last executing test programs: 35m38.565216229s ago: executing program 32 (id=1819): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x140, 0xffdffbff, 0x6, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x9) recvmsg$unix(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000c8"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x12) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000640)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r6], 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x73) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x3f2}]}}}], 0x18}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 35m38.304975213s ago: executing program 33 (id=1823): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x48800) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11149, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x4}, 0x109211, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002500)=""/4093, 0x4}, 0x20) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 64) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) 35m38.196383519s ago: executing program 34 (id=1824): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000480)={0x4}, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000600000001000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x8, 0x1, 0xf92ed20, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004084) recvmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1}, 0x41) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x24000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000000)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="558b988f01b3e7a149f2830e170005269974d1a95c574caa8454f3b3cad812c1264cf38d974292e6055c0c", 0x2b}], 0x1, &(0x7f0000000200)=[{0x38, 0x6, 0x9b, "f6680bd8d3784c917d503db2a441e961657f4d054ae100d7b19e773a64415c8812"}], 0x38}, 0x40880) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={0x0, 0x3}, 0x29, 0x0, 0x0, 0x6, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x219d80, 0xc8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000"], 0x0, 0x42}, 0x28) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000"], 0xfdef) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300)=r4, 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 35m38.182582909s ago: executing program 35 (id=1820): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x101, 0x4000}, 0x80, 0x0}, 0x20000000) r0 = socket$kcm(0xa, 0x3, 0x3a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000019000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) recvmsg(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62f5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xcd}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777e403000000290d970e2f9a1d422ca71d4207e563f192538f527923b0f362103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa0786be123a788ba8d0e1205af7751df76effba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979981faac0930900000000000000420903fbc1", 0xde}, {&(0x7f0000000480)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d2d6f9531b12f12e29b903f", 0xb2}, {&(0x7f0000000740)="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", 0x2dc}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32108, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x2828, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x8, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf9c, 0x0, 0x0, 0x0, 0x8001}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2ee, 0x64, &(0x7f0000000600)=""/100, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xd, 0x1, 0x80}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x0, 0x3, 0x0, 0x7}, {0x0, 0x4, 0xa, 0x6}, {0x0, 0x2, 0x7, 0xb}, {0x0, 0x4, 0xb, 0x2}, {0x4, 0x5, 0x7, 0x4}], 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300), 0xa}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2b02, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'ip6gretap0\x00', 0x10}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) 35m3.779923406s ago: executing program 36 (id=1930): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6fc}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x6, '\x00', r4, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit], &(0x7f0000000140)='syzkaller\x00', 0xc434, 0xd9, &(0x7f00000002c0)=""/217, 0x41100, 0x14, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x6, 0x3ff, 0x7e3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[r5], &(0x7f0000000400)=[{0x4, 0x5, 0x2, 0x1}], 0x10, 0xbc}, 0x94) 35m3.447836681s ago: executing program 37 (id=1932): bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) close(r0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), 0x0}, 0x20) socket$kcm(0x2a, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900001304000000e746c60a0094ad7100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff86) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 35m3.425180104s ago: executing program 38 (id=1934): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x942, 0x4, 0x200, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8902, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='\a', 0x1}], 0x1}, 0x800) sendmsg(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a18100400000", 0x17}], 0x1}, 0x20040810) 35m3.383077843s ago: executing program 39 (id=1935): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x2, 0x0, 0x6, 0x9, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="bb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000800000076"], 0x40}, 0x20004000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172, 0x22, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8000}, 0x8000, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000740)=@in6={0xa, 0x4e01, 0x4, @mcast2, 0xd}, 0x80, 0x0}, 0x4000080) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/222, 0xde}, {&(0x7f0000000480)=""/101, 0x65}, {&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f0000000500)=""/84, 0x54}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000680)=""/239, 0xef}], 0x6, &(0x7f0000000780)=""/109, 0x6d}, 0x2000) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r2) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x0) 29m55.228466444s ago: executing program 9 (id=3867): perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffff6d, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) 29m54.245977635s ago: executing program 9 (id=3875): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x96, 0x1, 0x0, 0x81, 0x0, 0x8000000000000005, 0x19188, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x4, @perf_bp={0x0, 0x9}, 0x105563, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 29m54.000836004s ago: executing program 6 (id=3880): bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) close(r0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) socket$kcm(0x2a, 0x2, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900001304000000e746c60a0094ad7100000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff86) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 29m53.511772026s ago: executing program 1 (id=3884): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r3, 0x0, 0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xfffd, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000840000012a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', r4}, 0x18) r6 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x93, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000060000000000000008000000852000000200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000008000007b8af8000000000000000000000000510007020000f8ffffffb703000008000000b7040000010000008500000082000000950000000000007ae59f33fb757aba58497d196fcf7e691250fa36c246214167bf68822dc87cd80052790eed5e24cd56497f28e9165719ee82fd28c1f702382ca8dce180e3b715a81539479f1505e03f29f513dc3da50af350a9fc4c57f3e156ec05d79bd6619e5d84bf29d1acc4749c7556432ad05f1e66cf9504aa86239cb3bdd12ac1e364075de5f9be33b913013b0d5c860c1f864ed58b151af47977a227c78d09357365f2a55cda89d935bc894aac8eea5f0d500165971225f37eaa4ac741a74330e277b2fb01c930814ff4cd57b5f4fe5ff92fb229eca30d043a283efb7f3cd89d7891302a382d63d806f77b86c0e38101396153f8a78d10fb87ebf05d9e3351fe9d73e04ab5fa6e96ed5d99ba885b1383e77ef0c1b95a720e83bafac295ce69476d6be0bcc4f648de70818f63297df73621d5bc6e1dc6d2a98e4dd11fde6196f866f2393d2217ee5b0a6c578144a3de923d5134328439219550139ca9a19316ab474929d9e9b3e80a289d1e6387742d2f0a"], &(0x7f0000000180)='syzkaller\x00', 0x208, 0x1000, &(0x7f0000001500)=""/4096, 0x40f00, 0x0, '\x00', r9, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x5, &(0x7f00000005c0)=[r8, r8, r4, r4, r8, r4, r4], &(0x7f0000000600)=[{0x4, 0x1, 0x1, 0x9}, {0x4, 0x1, 0x5, 0x8}, {0x0, 0x5, 0xd, 0x874dfe8aa25453c1}, {0x3, 0x4, 0x4, 0x6}, {0x0, 0x4, 0x5, 0xa}], 0x10, 0x679}, 0x94) close(r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 29m53.224991369s ago: executing program 9 (id=3885): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) close(r0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) socket$kcm(0x2a, 0x2, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900001304000000e746c60a0094ad7100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff86) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 29m52.788080003s ago: executing program 6 (id=3887): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f00000006c0)="beddcceefd809201e5448fe489d6603e32fd5f2bb89d34b7a75963c89eac7976ee988f6b4de5bfaef28428e8beb9b0cb46f3de91ec80a5f165fb8ca61a6a43c848a8df1fd26846eff9aa1909194f4c409c2368ca22e9becab87eaa5994b0007aa585a6740ea14c82b927a5d5962c9ad7c25bdd6d46579e4fb803a476a744885948bc6d8335d1e4614cea4dfdacc4ebec41cd7da434c779f457ba9296574673b04d5782f1d262325cafaa32e71fd10c9720fb4915aefde48c69c05e35df5715aeae119569f7500886a488e529839c55cff9950bf906c796d59d4a60e2f511b583b777", &(0x7f00000033c0)=""/4096}, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) 29m52.583032314s ago: executing program 1 (id=3889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={r1, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000001300)=[0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000001380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90) r3 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86e46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x8, 0x0, 0x7, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x5, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x40) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2d, 'devices'}, {0x2d, 'devices'}]}, 0x12) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xc0045878, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d34, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8000000, 0xa9, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=r7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 29m52.105524421s ago: executing program 6 (id=3890): r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x4008240b, &(0x7f00000013c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x14}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0x40, 0xfffffffffffffff0}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x5, 0x10, 0x2, 0x7f, 0x0, 0x3e, 0x424, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x9}, 0x2, 0x4, 0x8960, 0x3, 0x1000000010001, 0x7, 0x53d, 0x0, 0xc, 0x0, 0xbec}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000001180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 29m51.8934642s ago: executing program 1 (id=3891): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x40, 0x0, 0x4, 0xfd, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1911, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x80001, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 29m51.72589479s ago: executing program 9 (id=3892): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000000)='/proc/sys]c_\x00lz,\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x28) 29m51.668237152s ago: executing program 6 (id=3894): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="bfb095b2864908d6d6e3a1bc3f0bf163ad07ac", 0x13}], 0x1}, 0x40044) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='A', 0x1}], 0x1}, 0x4008041) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x3b) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) close(r2) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0xc03e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0xc, &(0x7f00000000c0)=r5, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=r1, 0x8c09e281169f99dc, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000011c0), &(0x7f0000000140)=[0x0]}, 0x40) bpf$ENABLE_STATS(0x20, &(0x7f00000003c0), 0x4) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0xfffffffffffffeb5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x100678, 0xc8, 0x80000001, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x775}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f00000002c0)=ANY=[], 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 29m51.515568136s ago: executing program 1 (id=3896): socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x82121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x7ffffc, 0x0, 0x0, 0x6, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf3, 0x99, 0x0, 0x0, 0x0, 0x0, 0x501d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x4, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 29m51.353288358s ago: executing program 9 (id=3897): bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) close(r0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) socket$kcm(0x2a, 0x2, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900001304000000e746c60a0094ad7100000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff86) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 29m51.17202732s ago: executing program 6 (id=3898): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x96, 0x1, 0x0, 0x81, 0x0, 0x8000000000000005, 0x19188, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x4, @perf_bp={0x0, 0x9}, 0x105563, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 29m51.062956183s ago: executing program 1 (id=3899): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000600)={&(0x7f0000000500)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20000040) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x98051, 0x8, 0x0, 0x6, 0x2118, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x80000002, 