275c0e84efed28ec823ed1a83caada5bb436b9759cb0363860cfb5f3275d0789992", 0xd7}, {&(0x7f0000001ec0)="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", 0x1000}], 0x6}, 0x4000004) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r8, r3}, 0xc) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r11 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r11) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) 19.040670121s ago: executing program 3 (id=668): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="64010101e000000101000000000000a00000000040000000000000000000000007000000442c37b1ac1414aa000003ffffffffff000000817f0000010000000464010101000000087f0000010000000701000000"], 0x78}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x14, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={&(0x7f0000000400), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x10000000007}, 0x0, 0xfff0000020000003, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x2, 0x3, 0x0, 0x7dd, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') close(r5) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x500e7e46a79bd6a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x400c044) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000440)={0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xf, 0x0, &(0x7f00000001c0)="e00500000007dbe9abc8d24470e712", 0x0, 0xcd34, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000120000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 17.784391292s ago: executing program 2 (id=676): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x2000040}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x511}}], 0x18}, 0x44014) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x890c, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, r2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)="c7d964d43b55ee085466b451412cfd5d80", 0x11}], 0x1}, 0xfc) sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f00000005c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) 2.295184426s ago: executing program 32 (id=665): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93824fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x1) 2.066189433s ago: executing program 33 (id=667): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x10003}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001040)={&(0x7f0000000d80)="27b3a521f722e84690eeef06c7a37515655ca3f1cd793820717e01a53ba8c14877c0a3566b0c9a95617ee97b06a0f20ba0befe2cd87f12371024fa0c33a7732ec5160e3972908d674b38fc54c68442c51d94cd50951fbfc13006791186e0ac4d7735c3cc98cb02e33192c45e3dc6c87e60289c1d52c01ab83fe5917afbd058c7a4ca92c5ddbeeac1775b5525962fd51b131202d77d597bccabd92a970299f5e331a3138016daed0ce17e45ac546cade3f14161d4cbcb476bf2f40bf3bdf43aa8b0822f49faa5e3ab610981a1b78dc2620e75dd1f43c3", 0x0, &(0x7f0000000f40)="389ff0e703963b7388b33d8a22a8d93aabafda25e361e009b1408ba2a93653aa827f2b752ea61298048366246b234d3d048149398170bbc5", &(0x7f0000000f80)="91f0e4b86e18182cf22cb8e89d189a653d21fbdd83b58fee4393457c385cf4d353ca24f7c5107c952f5cd34fca10ee17f4c200f6b78573d701ca260be09c7b141e329b87e62d2d1e99c8b695dd892f788b0e07d067055aed7b056780e26e6759645c53d9c42339cabef8d4d515406338e6dd74bd1e2c615e40ef0cc081ccb8a3b8055feff7110f82f54cdc42b5f990da41", 0x40, r1, 0x2f6faa4babfe61bd}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000b40)=""/140, 0x8c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000d40)=""/4099, 0x1003}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000880)=""/120, 0x78}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000000940)=""/94, 0x5e}, {&(0x7f0000000400)=""/105, 0x69}, {&(0x7f0000000480)=""/48, 0x30}], 0x12}, 0x2122) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000040c0)={r6, 0x0, 0x21, 0x1000, &(0x7f0000000380)="72852c354df2eaf4e0f8ba732b12adf55651ee7c7ea571771bfa8cc5a9ca759769", &(0x7f0000002f80)=""/4096, 0x5, 0x0, 0x84, 0x66, &(0x7f0000003f80)="0b61c71b229dc052ddb3c68327f70c8bc9ced2445b5ab5f689644af1c76e6ced924ea50ffddce201564a3a379b0276bce84108431ba5e8f93cbf36860409808bd8675ad944e79c931c4baee05f429fe7e59ae62a52f79c90a50387729e9543d61c2144401b04ada99d9208f6943d26b915f3e52661943b8c1497a75b9f1b89abace15efa", &(0x7f0000004040)="faa35511c248fc8bb90ee63af369e1997b7922e5a8807ba00a25458705ddb81887c4eb2c1f420f578262261e4f1717c20b07b48e974af9dbccbee17ae145b9a3aa9b7b61b308bf1b23c43fdf961bf6a3dd3555e2d853707b15151bcda5951410253591dfd1ae", 0x5, 0x0, 0x3}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) r9 = socket$kcm(0x11, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000180)=r8, 0x4) sendmsg$kcm(r9, &(0x7f0000002f40)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000940)="d59f6cbf85c5c392dde2313f0c5bb441167b01ac3f845de06d29a0f588fb04f0f17f457714d5ffde9d873e5394cc4f89f9adac83d96f01a86a1a0c10d18c4b87ab40bd29f8a132cfe5b02d1ee88fa32209842413196dc7415040815a3b78b2209f1fb3f634bf8f56be3a591aa44bc69d07728e2ccfa6c1961e5f3a83906c4f83231acddab16290ee5724c9b98af076aa8682c6b688dc050f9838e540ba47f2146c048e5a3aaea060262372e781a9a514dbaabdf98916f3e28b", 0xb9}, {&(0x7f0000000a00)="df5013642a233a01c1b7e62ef047b7fbc75a18ef9d97701e1717ffdb71fe3bb280714eef177881ae40b624b7c89d61199237ee6dcd052cd3f0a551e78d76021a2dc249e57708df2b905578c34a6fb1abaa6d7d5d5f45f00f4fcef3d6f98e740919530734757cca6ac1ec236b936f82081c9f720b1e4c9167bc92b7b8e9f959aee55041d92b1905e81ca8dbb066f688a83c700337e7a788ae4230a8d1fa9d1a87b557bcb38ed9749df11d195476f8909d1beba4428a59fc9a107126b74020324067971e1544c042474d08f137ab", 0xcd}, {&(0x7f0000000bc0)="303ef06d1aa8e8b3fca40f6c", 0xc}, {&(0x7f0000000c00)="49571b485ceb7edd2d6f3a1d130e6320ea97d0811f827a64f9cadf8108f6bf8c5323df5d04a84a966e63ee135eb979bd2128fb7a364adba52151e34090725fe8223f82f3e2f76c119218e69fcc30361225bb1fb55c0b46a24608f75de84404e8fddf6f1c8abb8a21", 0x68}, {&(0x7f0000000c80)="53670e7406c385b42cdc27e36999d32e8f85b4214efe867d17ed189820dc96c2cfd110701050c43f7e74c60db72117c3f1431bb74eb15b51b784f1ddcb8cf360f45fede79f66502df6e29ff54aedf7c071fdcc74c1be1dab9f4ba55a81a3ac31768c724ea74ea52b43f301ef6cb7f03178c0d475205bc16c2cc0755f9a8f61a3a1e027cea500d8f157f9e2c197874195f7f579491fb781ece1e5cab3bf529e1fabcdadcab6c96f7a8e30dd9423f20919f8169d25560275c0e84efed28ec823ed1a83caada5bb436b9759cb0363860cfb5f3275d0789992", 0xd7}, {&(0x7f0000001ec0)="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", 0x1000}], 0x6}, 0x4000004) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r8, r3}, 0xc) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r11 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r11) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) 99.08µs ago: executing program 34 (id=668): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="64010101e000000101000000000000a00000000040000000000000000000000007000000442c37b1ac1414aa000003ffffffffff000000817f0000010000000464010101000000087f0000010000000701000000"], 0x78}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x14, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={&(0x7f0000000400), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x10000000007}, 0x0, 0xfff0000020000003, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x2, 0x3, 0x0, 0x7dd, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') close(r5) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x500e7e46a79bd6a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x400c044) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000440)={0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xf, 0x0, &(0x7f00000001c0)="e00500000007dbe9abc8d24470e712", 0x0, 0xcd34, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000120000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 0s ago: executing program 35 (id=676): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x2000040}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x511}}], 0x18}, 0x44014) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x890c, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, r2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)="c7d964d43b55ee085466b451412cfd5d80", 0x11}], 0x1}, 0xfc) sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f00000005c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 72.831679][ T5758] cgroup: Unknown subsys name 'net' [ 72.968792][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.344777][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.613722][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.652722][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.660425][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.673322][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.681061][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.693099][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.753637][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.761100][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.773524][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.793413][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.813059][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.820457][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.845979][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.853372][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.861050][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.868476][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.871610][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.878580][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.890033][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.900047][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.909095][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.917357][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.925515][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.938352][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.108808][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 76.289975][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.297217][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.305420][ T5770] bridge_slave_0: entered allmulticast mode [ 76.312862][ T5770] bridge_slave_0: entered promiscuous mode [ 76.321111][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.328399][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.335572][ T5770] bridge_slave_1: entered allmulticast mode [ 76.342179][ T5770] bridge_slave_1: entered promiscuous mode [ 76.381637][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.390925][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 76.417878][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.475042][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 76.497542][ T5770] team0: Port device team_slave_0 added [ 76.506676][ T5770] team0: Port device team_slave_1 added [ 76.599858][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.606960][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.632864][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.646265][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.653269][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.679314][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.692203][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.699817][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.707127][ T5774] bridge_slave_0: entered allmulticast mode [ 76.714371][ T5774] bridge_slave_0: entered promiscuous mode [ 76.721172][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.758236][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.765427][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.772515][ T5774] bridge_slave_1: entered allmulticast mode [ 76.779341][ T5774] bridge_slave_1: entered promiscuous mode [ 76.809271][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.818650][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.828525][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.835709][ T5775] bridge_slave_0: entered allmulticast mode [ 76.842326][ T5775] bridge_slave_0: entered promiscuous mode [ 76.868381][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.877942][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.886022][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.893410][ T5775] bridge_slave_1: entered allmulticast mode [ 76.900062][ T5775] bridge_slave_1: entered promiscuous mode [ 76.968909][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.982037][ T5770] hsr_slave_0: entered promiscuous mode [ 76.988532][ T5770] hsr_slave_1: entered promiscuous mode [ 77.009577][ T5774] team0: Port device team_slave_0 added [ 77.018063][ T5774] team0: Port device team_slave_1 added [ 77.025510][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.066236][ T5775] team0: Port device team_slave_0 added [ 77.099910][ T5775] team0: Port device team_slave_1 added [ 77.114228][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.121422][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.128767][ T5773] bridge_slave_0: entered allmulticast mode [ 77.135515][ T5773] bridge_slave_0: entered promiscuous mode [ 77.165060][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.172262][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.180721][ T5773] bridge_slave_1: entered allmulticast mode [ 77.188106][ T5773] bridge_slave_1: entered promiscuous mode [ 77.204757][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.211690][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.237633][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.288337][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.297569][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.323670][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.346875][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.353967][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.379882][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.392680][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.399633][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.425801][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.438899][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.451157][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.507636][ T5773] team0: Port device team_slave_0 added [ 77.518507][ T5773] team0: Port device team_slave_1 added [ 77.567540][ T5774] hsr_slave_0: entered promiscuous mode [ 77.574899][ T5774] hsr_slave_1: entered promiscuous mode [ 77.581229][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.589136][ T5774] Cannot create hsr debugfs directory [ 77.635024][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.641991][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.668343][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.684121][ T5775] hsr_slave_0: entered promiscuous mode [ 77.692933][ T5775] hsr_slave_1: entered promiscuous mode [ 77.698970][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.706746][ T5775] Cannot create hsr debugfs directory [ 77.723817][ T5087] Bluetooth: hci0: command tx timeout [ 77.737776][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.745377][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.771448][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.858837][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.886424][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.896752][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.939700][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.962331][ T5773] hsr_slave_0: entered promiscuous mode [ 77.968018][ T5087] Bluetooth: hci3: command tx timeout [ 77.974297][ T5087] Bluetooth: hci1: command tx timeout [ 77.976873][ T5773] hsr_slave_1: entered promiscuous mode [ 77.979834][ T5087] Bluetooth: hci2: command tx timeout [ 77.991034][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.999286][ T5773] Cannot create hsr debugfs directory [ 78.214464][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.225783][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.236644][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.246574][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.310409][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.332000][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.341267][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.360296][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.420940][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.431138][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.442185][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.463844][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.493414][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.569954][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.610953][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.618224][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.635248][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.642326][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.667695][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.705628][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.737116][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.769913][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.777040][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.790594][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.806955][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.835803][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.843000][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.861055][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.868215][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.904617][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.911760][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.942135][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.010012][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.017210][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.060242][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.067424][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.107422][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.244178][ T5770] veth0_vlan: entered promiscuous mode [ 79.295069][ T5770] veth1_vlan: entered promiscuous mode [ 79.371761][ T5770] veth0_macvtap: entered promiscuous mode [ 79.424269][ T5770] veth1_macvtap: entered promiscuous mode [ 79.471925][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.501249][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.517874][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.555823][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.571820][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.581967][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.590899][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.606770][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.645343][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.734797][ T5774] veth0_vlan: entered promiscuous mode [ 79.765978][ T5773] veth0_vlan: entered promiscuous mode [ 79.788745][ T5774] veth1_vlan: entered promiscuous mode [ 79.803156][ T5772] Bluetooth: hci0: command tx timeout [ 79.838202][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.847314][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.859148][ T5775] veth0_vlan: entered promiscuous mode [ 79.877845][ T5775] veth1_vlan: entered promiscuous mode [ 79.899945][ T5773] veth1_vlan: entered promiscuous mode [ 79.950774][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.960322][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.961897][ T5774] veth0_macvtap: entered promiscuous mode [ 80.002864][ T5774] veth1_macvtap: entered promiscuous mode [ 80.047862][ T5775] veth0_macvtap: entered promiscuous mode [ 80.053838][ T5772] Bluetooth: hci2: command tx timeout [ 80.055597][ T51] Bluetooth: hci3: command tx timeout [ 80.064660][ T5087] Bluetooth: hci1: command tx timeout [ 80.075320][ T5775] veth1_macvtap: entered promiscuous mode [ 80.096530][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.107930][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.119452][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.130749][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.146771][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.172976][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.206232][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.225815][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.239161][ T5773] veth0_macvtap: entered promiscuous mode [ 80.262595][ C0] hrtimer: interrupt took 42596 ns [ 80.281300][ T5773] veth1_macvtap: entered promiscuous mode [ 80.291184][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.303005][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.315756][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.323932][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.335387][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.346032][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.356797][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.376336][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.387775][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.396819][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.406233][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.416410][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.444917][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.457910][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.469546][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.486237][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.543644][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.555433][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.568092][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.578873][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.593859][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.605298][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.618799][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.650981][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.665699][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.676135][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.688507][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.698739][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.711120][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.729933][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.811963][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.825016][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.834777][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.853002][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.999207][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.008734][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.026760][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.036756][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.136274][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.168446][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.195096][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.204019][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.293253][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.301103][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.382153][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.448526][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.882671][ T51] Bluetooth: hci0: command tx timeout [ 81.952958][ T5842] syzkaller0: entered promiscuous mode [ 81.972648][ T5842] syzkaller0: entered allmulticast mode [ 82.123371][ T51] Bluetooth: hci3: command tx timeout [ 82.128996][ T5087] Bluetooth: hci1: command tx timeout [ 82.129050][ T5772] Bluetooth: hci2: command tx timeout [ 82.156428][ T5846] veth0_vlan: entered allmulticast mode [ 82.358977][ T5845] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.254964][ T5861] syz.3.9[5861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.267833][ T5861] syz.3.9[5861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.974465][ T5772] Bluetooth: hci0: command tx timeout [ 84.202915][ T5772] Bluetooth: hci2: command tx timeout [ 84.207007][ T51] Bluetooth: hci3: command tx timeout [ 84.213988][ T5087] Bluetooth: hci1: command tx timeout [ 84.541537][ T5859] netlink: 'syz.3.9': attribute type 12 has an invalid length. [ 84.565769][ T5862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.143525][ T5886] veth0_vlan: entered allmulticast mode [ 86.566774][ T5892] syzkaller0: entered promiscuous mode [ 86.608835][ T5892] syzkaller0: entered allmulticast mode [ 86.907316][ T972] cfg80211: failed to load regulatory.db [ 88.251236][ T5912] netlink: 'syz.2.25': attribute type 29 has an invalid length. [ 89.169907][ T5912] netlink: 'syz.2.25': attribute type 29 has an invalid length. [ 90.083190][ T5927] veth0_vlan: entered allmulticast mode [ 90.503944][ T5939] netlink: 'syz.0.35': attribute type 12 has an invalid length. [ 90.538777][ T5939] syz.0.35[5939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.539001][ T5939] syz.0.35[5939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.671065][ T5945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.817369][ T5950] syzkaller0: entered promiscuous mode [ 90.823185][ T5950] syzkaller0: entered allmulticast mode [ 92.853888][ T5975] netlink: 'syz.0.48': attribute type 29 has an invalid length. [ 93.638611][ T5975] netlink: 'syz.0.48': attribute type 29 has an invalid length. [ 93.894212][ T5989] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.49'. [ 93.941049][ T5989] openvswitch: netlink: Key type 29 is not supported [ 94.386684][ T6002] netlink: 'syz.3.54': attribute type 4 has an invalid length. [ 94.394931][ T6002] netlink: 152 bytes leftover after parsing attributes in process `syz.3.54'. [ 94.430850][ T6002] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 94.677984][ T6020] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.58'. [ 94.973152][ T6035] Zero length message leads to an empty skb [ 95.145766][ T6021] syzkaller0: entered promiscuous mode [ 95.152018][ T6021] syzkaller0: entered allmulticast mode [ 95.187418][ T6035] netlink: 176 bytes leftover after parsing attributes in process `syz.0.63'. [ 95.798040][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.806254][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.815404][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.823178][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.757233][ T6084] syzkaller0: entered promiscuous mode [ 96.762870][ T6084] syzkaller0: entered allmulticast mode [ 97.649938][ T6097] Driver unsupported XDP return value 0 on prog (id 77) dev N/A, expect packet loss! [ 97.845890][ T6105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.83'. [ 99.545963][ T6108] netlink: 'syz.0.83': attribute type 10 has an invalid length. [ 99.573301][ T6108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.589166][ T6108] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.602494][ T6111] netlink: 'syz.1.87': attribute type 25 has an invalid length. [ 99.615222][ T6111] netlink: 'syz.1.87': attribute type 9 has an invalid length. [ 99.640398][ T6113] netlink: 128 bytes leftover after parsing attributes in process `syz.1.87'. [ 99.695432][ T6113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.291979][ T6144] bridge0: port 3(ip6gretap0) entered blocking state [ 100.315776][ T6144] bridge0: port 3(ip6gretap0) entered disabled state [ 100.343813][ T6144] ip6gretap0: entered allmulticast mode [ 100.351086][ T6144] ip6gretap0: entered promiscuous mode [ 100.388561][ T6144] bridge0: port 3(ip6gretap0) entered blocking state [ 100.396056][ T6144] bridge0: port 3(ip6gretap0) entered forwarding state [ 100.410244][ T6149] ip6gretap0: left allmulticast mode [ 100.419506][ T6149] ip6gretap0: left promiscuous mode [ 100.429930][ T6149] bridge0: port 3(ip6gretap0) entered disabled state [ 100.595772][ T6152] netlink: 'syz.0.98': attribute type 9 has an invalid length. [ 100.672776][ T6152] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.98'. [ 101.470419][ T6169] sock: sock_set_timeout: `syz.1.102' (pid 6169) tries to set negative timeout [ 101.876157][ T6189] netlink: 'syz.3.103': attribute type 4 has an invalid length. [ 101.913791][ T6189] netlink: 152 bytes leftover after parsing attributes in process `syz.3.103'. [ 101.940692][ T6189] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 101.982196][ T6195] bridge_slave_1: left allmulticast mode [ 101.996892][ T6195] bridge_slave_1: left promiscuous mode [ 102.007208][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.078366][ T6195] bridge_slave_0: left allmulticast mode [ 102.084235][ T6195] bridge_slave_0: left promiscuous mode [ 102.090103][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.740993][ T6209] netlink: 'syz.1.109': attribute type 28 has an invalid length. [ 102.871462][ T6209] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 102.929815][ T6209] team0: Device veth1_vlan failed to register rx_handler [ 102.979775][ T6211] netlink: 'syz.3.110': attribute type 7 has an invalid length. [ 103.178894][ T6221] C: renamed from team_slave_0 (while UP) [ 103.203294][ T6221] netlink: 'syz.1.113': attribute type 3 has an invalid length. [ 103.224852][ T6221] netlink: 'syz.1.113': attribute type 1 has an invalid length. [ 103.237907][ T6221] netlink: 116 bytes leftover after parsing attributes in process `syz.1.113'. [ 103.901722][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.912208][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.925121][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.935102][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.007373][ T6227] bond0: (slave batadv0): Releasing backup interface [ 105.246980][ T6254] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.122'. [ 105.267541][ T5087] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 105.391683][ T6256] FAULT_INJECTION: forcing a failure. [ 105.391683][ T6256] name failslab, interval 1, probability 0, space 0, times 1 [ 105.443735][ T6256] CPU: 1 PID: 6256 Comm: syz.2.124 Not tainted syzkaller #0 [ 105.451067][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.461145][ T6256] Call Trace: [ 105.464443][ T6256] [ 105.467382][ T6256] dump_stack_lvl+0x18c/0x250 [ 105.472084][ T6256] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.478274][ T6256] ? show_regs_print_info+0x20/0x20 [ 105.483497][ T6256] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.489684][ T6256] ? dump_stack+0x9/0x20 [ 105.493966][ T6256] should_fail_ex+0x39d/0x4d0 [ 105.498684][ T6256] should_failslab+0x9/0x20 [ 105.503210][ T6256] slab_pre_alloc_hook+0x59/0x310 [ 105.508269][ T6256] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.514465][ T6256] ? kernfs_fop_write_iter+0x159/0x520 [ 105.519950][ T6256] ? kernfs_fop_write_iter+0x159/0x520 [ 105.525439][ T6256] __kmem_cache_alloc_node+0x53/0x250 [ 105.530846][ T6256] ? kernfs_fop_write_iter+0x159/0x520 [ 105.536336][ T6256] __kmalloc+0xa4/0x230 [ 105.540516][ T6256] ? __get_task_ioprio+0x136/0x260 [ 105.545650][ T6256] kernfs_fop_write_iter+0x159/0x520 [ 105.550971][ T6256] vfs_write+0x46c/0x990 [ 105.555246][ T6256] ? file_end_write+0x250/0x250 [ 105.560127][ T6256] ? __fget_files+0x43d/0x4b0 [ 105.564844][ T6256] ? __fdget_pos+0x2a3/0x330 [ 105.569455][ T6256] ? ksys_write+0x75/0x260 [ 105.573902][ T6256] ksys_write+0x150/0x260 [ 105.578261][ T6256] ? __ia32_sys_read+0x90/0x90 [ 105.583062][ T6256] ? syscall_enter_from_user_mode+0x2e/0x80 [ 105.588985][ T6256] do_syscall_64+0x55/0xb0 [ 105.593425][ T6256] ? clear_bhb_loop+0x40/0x90 [ 105.598121][ T6256] ? clear_bhb_loop+0x40/0x90 [ 105.602822][ T6256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.608734][ T6256] RIP: 0033:0x7f1572f9ce59 [ 105.613186][ T6256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.632810][ T6256] RSP: 002b:00007f1573e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.641240][ T6256] RAX: ffffffffffffffda RBX: 00007f1573215fa0 RCX: 00007f1572f9ce59 [ 105.649208][ T6256] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000a [ 105.657173][ T6256] RBP: 00007f1573e67090 R08: 0000000000000000 R09: 0000000000000000 [ 105.665138][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.673102][ T6256] R13: 00007f1573216038 R14: 00007f1573215fa0 R15: 00007ffe5c4e48c8 [ 105.681087][ T6256] [ 105.944077][ T6266] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.126'. [ 106.239706][ T6280] netlink: 'syz.0.128': attribute type 3 has an invalid length. [ 106.253128][ T6280] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 106.274890][ T6280] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.128'. [ 106.331892][ T6274] netlink: 'syz.2.129': attribute type 4 has an invalid length. [ 106.382938][ T6274] netlink: 152 bytes leftover after parsing attributes in process `syz.2.129'. [ 106.473096][ T6274] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 106.528076][ T6275] bridge_slave_1: left allmulticast mode [ 106.554285][ T6275] bridge_slave_1: left promiscuous mode [ 106.586144][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.636330][ T6275] bridge_slave_0: left allmulticast mode [ 106.672134][ T6275] bridge_slave_0: left promiscuous mode [ 106.703129][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.480997][ T6297] FAULT_INJECTION: forcing a failure. [ 107.480997][ T6297] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.521153][ T6297] CPU: 1 PID: 6297 Comm: syz.2.136 Not tainted syzkaller #0 [ 107.528490][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.538571][ T6297] Call Trace: [ 107.541862][ T6297] [ 107.544808][ T6297] dump_stack_lvl+0x18c/0x250 [ 107.549512][ T6297] ? show_regs_print_info+0x20/0x20 [ 107.554735][ T6297] ? load_image+0x420/0x420 [ 107.559257][ T6297] ? __might_fault+0xaa/0x120 [ 107.563952][ T6297] ? __lock_acquire+0x7d40/0x7d40 [ 107.568997][ T6297] should_fail_ex+0x39d/0x4d0 [ 107.573694][ T6297] _copy_from_iter+0x1d9/0x12e0 [ 107.578566][ T6297] ? __virt_addr_valid+0x18c/0x540 [ 107.583697][ T6297] ? __lock_acquire+0x7d40/0x7d40 [ 107.588734][ T6297] ? copyout_mc+0x70/0x70 [ 107.593062][ T6297] ? __virt_addr_valid+0x18c/0x540 [ 107.598166][ T6297] ? __virt_addr_valid+0x18c/0x540 [ 107.603270][ T6297] ? __virt_addr_valid+0x469/0x540 [ 107.608377][ T6297] ? __check_object_size+0x506/0xa20 [ 107.613657][ T6297] kernfs_fop_write_iter+0x1a4/0x520 [ 107.618941][ T6297] vfs_write+0x46c/0x990 [ 107.623184][ T6297] ? file_end_write+0x250/0x250 [ 107.628032][ T6297] ? __fget_files+0x43d/0x4b0 [ 107.632709][ T6297] ? __fdget_pos+0x2a3/0x330 [ 107.637289][ T6297] ? ksys_write+0x75/0x260 [ 107.641697][ T6297] ksys_write+0x150/0x260 [ 107.646024][ T6297] ? __ia32_sys_read+0x90/0x90 [ 107.650785][ T6297] ? lockdep_hardirqs_on+0x98/0x150 [ 107.655982][ T6297] do_syscall_64+0x55/0xb0 [ 107.660391][ T6297] ? clear_bhb_loop+0x40/0x90 [ 107.665058][ T6297] ? clear_bhb_loop+0x40/0x90 [ 107.669722][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.675609][ T6297] RIP: 0033:0x7f1572f9ce59 [ 107.680026][ T6297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.699625][ T6297] RSP: 002b:00007f1573e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.708028][ T6297] RAX: ffffffffffffffda RBX: 00007f1573215fa0 RCX: 00007f1572f9ce59 [ 107.715991][ T6297] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000a [ 107.723952][ T6297] RBP: 00007f1573e67090 R08: 0000000000000000 R09: 0000000000000000 [ 107.731910][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.739868][ T6297] R13: 00007f1573216038 R14: 00007f1573215fa0 R15: 00007ffe5c4e48c8 [ 107.747853][ T6297] [ 108.266705][ T6312] netlink: 'syz.3.139': attribute type 3 has an invalid length. [ 108.316654][ T6312] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 108.357616][ T6312] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.139'. [ 108.499771][ T6317] netlink: 'syz.2.142': attribute type 21 has an invalid length. [ 109.166285][ T6333] netlink: 'syz.0.145': attribute type 4 has an invalid length. [ 109.175465][ T6333] netlink: 152 bytes leftover after parsing attributes in process `syz.0.145'. [ 109.479405][ T6335] FAULT_INJECTION: forcing a failure. [ 109.479405][ T6335] name failslab, interval 1, probability 0, space 0, times 0 [ 109.506047][ T6333] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 109.533726][ T5087] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 109.565210][ T6337] bridge_slave_1: left allmulticast mode [ 109.571200][ T6335] CPU: 1 PID: 6335 Comm: syz.1.148 Not tainted syzkaller #0 [ 109.578509][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.588582][ T6335] Call Trace: [ 109.591882][ T6335] [ 109.594830][ T6335] dump_stack_lvl+0x18c/0x250 [ 109.599536][ T6335] ? show_regs_print_info+0x20/0x20 [ 109.604755][ T6335] ? load_image+0x420/0x420 [ 109.609281][ T6335] ? __might_sleep+0xe0/0xe0 [ 109.613900][ T6335] ? __lock_acquire+0x7d40/0x7d40 [ 109.618955][ T6335] should_fail_ex+0x39d/0x4d0 [ 109.623666][ T6335] should_failslab+0x9/0x20 [ 109.628191][ T6335] slab_pre_alloc_hook+0x59/0x310 [ 109.633240][ T6335] ? cpuset_write_resmask+0x1ff/0x2020 [ 109.638716][ T6335] ? cpuset_write_resmask+0x1ff/0x2020 [ 109.644193][ T6335] __kmem_cache_alloc_node+0x53/0x250 [ 109.649588][ T6335] ? cpuset_write_resmask+0x1ff/0x2020 [ 109.655062][ T6335] __kmalloc_node_track_caller+0xa2/0x230 [ 109.660815][ T6335] kmemdup+0x2b/0x70 [ 109.664736][ T6335] cpuset_write_resmask+0x1ff/0x2020 [ 109.670043][ T6335] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 109.675882][ T6335] ? mark_lock+0x94/0x320 [ 109.680235][ T6335] ? cpuset_common_seq_show+0x250/0x250 [ 109.685805][ T6335] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 109.691816][ T6335] ? lock_chain_count+0x20/0x20 [ 109.696694][ T6335] ? cpuset_common_seq_show+0x250/0x250 [ 109.702267][ T6335] cgroup_file_write+0x2c9/0x690 [ 109.702637][ T6337] bridge_slave_1: left promiscuous mode [ 109.707210][ T6335] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.718957][ T6335] ? cgroup_seqfile_stop+0xd0/0xd0 [ 109.724109][ T6335] ? cgroup_seqfile_stop+0xd0/0xd0 [ 109.729241][ T6335] kernfs_fop_write_iter+0x3b6/0x520 [ 109.734559][ T6335] vfs_write+0x46c/0x990 [ 109.738834][ T6335] ? file_end_write+0x250/0x250 [ 109.743716][ T6335] ? __fget_files+0x43d/0x4b0 [ 109.748429][ T6335] ? __fdget_pos+0x2a3/0x330 [ 109.753040][ T6335] ? ksys_write+0x75/0x260 [ 109.757486][ T6335] ksys_write+0x150/0x260 [ 109.761842][ T6335] ? __ia32_sys_read+0x90/0x90 [ 109.766632][ T6335] ? syscall_enter_from_user_mode+0x2e/0x80 [ 109.772555][ T6335] do_syscall_64+0x55/0xb0 [ 109.776993][ T6335] ? clear_bhb_loop+0x40/0x90 [ 109.781688][ T6335] ? clear_bhb_loop+0x40/0x90 [ 109.786386][ T6335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.792300][ T6335] RIP: 0033:0x7f91c899ce59 [ 109.796738][ T6335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.798531][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.816344][ T6335] RSP: 002b:00007f91c9897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.816369][ T6335] RAX: ffffffffffffffda RBX: 00007f91c8c15fa0 RCX: 00007f91c899ce59 [ 109.816380][ T6335] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000009 [ 109.816389][ T6335] RBP: 00007f91c9897090 R08: 0000000000000000 R09: 0000000000000000 [ 109.816400][ T6335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.816410][ T6335] R13: 00007f91c8c16038 R14: 00007f91c8c15fa0 R15: 00007fffef98b258 [ 109.816441][ T6335] [ 109.896101][ T6337] bridge_slave_0: left allmulticast mode [ 109.943834][ T6337] bridge_slave_0: left promiscuous mode [ 109.949689][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.341522][ T6357] netlink: 'syz.2.153': attribute type 3 has an invalid length. [ 110.396203][ T6357] netlink: 'syz.2.153': attribute type 1 has an invalid length. [ 110.424566][ T6357] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.153'. [ 111.413896][ T6379] FAULT_INJECTION: forcing a failure. [ 111.413896][ T6379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.554346][ T6379] CPU: 0 PID: 6379 Comm: syz.1.160 Not tainted syzkaller #0 [ 111.561690][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.571763][ T6379] Call Trace: [ 111.575059][ T6379] [ 111.578007][ T6379] dump_stack_lvl+0x18c/0x250 [ 111.582711][ T6379] ? show_regs_print_info+0x20/0x20 [ 111.587935][ T6379] ? load_image+0x420/0x420 [ 111.592459][ T6379] ? __lock_acquire+0x7d40/0x7d40 [ 111.597509][ T6379] ? snprintf+0xe9/0x140 [ 111.601778][ T6379] should_fail_ex+0x39d/0x4d0 [ 111.606485][ T6379] _copy_to_user+0x2f/0xa0 [ 111.610928][ T6379] simple_read_from_buffer+0xe7/0x150 [ 111.616342][ T6379] proc_fail_nth_read+0x1e8/0x260 [ 111.621390][ T6379] ? proc_fault_inject_write+0x360/0x360 [ 111.627029][ T6379] ? fsnotify_perm+0x271/0x5e0 [ 111.631793][ T6379] ? proc_fault_inject_write+0x360/0x360 [ 111.637430][ T6379] vfs_read+0x28b/0x970 [ 111.641593][ T6379] ? kernel_read+0x1e0/0x1e0 [ 111.646187][ T6379] ? __fget_files+0x28/0x4b0 [ 111.650785][ T6379] ? __fget_files+0x28/0x4b0 [ 111.655374][ T6379] ? __fget_files+0x43d/0x4b0 [ 111.660054][ T6379] ? __fdget_pos+0x2a3/0x330 [ 111.664639][ T6379] ? ksys_read+0x75/0x260 [ 111.668970][ T6379] ksys_read+0x150/0x260 [ 111.673213][ T6379] ? vfs_write+0x990/0x990 [ 111.677629][ T6379] ? lockdep_hardirqs_on+0x98/0x150 [ 111.682827][ T6379] do_syscall_64+0x55/0xb0 [ 111.687241][ T6379] ? clear_bhb_loop+0x40/0x90 [ 111.691906][ T6379] ? clear_bhb_loop+0x40/0x90 [ 111.696574][ T6379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.702463][ T6379] RIP: 0033:0x7f91c895d68e [ 111.706874][ T6379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.726470][ T6379] RSP: 002b:00007f91c9896fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.734874][ T6379] RAX: ffffffffffffffda RBX: 00007f91c98976c0 RCX: 00007f91c895d68e [ 111.742841][ T6379] RDX: 000000000000000f RSI: 00007f91c98970a0 RDI: 000000000000000b [ 111.750802][ T6379] RBP: 00007f91c9897090 R08: 0000000000000000 R09: 0000000000000000 [ 111.758764][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.766728][ T6379] R13: 00007f91c8c16038 R14: 00007f91c8c15fa0 R15: 00007fffef98b258 [ 111.774707][ T6379] [ 112.208379][ T6397] netlink: 'syz.0.166': attribute type 3 has an invalid length. [ 112.277252][ T6397] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 112.297590][ T6397] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.166'. [ 112.301547][ T6401] netlink: 'syz.3.168': attribute type 3 has an invalid length. [ 112.323549][ T6401] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.168'. [ 112.978834][ T6418] tc_dump_action: action bad kind [ 113.730509][ T6434] netlink: 'syz.2.179': attribute type 3 has an invalid length. [ 113.761634][ T6434] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 113.791278][ T6434] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.179'. [ 114.674517][ T6462] netlink: 14 bytes leftover after parsing attributes in process `syz.3.186'. [ 115.200679][ T6471] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.191'. [ 115.390332][ T6474] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.191'. [ 115.469416][ T6477] netlink: 'syz.0.192': attribute type 3 has an invalid length. [ 115.499332][ T6477] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 115.531502][ T6477] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.192'. [ 115.845769][ T6482] netlink: 'syz.3.193': attribute type 10 has an invalid length. [ 115.882849][ T6482] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.193'. [ 115.911960][ T6482] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 116.112747][ T6494] netlink: 'syz.1.199': attribute type 2 has an invalid length. [ 116.218829][ T6496] netlink: 14 bytes leftover after parsing attributes in process `syz.3.200'. [ 116.282707][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 116.377914][ T6500] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.201'. [ 117.055364][ T6504] netlink: 'syz.3.203': attribute type 3 has an invalid length. [ 117.074191][ T6504] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.203'. [ 117.391607][ T6513] validate_nla: 1 callbacks suppressed [ 117.391624][ T6513] netlink: 'syz.3.207': attribute type 4 has an invalid length. [ 117.419650][ T6513] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.207'. [ 117.643418][ T6522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.211'. [ 117.659016][ T6522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.211'. [ 117.676099][ T6523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.211'. [ 117.863072][ T6528] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.213'. [ 118.004608][ T6528] netlink: 'syz.3.213': attribute type 27 has an invalid length. [ 118.463428][ T6543] netlink: 'syz.1.215': attribute type 3 has an invalid length. [ 118.481320][ T6543] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 119.215807][ T6550] netlink: 'syz.0.218': attribute type 2 has an invalid length. [ 119.432485][ T6559] veth0_vlan: entered allmulticast mode [ 120.743379][ T6583] netlink: 'syz.1.227': attribute type 3 has an invalid length. [ 120.759577][ T6583] netlink: 'syz.1.227': attribute type 1 has an invalid length. [ 120.768893][ T6583] __nla_validate_parse: 3 callbacks suppressed [ 120.768906][ T6583] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.227'. [ 120.991910][ T6588] netlink: 14 bytes leftover after parsing attributes in process `syz.0.229'. [ 122.650912][ T6612] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.238'. [ 122.691379][ T6612] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 123.205724][ T6627] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 123.558624][ T6627] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.616548][ T6627] bond0: (slave team0): Enslaving as an active interface with an up link [ 126.109125][ T6688] netlink: 76 bytes leftover after parsing attributes in process `syz.1.257'. [ 127.007211][ T6701] netlink: 'syz.3.261': attribute type 3 has an invalid length. [ 127.093780][ T6701] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 127.227021][ T6701] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.261'. [ 127.274741][ T6710] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 127.327575][ T6710] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.264'. [ 129.637804][ T6741] netlink: 'syz.1.276': attribute type 3 has an invalid length. [ 129.650440][ T6741] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 129.664794][ T6741] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.276'. [ 129.685100][ T6743] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 130.928094][ T6756] netlink: 'syz.3.281': attribute type 10 has an invalid length. [ 130.986952][ T6756] team0: Device hsr_slave_0 failed to register rx_handler [ 131.016502][ T6761] netlink: 'syz.3.281': attribute type 9 has an invalid length. [ 131.056294][ T6761] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.281'. [ 131.268220][ T6758] pim6reg1: entered promiscuous mode [ 131.274623][ T6758] pim6reg1: entered allmulticast mode [ 131.728336][ T6778] netlink: 'syz.1.288': attribute type 3 has an invalid length. [ 131.779956][ T6778] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 131.814126][ T6778] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.288'. [ 131.956047][ T5087] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 132.376953][ T6803] netlink: 'syz.2.295': attribute type 3 has an invalid length. [ 132.403735][ T6803] netlink: 152 bytes leftover after parsing attributes in process `syz.2.295'. [ 132.424200][ T6804] netlink: 'syz.2.295': attribute type 12 has an invalid length. [ 132.445955][ T6804] netlink: 112 bytes leftover after parsing attributes in process `syz.2.295'. [ 132.497510][ T6808] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 132.517442][ T6808] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.297'. [ 132.933986][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940973][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.991879][ T6820] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.302'. [ 133.517982][ T6838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.306'. [ 133.546510][ T6838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.306'. [ 133.559738][ T6838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.306'. [ 133.573612][ T6838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.306'. [ 133.788114][ T6853] netlink: 132 bytes leftover after parsing attributes in process `syz.0.312'. [ 133.962920][ T5087] Bluetooth: hci2: command tx timeout [ 133.975244][ T6865] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.025837][ T6863] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 134.058427][ T6863] syzkaller0: entered promiscuous mode [ 134.070773][ T6863] syzkaller0: entered allmulticast mode [ 135.459052][ T6885] validate_nla: 6 callbacks suppressed [ 135.459067][ T6885] netlink: 'syz.3.319': attribute type 9 has an invalid length. [ 135.575410][ T6885] netlink: 'syz.3.319': attribute type 9 has an invalid length. [ 135.661044][ T6890] netlink: 'syz.2.321': attribute type 10 has an invalid length. [ 135.745623][ T6890] team0: Device wg1 is of different type [ 136.432089][ T6912] netlink: 'syz.3.328': attribute type 12 has an invalid length. [ 136.513236][ T6889] delete_channel: no stack [ 137.202978][ T6942] __nla_validate_parse: 6 callbacks suppressed [ 137.202994][ T6942] netlink: 14 bytes leftover after parsing attributes in process `syz.3.337'. [ 137.245850][ T6942] veth0_macvtap: left promiscuous mode [ 137.657674][ T6954] netlink: 'syz.2.340': attribute type 2 has an invalid length. [ 137.674113][ T6954] netlink: 'syz.2.340': attribute type 4 has an invalid length. [ 137.692768][ T6954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.340'. [ 138.876433][ T6994] netlink: 'syz.1.353': attribute type 2 has an invalid length. [ 138.996541][ T6997] veth1_macvtap: entered allmulticast mode [ 139.367048][ T7010] FAULT_INJECTION: forcing a failure. [ 139.367048][ T7010] name failslab, interval 1, probability 0, space 0, times 0 [ 139.384762][ T7010] CPU: 0 PID: 7010 Comm: syz.3.360 Not tainted syzkaller #0 [ 139.392089][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.402158][ T7010] Call Trace: [ 139.405452][ T7010] [ 139.408398][ T7010] dump_stack_lvl+0x18c/0x250 [ 139.413098][ T7010] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.419275][ T7010] ? show_regs_print_info+0x20/0x20 [ 139.424488][ T7010] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.430674][ T7010] should_fail_ex+0x39d/0x4d0 [ 139.435381][ T7010] should_failslab+0x9/0x20 [ 139.439905][ T7010] slab_pre_alloc_hook+0x59/0x310 [ 139.444956][ T7010] kmem_cache_alloc_node+0x60/0x320 [ 139.450180][ T7010] ? __alloc_skb+0x103/0x2c0 [ 139.454793][ T7010] __alloc_skb+0x103/0x2c0 [ 139.459228][ T7010] tipc_msg_build+0x161/0xee0 [ 139.463935][ T7010] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 139.470025][ T7010] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 139.476045][ T7010] __tipc_sendstream+0x8a9/0x1270 [ 139.481122][ T7010] ? tsk_advance_rx_queue+0x310/0x310 [ 139.486510][ T7010] ? __local_bh_enable_ip+0x142/0x1c0 [ 139.491893][ T7010] ? wait_woken+0x180/0x180 [ 139.496418][ T7010] ? _local_bh_enable+0xa0/0xa0 [ 139.501288][ T7010] tipc_sendstream+0x55/0x70 [ 139.505896][ T7010] sock_write_iter+0x2df/0x420 [ 139.510686][ T7010] ? sock_read_iter+0x3e0/0x3e0 [ 139.515568][ T7010] ? common_file_perm+0x198/0x1f0 [ 139.521054][ T7010] vfs_write+0x46c/0x990 [ 139.525318][ T7010] ? file_end_write+0x250/0x250 [ 139.530191][ T7010] ? __fget_files+0x43d/0x4b0 [ 139.534894][ T7010] ? __fdget_pos+0x1d8/0x330 [ 139.539505][ T7010] ? ksys_write+0x75/0x260 [ 139.543950][ T7010] ksys_write+0x150/0x260 [ 139.548298][ T7010] ? __ia32_sys_read+0x90/0x90 [ 139.553086][ T7010] ? __x64_sys_write+0xa/0x90 [ 139.557791][ T7010] do_syscall_64+0x55/0xb0 [ 139.562217][ T7010] ? clear_bhb_loop+0x40/0x90 [ 139.566901][ T7010] ? clear_bhb_loop+0x40/0x90 [ 139.571591][ T7010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.577500][ T7010] RIP: 0033:0x7fb32f79ce59 [ 139.581930][ T7010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.601545][ T7010] RSP: 002b:00007fb330654028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.609971][ T7010] RAX: ffffffffffffffda RBX: 00007fb32fa15fa0 RCX: 00007fb32f79ce59 [ 139.617952][ T7010] RDX: 00000000fffffeff RSI: 00002000000005c0 RDI: 0000000000000003 [ 139.625938][ T7010] RBP: 00007fb330654090 R08: 0000000000000000 R09: 0000000000000000 [ 139.633922][ T7010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.641899][ T7010] R13: 00007fb32fa16038 R14: 00007fb32fa15fa0 R15: 00007ffc833351d8 [ 139.649904][ T7010] [ 139.807759][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 140.591499][ T7041] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.370'. [ 140.703331][ T7053] syz.3.368 uses obsolete (PF_INET,SOCK_PACKET) [ 141.107356][ T7067] netlink: 'syz.1.376': attribute type 21 has an invalid length. [ 141.117069][ T7067] netlink: 128 bytes leftover after parsing attributes in process `syz.1.376'. [ 141.127043][ T7067] netlink: 'syz.1.376': attribute type 5 has an invalid length. [ 141.135400][ T7067] netlink: 3 bytes leftover after parsing attributes in process `syz.1.376'. [ 141.222748][ T7074] netlink: 'syz.0.378': attribute type 41 has an invalid length. [ 141.322283][ T7082] netlink: 'syz.0.380': attribute type 153 has an invalid length. [ 141.332319][ T7082] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.380'. [ 141.682719][ T7094] netlink: 'syz.3.384': attribute type 39 has an invalid length. [ 143.719995][ T7134] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.400'. [ 143.753756][ T7136] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 143.761450][ T7136] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.401'. [ 143.772828][ T7136] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 144.298570][ T7153] netlink: 76 bytes leftover after parsing attributes in process `syz.2.406'. [ 145.528260][ T7167] netlink: 'syz.2.411': attribute type 21 has an invalid length. [ 145.539160][ T7167] netlink: 156 bytes leftover after parsing attributes in process `syz.2.411'. [ 145.837133][ T7185] netlink: 'syz.0.417': attribute type 29 has an invalid length. [ 145.870372][ T7185] netlink: 'syz.0.417': attribute type 29 has an invalid length. [ 146.166081][ T7196] netlink: 'syz.0.420': attribute type 9 has an invalid length. [ 146.574547][ T7205] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 146.673511][ T7205] netlink: 156 bytes leftover after parsing attributes in process `syz.2.422'. [ 147.685551][ T7219] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.426'. [ 151.757942][ T5087] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 151.932733][ T7247] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 151.961451][ T7249] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.436'. [ 152.451185][ T7257] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.437'. [ 152.525604][ T7257] netlink: 22828 bytes leftover after parsing attributes in process `syz.3.437'. [ 153.147065][ T7268] netlink: 'syz.3.442': attribute type 29 has an invalid length. [ 153.189069][ T7268] netlink: 'syz.3.442': attribute type 29 has an invalid length. [ 153.208904][ T7266] netlink: 'syz.0.441': attribute type 10 has an invalid length. [ 153.222080][ T7266] netlink: 156 bytes leftover after parsing attributes in process `syz.0.441'. [ 153.341932][ T7268] netlink: 'syz.3.442': attribute type 29 has an invalid length. [ 153.382961][ T7269] netlink: 'syz.3.442': attribute type 29 has an invalid length. [ 153.734059][ T7283] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.446'. [ 153.920447][ T7287] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 153.957376][ T7287] veth0_vlan: left allmulticast mode [ 153.981010][ T7287] veth0_vlan: left promiscuous mode [ 154.010788][ T7287] veth0_vlan: entered promiscuous mode [ 154.044853][ T7287] team0: Device veth0_vlan failed to register rx_handler [ 154.894862][ T7302] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.453'. [ 155.232016][ T7303] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 155.273744][ T7303] netlink: 'syz.3.453': attribute type 29 has an invalid length. [ 155.639333][ T7315] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 155.657739][ T7315] syzkaller1: linktype set to 769 [ 158.838017][ T7322] netlink: 64 bytes leftover after parsing attributes in process `syz.2.458'. [ 158.896415][ T7332] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.458'. [ 158.906897][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 159.007281][ T7342] netlink: 'syz.3.462': attribute type 27 has an invalid length. [ 159.405388][ T7358] netlink: 'syz.2.466': attribute type 3 has an invalid length. [ 159.415347][ T7358] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.466'. [ 159.697875][ T7368] netlink: 'syz.2.469': attribute type 3 has an invalid length. [ 159.716633][ T7368] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 159.738748][ T7368] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.469'. [ 159.810657][ T7373] veth0_vlan: entered allmulticast mode [ 160.608084][ T7406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.941697][ T7414] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.483'. [ 160.962763][ T7414] bridge_slave_1: default FDB implementation only supports local addresses [ 160.978447][ T7413] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.483'. [ 161.021658][ T7413] bridge_slave_1: default FDB implementation only supports local addresses [ 161.786875][ T7445] netlink: 'syz.3.493': attribute type 15 has an invalid length. [ 161.807076][ T7445] netlink: 'syz.3.493': attribute type 7 has an invalid length. [ 162.843068][ T7485] netlink: 'syz.1.506': attribute type 21 has an invalid length. [ 163.095634][ T7494] netlink: 'syz.3.510': attribute type 4 has an invalid length. [ 163.129060][ T7494] netlink: 152 bytes leftover after parsing attributes in process `syz.3.510'. [ 163.691199][ T7521] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 163.734913][ T7521] team0: Device wg1 is of different type [ 163.793373][ T7526] netlink: 10 bytes leftover after parsing attributes in process `syz.2.519'. [ 164.418950][ T7534] netlink: 152 bytes leftover after parsing attributes in process `syz.0.521'. [ 164.611163][ T7534] netlink: 'syz.0.521': attribute type 2 has an invalid length. [ 164.640494][ T7534] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 164.683683][ T7534] netlink: 9 bytes leftover after parsing attributes in process `syz.0.521'. [ 165.166576][ T7571] netlink: 'syz.0.532': attribute type 10 has an invalid length. [ 165.174837][ T7571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.532'. [ 165.216631][ T7571] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 166.172312][ T7602] netlink: 'syz.3.543': attribute type 2 has an invalid length. [ 166.253653][ T7602] netlink: 14 bytes leftover after parsing attributes in process `syz.3.543'. [ 166.471921][ T7608] netlink: 'syz.2.544': attribute type 10 has an invalid length. [ 166.493732][ T7608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.544'. [ 166.533053][ T7608] batman_adv: batadv0: Adding interface: virt_wifi0 [ 166.552364][ T7608] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.592898][ T7608] batman_adv: batadv0: Interface activated: virt_wifi0 [ 166.646737][ T7613] netlink: 'syz.0.546': attribute type 10 has an invalid length. [ 166.657193][ T7613] netlink: 144 bytes leftover after parsing attributes in process `syz.0.546'. [ 166.847145][ T7613] bond0: (slave team0): Releasing backup interface [ 166.905563][ T7613] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 166.987560][ T7626] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.549'. [ 167.215069][ T7634] netlink: 'syz.2.551': attribute type 3 has an invalid length. [ 167.241551][ T7634] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 167.270651][ T7634] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.551'. [ 167.669524][ T7641] netlink: 'syz.0.557': attribute type 39 has an invalid length. [ 167.745198][ T7639] netlink: 'syz.2.556': attribute type 2 has an invalid length. [ 167.769262][ T7639] netlink: 14 bytes leftover after parsing attributes in process `syz.2.556'. [ 168.276268][ T7652] netlink: 64 bytes leftover after parsing attributes in process `syz.0.560'. [ 169.811283][ T7697] validate_nla: 8 callbacks suppressed [ 169.811301][ T7697] netlink: 'syz.2.575': attribute type 3 has an invalid length. [ 169.835685][ T7697] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 169.848060][ T7697] __nla_validate_parse: 4 callbacks suppressed [ 169.848076][ T7697] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.575'. [ 169.954690][ T7699] netlink: 'syz.0.576': attribute type 2 has an invalid length. [ 169.992987][ T7699] netlink: 14 bytes leftover after parsing attributes in process `syz.0.576'. [ 170.114579][ T7702] netlink: 'syz.2.578': attribute type 28 has an invalid length. [ 170.133184][ T7702] netlink: 'syz.2.578': attribute type 29 has an invalid length. [ 170.154352][ T7702] netlink: 132 bytes leftover after parsing attributes in process `syz.2.578'. [ 170.384367][ T7710] netlink: 64 bytes leftover after parsing attributes in process `syz.0.580'. [ 171.855208][ T7726] netlink: 'syz.2.586': attribute type 3 has an invalid length. [ 171.872702][ T7726] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 171.890541][ T7726] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.586'. [ 172.082692][ T7738] netlink: 64 bytes leftover after parsing attributes in process `syz.2.590'. [ 173.311761][ T7755] netlink: 'syz.0.598': attribute type 3 has an invalid length. [ 173.329565][ T7755] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 173.379335][ T7760] netlink: 'syz.3.597': attribute type 10 has an invalid length. [ 173.384176][ T7755] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.598'. [ 173.476324][ T7760] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 173.479811][ T7761] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.599'. [ 173.793824][ T7766] netlink: 64 bytes leftover after parsing attributes in process `syz.0.600'. [ 173.999580][ T7771] netlink: 14 bytes leftover after parsing attributes in process `syz.0.602'. [ 175.056896][ T7786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.605'. [ 175.222282][ T7793] netlink: 'syz.2.608': attribute type 3 has an invalid length. [ 175.241688][ T7793] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 175.265783][ T7793] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.608'. [ 178.174616][ T7798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.182232][ T7798] IPv6: NLM_F_CREATE should be set when creating new route [ 178.189571][ T7798] IPv6: NLM_F_CREATE should be set when creating new route [ 178.196851][ T7798] IPv6: NLM_F_CREATE should be set when creating new route [ 178.339139][ T7806] netlink: 64 bytes leftover after parsing attributes in process `syz.2.610'. [ 178.491565][ T7815] netlink: 'syz.2.614': attribute type 2 has an invalid length. [ 178.507139][ T7815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.614'. [ 178.537435][ T7819] netlink: 'syz.0.615': attribute type 2 has an invalid length. [ 178.549474][ T7819] netlink: 'syz.0.615': attribute type 3 has an invalid length. [ 178.558878][ T7819] netlink: 132 bytes leftover after parsing attributes in process `syz.0.615'. [ 178.583730][ T7813] netlink: 'syz.1.613': attribute type 28 has an invalid length. [ 178.623838][ T7813] netlink: 'syz.1.613': attribute type 29 has an invalid length. [ 178.659517][ T7813] netlink: 132 bytes leftover after parsing attributes in process `syz.1.613'. [ 178.956910][ T7830] netlink: 'syz.2.618': attribute type 3 has an invalid length. [ 178.973566][ T7830] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 178.994572][ T7830] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.618'. [ 179.244669][ T7837] macsec0: entered promiscuous mode [ 179.250343][ T7837] macsec0: entered allmulticast mode [ 179.272627][ T7837] veth1_macvtap: entered allmulticast mode [ 179.279060][ T7833] netlink: 152 bytes leftover after parsing attributes in process `syz.1.619'. [ 179.289288][ T7833] netlink: 6 bytes leftover after parsing attributes in process `syz.1.619'. [ 179.477007][ T7839] netlink: 64 bytes leftover after parsing attributes in process `syz.1.621'. [ 179.525217][ T7841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.532805][ T7841] IPv6: NLM_F_CREATE should be set when creating new route [ 179.540457][ T7841] IPv6: NLM_F_CREATE should be set when creating new route [ 179.548116][ T7841] IPv6: NLM_F_CREATE should be set when creating new route [ 180.127147][ T7848] netlink: 'syz.0.624': attribute type 2 has an invalid length. [ 180.166206][ T7848] __nla_validate_parse: 2 callbacks suppressed [ 180.166221][ T7848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.624'. [ 180.474257][ T7862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.630'. [ 180.492102][ T7862] bridge_slave_0: entered allmulticast mode [ 180.560046][ T7863] validate_nla: 1 callbacks suppressed [ 180.560062][ T7863] netlink: 'syz.1.629': attribute type 3 has an invalid length. [ 180.583881][ T7863] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 180.611285][ T7863] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.629'. [ 180.730217][ T7873] netlink: 'syz.3.632': attribute type 21 has an invalid length. [ 180.773038][ T7873] netlink: 132 bytes leftover after parsing attributes in process `syz.3.632'. [ 180.816042][ T7873] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.632'. [ 180.856505][ T7876] netlink: 64 bytes leftover after parsing attributes in process `syz.2.633'. [ 181.039335][ T7876] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.633'. [ 181.105105][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 181.175305][ T7877] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 181.197029][ T7877] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.631'. [ 182.070907][ T7902] netlink: 'syz.2.643': attribute type 2 has an invalid length. [ 182.109564][ T7902] netlink: 14 bytes leftover after parsing attributes in process `syz.2.643'. [ 182.912919][ T7935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.920530][ T7935] IPv6: NLM_F_CREATE should be set when creating new route [ 182.928523][ T7935] IPv6: NLM_F_CREATE should be set when creating new route [ 182.936210][ T7935] IPv6: NLM_F_CREATE should be set when creating new route [ 183.427072][ T7941] netlink: 'syz.0.655': attribute type 2 has an invalid length. [ 183.485114][ T7942] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 183.713617][ T7946] netlink: 'syz.1.657': attribute type 2 has an invalid length. [ 183.783951][ T7946] FAULT_INJECTION: forcing a failure. [ 183.783951][ T7946] name failslab, interval 1, probability 0, space 0, times 0 [ 183.813475][ T7946] CPU: 0 PID: 7946 Comm: syz.1.657 Not tainted syzkaller #0 [ 183.820825][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.830923][ T7946] Call Trace: [ 183.834242][ T7946] [ 183.837213][ T7946] dump_stack_lvl+0x18c/0x250 [ 183.841953][ T7946] ? show_regs_print_info+0x20/0x20 [ 183.847197][ T7946] ? load_image+0x420/0x420 [ 183.851748][ T7946] ? __might_sleep+0xe0/0xe0 [ 183.856379][ T7946] ? __lock_acquire+0x7d40/0x7d40 [ 183.861473][ T7946] should_fail_ex+0x39d/0x4d0 [ 183.866215][ T7946] should_failslab+0x9/0x20 [ 183.870758][ T7946] slab_pre_alloc_hook+0x59/0x310 [ 183.875829][ T7946] ? __lock_acquire+0x7d40/0x7d40 [ 183.880895][ T7946] ? trace_contention_end+0x39/0xe0 [ 183.886131][ T7946] ? nf_nat_masq_schedule+0x246/0x560 [ 183.891550][ T7946] __kmem_cache_alloc_node+0x53/0x250 [ 183.896980][ T7946] ? nf_nat_masq_schedule+0x246/0x560 [ 183.902397][ T7946] kmalloc_trace+0x2a/0xe0 [ 183.906866][ T7946] nf_nat_masq_schedule+0x246/0x560 [ 183.912103][ T7946] ? mutex_unlock+0x10/0x10 [ 183.916653][ T7946] ? nf_nat_masq_schedule+0x560/0x560 [ 183.922071][ T7946] ? masq_device_event+0xd0/0xd0 [ 183.927047][ T7946] ? nfqnl_rcv_dev_event+0xb1/0x800 [ 183.932275][ T7946] masq_device_event+0xa2/0xd0 [ 183.937058][ T7946] notifier_call_chain+0x197/0x380 [ 183.942201][ T7946] dev_close_many+0x2a9/0x410 [ 183.946907][ T7946] ? __dev_open+0x430/0x430 [ 183.951445][ T7946] unregister_netdevice_many_notify+0x4c4/0x1900 [ 183.957786][ T7946] ? __nla_validate+0x50/0x50 [ 183.962477][ T7946] ? perf_trace_lock+0x198/0x3b0 [ 183.967447][ T7946] ? mark_lock+0x94/0x320 [ 183.971786][ T7946] ? unregister_netdevice_many+0x20/0x20 [ 183.977444][ T7946] ? unregister_netdevice_queue+0x1ae/0x370 [ 183.983356][ T7946] ? list_netdevice+0x730/0x730 [ 183.988226][ T7946] ? __nla_parse+0x40/0x50 [ 183.992655][ T7946] ? list_netdevice+0x730/0x730 [ 183.997517][ T7946] rtnl_dellink+0x500/0x7c0 [ 184.002051][ T7946] ? rtnl_newlink+0x20a0/0x20a0 [ 184.006914][ T7946] ? trace_call_bpf+0xc3/0x6c0 [ 184.011692][ T7946] ? trace_call_bpf+0x5e9/0x6c0 [ 184.016556][ T7946] ? trace_call_bpf+0xc3/0x6c0 [ 184.021347][ T7946] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 184.027544][ T7946] ? mutex_lock_nested+0x20/0x20 [ 184.032546][ T7946] ? rtnl_newlink+0x20a0/0x20a0 [ 184.037415][ T7946] rtnetlink_rcv_msg+0x869/0xfa0 [ 184.042365][ T7946] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 184.047510][ T7946] ? rtnetlink_bind+0x80/0x80 [ 184.052203][ T7946] ? trace_call_bpf+0xc3/0x6c0 [ 184.057005][ T7946] ? trace_call_bpf+0xc3/0x6c0 [ 184.061792][ T7946] ? __lock_acquire+0x7d40/0x7d40 [ 184.066823][ T7946] ? __local_bh_enable_ip+0x13a/0x1c0 [ 184.072221][ T7946] ? trace_call_bpf+0xc3/0x6c0 [ 184.076999][ T7946] ? trace_call_bpf+0xc3/0x6c0 [ 184.081789][ T7946] ? trace_call_bpf+0x5e9/0x6c0 [ 184.086650][ T7946] ? __dev_queue_xmit+0x265/0x3660 [ 184.091772][ T7946] ? trace_call_bpf+0xc3/0x6c0 [ 184.096555][ T7946] ? __dev_queue_xmit+0x1b2c/0x3660 [ 184.101773][ T7946] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 184.107877][ T7946] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 184.113703][ T7946] ? perf_trace_lock+0x304/0x3b0 [ 184.118679][ T7946] netlink_rcv_skb+0x241/0x4d0 [ 184.123464][ T7946] ? rtnetlink_bind+0x80/0x80 [ 184.128157][ T7946] ? netlink_ack+0x1180/0x1180 [ 184.132958][ T7946] ? __lock_acquire+0x7d40/0x7d40 [ 184.138034][ T7946] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.143271][ T7946] netlink_unicast+0x751/0x8d0 [ 184.148074][ T7946] netlink_sendmsg+0x8d0/0xbf0 [ 184.152858][ T7946] ? perf_trace_lock+0x304/0x3b0 [ 184.157827][ T7946] ? netlink_getsockopt+0x590/0x590 [ 184.163044][ T7946] ? aa_sock_msg_perm+0x94/0x150 [ 184.167997][ T7946] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 184.173295][ T7946] ? security_socket_sendmsg+0x80/0xa0 [ 184.178759][ T7946] ? netlink_getsockopt+0x590/0x590 [ 184.183970][ T7946] ____sys_sendmsg+0x5ba/0x960 [ 184.188763][ T7946] ? __asan_memset+0x22/0x40 [ 184.193367][ T7946] ? __sys_sendmsg_sock+0x30/0x30 [ 184.198399][ T7946] ? __import_iovec+0x5f2/0x850 [ 184.203277][ T7946] ? import_iovec+0x73/0xa0 [ 184.207800][ T7946] ___sys_sendmsg+0x2a6/0x360 [ 184.212510][ T7946] ? __sys_sendmsg+0x2a0/0x2a0 [ 184.217341][ T7946] ? __lock_acquire+0x7d40/0x7d40 [ 184.222430][ T7946] __se_sys_sendmsg+0x1c2/0x2b0 [ 184.227303][ T7946] ? __x64_sys_sendmsg+0x80/0x80 [ 184.232288][ T7946] ? lockdep_hardirqs_on+0x98/0x150 [ 184.237509][ T7946] do_syscall_64+0x55/0xb0 [ 184.241935][ T7946] ? clear_bhb_loop+0x40/0x90 [ 184.246619][ T7946] ? clear_bhb_loop+0x40/0x90 [ 184.251304][ T7946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.257211][ T7946] RIP: 0033:0x7f91c899ce59 [ 184.261633][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.281249][ T7946] RSP: 002b:00007f91c9897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.289675][ T7946] RAX: ffffffffffffffda RBX: 00007f91c8c15fa0 RCX: 00007f91c899ce59 [ 184.297685][ T7946] RDX: 0000000004040004 RSI: 00002000000001c0 RDI: 000000000000000b [ 184.305665][ T7946] RBP: 00007f91c9897090 R08: 0000000000000000 R09: 0000000000000000 [ 184.313642][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.321619][ T7946] R13: 00007f91c8c16038 R14: 00007f91c8c15fa0 R15: 00007fffef98b258 [ 184.329636][ T7946] [ 184.533432][ T7954] ªªªªªª: renamed from vlan0 [ 184.938976][ T7964] netlink: 'syz.1.663': attribute type 3 has an invalid length. [ 184.957361][ T7964] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 185.217100][ T7976] __nla_validate_parse: 7 callbacks suppressed [ 185.217116][ T7976] netlink: 14 bytes leftover after parsing attributes in process `syz.1.667'. [ 185.284924][ T7973] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.665'. [ 202.756777][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 203.741887][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.753604][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.761465][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.772390][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.780457][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 