0x12) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000008a189321030000180000000c00004009bd8ef8f8ff003a000000000056010d02000000000000000000000d0000000000305f004ef179fdca78566b203fc14dbcc07c3f60734a719b86aacb9d601dc89daff921a4aadcaea6a4fb1a69fecc51066abca1dfc944"], 0x0, 0x2f}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 29m50.302996827s ago: executing program 9 (id=3902): perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffff6d, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) 29m49.818044339s ago: executing program 40 (id=3902): perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffff6d, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) 29m49.806371776s ago: executing program 1 (id=3904): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40) (fail_nth: 66) 29m49.563153845s ago: executing program 41 (id=3904): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40) (fail_nth: 66) 29m49.519528867s ago: executing program 6 (id=3905): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x7, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x8, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xf1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1a089, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0}, 0x2018, 0x80000000, 0x0, 0x8, 0x72, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) (fail_nth: 7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x8, 0xfc, 0x0, 0x0, 0x2161, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x828, 0x0, 0x0, 0x0, 0x100009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="b414000000000000000a00000000000095000000000000007b9fa55659868d3a41b6befa59959704eec5f5f7c34eda70d534f7473a99828374390ceb2c9faf3b7ca8f7cf6f8f2c3fe203cd28da6346f8576d60e3c8b4c5503b2274f2744ab61cab14a633d4ae55cd50fd6487ffacfda63940990f6f58a1020f118d4b582273bdabfc6bd22f72b69a95305643619cdf087b7caf02bef7fb06050f7d64b7ffe80f7eca38d028591a916b7a7bdecaac341bbb1c37ab88426a91efa798140f015449da68b2030b9d6dc75333a5bc6bf514107e89785210c7e8ed86b7a56ab1bf3fbf1df8ff93658d94c8c96681ca593b8a6d29ce"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x5, 0x3c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x22020) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="c0df2242dcc7d7e3b88452de8e4607984c60084b08cf310efc263dff50654902eb52b66d55bb8de07c9251ea9ec3139ad2529543e94169725352537be7f064a32ae41888ad5917a2419ba2c569b852ca2730143d970bbdd14986e210b664391db0e36b75fc62b81b1934343d756dc9d0fae6243e5377aeaf7b3dd23bd2285f76af88d98488e992ff20a4b700b7be156612646123df117a57e6fc7b8698af08bcc3e949a717276fb376df727e3eb430c245e369f51bff1f38bb4f89045a9c35a7711482ad69d2cd350df3ba8db6bc105dca347bc9f1df491fe13613cba50d11edc8b313e81f1867d8", 0xe8}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1b0000004b9e6a2300ac1c8913944e56000000000a000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x25, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x48, 0x0, 0x0}, 0x40) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000008, 0x830d}, 0x3102, 0x8, 0xfffffffe, 0x0, 0x6996, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 29m49.426362828s ago: executing program 42 (id=3905): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x7, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x8, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xf1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1a089, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0}, 0x2018, 0x80000000, 0x0, 0x8, 0x72, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) (fail_nth: 7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x8, 0xfc, 0x0, 0x0, 0x2161, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x828, 0x0, 0x0, 0x0, 0x100009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="b414000000000000000a00000000000095000000000000007b9fa55659868d3a41b6befa59959704eec5f5f7c34eda70d534f7473a99828374390ceb2c9faf3b7ca8f7cf6f8f2c3fe203cd28da6346f8576d60e3c8b4c5503b2274f2744ab61cab14a633d4ae55cd50fd6487ffacfda63940990f6f58a1020f118d4b582273bdabfc6bd22f72b69a95305643619cdf087b7caf02bef7fb06050f7d64b7ffe80f7eca38d028591a916b7a7bdecaac341bbb1c37ab88426a91efa798140f015449da68b2030b9d6dc75333a5bc6bf514107e89785210c7e8ed86b7a56ab1bf3fbf1df8ff93658d94c8c96681ca593b8a6d29ce"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x5, 0x3c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x22020) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="c0df2242dcc7d7e3b88452de8e4607984c60084b08cf310efc263dff50654902eb52b66d55bb8de07c9251ea9ec3139ad2529543e94169725352537be7f064a32ae41888ad5917a2419ba2c569b852ca2730143d970bbdd14986e210b664391db0e36b75fc62b81b1934343d756dc9d0fae6243e5377aeaf7b3dd23bd2285f76af88d98488e992ff20a4b700b7be156612646123df117a57e6fc7b8698af08bcc3e949a717276fb376df727e3eb430c245e369f51bff1f38bb4f89045a9c35a7711482ad69d2cd350df3ba8db6bc105dca347bc9f1df491fe13613cba50d11edc8b313e81f1867d8", 0xe8}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1b0000004b9e6a2300ac1c8913944e56000000000a000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x25, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x48, 0x0, 0x0}, 0x40) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000008, 0x830d}, 0x3102, 0x8, 0xfffffffe, 0x0, 0x6996, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 24m55.799553458s ago: executing program 3 (id=5968): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x28a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000040)=@abs, 0x6e, 0x0}, 0x40000041) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x13, &(0x7f0000000040)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0, 0x34000}], 0x1}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24m54.663025842s ago: executing program 3 (id=5975): r0 = syz_clone(0x9522b000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000000)='/proc/sys]c_\x00lz,\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00'}, 0x30) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x400}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xee, 0x95, 0x0, 0x0, 0x0, 0x0, 0xa504, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x541b, &(0x7f0000000240)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x8000000000000000}, 0x6018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 24m54.629692179s ago: executing program 2 (id=5976): perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x2b, 0x20}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 24m54.256164116s ago: executing program 2 (id=5978): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104301, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4800, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x3, 0x8, 0x3fe, 0x1, 0x8000, 0x0, 0x3, 0x0, 0x400}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000080000000800000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/uts\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='io.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000400)=r1, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 24m54.085723457s ago: executing program 3 (id=5980): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4066, 0xfe2}, {&(0x7f0000002640)=""/4112, 0x1010}, {&(0x7f0000001300)=""/185, 0xb9}, {&(0x7f0000000340)=""/175, 0xaf}], 0x5}, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) socketpair(0x10, 0x2, 0x7a737b71, &(0x7f00000002c0)) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0), 0x161) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000400)=[{}], 0x1b, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xb9, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000980), &(0x7f00000007c0), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$inet(r7, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="d6d43cb38bc1932d8091053bcd55e3a070a1d0e37a71648d0c0ae3", 0x1b}, {&(0x7f0000000200)="cb690cc81fc9ad13f9b99af930713509b67c0da888c29159fffc74d88acbe2331d85cd6a27e09b997807b9669222ec5997780806b2ebbe3123931f10993e30fbfd224a588516b7e70e0cdaf6aa56bc27e44c0bafaa777dac10527db234dbd432e5e11b5812f6154b4a945d898829ba68477b56576aefce6ba298a1209eace6913fc5b08d84ddd4a51fab7c1ea4b4bf91a6", 0x91}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0a010100ffffffff00000000"], 0x70}, 0x4008040) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r12, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r12, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x26, &(0x7f0000000ac0)=ANY=[@ANYBLOB="85100000faffffffb7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008c800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b7080000a90000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="000000001c000000b70500000000000085000000a500000095000000180b0000451d86fc0553e75e"], &(0x7f00000000c0)='syzkaller\x00', 0x80000001, 0x5, &(0x7f0000000140)=""/5, 0x41000, 0x20, '\x00', r11, @fallback=0x29, r10, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x7f, 0x634}, 0x10, r12, r1, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, r5, r5], &(0x7f0000000580)=[{0x2, 0x1, 0x7, 0xc}], 0x10, 0x4}, 0x94) 24m53.7536464s ago: executing program 2 (id=5981): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x7a16, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x2000000000000, 0x0, 0x1, 0x401, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r1}, 0x38) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x403}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x28, 0x6, 0x0, 0x44) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x8040) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0xd3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003180)={0x11, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 24m53.30618806s ago: executing program 2 (id=5984): perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffff6d, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x91, @mcast1, 0x0, 0x1}, 0x80, 0x0}, 0x200008c1) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x2, 0x33a, 0x100, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x9}, 0x50) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x9, &(0x7f0000000380), 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb4, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r7 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @alu={0x4, 0x1, 0x5, 0x9, 0x2, 0xffffffffffffffe0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @ldst={0x1, 0x3, 0x6, 0xa, 0xb, 0x6, 0xffffffffffffffff}, @ldst={0x1, 0x0, 0x6, 0x9, 0x9, 0xffffffffffffffff, 0x8}, @alu={0x0, 0x0, 0xa, 0xa, 0x5, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x401, 0x4b, &(0x7f00000004c0)=""/75, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xf, 0x1, 0xf}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[r0], &(0x7f0000000600)=[{0x0, 0x2, 0x1, 0x6}, {0x3, 0x2, 0x6, 0x1}, {0x1, 0x5, 0x4, 0x7}, {0x0, 0x4, 0x9, 0x3}, {0x5, 0x3, 0xd, 0xe}, {0x3, 0x1, 0xb, 0x4}, {0x3, 0x3, 0x2, 0xc}, {0x5, 0x3, 0x0, 0x5}], 0x10, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r5, 0x58, &(0x7f00000007c0)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x17, &(0x7f0000000200)=r7, 0x21) 24m53.073927619s ago: executing program 3 (id=5987): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004000000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000240)="2616810726", 0x5}], 0x2}, 0x2) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020003ffe42037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="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", 0x407}], 0x2}, 0x10009004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000200)="ca8430801198b3bb14e7eea36a2e1164a27936db43414a429d32e0cbf34ab4c84b4fae4f0edcf2a6a9c83cb05b6b58f06d82788f87d9ab06c02c30f24da539fe297e860619111e04758ce8d6d037e3b0c8377e1e86ecc8bc9cba1a4cbb1101e8e862d42b57052f878e09391d7e17957dea56d4b26cc7fb60", 0x78}, {&(0x7f0000002500)="d4a6f0f2ff2705422ef08c081dfffa53eda3b013a122f7dbe0792cc5920a62d0e83eb9c672d2eec6f4d49d6bcf21dfae0470b11088eba96434313b7fd38746aa3e924fde03fd9dbb6f412d50f5df35cd5ba12be7c1eeca858f94eb75017d034f03997705f739f04e53e7e6e1313679eb1e3e05698035ee22144b9e", 0x7b}], 0x3, &(0x7f0000002580)=[{0x20, 0x119, 0x400, "d4f95bc2a3eb2119e23b4a08"}, {0xd8, 0x10a, 0x3, "f412176984f840a558efdd6164eb10836cd0bedacc8fb76b8e52c280cedcc79c41d945d68d9bae32527ac3b854a063301766324d36d13465257c0e8fdec7c077557a652449b014d90d1a0957427f6c877012fc4702a4406a71ba1e3af4fdc080275680a80d21d0a8ff07e93572dc1caa690b1813b76e2f0675e5dab43bb3e5afc34016db6077226b603c1a2cfd4878615bc5473da5aefd625101bf73da833dc2a19f576a7f90ba20808671d2aa7479363900a7b11d4adaf5f27a6938d5e40981933dc00eb2f84cc3"}, {0xf8, 0x108, 0x6, "c56c03ab5a22089b60b03214725f5ad3f200a036e7188b9d3584df333fa97e11f269ed1b7f6b3609cb6c7b96bdbb2f1224a48dfce50ff6871bf5e66105b09b69c8c8ed379f3271a9efa8d16f1efece93a18797d78de577bdf1a1b8cf28f3da9af47da318a7f64747dd4b3d5dcc32fb4411ab17ba01b576bd30caa3c6b564e1848ccac7c3e6f01c4e654cf47560377abbc7c492525290794eadc5e3bd3971db92af711690995f2fd8b3eff69e0d0ef70f45163c36f4351f8603df2ac79bbc80fa24c7a397f640f14c05d7c8b862c51c6cc73025088328b956314702e3bc5a40b834d455d5646d"}, {0x40, 0x10a, 0x9, "f3a7d8228d09e67f828737d037f72544506230aad32c3d3d29468e1d30ebbe1fad373ff1714ef7a607"}], 0x230}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 24m52.81146866s ago: executing program 3 (id=5988): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x26, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0xfffffffd}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x49238, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x23fd6b854b20bbab, 0x0, 0x4, 0x9, 0x0, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff800000003, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11486, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x1}, 0x200638, 0x2e, 0xfffffbff, 0x4, 0x2, 0x8000007, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x408, 0x8, 0xfffffffe, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@generic={0x18, 0x1, 0x2, 0x8000, 0xf3}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) 24m52.320175643s ago: executing program 2 (id=5989): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) (async) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c6000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r4 = gettid() perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x7, 0x2, 0x9, 0xf8, 0x0, 0x5, 0x42, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x1034, 