203.790674][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.023606][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.032131][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.047303][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.058357][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.076451][ T5783] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 204.083850][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.280485][ T5777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 204.289436][ T5777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 204.300312][ T5777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 204.324609][ T5777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 204.332334][ T5777] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 204.340062][ T5777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 204.866470][ T7986] chnl_net:caif_netlink_parms(): no params data found [ 205.112643][ T7990] chnl_net:caif_netlink_parms(): no params data found [ 205.369826][ T5781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 205.382974][ T5781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 205.391236][ T5781] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 205.399991][ T5781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 205.407708][ T5781] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 205.417467][ T5781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 205.462142][ T7993] chnl_net:caif_netlink_parms(): no params data found [ 205.480279][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.489781][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.500875][ T7986] bridge_slave_0: entered allmulticast mode [ 205.509776][ T7986] bridge_slave_0: entered promiscuous mode [ 205.590469][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.604490][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.611706][ T7986] bridge_slave_1: entered allmulticast mode [ 205.623391][ T7986] bridge_slave_1: entered promiscuous mode [ 205.760487][ T7986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.779045][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.789894][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.803391][ T7990] bridge_slave_0: entered allmulticast mode [ 205.810802][ T7990] bridge_slave_0: entered promiscuous mode [ 205.841582][ T7986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.859467][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.867190][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.881555][ T7990] bridge_slave_1: entered allmulticast mode [ 205.896912][ T7990] bridge_slave_1: entered promiscuous mode [ 206.020299][ T7986] team0: Port device team_slave_0 added [ 206.055925][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.070526][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.078780][ T7993] bridge_slave_0: entered allmulticast mode [ 206.092886][ T7993] bridge_slave_0: entered promiscuous mode [ 206.109706][ T7986] team0: Port device team_slave_1 added [ 206.121508][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.145905][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.160970][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.168460][ T7993] bridge_slave_1: entered allmulticast mode [ 206.182370][ T7993] bridge_slave_1: entered promiscuous mode [ 206.231438][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.336510][ T7986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.351564][ T7986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.382531][ T7986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.418927][ T7993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.436933][ T7986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.447869][ T7986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.482108][ T7986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.515974][ T7990] team0: Port device team_slave_0 added [ 206.544148][ T7993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.577459][ T7990] team0: Port device team_slave_1 added [ 229.226891][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.239995][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 233.268801][ T8018] Bluetooth: hci0: command 0x0406 tx timeout [ 233.279829][ T8018] Bluetooth: hci2: command 0x0406 tx timeout [ 233.292316][ T8018] Bluetooth: hci1: command 0x0406 tx timeout [ 264.395401][ T8017] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 264.423259][ T8017] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 264.431672][ T8017] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 264.440096][ T8017] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 264.448711][ T8017] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 264.460674][ T8017] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 264.658120][ T8035] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 264.667513][ T8035] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 264.675755][ T8035] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 264.683916][ T8035] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 264.692031][ T8035] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 264.699503][ T8035] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 264.823129][ T8039] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 264.832566][ T8039] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 264.840707][ T8039] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 264.849013][ T8039] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 264.857230][ T8039] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 264.864728][ T8039] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 265.330489][ T8041] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 265.350009][ T8041] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 265.361020][ T8041] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 265.376992][ T8041] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 265.390359][ T8041] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 265.400557][ T8041] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 291.648760][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.655283][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.124457][ T8049] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 325.151147][ T8049] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 325.159163][ T8049] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 325.176959][ T8049] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 325.185100][ T8049] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 325.192906][ T8049] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 325.337490][ T8054] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 325.346650][ T8054] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 325.355330][ T8054] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 325.363772][ T8054] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 325.372057][ T8054] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 325.379952][ T8054] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 325.531502][ T8056] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 325.540661][ T8056] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 325.549375][ T8056] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 325.558177][ T8056] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 325.566602][ T8056] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 325.574140][ T8056] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 326.077118][ T8059] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 326.088869][ T8059] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 326.102991][ T8059] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 326.111174][ T8059] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 326.119523][ T8059] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 326.133016][ T8059] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 339.011986][ T29] INFO: task syz.0.624:7852 blocked for more than 143 seconds. [ 339.025952][ T29] Not tainted syzkaller #0 [ 339.030916][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.052624][ T29] task:syz.0.624 state:D stack:22280 pid:7852 ppid:5774 flags:0x00004002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 339.061892][ T29] Call Trace: [ 339.110836][ T29] [ 339.129607][ T29] __schedule+0x1553/0x45a0 [ 339.140188][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 339.168452][ T29] ? asan.module_dtor+0x20/0x20 [ 339.188737][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 339.205603][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 339.211117][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 339.256260][ T29] schedule+0xbd/0x170 [ 339.260400][ T29] schedule_preempt_disabled+0x13/0x20 [ 339.288583][ T29] __mutex_lock+0x6a9/0xcc0 [ 339.293525][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 339.298234][ T29] ? perf_event_detach_bpf_prog+0x8b/0x310 [ 339.326040][ T29] ? mutex_lock_nested+0x20/0x20 [ 339.331033][ T29] ? rcu_is_watching+0x15/0xb0 [ 339.353868][ T29] ? trace_contention_end+0x39/0xe0 [ 339.359118][ T29] ? __might_sleep+0xe0/0xe0 [ 339.387337][ T29] ? __mutex_lock+0x315/0xcc0 [ 339.392076][ T29] perf_event_detach_bpf_prog+0x8b/0x310 [ 339.462358][ T29] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 339.489597][ T29] ? perf_event_attach_bpf_prog+0x380/0x380 [ 339.520713][ T29] ? irq_work_sync+0x287/0x380 [ 339.532874][ T29] _free_event+0xa6b/0xf30 [ 339.537354][ T29] perf_event_release_kernel+0x842/0x8d0 [ 339.548625][ T29] ? __might_sleep+0xe0/0xe0 [ 339.553725][ T29] ? calc_timer_values+0x400/0x400 [ 339.558863][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 339.575660][ T29] ? perf_mmap+0x15c0/0x15c0 [ 339.580295][ T29] perf_release+0x3b/0x40 [ 339.589720][ T29] __fput+0x234/0x970 [ 339.596498][ T29] task_work_run+0x1d4/0x260 [ 339.601122][ T29] ? task_work_cancel+0x220/0x220 [ 339.610276][ T29] ? do_exit+0x955/0x2460 [ 339.617432][ T29] ? kmem_cache_free+0xf8/0x270 [ 339.622324][ T29] do_exit+0x95a/0x2460 [ 339.630583][ T29] ? nfs_stat_to_errno+0x1a0/0x1a0 [ 339.638510][ T29] ? put_task_struct+0xc0/0xc0 [ 339.662663][ T29] ? lock_chain_count+0x20/0x20 [ 339.667567][ T29] do_group_exit+0x21b/0x2d0 [ 339.672178][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 339.687728][ T29] get_signal+0x12fc/0x13f0 [ 339.692298][ T29] arch_do_signal_or_restart+0xc2/0x800 [ 339.700172][ T29] ? get_sigframe_size+0x20/0x20 [ 339.710236][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 339.716634][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 339.722130][ T29] exit_to_user_mode_loop+0x70/0x110 [ 339.734030][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 339.739617][ T29] irqentry_exit_to_user_mode+0x9/0x30 [ 339.749651][ T29] exc_page_fault+0x8c/0x100 [ 339.757056][ T29] asm_exc_page_fault+0x26/0x30 [ 339.761940][ T29] RIP: 0033:0x7fbeca852b27 [ 339.770575][ T29] RSP: 002b:00007fbecb771120 EFLAGS: 00010202 [ 339.779581][ T29] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbeca99ce59 [ 339.799279][ T29] RDX: 00007fbecb771140 RSI: 00007fbecb771270 RDI: 000000000000000b [ 339.809365][ T29] RBP: 00007fbecaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 339.824133][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 339.832139][ T29] R13: 00007fbecac16038 R14: 00007fbecac15fa0 R15: 00007fffed7eecd8 [ 339.846850][ T29] [ 339.849907][ T29] INFO: task syz.0.665:7972 blocked for more than 144 seconds. [ 339.859188][ T29] Not tainted syzkaller #0 [ 339.869294][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.879598][ T29] task:syz.0.665 state:D stack:27016 pid:7972 ppid:5774 flags:0x00004006 [ 339.899152][ T29] Call Trace: [ 339.905286][ T29] [ 339.908247][ T29] __schedule+0x1553/0x45a0 [ 339.918064][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 339.925645][ T29] ? asan.module_dtor+0x20/0x20 [ 339.930527][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 339.940925][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 339.948021][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 339.959418][ T29] schedule+0xbd/0x170 [ 339.965668][ T29] schedule_preempt_disabled+0x13/0x20 [ 339.971162][ T29] __mutex_lock+0x6a9/0xcc0 [ 339.981140][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 339.987479][ T29] ? perf_event_ctx_lock_nested+0x3b9/0x490 [ 339.999393][ T29] ? mutex_lock_nested+0x20/0x20 [ 340.009512][ T29] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 340.021191][ T29] perf_event_ctx_lock_nested+0x3b9/0x490 [ 340.028577][ T29] ? perf_event_ctx_lock_nested+0xb4/0x490 [ 340.039530][ T29] ? perf_event_update_sibling_time+0x4c0/0x4c0 [ 340.052709][ T29] ? perf_remove_from_owner+0x444/0x4f0 [ 340.058299][ T29] ? perf_remove_from_owner+0x22/0x4f0 [ 340.071796][ T29] ? perf_mmap+0x15c0/0x15c0 [ 340.076728][ T29] perf_event_release_kernel+0x1a0/0x8d0 [ 340.082390][ T29] ? __might_sleep+0xe0/0xe0 [ 340.094339][ T29] ? calc_timer_values+0x400/0x400 [ 340.099490][ T29] ? __fput+0x61c/0x970 [ 340.109299][ T29] ? perf_mmap+0x15c0/0x15c0 [ 340.118349][ T29] perf_release+0x3b/0x40 [ 340.129006][ T29] __fput+0x234/0x970 [ 340.134622][ T29] task_work_run+0x1d4/0x260 [ 340.139263][ T29] ? task_work_cancel+0x220/0x220 [ 340.149706][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 340.158129][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 340.168918][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 340.176209][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 340.181736][ T29] do_syscall_64+0x61/0xb0 [ 340.191753][ T29] ? clear_bhb_loop+0x40/0x90 [ 340.198772][ T29] ? clear_bhb_loop+0x40/0x90 [ 340.208823][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.216523][ T29] RIP: 0033:0x7fbeca99ce59 [ 340.220967][ T29] RSP: 002b:00007fffed7eee38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 340.232984][ T29] RAX: 0000000000000000 RBX: 00007fbecac17da0 RCX: 00007fbeca99ce59 [ 340.240991][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 340.257868][ T29] RBP: 00007fbecac17da0 R08: 0000000000000006 R09: 0000000000000000 [ 340.267971][ T29] R10: 00007fbecac17cb0 R11: 0000000000000246 R12: 000000000002d651 [ 340.281240][ T29] R13: 00007fbecac15fac R14: 000000000002d3ef R15: 00007fffed7eef40 [ 340.291398][ T29] [ 340.300525][ T29] INFO: task syz.3.668:7977 blocked for more than 144 seconds. [ 340.309653][ T29] Not tainted syzkaller #0 [ 340.319899][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.330355][ T29] task:syz.3.668 state:D stack:27016 pid:7977 ppid:5775 flags:0x00004004 [ 340.347351][ T29] Call Trace: [ 340.350676][ T29] [ 340.358366][ T29] __schedule+0x1553/0x45a0 [ 340.368878][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 