0x6, 0x8, 0x4, 0xffe0000000000, 0x100, 0x2d42, 0x0, 0x4, 0x0, 0x80000001}, r4, 0x5, r2, 0x12) 24m51.727042193s ago: executing program 2 (id=5994): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x7a16, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x2000000000000, 0x0, 0x1, 0x401, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r1}, 0x38) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r2 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x28, 0x6, 0x0, 0x44) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x8040) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0xd3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003180)={0x11, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 24m51.312233992s ago: executing program 43 (id=5994): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x7a16, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x2000000000000, 0x0, 0x1, 0x401, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r1}, 0x38) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r2 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x28, 0x6, 0x0, 0x44) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x8040) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0xd3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003180)={0x11, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 24m51.288602568s ago: executing program 3 (id=5998): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf3, 0x99, 0x0, 0x0, 0x0, 0x0, 0x501d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x4, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x2, 0x4e20, @empty}, 0x80, 0x0}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0xffffffff, 0x0, 0x8000}, 0x50) 24m51.100337236s ago: executing program 44 (id=5998): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf3, 0x99, 0x0, 0x0, 0x0, 0x0, 0x501d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x4, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x2, 0x4e20, @empty}, 0x80, 0x0}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0xffffffff, 0x0, 0x8000}, 0x50) 11.992747796s ago: executing program 7 (id=16631): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='contention_end\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000001c80)=@hci, 0x5d, &(0x7f0000000100), 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="f8", 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$kcm(r2, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x20040010) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004885) 10.748779781s ago: executing program 7 (id=16642): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15409}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1b41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r3, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0x2d, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x3, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x54, 0x0, 0x50, 0x3}, @union={0xf, 0x3, 0x0, 0x5, 0x1, 0x5, [{0xa, 0x5, 0x1e000000}, {0xf, 0x2, 0x5}, {0xb, 0x4, 0x2}]}, @union={0x8, 0x4, 0x0, 0x5, 0x1, 0xc8, [{0x6, 0x5, 0x9}, {0x4, 0x3, 0x8}, {0x4, 0x3, 0x8b}, {0x0, 0x4, 0x9}]}, @func={0x5, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x2}}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}]}, {0x0, [0x0]}}, &(0x7f0000000240)=""/114, 0xdf, 0x72, 0x1, 0x101, 0x10000, @value=r6}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x7}}) 10.663894032s ago: executing program 5 (id=16643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x6, 0x1, 0xd, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000680)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0, 0x4c, &(0x7f0000000800)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000880), 0x8, 0x83, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xb, 0x6, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x8, 0x1, 0x0, r7}, @jmp={0x5, 0x1, 0x6, 0x1, 0x9, 0xffffffffffffffff}]}, &(0x7f0000000a80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x5, 0x9, 0x800, 0x96f3}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b80)=[{0x2, 0x2, 0x6, 0xc}, {0x4, 0x3, 0x10, 0x5}, {0x3, 0x1, 0x1, 0x2}, {0x3, 0x3, 0x0, 0x3}, {0x1, 0x1, 0xc, 0x4}, {0x5, 0x5, 0x6, 0x8}], 0x10, 0x1ef400}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{}, &(0x7f0000000d80), &(0x7f0000000dc0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0x1}, &(0x7f0000000e40), &(0x7f0000000e80)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001080)={0xffffffffffffffff, 0x9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@bloom_filter={0x1e, 0x9, 0x7, 0x1, 0x23089, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0xb}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x8, '\x00', 0x0, r3, 0x1, 0x0, 0x5}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x280900, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000001340)={'vcan0\x00', 0x8000}) ioctl$SIOCSIFHWADDR(r7, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @multicast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRES64=r1, @ANYRES16=r7, @ANYRESDEC=r6, @ANYRES32=r1, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESDEC=r5, @ANYRESDEC=r4], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 8.921871329s ago: executing program 5 (id=16647): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000006361"], 0x0, 0x52}, 0x28) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYRES8=r7], 0x12) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="020f000902000000e4a17c45c8d260c9", 0x10}], 0x10}, 0x0) r8 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$kcm(0x1e, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d20feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 8.736291956s ago: executing program 0 (id=16649): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1004, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.559875577s ago: executing program 4 (id=16650): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044080) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x3, &(0x7f0000001700)=@framed, &(0x7f0000001740)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000900)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x22509, r1}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, 0x0, 0xfc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000240)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000003f00000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fba8cae8c9010000734d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x40400c0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @private}, 0x10, &(0x7f0000000300)}, 0x0) close(r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'wlan0\x00', 0x200}) 8.384590627s ago: executing program 0 (id=16652): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='contention_end\x00') r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000001c80)=@hci, 0x5d, &(0x7f0000000100), 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$kcm(r3, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x20040010) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004885) 7.871551511s ago: executing program 7 (id=16654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f0bbcd00000000000300"/31], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000037a5bf71e0b150d3da7c1cf374dcf7d0ed21b880d5440ef84c8864b9574c04b75c47afd64180562b6c5b31d1f2727d32b9b3c5bb3cacf929ec76c010b905f3d7d695ab"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff00000000711066000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff070008"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="f01e2b760f15605c75538bf2db23ba3d1375dfc4ffdd8ab6e34fe8f4dd186562e8c2d0b134196c4d6ea5fe7df43d94a3de9e3a6875ab589a6d82a36e", 0x3c}, {&(0x7f0000000340)="2257a113f6dcc906a81799fe683308039af59e27fdbf65b639f0fbe729d03d428fd6", 0x22}, {&(0x7f0000000380)="2623a3edf7303c763ddce10b879483a85bfbece52e3928602ffd51da6b3228d96389502827b926d05507f320490873cb3568ff0d6a4d3516b5567af0dfae981029109fc85cc227f458a929cb29b1fee7e638905f429ad61a7e7903c832e3ad7bdb6235c4451be0dd2300a7e04e8f0f6f1109966945210a1e6ea7f28cdf971eebc73427a9594848acb235fd110a08c1b84ba384c3f9e023bff1e1c7f2c2aef16f1789", 0xa2}], 0x3}, 0x40000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xff93, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e0000d81500010084c06fb300000000080005007a010401a80016002000034004000000035c0461c9ab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798aeaa73e2fad95667e0fcd4c306dcdf63951f215ce3bb9ad809d5e1cace81000cffece0b494566d05f3d1269f0dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=""/76}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) syz_clone(0x200000, &(0x7f0000000240)="fce2f4b24074d0517fe1cafaf8d6c67f44480481308882ef4a64f0ad87973220b5e0f157878c929e65dc4c00a0094d09225cade483f15739c9c39b71ec28579a35f61c69ed91544a0e1b7e", 0x4b, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f0bbcd00000000000300"/31], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000037a5bf71e0b150d3da7c1cf374dcf7d0ed21b880d5440ef84c8864b9574c04b75c47afd64180562b6c5b31d1f2727d32b9b3c5bb3cacf929ec76c010b905f3d7d695ab"], 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff00000000711066000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff070008"], 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="f01e2b760f15605c75538bf2db23ba3d1375dfc4ffdd8ab6e34fe8f4dd186562e8c2d0b134196c4d6ea5fe7df43d94a3de9e3a6875ab589a6d82a36e", 0x3c}, {&(0x7f0000000340)="2257a113f6dcc906a81799fe683308039af59e27fdbf65b639f0fbe729d03d428fd6", 0x22}, {&(0x7f0000000380)="2623a3edf7303c763ddce10b879483a85bfbece52e3928602ffd51da6b3228d96389502827b926d05507f320490873cb3568ff0d6a4d3516b5567af0dfae981029109fc85cc227f458a929cb29b1fee7e638905f429ad61a7e7903c832e3ad7bdb6235c4451be0dd2300a7e04e8f0f6f1109966945210a1e6ea7f28cdf971eebc73427a9594848acb235fd110a08c1b84ba384c3f9e023bff1e1c7f2c2aef16f1789", 0xa2}], 0x3}, 0x40000) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xff93, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e0000d81500010084c06fb300000000080005007a010401a80016002000034004000000035c0461c9ab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798aeaa73e2fad95667e0fcd4c306dcdf63951f215ce3bb9ad809d5e1cace81000cffece0b494566d05f3d1269f0dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=""/76}, 0x20) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1000}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) syz_clone(0x200000, &(0x7f0000000240)="fce2f4b24074d0517fe1cafaf8d6c67f44480481308882ef4a64f0ad87973220b5e0f157878c929e65dc4c00a0094d09225cade483f15739c9c39b71ec28579a35f61c69ed91544a0e1b7e", 0x4b, 0x0, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) (async) 7.50925655s ago: executing program 4 (id=16655): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000200000", @ANYRES32, @ANYBLOB="0000000000000000b702000014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sock_ops=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4, '\x00', 0x0, r1, 0x3, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)='%-010d \x00'}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r0, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/36, 0x24, 0x0, &(0x7f0000000640)=""/153, 0x99}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, &(0x7f0000000340), 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x30, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r5, &(0x7f0000000200)="74afecd7e1dd9767591d48621b68f80b4cc4d1b9f6fe8ba7f072e758c2b7c2eb7cb9f6d935f59ff32d2572085e5c", &(0x7f00000002c0)=""/141}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) 7.198884525s ago: executing program 5 (id=16657): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001de21831a0e69ee517d34460bc06002d98ef750dfe9e8fd44d17a9a2e3a1fd0000a705251e6182949a36fa886ca9b032a4178017253b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4048000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f00000000c0)=""/240, 0xf0}, {&(0x7f00000010c0)=""/4069, 0xfe5}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000000b00)=""/94, 0x5e}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f0000000ec0)=""/192, 0xc0}, {&(0x7f0000000340)=""/168, 0xa8}], 0x8}, 0x40002002) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x8847) 4.077734319s ago: executing program 0 (id=16658): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x53, 0x1, 0xff, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x5, 0x2000000014f}, 0x14105, 0x8, 0xfffffbff, 0x8, 0x8be, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000025c0)={&(0x7f00000024c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x4, 0x1, 0x6, [{0x3, 0x2, 0x8001}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x61, 0x2e]}}, 0x0, 0x37, 0x0, 0x1, 0xd83}, 0x28) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="160000da00000000f0ffffff", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x3) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x300}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000eaea7110be000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x77, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x17) r8 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) sendmsg$kcm(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90524fc60", 0x14}], 0x1}, 0x40) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r9, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000340300f10400000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x3, 0x10) 3.823350142s ago: executing program 8 (id=16660): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="21000000000000000000000000001000"], 0x48) 3.672193136s ago: executing program 8 (id=16661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.616400495s ago: executing program 8 (id=16662): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}]}}, 0x0, 0x32}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r0, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0xf, 0x6, 0xfffffeff, 0x14200, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000d6080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x4, 0x2204, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x0, @perf_bp={0x0, 0xb}, 0x102002, 0x3, 0x207, 0x8, 0x81, 0x5, 0x6, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) 3.323221483s ago: executing program 7 (id=16663): socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000064feffff620af0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0xfe33) 3.103999238s ago: executing program 4 (id=16664): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) socketpair(0x1, 0x20000000000001, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="110000000000e000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.103533265s ago: executing program 5 (id=16665): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200890600002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xfe5f}, {&(0x7f0000000840)="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", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0bea0", 0xbf}], 0x3}, 0x8001) 3.018258796s ago: executing program 0 (id=16666): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r2, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0xf, 0x6, 0xfffffeff, 0x14200, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}], &(0x7f0000000200)='GPL\x00', 0x23f8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xe, 0xd, 0x2}, 0x10, r3, 0x0, 0x5, &(0x7f0000000540)=[r4, 0xffffffffffffffff, r5, r6, r7, r8, r9], &(0x7f0000000580)=[{0x0, 0x2, 0xc, 0xa}, {0x0, 0x5, 0x0, 0x7}, {0x5, 0x4, 0x1, 0xc}, {0x2, 0x2, 0x6, 0x6}, {0x0, 0x2, 0xa, 0x9}], 0x10, 0x6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x4, 0x2204, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x0, @perf_bp={0x0, 0xb}, 0x102002, 0x3, 0x207, 0x8, 0x81, 0x5, 0x6, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) 2.982663117s ago: executing program 8 (id=16667): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x12, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd0}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4d0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @func]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0xc2, &(0x7f0000000140)=""/194, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x4, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x2, 0x10, 0xc}, {0x5, 0x2, 0x5, 0x3}, {0x3, 0x1, 0xa, 0x5}, {0x3, 0x4, 0x2, 0xc}, {0x1, 0x3, 0xf, 0x6}, {0x2, 0x2, 0x7, 0x1}, {0x5, 0x4, 0x3, 0x2}, {0x3, 0x4, 0xa, 0x1}]}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000500)="5172b6df9fd6a754a79eae72cc17c0c0f2e4edbf4bed2fea388d1443b55f059459a1e9baae1640f8b3355a937589aaf74404807ebe7496fa31f480cb9ed5737d105b55288752729791253f7bd1fe9c1c0c22fa63d6c932040a1b8a9c51564d807ae12ae2590c99b4a8e6bc3f0876cc38e4856318592c99399db6a1a1dea13a6c56338e94db47d5f8427093010724ad5d378bb4a06fcf716c00539928589a4c67fba2d7658c39a331a2a13d0a81999f07ef4432b893bf15a2573c7451bf89", 0xbe}], 0x1, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@cipso={0x86, 0x1e, 0x3, [{0x0, 0x8, "3bd236f36569"}, {0x2, 0x2}, {0x6, 0xe, "5a4f6ccdf156b257daefd20d"}]}, @rr={0x7, 0x2b, 0x39, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @multicast2, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, @loopback, @remote, @empty]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4a3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0xc0}, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0xd, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_val={0x18, 0x5, 0x2, 0x0, r2}, @alu={0x4, 0x1, 0x0, 0x4, 0xb, 0xfffffffffffffff4, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f0000000800)='syzkaller\x00', 0x8, 0x1, &(0x7f0000000840)=""/1, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x25037, r0, 0x0, &(0x7f00000008c0)=[r2], 0x0, 0x10, 0x1}, 0x94) r4 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@cgroup=r3, 0x36, 0x1, 0x2, &(0x7f00000009c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000a00)=[0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@map=r2, r0, 0x27, 0x8, 0x0, @void, @value=r3, @void, @void, r6}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r0, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x9, 0x0, r2, 0x7, '\x00', r8, r1, 0x2, 0x2, 0x4}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000d00)={0xffffffffffffffff, r2, 0x0, 0xa, &(0x7f0000000cc0)='syzkaller\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@fallback=r9, r0, 0x26, 0x28, 0x0, @void, @void, @void, @value=r10, r6}, 0x20) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000d80)={[{0x2b, 'hugetlb'}, {0x2d, 'rlimit'}, {0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'blkio'}, {0x2d, 'pids'}, {0x2b, 'blkio'}, {0x2d, 'memory'}]}, 0x38) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f40), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001000)={r2, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={r7, 0x599, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r2, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001140)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1a, 0xa, &(0x7f0000000dc0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000e40)='GPL\x00', 0x6, 0xba, &(0x7f0000000e80)=""/186, 0x41000, 0x1, '\x00', r8, @tracing, r11, 0x8, &(0x7f0000000f80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0xb, 0x7fffffff, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000001180)=[r2, r12, r2, r13, r14, r2, r9, r2, r9, r15], &(0x7f00000011c0)=[{0x5, 0x3, 0x1, 0xa}, {0x5, 0x4, 0xc}, {0x5, 0x4, 0x6, 0x7}], 0x10, 0x10f4}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={0x1, &(0x7f00000012c0)="ae183f943a84773241096233366e8eb9151e2f871b814b577e1b02c442d9863dc4256dcd53a0e607a846e52f82786c45b35d89e77828e7120857617b2152f62ade6942d7ca1ebdf277775654924c14809d5f18b8bec897819479e9b82d1d1937c51ee4befe6997f6b88ca991d77d94914243eed11d423ff7", &(0x7f0000001340)=""/173, 0x4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@float={0x8, 0x0, 0x0, 0x10, 0x2}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0xa}]}, {0x0, [0x61, 0x2e, 0x2e]}}, &(0x7f0000001480)=""/99, 0x39, 0x63, 0x0, 0x3}, 0x28) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$TUNGETVNETBE(r16, 0x800454df, &(0x7f0000001580)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000015c0)={r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x4, &(0x7f0000001600)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000001640)='syzkaller\x00', 0x0, 0x5a, &(0x7f0000001680)=""/90, 0x41000, 0x20, '\x00', r8, 0x0, r11, 0x8, &(0x7f0000001700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001740)={0x3, 0x5, 0x7, 0xfffffffc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001780)=[r12, r14, r2], 0x0, 0x10, 0x9}, 0x94) r17 = openat$cgroup_subtree(r5, &(0x7f0000001880), 0x2, 0x0) write$cgroup_subtree(r17, &(0x7f00000018c0)={[{0x2b, 'io'}]}, 0x4) 2.950034075s ago: executing program 4 (id=16668): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c000000210000000200000008000000040000840700000004000000000000008200000007000000010000000600000048000000050000002b0f0000000400000000000007"], 0x0, 0x56, 0x0, 0x0, 0xfffffffc}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="39000000140081ae10003c000500018311001f9de60cbda816dc9f2c90c3c79f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3", 0x39}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.799742012s ago: executing program 5 (id=16669): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair(0x1e, 0x6, 0x211, &(0x7f0000001680)) close(r2) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0xf5, 0x10, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x12}, 0x80, 0x0, 0x91}, 0x24000059) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000071dd68160b51ed5405e75d2d6032c2557ed55fa19b55f72998cb"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x18, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000001000000000000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$TUNGETVNETLE(r2, 0x40047440, &(0x7f00000002c0)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) syz_clone(0x20111, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x200000000000004, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x54, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_pressure(r7, &(0x7f0000000180)={'some', 0x20, 0x9}, 0x2f) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.796290088s ago: executing program 0 (id=16670): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='contention_end\x00') r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$kcm(r2, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x20040010) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004885) 2.482803294s ago: executing program 8 (id=16671): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x32}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r0, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0xf, 0x6, 0xfffffeff, 0x14200, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000d6080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x4, 0x2204, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x0, @perf_bp={0x0, 0xb}, 0x102002, 0x3, 0x207, 0x8, 0x81, 0x5, 0x6, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) 941.127615ms ago: executing program 7 (id=16672): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x22, 0x3, 0x0) close(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xc3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 313.137387ms ago: executing program 4 (id=16673): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0xfdef) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1f, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ff03000000000000010000008520000001000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000850000006900000018240000", @ANYRES32=r5, @ANYBLOB="000000003cf3000095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa1000000000f0007010000f8ffffffb702000008000000b7030000090000048500000006000000186400000700000000000000d60200009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xd4, &(0x7f0000000780)=""/212, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xb, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000240)=[r5, r5, r5, r5], &(0x7f0000000440)=[{0x2, 0x3, 0xf, 0x5}, {0x2, 0x4, 0xc}, {0x0, 0x1, 0x2, 0x3}, {0x1, 0x5, 0xf, 0x2}, {0x3, 0x4, 0xf, 0x5}, {0x1, 0x1, 0x7, 0x4}, {0x5, 0x4, 0x3, 0x9}], 0x10, 0x2}, 0x94) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)={0x1000}, 0x8) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b002000040000000200000004000000002f7c2a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r4, @ANYRESHEX=r1], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20000810) (async, rerun: 32) socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x828, 0x5, 0x0, 0x0, 0x9, 0x6, 0xd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) sendmsg$unix(r8, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r9 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getpid() bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) 231.231004ms ago: executing program 0 (id=16674): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88400, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x40, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x24000000) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$kcm(0xf, 0x3, 0x2) close(r1) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1604, 0xc8, 0x1, 0x0, 0xfffffffffffffffe, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 198.171295ms ago: executing program 8 (id=16675): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00160014000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0b", 0x40}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050", 0x14}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0x2, 0x0, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="ac141412ac141438080000001c000000000003000000000007000000830b91"], 0x58}, 0x4008804) close(r3) 144.266518ms ago: executing program 5 (id=16676): r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x4008240b, &(0x7f00000013c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00003200"], 0xfe33) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = openat$cgroup_ro(r4, &(0x7f0000000300)='cpuacct.usage_all\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x1d, &(0x7f00000001c0), 0x4) (fail_nth: 2) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000004000000080000000c0000000000", @ANYRES32, @ANYBLOB="1000000000000000000000000000000000000000aa9292030bd91e1ee02c97d7b70150fe46036b665e679f5c2d7a1a8badeb8bf8b7e00e9de199146bdf5c4db15e700078e1591f01ec8032921dc56194b95b76d6154b522b4cd3b239cb456f84e5f8640ee89c7ecf7eb0adf2f3973321d6e7b235ac2f6be200bbcca175c8fb7047f742904c1ef59d17be569dd51176b39f945313c8c4b5c12a8febc3d8b1fcb0cdfa1d5620c5e3c470b79f3c19ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x5, 0x10, 0x2, 0x7f, 0x0, 0x3e, 0x424, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x9}, 0x2, 0x4, 0x8960, 0x3, 0x1000000010001, 0x7, 0x53d, 0x0, 0xc, 0x0, 0xbec}) 143.284765ms ago: executing program 7 (id=16677): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x53, 0x1, 0xff, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x5, 0x2000000014f}, 0x14105, 0x8, 0xfffffbff, 0x8, 0x8be, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000025c0)={&(0x7f00000024c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x4, 0x1, 0x6, [{0x3, 0x2, 0x8001}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x61, 0x2e]}}, 0x0, 0x37, 0x0, 0x1, 0xd83}, 0x28) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="160000da00000000f0ffffff", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x3) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x300}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000eaea7110be000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x77, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x17) r8 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) sendmsg$kcm(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90524fc60", 0x14}], 0x1}, 0x40) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r9, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000340300f10400000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=16678): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8220, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xacc}, 0x0, 0xfff, 0xfffffe01, 0x2, 0x6, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x830, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001c80)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0x9}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0x800, 0xffffffffffffffff, 0x2) (async) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001c40)={&(0x7f0000000200)=@ieee802154, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="d8000000000000003a000000fb0a0000c16002cc2426b852295ee10fd7264f4858725c5acb2eaa614f06b91f83ccec34a74b5482633adf662674c72940f44782a6fbe6f17faea618c34f09ba254baafb7742ceb119dd056e1f19f8dffde728787f28fd4f218bf8a7c7130302e8aa13e4bbd7b00bbb265d6da46c7a1deffed3097c388f96107c020b9d07e46e1a49bda9262638c35836c6489cfc86ad69d851bf223b62a0b71cc4da2a0147cc2bec0b61e415fc1d8a3a222517ae04262c9f96d207c0ddb779ed08f142710f43d8da09b84f43775000000000800000000000000014010000070000002798669358"], 0x470}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): ll_64+0xfa/0x3b0 [ 2452.232230][T25081] ? lockdep_hardirqs_on+0x9c/0x150 [ 2452.232258][T25081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2452.232280][T25081] ? clear_bhb_loop+0x60/0xb0 [ 2452.232307][T25081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2452.232328][T25081] RIP: 0033:0x7efd7678ebe9 [ 2452.232348][T25081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2452.232367][T25081] RSP: 002b:00007efd7755a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2452.232390][T25081] RAX: ffffffffffffffda RBX: 00007efd769b5fa0 RCX: 00007efd7678ebe9 [ 2452.232407][T25081] RDX: 0000000000040880 RSI: 0000200000007940 RDI: 0000000000000007 [ 2452.232422][T25081] RBP: 00007efd7755a090 R08: 0000000000000000 R09: 0000000000000000 [ 2452.232435][T25081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2452.232448][T25081] R13: 00007efd769b6038 R14: 00007efd769b5fa0 R15: 00007ffeb27a13c8 [ 2452.232485][T25081] [ 2453.061003][T25091] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15981'. [ 2453.402029][T25095] netlink: 'syz.0.15983': attribute type 11 has an invalid length. [ 2453.503209][T25095] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15983'. [ 2453.763759][T25094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2454.013829][T25109] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.15990'. [ 2454.032511][T25107] syz.0.15987: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2454.048000][T25109] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 2454.058046][T25107] CPU: 0 UID: 0 PID: 25107 Comm: syz.0.15987 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2454.058074][T25107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2454.058088][T25107] Call Trace: [ 2454.058097][T25107] [ 2454.058105][T25107] dump_stack_lvl+0x189/0x250 [ 2454.058141][T25107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2454.058167][T25107] ? __pfx__printk+0x10/0x10 [ 2454.058209][T25107] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2454.058245][T25107] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2454.058273][T25107] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2454.058303][T25107] warn_alloc+0x214/0x310 [ 2454.058335][T25107] ? stack_depot_save_flags+0x40/0x860 [ 2454.058367][T25107] ? __pfx_warn_alloc+0x10/0x10 [ 2454.058401][T25107] ? kasan_save_track+0x4f/0x80 [ 2454.058429][T25107] ? xskq_create+0x56/0x170 [ 2454.058454][T25107] ? xsk_init_queue+0xb0/0x110 [ 2454.058477][T25107] ? xsk_setsockopt+0x57b/0x8d0 [ 2454.058499][T25107] ? do_sock_setsockopt+0x179/0x1b0 [ 2454.058530][T25107] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 2454.058559][T25107] ? do_syscall_64+0xfa/0x3b0 [ 2454.058587][T25107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2454.058625][T25107] __vmalloc_node_range_noprof+0x125/0x12f0 [ 2454.058713][T25107] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2454.058754][T25107] ? __kasan_kmalloc+0x93/0xb0 [ 2454.058788][T25107] vmalloc_user_noprof+0xad/0xf0 [ 2454.058821][T25107] ? xskq_create+0xbf/0x170 [ 2454.058850][T25107] xskq_create+0xbf/0x170 [ 2454.058883][T25107] xsk_init_queue+0xb0/0x110 [ 2454.058915][T25107] xsk_setsockopt+0x57b/0x8d0 [ 2454.058946][T25107] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2454.058974][T25107] ? __pfx_aa_sk_perm+0x10/0x10 [ 2454.059010][T25107] ? __fget_files+0x2a/0x420 [ 2454.059042][T25107] ? aa_sock_opt_perm+0xff/0x1b0 [ 2454.059081][T25107] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2454.059105][T25107] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2454.059135][T25107] do_sock_setsockopt+0x179/0x1b0 [ 2454.059179][T25107] __x64_sys_setsockopt+0x13f/0x1b0 [ 2454.059223][T25107] do_syscall_64+0xfa/0x3b0 [ 2454.059265][T25107] ? lockdep_hardirqs_on+0x9c/0x150 [ 2454.059296][T25107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2454.059318][T25107] ? clear_bhb_loop+0x60/0xb0 [ 2454.059346][T25107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2454.059368][T25107] RIP: 0033:0x7fd79c58ebe9 [ 2454.059388][T25107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2454.059407][T25107] RSP: 002b:00007fd79d363038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2454.059429][T25107] RAX: ffffffffffffffda RBX: 00007fd79c7b5fa0 RCX: 00007fd79c58ebe9 [ 2454.059456][T25107] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 2454.059468][T25107] RBP: 00007fd79c611e19 R08: 0000000000000004 R09: 0000000000000000 [ 2454.059480][T25107] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2454.059493][T25107] R13: 00007fd79c7b6038 R14: 00007fd79c7b5fa0 R15: 00007ffd05866e48 [ 2454.059530][T25107] [ 2454.059540][T25107] Mem-Info: [ 2454.141339][T25109] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2454.158602][T25107] active_anon:14071 inactive_anon:0 isolated_anon:0 [ 2454.158602][T25107] active_file:22739 inactive_file:40824 isolated_file:0 [ 2454.158602][T25107] unevictable:768 dirty:397 writeback:0 [ 2454.158602][T25107] slab_reclaimable:13493 slab_unreclaimable:108796 [ 2454.158602][T25107] mapped:30026 shmem:7890 pagetables:1257 [ 2454.158602][T25107] sec_pagetables:0 bounce:0 [ 2454.158602][T25107] kernel_misc_reclaimable:0 [ 2454.158602][T25107] free:1280379 free_pcp:21196 free_cma:0 [ 2454.303133][T25117] FAULT_INJECTION: forcing a failure. [ 2454.303133][T25117] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.448215][T25117] CPU: 0 UID: 0 PID: 25117 Comm: syz.8.15991 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2454.448256][T25117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2454.448269][T25117] Call Trace: [ 2454.448277][T25117] [ 2454.448288][T25117] dump_stack_lvl+0x189/0x250 [ 2454.448319][T25117] ? __pfx____ratelimit+0x10/0x10 [ 2454.448354][T25117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2454.448380][T25117] ? __pfx__printk+0x10/0x10 [ 2454.448424][T25117] should_fail_ex+0x414/0x560 [ 2454.448459][T25117] should_failslab+0xa8/0x100 [ 2454.448493][T25117] __kmalloc_cache_noprof+0x70/0x3d0 [ 2454.448522][T25117] ? sctp_add_bind_addr+0x8c/0x370 [ 2454.448554][T25117] sctp_add_bind_addr+0x8c/0x370 [ 2454.448585][T25117] sctp_copy_local_addr_list+0x30b/0x4e0 [ 2454.448618][T25117] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 2454.448646][T25117] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2454.448678][T25117] ? sctp_v4_is_any+0x35/0x60 [ 2454.448704][T25117] ? sctp_copy_one_addr+0x93/0x360 [ 2454.448735][T25117] sctp_bind_addr_copy+0xb3/0x3c0 [ 2454.448764][T25117] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2454.448791][T25117] sctp_connect_new_asoc+0x2e0/0x690 [ 2454.448827][T25117] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2454.448858][T25117] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2454.448888][T25117] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2454.448914][T25117] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2454.448947][T25117] sctp_sendmsg+0x155c/0x2810 [ 2454.448992][T25117] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2454.449029][T25117] ? aa_sk_perm+0x81e/0x950 [ 2454.449066][T25117] ? __pfx_aa_sk_perm+0x10/0x10 [ 2454.449100][T25117] ? sock_rps_record_flow+0x19/0x410 [ 2454.449129][T25117] ? inet_sendmsg+0x2f4/0x370 [ 2454.449159][T25117] __sock_sendmsg+0x19c/0x270 [ 2454.449190][T25117] ____sys_sendmsg+0x505/0x830 [ 2454.449226][T25117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2454.449260][T25117] ? import_iovec+0x74/0xa0 [ 2454.449289][T25117] ___sys_sendmsg+0x21f/0x2a0 [ 2454.449314][T25117] ? __pfx____sys_sendmsg+0x10/0x10 [ 2454.449360][T25117] ? __fget_files+0x2a/0x420 [ 2454.449416][T25117] ? __fget_files+0x2a/0x420 [ 2454.449445][T25117] ? __fget_files+0x3a0/0x420 [ 2454.449490][T25117] __x64_sys_sendmsg+0x19b/0x260 [ 2454.449516][T25117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2454.449549][T25117] ? __pfx_ksys_write+0x10/0x10 [ 2454.449576][T25117] ? rcu_is_watching+0x15/0xb0 [ 2454.449603][T25117] ? do_syscall_64+0xbe/0x3b0 [ 2454.449639][T25117] do_syscall_64+0xfa/0x3b0 [ 2454.449668][T25117] ? lockdep_hardirqs_on+0x9c/0x150 [ 2454.449694][T25117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2454.449714][T25117] ? clear_bhb_loop+0x60/0xb0 [ 2454.449740][T25117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2454.449759][T25117] RIP: 0033:0x7efd7678ebe9 [ 2454.449778][T25117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2454.449795][T25117] RSP: 002b:00007efd7755a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2454.449817][T25117] RAX: ffffffffffffffda RBX: 00007efd769b5fa0 RCX: 00007efd7678ebe9 [ 2454.449833][T25117] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003 [ 2454.449846][T25117] RBP: 00007efd7755a090 R08: 0000000000000000 R09: 0000000000000000 [ 2454.449859][T25117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2454.449871][T25117] R13: 00007efd769b6038 R14: 00007efd769b5fa0 R15: 00007ffeb27a13c8 [ 2454.449905][T25117] [ 2454.455134][T25107] Node 0 active_anon:52584kB inactive_anon:0kB active_file:90956kB inactive_file:163096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120104kB dirty:1588kB writeback:0kB shmem:26224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11488kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2454.780768][T25121] netlink: 14 bytes leftover after parsing attributes in process `syz.8.15993'. [ 2454.808100][T25107] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2454.898051][T25107] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2454.955567][T25107] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 2454.996224][T25107] Node 0 DMA32 free:1233980kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49560kB inactive_anon:0kB active_file:90956kB inactive_file:161516kB unevictable:1536kB writepending:1596kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:54260kB local_pcp:20292kB free_cma:0kB [ 2455.115398][T25107] lowmem_reserve[]: 0 0 1 1 1 [ 2455.144554][T25107] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2455.267955][T25107] lowmem_reserve[]: 0 0 0 0 0 [ 2455.283058][T25107] Node 1 Normal free:3883020kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24292kB local_pcp:9760kB free_cma:0kB [ 2455.417976][T25107] lowmem_reserve[]: 0 0 0 0 0 [ 2455.422763][T25107] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2455.511950][T25107] Node 0 DMA32: 1292*4kB (UM) 866*8kB (UME) 613*16kB (UME) 1026*32kB (UME) 422*64kB (UME) 435*128kB (UM) 509*256kB (UME) 279*512kB (UM) 202*1024kB (UME) 7*2048kB (UME) 148*4096kB (UM) = 1237968kB [ 2455.592686][T25107] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 2455.657288][T25107] Node 1 Normal: 211*4kB (UE) 48*8kB (UME) 32*16kB (UME) 70*32kB (UME) 18*64kB (UME) 6*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3883020kB [ 2455.732078][T25107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2455.762291][T25107] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2455.788052][T25107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2455.830312][T25107] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2455.858458][T25107] 68713 total pagecache pages [ 2455.873587][T25107] 0 pages in swap cache [ 2455.877792][T25107] Free swap = 124996kB [ 2455.918558][T25107] Total swap = 124996kB [ 2455.938815][T25107] 2097051 pages RAM [ 2455.942681][T25107] 0 pages HighMem/MovableOnly [ 2455.957971][T25107] 425654 pages reserved [ 2455.962172][T25107] 0 pages cma reserved [ 2456.141441][ T3320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2456.152563][ T3320] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2456.169079][ T3320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2456.177246][ T3320] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2456.192964][ T3320] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2456.502862][T19689] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.628016][T25156] netlink: 'syz.5.16002': attribute type 2 has an invalid length. [ 2456.745636][T25156] netlink: 'syz.5.16002': attribute type 7 has an invalid length. [ 2456.768101][T25156] netlink: 85 bytes leftover after parsing attributes in process `syz.5.16002'. [ 2456.803439][T19689] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.817409][T25156] netlink: 130140 bytes leftover after parsing attributes in process `syz.5.16002'. [ 2456.900651][T25156] netlink: 'syz.5.16002': attribute type 2 has an invalid length. [ 2456.909475][T25163] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.16005'. [ 2456.970275][T25156] netlink: 'syz.5.16002': attribute type 7 has an invalid length. [ 2456.991899][T19689] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2457.017905][T25156] netlink: 85 bytes leftover after parsing attributes in process `syz.5.16002'. [ 2457.188878][T25170] netlink: 'syz.7.16006': attribute type 10 has an invalid length. [ 2457.206655][T19689] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2457.225609][T25170] netlink: 40 bytes leftover after parsing attributes in process `syz.7.16006'. [ 2457.314491][T25173] netlink: 'syz.0.16009': attribute type 4 has an invalid length. [ 2457.333072][T25173] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16009'. [ 2457.801160][T25143] chnl_net:caif_netlink_parms(): no params data found [ 2457.888876][T25183] pim6reg1: entered allmulticast mode [ 2457.968132][T19689] bridge_slave_1: left allmulticast mode [ 2457.974271][T19689] bridge_slave_1: left promiscuous mode [ 2457.980889][T19689] bridge0: port 2(bridge_slave_1) entered disabled state [ 2458.006443][T19689] bridge_slave_0: left allmulticast mode [ 2458.012355][T19689] bridge_slave_0: left promiscuous mode [ 2458.022685][T19689] bridge0: port 1(bridge_slave_0) entered disabled state [ 2458.238149][ T3320] Bluetooth: hci3: command tx timeout [ 