340.375730][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 340.380611][ T29] ? asan.module_dtor+0x20/0x20 [ 340.391037][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 340.398630][ T29] schedule+0xbd/0x170 [ 340.408715][ T29] schedule_timeout+0xc1/0x2d0 [ 340.415192][ T29] ? console_conditional_schedule+0x40/0x40 [ 340.421113][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 340.432354][ T29] ? lock_chain_count+0x20/0x20 [ 340.439022][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 340.450102][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 340.457424][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.470592][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 340.477584][ T29] ? wait_for_completion+0x27a/0x5b0 [ 340.488166][ T29] wait_for_completion+0x2cb/0x5b0 [ 340.495272][ T29] ? io_schedule+0xd0/0xd0 [ 340.499735][ T29] ? __init_swait_queue_head+0xa9/0x150 [ 340.511606][ T29] __wait_rcu_gp+0x242/0x270 [ 340.517949][ T29] synchronize_rcu_tasks_trace+0x160/0x230 [ 340.530737][ T29] ? call_rcu_tasks_trace+0x10/0x10 [ 340.537667][ T29] ? call_rcu_tasks_generic+0x667/0x960 [ 340.548535][ T29] ? rcu_tasks_trace_qs_blkd+0x340/0x340 [ 340.554676][ T29] ? rcu_read_lock_any_held+0x140/0x140 [ 340.560257][ T29] ? call_rcu_tasks+0x10/0x10 [ 340.575506][ T29] ? bpf_prog_array_copy+0x176/0x370 [ 340.580846][ T29] perf_event_detach_bpf_prog+0x264/0x310 [ 340.594183][ T29] ? perf_event_attach_bpf_prog+0x380/0x380 [ 340.600131][ T29] _free_event+0xa6b/0xf30 [ 340.609467][ T29] perf_event_release_kernel+0x842/0x8d0 [ 340.615567][ T29] ? __might_sleep+0xe0/0xe0 [ 340.620186][ T29] ? calc_timer_values+0x400/0x400 [ 340.632375][ T29] ? __fput+0x61c/0x970 [ 340.636940][ T29] ? perf_mmap+0x15c0/0x15c0 [ 340.641560][ T29] perf_release+0x3b/0x40 [ 340.652409][ T29] __fput+0x234/0x970 [ 340.656885][ T29] task_work_run+0x1d4/0x260 [ 340.661497][ T29] ? task_work_cancel+0x220/0x220 [ 340.674053][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 340.679560][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 340.702938][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 340.709298][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 340.721369][ T29] do_syscall_64+0x61/0xb0 [ 340.726214][ T29] ? clear_bhb_loop+0x40/0x90 [ 340.730913][ T29] ? clear_bhb_loop+0x40/0x90 [ 340.742719][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.748653][ T29] RIP: 0033:0x7fb32f79ce59 [ 340.759240][ T29] RSP: 002b:00007ffc83335338 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 340.768444][ T29] RAX: 0000000000000000 RBX: 00007ffc83335420 RCX: 00007fb32f79ce59 [ 340.783940][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 340.791941][ T29] RBP: 000000000002d3ce R08: 0000000000000001 R09: 0000000000000000 [ 340.809243][ T29] R10: 0000001b2c920000 R11: 0000000000000246 R12: 00007ffc83335460 [ 340.818086][ T29] R13: 00007fb32fa15fac R14: 000000000002d447 R15: 00007fb32fa15fa0 [ 340.832975][ T29] [ 340.836027][ T29] INFO: task syz.2.676:7979 blocked for more than 145 seconds. [ 340.849219][ T29] Not tainted syzkaller #0 [ 340.855936][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.870105][ T29] task:syz.2.676 state:D stack:27016 pid:7979 ppid:5770 flags:0x00004004 [ 340.881019][ T29] Call Trace: [ 340.889514][ T29] [ 340.892858][ T29] __schedule+0x1553/0x45a0 [ 340.897400][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 340.911051][ T29] ? lock_chain_count+0x20/0x20 [ 340.920228][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 340.938686][ T29] ? asan.module_dtor+0x20/0x20 [ 340.944048][ T29] ? _raw_spin_unlock+0x40/0x40 [ 340.948927][ T29] ? do_raw_spin_lock+0x11f/0x2c0 [ 340.960396][ T29] ? prepare_to_wait_event+0x3db/0x470 [ 340.966340][ T29] ? prepare_to_wait_event+0x434/0x470 [ 340.971827][ T29] schedule+0xbd/0x170 [ 340.982780][ T29] synchronize_rcu_expedited+0x79f/0x880 [ 340.988457][ T29] ? schedule_delayed_monitor_work+0x40/0x40 [ 341.000315][ T29] ? wake_bit_function+0x200/0x200 [ 341.006065][ T29] ? __might_sleep+0xe0/0xe0 [ 341.010703][ T29] synchronize_rcu+0x142/0x3e0 [ 341.025622][ T29] ? __schedule_delayed_monitor_work+0x200/0x200 [ 341.032007][ T29] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 341.044011][ T29] ? __might_sleep+0xe0/0xe0 [ 341.048642][ T29] ? mutex_unlock+0x10/0x10 [ 341.058411][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 341.065595][ T29] ? _local_bh_enable+0xa0/0xa0 [ 341.070488][ T29] packet_release+0xa34/0xd30 [ 341.080413][ T29] ? packet_rcv_spkt+0x5a0/0x5a0 [ 341.086180][ T29] ? down_write+0x16e/0x200 [ 341.090725][ T29] sock_close+0xbd/0x230 [ 341.103245][ T29] ? sock_mmap+0xa0/0xa0 [ 341.107521][ T29] __fput+0x234/0x970 [ 341.111526][ T29] task_work_run+0x1d4/0x260 [ 341.124310][ T29] ? task_work_cancel+0x220/0x220 [ 341.129376][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 341.143105][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 341.148428][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 341.159392][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 341.165253][ T29] do_syscall_64+0x61/0xb0 [ 341.169688][ T29] ? clear_bhb_loop+0x40/0x90 [ 341.180998][ T29] ? clear_bhb_loop+0x40/0x90 [ 341.186040][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.191962][ T29] RIP: 0033:0x7f1572f9ce59 [ 341.197175][ T29] RSP: 002b:00007ffe5c4e4a28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 341.212222][ T29] RAX: 0000000000000000 RBX: 00007f1573217da0 RCX: 00007f1572f9ce59 [ 341.221957][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 341.237430][ T29] RBP: 00007f1573217da0 R08: 0000000000000006 R09: 0000000000000000 [ 341.246050][ T29] R10: 00007f1573217cb0 R11: 0000000000000246 R12: 000000000002dee0 [ 341.262782][ T29] R13: 00007f157321609c R14: 000000000002dc39 R15: 00007f1573216090 [ 341.270807][ T29] [ 341.280010][ T29] INFO: task syz.2.676:7980 blocked for more than 145 seconds. [ 341.287962][ T29] Not tainted syzkaller #0 [ 341.299350][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.308376][ T29] task:syz.2.676 state:D stack:27008 pid:7980 ppid:5770 flags:0x00004004 [ 341.318308][ T29] Call Trace: [ 341.321614][ T29] [ 341.331828][ T29] __schedule+0x1553/0x45a0 [ 341.336952][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 341.350538][ T29] ? asan.module_dtor+0x20/0x20 [ 341.355741][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 341.360446][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 341.372844][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 341.379038][ T29] schedule+0xbd/0x170 [ 341.389548][ T29] schedule_preempt_disabled+0x13/0x20 [ 341.395336][ T29] __mutex_lock+0x6a9/0xcc0 [ 341.399864][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 341.411102][ T29] ? perf_event_detach_bpf_prog+0x8b/0x310 [ 341.417271][ T29] ? mutex_lock_nested+0x20/0x20 [ 341.422241][ T29] ? mark_lock+0x94/0x320 [ 341.427703][ T29] ? __might_sleep+0xe0/0xe0 [ 341.432324][ T29] perf_event_detach_bpf_prog+0x8b/0x310 [ 341.445517][ T29] ? perf_event_attach_bpf_prog+0x380/0x380 [ 341.451456][ T29] ? irq_work_sync+0x287/0x380 [ 341.461313][ T29] _free_event+0xa6b/0xf30 [ 341.468540][ T29] __se_sys_perf_event_open+0xfe9/0x1c50 [ 341.481160][ T29] ? __ia32_sys_get_robust_list+0xd0/0x110 [ 341.489708][ T29] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 341.499539][ T29] ? lock_chain_count+0x20/0x20 [ 341.507238][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 341.516435][ T29] ? __x64_sys_perf_event_open+0x20/0xc0 [ 341.522109][ T29] do_syscall_64+0x55/0xb0 [ 341.530094][ T29] ? clear_bhb_loop+0x40/0x90 [ 341.538978][ T29] ? clear_bhb_loop+0x40/0x90 [ 341.546401][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.552325][ T29] RIP: 0033:0x7f1572f9ce59 [ 341.561358][ T29] RSP: 002b:00007f1573e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 341.577901][ T29] RAX: ffffffffffffffda RBX: 00007f1573215fa0 RCX: 00007f1572f9ce59 [ 341.590131][ T29] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000200 [ 341.602551][ T29] RBP: 00007f1573032d6f R08: 0000000000000000 R09: 0000000000000000 [ 341.610546][ T29] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 341.624813][ T29] R13: 00007f1573216038 R14: 00007f1573215fa0 R15: 00007ffe5c4e48c8 [ 341.637577][ T29] [ 341.640659][ T29] [ 341.640659][ T29] Showing all locks held in the system: [ 341.651465][ T29] 2 locks held by rcu_tasks_trace/15: [ 341.661147][ T29] #0: ffffffff8d132e90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xadb/0xdb0 [ 341.679165][ T29] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 341.691279][ T29] 1 lock held by khungtaskd/29: [ 341.703345][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 341.718868][ T29] 3 locks held by kworker/u4:2/42: [ 341.745317][ T29] #0: ffff88802c98bd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.761347][ T29] #1: ffffc90000b37d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.775772][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 341.792125][ T29] 4 locks held by kworker/u5:0/51: [ 341.798668][ T29] #0: ffff88802695ad38 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.818905][ T29] #1: ffffc90000bc7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.838237][ T29] #2: ffff88805bdf80b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 341.849733][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 341.867059][ T29] 6 locks held by kworker/u5:1/5087: [ 341.872368][ T29] #0: ffff88802f896538 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.890226][ T29] #1: ffffc900107dfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 341.910718][ T29] #2: ffff8880606a8e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 341.922128][ T29] #3: ffff8880606a80b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 341.936974][ T29] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 341.951385][ T29] #5: ffff888023a45338 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660 [ 341.962297][ T29] 2 locks held by getty/5529: [ 341.973954][ T29] #0: ffff8880318fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 341.988965][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 342.000704][ T29] 3 locks held by kworker/1:3/5760: [ 342.011101][ T29] 4 locks held by kworker/u5:2/5772: [ 342.019326][ T29] #0: ffff88805d10cd38 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.032751][ T29] #1: ffffc9000472fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.053163][ T29] #2: ffff88804e1440b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 342.068343][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 342.080354][ T29] 4 locks held by kworker/u5:3/5777: [ 342.091158][ T29] #0: ffff88803156e138 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.102819][ T29] #1: ffffc9000476fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.121391][ T29] #2: ffff88805bec80b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 342.142650][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 342.160929][ T29] 5 locks held by kworker/u5:4/5778: [ 342.166651][ T29] #0: ffff888030e08938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.184004][ T29] #1: ffffc9000477fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.200675][ T29] #2: ffff888060678e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 342.217116][ T29] #3: ffff8880606780b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 342.227295][ T29] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 342.247055][ T29] 4 locks held by kworker/u5:5/5781: [ 342.252366][ T29] #0: ffff88805d1a3d38 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.272212][ T29] #1: ffffc900047afd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.290847][ T29] #2: ffff88802bc400b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 342.301208][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 342.318609][ T29] 5 locks held by kworker/u5:6/5783: [ 342.324444][ T29] #0: ffff88802f88dd38 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.341628][ T29] #1: ffffc900047cfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.363818][ T29] #2: ffff88801dff4e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 342.380768][ T29] #3: ffff88801dff40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 342.392083][ T29] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 342.408347][ T29] 2 locks held by kworker/0:4/5836: [ 342.414051][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.431359][ T29] #1: ffffc9000494fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.450532][ T29] 3 locks held by kworker/u4:14/6177: [ 342.456275][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.477408][ T29] #1: ffffc9000bb57d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.491904][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 342.507460][ T29] 5 locks held by kworker/u4:15/6178: [ 342.514386][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.531617][ T29] #1: ffffc9000bb67d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.551029][ T29] #2: ffff88807d958768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 342.561770][ T29] #3: ffff88805bcacdc0 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xac/0x10f0 [ 342.579919][ T29] #4: ffff88807d9597c8 (&local->sta_mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x583/0x10f0 [ 342.590975][ T29] 1 lock held by syz.0.624/7852: [ 342.604509][ T29] #0: ffffffff8d192568 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 342.619055][ T29] 1 lock held by syz.0.665/7972: [ 342.626776][ T29] #0: ffff88805bcb50a8 (&ctx->mutex){+.+.}-{3:3}, at: perf_event_ctx_lock_nested+0x3b9/0x490 [ 342.641206][ T29] 3 locks held by syz.0.665/7973: [ 342.648989][ T29] 1 lock held by syz.3.668/7977: [ 342.658643][ T29] #0: ffffffff8d192568 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 342.672064][ T29] 1 lock held by syz.2.676/7979: [ 342.681004][ T29] #0: ffff88805d4eb220 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 342.700762][ T29] 1 lock held by syz.2.676/7980: [ 342.707884][ T29] #0: ffffffff8d192568 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 342.724971][ T29] 1 lock held by syz-executor/7986: [ 342.730187][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.742715][ T29] 1 lock held by syz-executor/7990: [ 342.747927][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.777357][ T29] 1 lock held by syz-executor/7993: [ 342.783959][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.798786][ T29] 1 lock held by syz-executor/8007: [ 342.807884][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 342.823634][ T29] 5 locks held by kworker/u5:7/8016: [ 342.828939][ T29] #0: ffff8880305d7938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.855740][ T29] #1: ffffc900039d7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.871838][ T29] #2: ffff88802d078e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 342.888211][ T29] #3: ffff88802d0780b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 342.898224][ T29] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 342.916805][ T29] 4 locks held by kworker/u5:8/8017: [ 342.922122][ T29] #0: ffff88801b780538 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.941715][ T29] #1: ffffc900039f7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 342.960984][ T29] #2: ffff888077a800b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 342.971487][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 342.988635][ T29] 4 locks held by kworker/u5:10/8019: [ 342.994423][ T29] #0: ffff88805cf2c138 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.011929][ T29] #1: ffffc900042b7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.033018][ T29] #2: ffff8880576a80b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 343.050975][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 343.068636][ T29] 1 lock held by dhcpcd/8020: [ 343.073738][ T29] #0: ffff88807e51c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 343.089863][ T29] 1 lock held by dhcpcd/8021: [ 343.094813][ T29] #0: ffff88805a284130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 343.110887][ T29] 1 lock held by dhcpcd/8022: [ 343.115905][ T29] #0: ffff88807ae6c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 343.131993][ T29] 1 lock held by dhcpcd/8023: [ 343.139184][ T29] #0: ffff888059d76130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 343.154383][ T29] 1 lock held by dhcpcd/8024: [ 343.159081][ T29] #0: ffff88807c6e6130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 343.185735][ T29] 1 lock held by dhcpcd/8025: [ 343.190440][ T29] #0: ffff88802c9f4130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 343.202771][ T29] 1 lock held by syz-executor/8029: [ 343.207987][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 343.223497][ T29] 1 lock held by syz-executor/8034: [ 343.228712][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 343.248068][ T29] 4 locks held by kworker/u5:11/8035: [ 343.257306][ T29] #0: ffff88805d3efd38 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.269275][ T29] #1: ffffc90003a27d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.289807][ T29] #2: ffff8880221840b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 343.300371][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 343.317565][ T29] 1 lock held by syz-executor/8037: [ 343.323298][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 343.338999][ T29] 4 locks held by kworker/u5:12/8039: [ 343.345113][ T29] #0: ffff88805c798d38 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.365160][ T29] #1: ffffc900043efd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.381946][ T29] #2: ffff88802ec7c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 343.400292][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 343.412003][ T29] 1 lock held by syz-executor/8040: [ 343.422576][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 343.432029][ T29] 4 locks held by kworker/u5:13/8041: [ 343.444269][ T29] #0: ffff88805d0ff938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.459374][ T29] #1: ffffc900043ffd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.481183][ T29] #2: ffff88804e4e40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 343.492790][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 343.511837][ T29] 1 lock held by syz-executor/8046: [ 343.517491][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 343.533455][ T29] 4 locks held by kworker/u5:14/8049: [ 343.538845][ T29] #0: ffff88802f86c138 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.556626][ T29] #1: ffffc9000448fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.570399][ T29] #2: ffff8880843d00b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 343.590093][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 343.602248][ T29] 1 lock held by syz-executor/8051: [ 343.616662][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 343.630265][ T29] 4 locks held by kworker/u5:15/8054: [ 343.638358][ T29] #0: ffff88805bd91938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.656336][ T29] #1: ffffc900044bfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.671278][ T29] #2: ffff8880843cc0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 343.688546][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 343.699427][ T29] 1 lock held by syz-executor/8055: [ 343.712914][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 343.722370][ T29] 4 locks held by kworker/u5:16/8056: [ 343.735687][ T29] #0: ffff888018ff6538 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.749765][ T29] #1: ffffc9000449fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 343.768280][ T29] #2: ffff8880843d80b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 343.778332][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 343.796132][ T29] 1 lock held by syz-executor/8058: [ 343.801352][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 343.828538][ T29] [ 343.830887][ T29] ============================================= [ 343.830887][ T29] [ 343.848963][ T29] NMI backtrace for cpu 0 [ 343.853315][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 343.860521][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.870582][ T29] Call Trace: [ 343.873865][ T29] [ 343.876803][ T29] dump_stack_lvl+0x18c/0x250 [ 343.881506][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 343.886631][ T29] ? show_regs_print_info+0x20/0x20 [ 343.891836][ T29] ? load_image+0x420/0x420 [ 343.896365][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 343.901318][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 343.907490][ T29] ? _printk+0xde/0x130 [ 343.911653][ T29] ? load_image+0x420/0x420 [ 343.916166][ T29] ? load_image+0x420/0x420 [ 343.920681][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 343.926761][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 343.932756][ T29] watchdog+0xf3d/0xf80 [ 343.936925][ T29] ? watchdog+0x1e1/0xf80 [ 343.941270][ T29] kthread+0x2fa/0x390 [ 343.945349][ T29] ? hungtask_pm_notify+0x90/0x90 [ 343.950392][ T29] ? kthread_blkcg+0xd0/0xd0 [ 343.954985][ T29] ret_from_fork+0x48/0x80 [ 343.959409][ T29] ? kthread_blkcg+0xd0/0xd0 [ 343.964008][ T29] ret_from_fork_asm+0x11/0x20 [ 343.968795][ T29] [ 343.973037][ T29] Sending NMI from CPU 0 to CPUs 1: [ 343.978264][ C1] NMI backtrace for cpu 1 [ 343.978273][ C1] CPU: 1 PID: 7973 Comm: syz.0.665 Not tainted syzkaller #0 [ 343.978289][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.978297][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 343.978316][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 db 55 24 03 66 2e 0f 1f 84 00 00 00 00 00 [ 343.978327][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00000046 [ 343.978339][ C1] RAX: 00000000000004be RBX: ffff8880b8f282c0 RCX: 0000000000000838 [ 343.978348][ C1] RDX: 0000000000000000 RSI: 00000000000004be RDI: 0000000000000838 [ 343.978356][ C1] RBP: 0000000000000000 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 343.978366][ C1] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: dffffc0000000000 [ 343.978375][ C1] R13: 000000001000614e R14: 00000000000004be R15: 0000000000000020 [ 343.978384][ C1] FS: 00007fbecb7906c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 343.978396][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.978405][ C1] CR2: 000055ac6516ca38 CR3: 000000001df28000 CR4: 00000000003506e0 [ 343.978418][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 343.978427][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 343.978435][ C1] Call Trace: [ 343.978440][ C1] [ 343.978444][ C1] lapic_next_event+0x11/0x20 [ 343.978461][ C1] clockevents_program_event+0x1c0/0x310 [ 343.978481][ C1] hrtimer_interrupt+0x5a1/0x9c0 [ 343.978512][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 343.978530][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 343.978550][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.978569][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 343.978588][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0a ac d6 f6 48 89 df e8 c2 80 d7 f6 e8 bd 98 fb f6 fb bf 01 00 00 00 a2 87 ca f6 65 8b 05 33 b0 71 75 85 c0 74 02 5b c3 e8 30 97 6e [ 343.978598][ C1] RSP: 0018:ffffc900001f0cb0 EFLAGS: 00000282 [ 343.978608][ C1] RAX: 549da63007d5be00 RBX: ffff8880b8f295c0 RCX: 549da63007d5be00 [ 343.978618][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 343.978627][ C1] RBP: ffffc900001f0e10 R08: ffffffff911cd5ff R09: 1ffffffff2239abf [ 343.978637][ C1] R10: dffffc0000000000 R11: fffffbfff2239ac0 R12: ffff8880b8f295c0 [ 343.978646][ C1] R13: 1ffff110171e52c0 R14: ffff8880b8f39118 R15: ffffc900001f0d60 [ 343.978666][ C1] ? random_pm_notification+0x210/0x210 [ 343.978680][ C1] __run_timers+0x533/0x800 [ 343.978700][ C1] ? detach_timer+0x2b0/0x2b0 [ 343.978723][ C1] run_timer_softirq+0x67/0xf0 [ 343.978737][ C1] handle_softirqs+0x280/0x820 [ 343.978754][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 343.978771][ C1] ? do_softirq+0x1a0/0x1a0 [ 343.978787][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 343.978805][ C1] __irq_exit_rcu+0xd3/0x190 [ 343.978819][ C1] ? irq_exit_rcu+0x20/0x20 [ 343.978837][ C1] irq_exit_rcu+0x9/0x20 [ 343.978849][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 343.978873][ C1] [ 343.978877][ C1] [ 343.978882][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.978900][ C1] RIP: 0010:__schedule+0x1563/0x45a0 [ 343.978915][ C1] Code: 20 00 74 08 4c 89 f7 e8 9b 00 4f f7 4d 89 3e 4c 89 ef 4c 89 fe e8 4d e0 6f f6 48 89 c7 e8 75 01 cd f6 48 8b 84 24 90 00 00 00 <66> 42 c7 44 20 12 f8 f8 48 c7 84 24 00 01 00 00 0e 36 e0 45 4a c7 [ 343.978925][ C1] RSP: 0018:ffffc9000348f620 EFLAGS: 00000286 [ 343.978935][ C1] RAX: 1ffff92000691ee4 RBX: ffff8880b8e3cdc8 RCX: ffffffff815d7066 [ 343.978945][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807b1fe880 [ 343.978953][ C1] RBP: ffffc9000348f830 R08: ffff88807b1fe883 R09: 1ffff1100f63fd10 [ 343.978963][ C1] R10: dffffc0000000000 R11: ffffed100f63fd11 R12: dffffc0000000000 [ 343.978973][ C1] R13: ffff88807da2da00 R14: ffff8880b8e3c090 R15: ffff88801b669e00 [ 343.978988][ C1] ? finish_task_switch+0x326/0x8f0 [ 343.979012][ C1] ? mark_lock+0x94/0x320 [ 343.979029][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 343.979047][ C1] ? lock_chain_count+0x20/0x20 [ 343.979061][ C1] ? asan.module_dtor+0x20/0x20 [ 343.979078][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.979097][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 343.979120][ C1] ? preempt_schedule+0xc0/0xd0 [ 343.979136][ C1] preempt_schedule_common+0x82/0xc0 [ 343.979152][ C1] preempt_schedule+0xc0/0xd0 [ 343.979167][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 343.979181][ C1] ? event_function+0x300/0x300 [ 343.979197][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 343.979216][ C1] preempt_schedule_thunk+0x1a/0x30 [ 343.979236][ C1] ? smp_call_function_single+0x488/0x5a0 [ 343.979253][ C1] smp_call_function_single+0x48d/0x5a0 [ 343.979268][ C1] ? event_function+0x300/0x300 [ 343.979284][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 343.979299][ C1] ? rcu_is_watching+0x15/0xb0 [ 343.979317][ C1] ? event_function+0x300/0x300 [ 343.979340][ C1] event_function_call+0x359/0x650 [ 343.979359][ C1] ? __perf_event_read+0x990/0x990 [ 343.979378][ C1] ? perf_event_ctx_lock_nested+0x490/0x490 [ 343.979394][ C1] ? event_function_call+0x650/0x650 [ 343.979412][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.979432][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 343.979450][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.979470][ C1] ? __perf_event_read+0x990/0x990 [ 343.979494][ C1] perf_ioctl+0x1fdc/0x24a0 [ 343.979515][ C1] ? tomoyo_path_number_perm+0x217/0x620 [ 343.979529][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 343.979546][ C1] ? perf_poll+0x1b0/0x1b0 [ 343.979564][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 343.979586][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 343.979604][ C1] ? lock_chain_count+0x20/0x20 [ 343.979622][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.979641][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 343.979659][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.979681][ C1] ? __se_sys_ioctl+0x53/0x170 [ 343.979700][ C1] ? perf_poll+0x1b0/0x1b0 [ 343.979718][ C1] __se_sys_ioctl+0xfd/0x170 [ 343.979736][ C1] do_syscall_64+0x55/0xb0 [ 343.979750][ C1] ? clear_bhb_loop+0x40/0x90 [ 343.979761][ C1] ? clear_bhb_loop+0x40/0x90 [ 343.979774][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.979792][ C1] RIP: 0033:0x7fbeca99ce59 [ 343.979804][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.979814][ C1] RSP: 002b:00007fbecb790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.979827][ C1] RAX: ffffffffffffffda RBX: 00007fbecac15fa0 RCX: 00007fbeca99ce59 [ 343.979836][ C1] RDX: 00002000000000c0 RSI: 0000000040082404 RDI: 0000000000000003 [ 343.979845][ C1] RBP: 00007fbecaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 343.979858][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.979865][ C1] R13: 00007fbecac16038 R14: 00007fbecac15fa0 R15: 00007fffed7eecd8 [ 343.979884][ C1] [ 344.678962][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 344.685835][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 344.693032][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.703089][ T29] Call Trace: [ 344.706369][ T29] [ 344.709303][ T29] dump_stack_lvl+0x18c/0x250 [ 344.713996][ T29] ? show_regs_print_info+0x20/0x20 [ 344.719205][ T29] ? load_image+0x420/0x420 [ 344.723723][ T29] panic+0x2dc/0x730 [ 344.727627][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 344.733270][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 344.737785][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 344.743343][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 344.749512][ T29] watchdog+0xf7c/0xf80 [ 344.753680][ T29] ? watchdog+0x1e1/0xf80 [ 344.758021][ T29] kthread+0x2fa/0x390 [ 344.762094][ T29] ? hungtask_pm_notify+0x90/0x90 [ 344.767126][ T29] ? kthread_blkcg+0xd0/0xd0 [ 344.771721][ T29] ret_from_fork+0x48/0x80 [ 344.776145][ T29] ? kthread_blkcg+0xd0/0xd0 [ 344.780739][ T29] ret_from_fork_asm+0x11/0x20 [ 344.785529][ T29] [ 344.788861][ T29] Kernel Offset: disabled [ 344.793173][ T29] Rebooting in 86400 seconds..