2459.184448][T19689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2459.208888][T19689] bond_slave_0: left promiscuous mode [ 2459.217796][T19689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2459.232217][T19689] bond_slave_1: left promiscuous mode [ 2459.241148][T19689] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2459.254457][T19689] batadv_slave_0: left promiscuous mode [ 2459.261281][T19689] bond0 (unregistering): Released all slaves [ 2459.358055][ T3320] Bluetooth: hci5: command 0x0406 tx timeout [ 2459.435127][T25206] __nla_validate_parse: 2 callbacks suppressed [ 2459.435160][T25206] netlink: 35840 bytes leftover after parsing attributes in process `syz.7.16020'. [ 2459.667289][T25224] netlink: 'syz.8.16023': attribute type 13 has an invalid length. [ 2459.677784][T25224] netlink: 152 bytes leftover after parsing attributes in process `syz.8.16023'. [ 2459.754209][T25224] : refused to change device tx_queue_len [ 2459.791993][T25224] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2459.819744][T25143] bridge0: port 1(bridge_slave_0) entered blocking state [ 2459.837446][T25143] bridge0: port 1(bridge_slave_0) entered disabled state [ 2459.849506][T25143] bridge_slave_0: entered allmulticast mode [ 2459.871141][T25143] bridge_slave_0: entered promiscuous mode [ 2459.901883][T25143] bridge0: port 2(bridge_slave_1) entered blocking state [ 2459.935919][T25143] bridge0: port 2(bridge_slave_1) entered disabled state [ 2459.967711][T25143] bridge_slave_1: entered allmulticast mode [ 2459.989899][T25143] bridge_slave_1: entered promiscuous mode [ 2460.208225][T25241] netlink: 'syz.8.16030': attribute type 2 has an invalid length. [ 2460.238087][T25241] netlink: 'syz.8.16030': attribute type 8 has an invalid length. [ 2460.260961][T25241] netlink: 132 bytes leftover after parsing attributes in process `syz.8.16030'. [ 2460.327626][T20188] Bluetooth: hci3: command tx timeout [ 2460.636678][T25143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2460.744176][T25246] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2460.780633][T25143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2460.894873][T25143] team0: Port device team_slave_0 added [ 2460.957481][T25255] FAULT_INJECTION: forcing a failure. [ 2460.957481][T25255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2460.992399][T25255] CPU: 1 UID: 0 PID: 25255 Comm: syz.0.16034 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2460.992432][T25255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2460.992446][T25255] Call Trace: [ 2460.992458][T25255] [ 2460.992469][T25255] dump_stack_lvl+0x189/0x250 [ 2460.992503][T25255] ? __pfx____ratelimit+0x10/0x10 [ 2460.992538][T25255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2460.992570][T25255] ? __pfx__printk+0x10/0x10 [ 2460.992607][T25255] ? __might_fault+0xb0/0x130 [ 2460.992650][T25255] ? __might_fault+0xb0/0x130 [ 2460.992700][T25255] should_fail_ex+0x414/0x560 [ 2460.992755][T25255] _copy_from_iter+0x1db/0x16f0 [ 2460.992793][T25255] ? sock_alloc_send_pskb+0x875/0x990 [ 2460.992839][T25255] ? __pfx__copy_from_iter+0x10/0x10 [ 2460.992893][T25255] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2460.992932][T25255] skb_copy_datagram_from_iter+0xf5/0x720 [ 2460.992974][T25255] ? skb_put+0x11b/0x210 [ 2460.993024][T25255] tun_get_user+0x1691/0x3e20 [ 2460.993108][T25255] ? aa_file_perm+0x44d/0x1550 [ 2460.993135][T25255] ? __pfx_tun_get_user+0x10/0x10 [ 2460.993170][T25255] ? perf_trace_run_bpf_submit+0xee/0x170 [ 2460.993217][T25255] ? perf_trace_lock+0x2f8/0x3b0 [ 2460.993265][T25255] ? __pfx_perf_trace_lock+0x10/0x10 [ 2460.993291][T25255] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2460.993343][T25255] ? tun_get+0x1c/0x2f0 [ 2460.993386][T25255] ? tun_get+0x1c/0x2f0 [ 2460.993414][T25255] ? tun_get+0x1c/0x2f0 [ 2460.993455][T25255] tun_chr_write_iter+0x113/0x200 [ 2460.993514][T25255] vfs_write+0x5c6/0xb30 [ 2460.993560][T25255] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2460.993597][T25255] ? __pfx_vfs_write+0x10/0x10 [ 2460.993656][T25255] ? __fget_files+0x2a/0x420 [ 2460.993723][T25255] ksys_write+0x145/0x250 [ 2460.993780][T25255] ? __pfx_ksys_write+0x10/0x10 [ 2460.993804][T25255] ? rcu_is_watching+0x15/0xb0 [ 2460.993845][T25255] ? do_syscall_64+0xbe/0x3b0 [ 2460.993889][T25255] do_syscall_64+0xfa/0x3b0 [ 2460.993919][T25255] ? lockdep_hardirqs_on+0x9c/0x150 [ 2460.993951][T25255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2460.993974][T25255] ? clear_bhb_loop+0x60/0xb0 [ 2460.994010][T25255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2460.994032][T25255] RIP: 0033:0x7fd79c58ebe9 [ 2460.994054][T25255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2460.994073][T25255] RSP: 002b:00007fd79d363038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2460.994097][T25255] RAX: ffffffffffffffda RBX: 00007fd79c7b5fa0 RCX: 00007fd79c58ebe9 [ 2460.994113][T25255] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 2460.994127][T25255] RBP: 00007fd79d363090 R08: 0000000000000000 R09: 0000000000000000 [ 2460.994141][T25255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2460.994154][T25255] R13: 00007fd79c7b6038 R14: 00007fd79c7b5fa0 R15: 00007ffd05866e48 [ 2460.994220][T25255] [ 2461.301033][T25257] netlink: 'syz.5.16035': attribute type 10 has an invalid length. [ 2461.320516][T25143] team0: Port device team_slave_1 added [ 2461.484091][T25143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2461.497045][T25143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2461.524676][T25143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2461.537474][T25143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2461.547062][T25143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2461.574700][T25143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2461.931872][T25143] hsr_slave_0: entered promiscuous mode [ 2461.948860][T25143] hsr_slave_1: entered promiscuous mode [ 2461.967439][T25143] debugfs: 'hsr0' already exists in 'hsr' [ 2461.984240][T25143] Cannot create hsr debugfs directory [ 2462.418247][T20188] Bluetooth: hci3: command tx timeout [ 2462.440054][T25288] netlink: 'syz.5.16047': attribute type 21 has an invalid length. [ 2462.564278][T25291] netlink: 'syz.8.16048': attribute type 10 has an invalid length. [ 2463.438942][T25299] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.16051'. [ 2464.478464][T20188] Bluetooth: hci3: command tx timeout [ 2464.612917][T25287] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.16047'. [ 2464.626398][T25291] team0: Device ipvlan1 failed to register rx_handler [ 2464.798604][T25313] netlink: 'syz.7.16058': attribute type 2 has an invalid length. [ 2464.811464][T25313] netlink: 'syz.7.16058': attribute type 8 has an invalid length. [ 2464.823896][T25313] netlink: 132 bytes leftover after parsing attributes in process `syz.7.16058'. [ 2464.841770][T25312] netlink: 60 bytes leftover after parsing attributes in process `syz.8.16059'. [ 2464.876643][T25316] netlink: 60 bytes leftover after parsing attributes in process `syz.8.16059'. [ 2464.893056][T25312] netlink: 60 bytes leftover after parsing attributes in process `syz.8.16059'. [ 2465.086450][T25321] netlink: 'syz.8.16062': attribute type 2 has an invalid length. [ 2465.102729][T25321] netlink: 'syz.8.16062': attribute type 8 has an invalid length. [ 2465.137085][T25326] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16061'. [ 2465.172453][T25321] netlink: 132 bytes leftover after parsing attributes in process `syz.8.16062'. [ 2465.805836][T25349] netlink: 'syz.7.16069': attribute type 10 has an invalid length. [ 2465.851675][T25351] FAULT_INJECTION: forcing a failure. [ 2465.851675][T25351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2465.890271][T25351] CPU: 1 UID: 0 PID: 25351 Comm: syz.5.16070 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2465.890304][T25351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2465.890326][T25351] Call Trace: [ 2465.890334][T25351] [ 2465.890344][T25351] dump_stack_lvl+0x189/0x250 [ 2465.890372][T25351] ? irqentry_exit+0x74/0x90 [ 2465.890401][T25351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2465.890434][T25351] ? dump_stack+0x9/0x20 [ 2465.890462][T25351] should_fail_ex+0x414/0x560 [ 2465.890494][T25351] _copy_from_user+0x2d/0xb0 [ 2465.890518][T25351] generic_map_update_batch+0x51b/0x7f0 [ 2465.890553][T25351] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2465.890575][T25351] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2465.890597][T25351] ? bpf_map_do_batch+0x355/0x5f0 [ 2465.890629][T25351] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2465.890650][T25351] bpf_map_do_batch+0x369/0x5f0 [ 2465.890685][T25351] __sys_bpf+0x6af/0x870 [ 2465.890713][T25351] ? __pfx___sys_bpf+0x10/0x10 [ 2465.890773][T25351] ? perf_trace_preemptirq_template+0x280/0x340 [ 2465.890804][T25351] ? irqentry_exit_to_user_mode+0xd1/0x120 [ 2465.890844][T25351] __x64_sys_bpf+0x7c/0x90 [ 2465.890870][T25351] do_syscall_64+0xfa/0x3b0 [ 2465.890902][T25351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2465.890923][T25351] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2465.890944][T25351] ? clear_bhb_loop+0x60/0xb0 [ 2465.890971][T25351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2465.890992][T25351] RIP: 0033:0x7f500498ebe9 [ 2465.891011][T25351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2465.891030][T25351] RSP: 002b:00007f5002bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2465.891064][T25351] RAX: ffffffffffffffda RBX: 00007f5004bb5fa0 RCX: 00007f500498ebe9 [ 2465.891080][T25351] RDX: 0000000000000038 RSI: 0000200000002340 RDI: 000000000000001a [ 2465.891094][T25351] RBP: 00007f5002bee090 R08: 0000000000000000 R09: 0000000000000000 [ 2465.891107][T25351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2465.891121][T25351] R13: 00007f5004bb6038 R14: 00007f5004bb5fa0 R15: 00007fff65a8ff18 [ 2465.891154][T25351] [ 2466.176109][T25143] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2466.208371][T25355] netlink: 'syz.0.16073': attribute type 21 has an invalid length. [ 2466.259927][T25358] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.16072'. [ 2466.268461][T25359] netlink: 'syz.0.16073': attribute type 21 has an invalid length. [ 2466.308253][T25143] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2466.330805][T25143] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2466.349234][T25362] netlink: 'syz.5.16074': attribute type 39 has an invalid length. [ 2466.382089][T25143] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2466.601862][T25374] mac80211_hwsim hwsim245 wlan1: entered promiscuous mode [ 2466.616746][T25374] mac80211_hwsim hwsim245 wlan1: entered allmulticast mode [ 2466.622800][T25378] netlink: 132 bytes leftover after parsing attributes in process `syz.8.16078'. [ 2466.647134][T25377] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16077'. [ 2466.688985][T25377] : renamed from syz_tun (while UP) [ 2466.748428][T25377] : refused to change device tx_queue_len [ 2466.754724][T25377] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2466.833124][T25385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2466.853723][T25385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2466.866738][T25385] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2467.469863][T25394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2467.477574][T25394] IPv6: NLM_F_CREATE should be set when creating new route [ 2467.485084][T25394] IPv6: NLM_F_CREATE should be set when creating new route [ 2467.574109][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.584183][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.655943][T20188] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 2468.996702][T25422] mac80211_hwsim hwsim240 wlan1: entered promiscuous mode [ 2469.004457][T25422] mac80211_hwsim hwsim240 wlan1: entered allmulticast mode [ 2469.060727][T25424] validate_nla: 4 callbacks suppressed [ 2469.060747][T25424] netlink: 'syz.7.16092': attribute type 10 has an invalid length. [ 2469.069720][T25143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2469.198703][T25427] netlink: 'syz.7.16094': attribute type 2 has an invalid length. [ 2469.217813][T25427] netlink: 'syz.7.16094': attribute type 8 has an invalid length. [ 2469.235586][T25143] 8021q: adding VLAN 0 to HW filter on device team0 [ 2469.299274][T19687] bridge0: port 1(bridge_slave_0) entered blocking state [ 2469.306627][T19687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2469.347652][T25430] netlink: 'syz.0.16095': attribute type 10 has an invalid length. [ 2469.959334][T25430] team0 (unregistering): Port device team_slave_0 removed [ 2470.031855][T25430] team0 (unregistering): Port device team_slave_1 removed [ 2470.129813][T19685] bridge0: port 2(bridge_slave_1) entered blocking state [ 2470.137190][T19685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2470.183772][T25447] FAULT_INJECTION: forcing a failure. [ 2470.183772][T25447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2470.203667][T25447] CPU: 1 UID: 0 PID: 25447 Comm: syz.5.16098 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2470.203699][T25447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2470.203711][T25447] Call Trace: [ 2470.203720][T25447] [ 2470.203729][T25447] dump_stack_lvl+0x189/0x250 [ 2470.203758][T25447] ? __pfx____ratelimit+0x10/0x10 [ 2470.203784][T25447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2470.203805][T25447] ? __pfx__printk+0x10/0x10 [ 2470.203829][T25447] ? __might_fault+0xb0/0x130 [ 2470.203863][T25447] should_fail_ex+0x414/0x560 [ 2470.203891][T25447] _copy_from_user+0x2d/0xb0 [ 2470.203914][T25447] generic_map_update_batch+0x51b/0x7f0 [ 2470.203948][T25447] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2470.203970][T25447] ? __fget_files+0x2a/0x420 [ 2470.204019][T25447] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2470.204040][T25447] bpf_map_do_batch+0x369/0x5f0 [ 2470.204073][T25447] __sys_bpf+0x6af/0x870 [ 2470.204101][T25447] ? __pfx___sys_bpf+0x10/0x10 [ 2470.204156][T25447] __x64_sys_bpf+0x7c/0x90 [ 2470.204180][T25447] do_syscall_64+0xfa/0x3b0 [ 2470.204210][T25447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2470.204228][T25447] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2470.204249][T25447] ? clear_bhb_loop+0x60/0xb0 [ 2470.204272][T25447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2470.204310][T25447] RIP: 0033:0x7f500498ebe9 [ 2470.204329][T25447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2470.204346][T25447] RSP: 002b:00007f5002bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2470.204384][T25447] RAX: ffffffffffffffda RBX: 00007f5004bb5fa0 RCX: 00007f500498ebe9 [ 2470.204404][T25447] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 2470.204416][T25447] RBP: 00007f5002bee090 R08: 0000000000000000 R09: 0000000000000000 [ 2470.204427][T25447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2470.204438][T25447] R13: 00007f5004bb6038 R14: 00007f5004bb5fa0 R15: 00007fff65a8ff18 [ 2470.204465][T25447] [ 2470.444155][T25450] netlink: 'syz.0.16100': attribute type 29 has an invalid length. [ 2470.462086][T25451] netlink: 'syz.0.16100': attribute type 29 has an invalid length. [ 2470.603382][T19689] hsr_slave_0: left promiscuous mode [ 2470.662265][T19689] hsr_slave_1: left promiscuous mode [ 2471.011884][T19689] veth0_macvtap: left promiscuous mode [ 2471.039066][T19689] veth1_vlan: left promiscuous mode [ 2472.413545][T19689] team0 (unregistering): Port device team_slave_1 removed [ 2472.458248][T19689] team0 (unregistering): Port device team_slave_0 removed [ 2472.946180][T25479] netlink: 'syz.0.16106': attribute type 13 has an invalid length. [ 2472.956024][T25479] __nla_validate_parse: 2 callbacks suppressed [ 2472.956064][T25479] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16106'. [ 2472.997395][T25479] : refused to change device tx_queue_len [ 2473.004011][T25479] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2473.266179][T25491] netlink: 9275 bytes leftover after parsing attributes in process `syz.8.16108'. [ 2473.661903][T25143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2474.677095][T25528] netlink: 'syz.8.16120': attribute type 2 has an invalid length. [ 2474.690306][T25528] netlink: 'syz.8.16120': attribute type 8 has an invalid length. [ 2474.698408][T25528] netlink: 132 bytes leftover after parsing attributes in process `syz.8.16120'. [ 2474.887270][T25143] veth0_vlan: entered promiscuous mode [ 2475.019927][T25143] veth1_vlan: entered promiscuous mode [ 2475.561541][T25143] veth0_macvtap: entered promiscuous mode [ 2475.593265][T25143] veth1_macvtap: entered promiscuous mode [ 2475.644901][T25143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2475.674193][T25143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2475.768510][ T9895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.813170][ T9895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.863763][T19685] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.903627][T19685] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2476.143165][T25560] netlink: 'syz.5.16127': attribute type 4 has an invalid length. [ 2476.152607][T25560] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16127'. [ 2476.305316][T25557] netlink: 10 bytes leftover after parsing attributes in process `syz.5.16127'. [ 2476.368618][T25560] netlink: 6 bytes leftover after parsing attributes in process `syz.5.16127'. [ 2476.383207][T25560] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2476.537189][T25570] netlink: 'syz.0.16130': attribute type 13 has an invalid length. [ 2476.589575][T25570] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16130'. [ 2476.637617][T25570] : refused to change device tx_queue_len [ 2476.661809][T25570] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2476.771793][T19689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2476.780028][T19689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2476.843968][ T9895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2476.850045][T25578] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.16132'. [ 2476.867480][ T9895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2477.358719][T25585] sit0: entered promiscuous mode [ 2477.396808][T25585] sit0: entered allmulticast mode [ 2479.137802][T25614] netlink: 'syz.4.16143': attribute type 13 has an invalid length. [ 2479.146433][T25614] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16143'. [ 2479.435528][ T3320] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2479.452764][ T3320] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2479.467231][ T3320] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2479.477497][ T3320] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2479.490521][ T3320] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2481.252294][T25614] : renamed from syz_tun (while UP) [ 2481.260958][T25614] : refused to change device tx_queue_len [ 2481.266823][T25614] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2481.401949][T25618] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16144'. [ 2481.527193][ T3320] Bluetooth: hci4: command tx timeout [ 2481.542858][T25622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2481.550444][T25622] IPv6: NLM_F_CREATE should be set when creating new route [ 2481.557964][T25622] IPv6: NLM_F_CREATE should be set when creating new route [ 2481.585064][T19685] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2481.764661][T19685] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2481.846537][T25633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2481.871085][T19685] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.004107][T19685] bond0: (slave netdevsim0): Releasing backup interface [ 2482.022485][T19685] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 2482.044276][T19685] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 2482.071671][T19685] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.146651][T25646] netlink: 'syz.7.16154': attribute type 13 has an invalid length. [ 2482.169762][T25646] netlink: 152 bytes leftover after parsing attributes in process `syz.7.16154'. [ 2482.195567][T25615] chnl_net:caif_netlink_parms(): no params data found [ 2482.217260][T25646] : renamed from syz_tun (while UP) [ 2482.244452][T25641] netlink: 'syz.8.16153': attribute type 11 has an invalid length. [ 2482.253529][T25641] netlink: 149476 bytes leftover after parsing attributes in process `syz.8.16153'. [ 2482.326104][T25641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2482.328826][T25646] : refused to change device tx_queue_len [ 2482.359284][T25646] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2482.783494][T25615] bridge0: port 1(bridge_slave_0) entered blocking state [ 2482.792266][T25615] bridge0: port 1(bridge_slave_0) entered disabled state [ 2482.803017][T25615] bridge_slave_0: entered allmulticast mode [ 2482.812506][T25615] bridge_slave_0: entered promiscuous mode [ 2482.831008][T25659] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.16157'. [ 2482.851838][T25615] bridge0: port 2(bridge_slave_1) entered blocking state [ 2482.859687][T25615] bridge0: port 2(bridge_slave_1) entered disabled state [ 2482.867073][T25615] bridge_slave_1: entered allmulticast mode [ 2482.875907][T25615] bridge_slave_1: entered promiscuous mode [ 2483.074018][T19685] bridge0: port 4(team0) entered disabled state [ 2483.094349][T25662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2483.101796][T25662] IPv6: NLM_F_CREATE should be set when creating new route [ 2483.109211][T25662] IPv6: NLM_F_CREATE should be set when creating new route [ 2483.125778][T19685] bond0: left allmulticast mode [ 2483.137454][T19685] bond_slave_0: left allmulticast mode [ 2483.149347][T19685] bond_slave_1: left allmulticast mode [ 2483.167996][T19685] batadv_slave_0: left allmulticast mode [ 2483.174774][T19685] batadv0: left allmulticast mode [ 2483.186869][T19685] bridge0: port 3(bond0) entered disabled state [ 2483.229716][T19685] bridge_slave_1: left allmulticast mode [ 2483.235520][T19685] bridge_slave_1: left promiscuous mode [ 2483.256144][T19685] bridge0: port 2(bridge_slave_1) entered disabled state [ 2483.312553][T19685] bridge_slave_0: left promiscuous mode [ 2483.321456][T19685] bridge0: port 1(bridge_slave_0) entered disabled state [ 2483.427294][T25672] netlink: 'syz.4.16161': attribute type 13 has an invalid length. [ 2483.449767][T25672] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16161'. [ 2483.598066][T20188] Bluetooth: hci4: command tx timeout [ 2483.781513][T25675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2483.912296][T19685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2483.925630][T19685] bond_slave_0: left promiscuous mode [ 2483.935292][T19685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2483.953323][T19685] bond_slave_1: left promiscuous mode [ 2483.961624][T19685] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2483.978227][T19685] batadv_slave_0: left promiscuous mode [ 2483.985653][T19685] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2483.994788][T19685] batadv0: left promiscuous mode [ 2484.011324][T19685] bond0 (unregistering): Released all slaves [ 2484.043488][T25615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2484.045087][T25680] netlink: 'syz.7.16164': attribute type 2 has an invalid length. [ 2484.063372][T25680] netlink: 'syz.7.16164': attribute type 8 has an invalid length. [ 2484.090442][T25680] netlink: 132 bytes leftover after parsing attributes in process `syz.7.16164'. [ 2484.107809][T25672] : refused to change device tx_queue_len [ 2484.115164][T25672] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2484.149387][T25615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2484.335076][T25683] netlink: 'syz.4.16165': attribute type 13 has an invalid length. [ 2484.361423][T25683] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16165'. [ 2484.383359][T25683] : refused to change device tx_queue_len [ 2484.394663][T25683] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2484.433287][T25615] team0: Port device team_slave_0 added [ 2484.566445][T25615] team0: Port device team_slave_1 added [ 2484.958378][T20188] Bluetooth: hci0: command 0x0406 tx timeout [ 2485.129610][T25695] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16169'. [ 2485.314665][T25615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2485.331681][T25615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2485.411542][T25615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2485.445541][T25615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2485.454604][T25615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2485.490315][T25615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2485.679579][ T3320] Bluetooth: hci4: command tx timeout [ 2485.765185][T25707] netlink: 'syz.8.16172': attribute type 2 has an invalid length. [ 2485.800014][T25707] netlink: 'syz.8.16172': attribute type 8 has an invalid length. [ 2485.860980][T25707] netlink: 132 bytes leftover after parsing attributes in process `syz.8.16172'. [ 2485.977101][T25615] hsr_slave_0: entered promiscuous mode [ 2485.994392][T25615] hsr_slave_1: entered promiscuous mode [ 2486.001709][T25615] debugfs: 'hsr0' already exists in 'hsr' [ 2486.007732][T25615] Cannot create hsr debugfs directory [ 2486.065401][T25713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2486.073088][T25713] IPv6: NLM_F_CREATE should be set when creating new route [ 2486.080579][T25713] IPv6: NLM_F_CREATE should be set when creating new route [ 2486.758856][T25732] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16180'. [ 2487.178816][T25749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2487.260028][T25748] FAULT_INJECTION: forcing a failure. [ 2487.260028][T25748] name failslab, interval 1, probability 0, space 0, times 0 [ 2487.293498][T25748] CPU: 1 UID: 0 PID: 25748 Comm: syz.4.16185 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2487.293529][T25748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2487.293543][T25748] Call Trace: [ 2487.293552][T25748] [ 2487.293562][T25748] dump_stack_lvl+0x189/0x250 [ 2487.293592][T25748] ? __pfx____ratelimit+0x10/0x10 [ 2487.293622][T25748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2487.293648][T25748] ? __pfx__printk+0x10/0x10 [ 2487.293687][T25748] ? __pfx___might_resched+0x10/0x10 [ 2487.293718][T25748] should_fail_ex+0x414/0x560 [ 2487.293756][T25748] should_failslab+0xa8/0x100 [ 2487.293790][T25748] __kmalloc_cache_noprof+0x70/0x3d0 [ 2487.293820][T25748] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 2487.293855][T25748] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 2487.293893][T25748] tcp_sendmsg_locked+0x4d9b/0x5620 [ 2487.293927][T25748] ? tcp_sendmsg_locked+0x541/0x5620 [ 2487.293968][T25748] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2487.294018][T25748] ? perf_trace_run_bpf_submit+0xee/0x170 [ 2487.294051][T25748] ? perf_trace_preemptirq_template+0x280/0x340 [ 2487.294083][T25748] ? __local_bh_enable_ip+0xce/0x1c0 [ 2487.294108][T25748] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2487.294145][T25748] ? __pfx_perf_trace_lock+0x10/0x10 [ 2487.294172][T25748] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 2487.294197][T25748] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2487.294225][T25748] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2487.294263][T25748] tcp_sendmsg+0x2f/0x50 [ 2487.294290][T25748] __sock_sendmsg+0x19c/0x270 [ 2487.294323][T25748] ____sys_sendmsg+0x505/0x830 [ 2487.294354][T25748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2487.294387][T25748] ? import_iovec+0x74/0xa0 [ 2487.294411][T25748] ___sys_sendmsg+0x21f/0x2a0 [ 2487.294431][T25748] ? __pfx____sys_sendmsg+0x10/0x10 [ 2487.294471][T25748] ? __fget_files+0x2a/0x420 [ 2487.294511][T25748] ? __fget_files+0x2a/0x420 [ 2487.294537][T25748] ? __fget_files+0x3a0/0x420 [ 2487.294575][T25748] __x64_sys_sendmsg+0x19b/0x260 [ 2487.294596][T25748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2487.294642][T25748] do_syscall_64+0xfa/0x3b0 [ 2487.294673][T25748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.294692][T25748] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2487.294710][T25748] ? clear_bhb_loop+0x60/0xb0 [ 2487.294736][T25748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.294754][T25748] RIP: 0033:0x7f3cba98ebe9 [ 2487.294771][T25748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2487.294788][T25748] RSP: 002b:00007f3cbb831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2487.294811][T25748] RAX: ffffffffffffffda RBX: 00007f3cbabb5fa0 RCX: 00007f3cba98ebe9 [ 2487.294827][T25748] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 000000000000000a [ 2487.294841][T25748] RBP: 00007f3cbb831090 R08: 0000000000000000 R09: 0000000000000000 [ 2487.294854][T25748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2487.294866][T25748] R13: 00007f3cbabb6038 R14: 00007f3cbabb5fa0 R15: 00007fff098f3918 [ 2487.294906][T25748] [ 2487.762862][ T3320] Bluetooth: hci4: command tx timeout [ 2488.024666][T25762] netlink: 'syz.8.16190': attribute type 2 has an invalid length. [ 2488.032793][T25762] netlink: 'syz.8.16190': attribute type 7 has an invalid length. [ 2488.044534][T25762] netlink: 85 bytes leftover after parsing attributes in process `syz.8.16190'. [ 2488.066685][T25762] netlink: 130140 bytes leftover after parsing attributes in process `syz.8.16190'. [ 2488.078764][T25765] FAULT_INJECTION: forcing a failure. [ 2488.078764][T25765] name failslab, interval 1, probability 0, space 0, times 0 [ 2488.094103][T25762] netlink: 'syz.8.16190': attribute type 2 has an invalid length. [ 2488.102399][T25765] CPU: 1 UID: 0 PID: 25765 Comm: syz.0.16191 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2488.102434][T25765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2488.102444][T25765] Call Trace: [ 2488.102451][T25765] [ 2488.102458][T25765] dump_stack_lvl+0x189/0x250 [ 2488.102488][T25765] ? __pfx____ratelimit+0x10/0x10 [ 2488.102515][T25765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2488.102539][T25765] ? __pfx__printk+0x10/0x10 [ 2488.102579][T25765] should_fail_ex+0x414/0x560 [ 2488.102635][T25765] should_failslab+0xa8/0x100 [ 2488.102664][T25765] __kmalloc_cache_noprof+0x70/0x3d0 [ 2488.102691][T25765] ? sctp_add_bind_addr+0x8c/0x370 [ 2488.102721][T25765] sctp_add_bind_addr+0x8c/0x370 [ 2488.102751][T25765] sctp_copy_local_addr_list+0x30b/0x4e0 [ 2488.102780][T25765] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 2488.102806][T25765] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2488.102832][T25765] ? sctp_v4_is_any+0x35/0x60 [ 2488.102856][T25765] ? sctp_copy_one_addr+0x93/0x360 [ 2488.102884][T25765] sctp_bind_addr_copy+0xb3/0x3c0 [ 2488.102910][T25765] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2488.102936][T25765] sctp_connect_new_asoc+0x2e0/0x690 [ 2488.102971][T25765] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2488.103000][T25765] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2488.103028][T25765] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2488.103052][T25765] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2488.103079][T25765] sctp_sendmsg+0x155c/0x2810 [ 2488.103121][T25765] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2488.103167][T25765] ? aa_sk_perm+0x81e/0x950 [ 2488.103199][T25765] ? __pfx_aa_sk_perm+0x10/0x10 [ 2488.103229][T25765] ? sock_rps_record_flow+0x19/0x410 [ 2488.103255][T25765] ? inet_sendmsg+0x2f4/0x370 [ 2488.103279][T25765] __sock_sendmsg+0x19c/0x270 [ 2488.103305][T25765] ____sys_sendmsg+0x505/0x830 [ 2488.103324][T25765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2488.103346][T25765] ? import_iovec+0x74/0xa0 [ 2488.103366][T25765] ___sys_sendmsg+0x21f/0x2a0 [ 2488.103382][T25765] ? __pfx____sys_sendmsg+0x10/0x10 [ 2488.103424][T25765] ? __fget_files+0x2a/0x420 [ 2488.103446][T25765] ? __fget_files+0x3a0/0x420 [ 2488.103476][T25765] __x64_sys_sendmsg+0x19b/0x260 [ 2488.103493][T25765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2488.103506][T25765] ? perf_trace_preemptirq_template+0xa3/0x340 [ 2488.103535][T25765] ? __pfx_ksys_write+0x10/0x10 [ 2488.103553][T25765] ? rcu_is_watching+0x15/0xb0 [ 2488.103574][T25765] ? do_syscall_64+0xbe/0x3b0 [ 2488.103609][T25765] do_syscall_64+0xfa/0x3b0 [ 2488.103630][T25765] ? lockdep_hardirqs_on+0x9c/0x150 [ 2488.103650][T25765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.103665][T25765] ? clear_bhb_loop+0x60/0xb0 [ 2488.103682][T25765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.103697][T25765] RIP: 0033:0x7fd79c58ebe9 [ 2488.103711][T25765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2488.103724][T25765] RSP: 002b:00007fd79d363038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2488.103740][T25765] RAX: ffffffffffffffda RBX: 00007fd79c7b5fa0 RCX: 00007fd79c58ebe9 [ 2488.103752][T25765] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003 [ 2488.103762][T25765] RBP: 00007fd79d363090 R08: 0000000000000000 R09: 0000000000000000 [ 2488.103771][T25765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2488.103781][T25765] R13: 00007fd79c7b6038 R14: 00007fd79c7b5fa0 R15: 00007ffd05866e48 [ 2488.103805][T25765] [ 2488.448601][T25762] netlink: 'syz.8.16190': attribute type 7 has an invalid length. [ 2488.457579][T25762] netlink: 85 bytes leftover after parsing attributes in process `syz.8.16190'. [ 2488.502530][T25615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2488.533596][T25615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2488.556935][T25615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2488.607621][T25615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2488.662834][T25771] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16192'. [ 2489.276938][T25795] mac80211_hwsim hwsim253 wlan1: entered promiscuous mode [ 2489.289099][T25795] mac80211_hwsim hwsim253 wlan1: entered allmulticast mode [ 2489.345407][T25793] netlink: 'syz.8.16200': attribute type 13 has an invalid length. [ 2489.356143][T25793] netlink: 152 bytes leftover after parsing attributes in process `syz.8.16200'. [ 2489.371899][T25615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2489.389416][T25790] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.16199'. [ 2489.413415][T25790] netlink: 6264 bytes leftover after parsing attributes in process `syz.0.16199'. [ 2489.434105][T25790] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16199'. [ 2489.446830][T25798] syz.4.16201: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2489.456132][T25793] : refused to change device tx_queue_len [ 2489.467168][T25798] CPU: 1 UID: 0 PID: 25798 Comm: syz.4.16201 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2489.467217][T25798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2489.467234][T25798] Call Trace: [ 2489.467244][T25798] [ 2489.467257][T25798] dump_stack_lvl+0x189/0x250 [ 2489.467299][T25798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2489.467331][T25798] ? __pfx__printk+0x10/0x10 [ 2489.467367][T25798] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2489.467398][T25798] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2489.467432][T25798] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2489.467465][T25798] warn_alloc+0x214/0x310 [ 2489.467505][T25798] ? stack_depot_save_flags+0x40/0x860 [ 2489.467552][T25798] ? __pfx_warn_alloc+0x10/0x10 [ 2489.467595][T25798] ? kasan_save_track+0x4f/0x80 [ 2489.467628][T25798] ? xskq_create+0x56/0x170 [ 2489.467660][T25798] ? xsk_init_queue+0xb0/0x110 [ 2489.467687][T25798] ? xsk_setsockopt+0x57b/0x8d0 [ 2489.467714][T25798] ? do_sock_setsockopt+0x179/0x1b0 [ 2489.467751][T25798] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 2489.467787][T25798] ? do_syscall_64+0xfa/0x3b0 [ 2489.467825][T25798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2489.467863][T25798] __vmalloc_node_range_noprof+0x125/0x12f0 [ 2489.467946][T25798] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2489.467993][T25798] ? __kasan_kmalloc+0x93/0xb0 [ 2489.468033][T25798] vmalloc_user_noprof+0xad/0xf0 [ 2489.468070][T25798] ? xskq_create+0xbf/0x170 [ 2489.468104][T25798] xskq_create+0xbf/0x170 [ 2489.468141][T25798] xsk_init_queue+0xb0/0x110 [ 2489.468177][T25798] xsk_setsockopt+0x57b/0x8d0 [ 2489.468212][T25798] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2489.468244][T25798] ? __pfx_aa_sk_perm+0x10/0x10 [ 2489.468285][T25798] ? __fget_files+0x2a/0x420 [ 2489.468316][T25798] ? aa_sock_opt_perm+0xff/0x1b0 [ 2489.468354][T25798] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2489.468377][T25798] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2489.468410][T25798] do_sock_setsockopt+0x179/0x1b0 [ 2489.468457][T25798] __x64_sys_setsockopt+0x13f/0x1b0 [ 2489.468519][T25798] do_syscall_64+0xfa/0x3b0 [ 2489.468560][T25798] ? lockdep_hardirqs_on+0x9c/0x150 [ 2489.468593][T25798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2489.468617][T25798] ? clear_bhb_loop+0x60/0xb0 [ 2489.468647][T25798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2489.468669][T25798] RIP: 0033:0x7f3cba98ebe9 [ 2489.468691][T25798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2489.468711][T25798] RSP: 002b:00007f3cbb831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2489.468735][T25798] RAX: ffffffffffffffda RBX: 00007f3cbabb5fa0 RCX: 00007f3cba98ebe9 [ 2489.468752][T25798] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 2489.468767][T25798] RBP: 00007f3cbaa11e19 R08: 0000000000000004 R09: 0000000000000000 [ 2489.468783][T25798] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2489.468798][T25798] R13: 00007f3cbabb6038 R14: 00007f3cbabb5fa0 R15: 00007fff098f3918 [ 2489.468840][T25798] [ 2489.470349][T25798] Mem-Info: [ 2489.485227][T25793] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2489.515513][T25798] active_anon:8933 inactive_anon:0 isolated_anon:0 [ 2489.515513][T25798] active_file:22739 inactive_file:40841 isolated_file:0 [ 2489.515513][T25798] unevictable:768 dirty:465 writeback:0 [ 2489.515513][T25798] slab_reclaimable:13177 slab_unreclaimable:101017 [ 2489.515513][T25798] mapped:30030 shmem:1375 pagetables:1216 [ 2489.515513][T25798] sec_pagetables:0 bounce:0 [ 2489.515513][T25798] kernel_misc_reclaimable:0 [ 2489.515513][T25798] free:1298100 free_pcp:15270 free_cma:0 [ 2489.862328][T25798] Node 0 active_anon:35832kB inactive_anon:0kB active_file:90956kB inactive_file:163164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120120kB dirty:1860kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11712kB pagetables:4828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2489.898072][T25798] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2489.931147][T25798] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2489.960326][T25798] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 2489.966277][T25798] Node 0 DMA32 free:1294136kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35900kB inactive_anon:0kB active_file:90956kB inactive_file:161584kB unevictable:1536kB writepending:1888kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:36080kB local_pcp:16140kB free_cma:0kB [ 2489.999878][T25798] lowmem_reserve[]: 0 0 1 1 1 [ 2490.004772][T25798] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2490.066641][T25798] lowmem_reserve[]: 0 0 0 0 0 [ 2490.071556][T25798] Node 1 Normal free:3883020kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24292kB local_pcp:14532kB free_cma:0kB [ 2490.117327][T25798] lowmem_reserve[]: 0 0 0 0 0 [ 2490.123868][T25615] 8021q: adding VLAN 0 to HW filter on device team0 [ 2490.132069][T25798] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2490.179559][T25798] Node 0 DMA32: 2680*4kB (UM) 2011*8kB (UME) 872*16kB (UME) 1234*32kB (UME) 543*64kB (UME) 469*128kB (UM) 510*256kB (UME) 316*512kB (UM) 202*1024kB (UME) 7*2048kB (UME) 148*4096kB (UM) = 1294776kB [ 2490.226940][T25798] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 2490.267228][T25807] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.16205'. [ 2490.281447][T25798] Node 1 Normal: 211*4kB (UE) 48*8kB (UME) 32*16kB (UME) 70*32kB (UME) 18*64kB (UME) 6*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3883020kB [ 2490.324290][T25798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2490.333936][T25798] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2490.353724][T25798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2490.397232][T25798] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2490.423842][T25812] netlink: 24032 bytes leftover after parsing attributes in process `syz.7.16203'. [ 2490.445681][T25812] netlink: 104088 bytes leftover after parsing attributes in process `syz.7.16203'. [ 2490.487130][T19693] bridge0: port 1(bridge_slave_0) entered blocking state [ 2490.488044][T25798] 64952 total pagecache pages [ 2490.494415][T19693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2490.498964][T25798] 0 pages in swap cache [ 2490.510565][T25812] netlink: 24032 bytes leftover after parsing attributes in process `syz.7.16203'. [ 2490.522127][T25798] Free swap = 124996kB [ 2490.535673][T25798] Total swap = 124996kB [ 2490.540200][T25798] 2097051 pages RAM [ 2490.542692][T19693] bridge0: port 2(bridge_slave_1) entered blocking state [ 2490.544362][T25798] 0 pages HighMem/MovableOnly [ 2490.551226][T19693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2490.612993][T25798] 425654 pages reserved [ 2490.617201][T25798] 0 pages cma reserved [ 2490.855991][T19685] hsr_slave_0: left promiscuous mode [ 2490.877102][T19685] hsr_slave_1: left promiscuous mode [ 2490.892781][T19685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2490.907981][T19685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2490.981147][T19685] veth1_macvtap: left promiscuous mode [ 2490.988622][T19685] veth0_macvtap: left promiscuous mode [ 2490.994580][T19685] veth1_vlan: left promiscuous mode [ 2491.000456][T19685] veth0_vlan: left promiscuous mode [ 2491.493207][T19685] team_slave_1 (unregistering): left promiscuous mode [ 2491.500796][T19685] team_slave_1 (unregistering): left allmulticast mode [ 2491.510240][T19685] team0 (unregistering): Port device team_slave_1 removed [ 2491.556593][T19685] team_slave_0 (unregistering): left promiscuous mode [ 2491.563483][T19685] team_slave_0 (unregistering): left allmulticast mode [ 2491.574396][T19685] team0 (unregistering): Port device team_slave_0 removed [ 2492.261406][T25835] netlink: 'syz.8.16213': attribute type 13 has an invalid length. [ 2492.279696][T25835] netlink: 152 bytes leftover after parsing attributes in process `syz.8.16213'. [ 2492.325971][T25835] : refused to change device tx_queue_len [ 2492.342582][T25835] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2492.362962][T25839] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16214'. [ 2492.392796][T25839] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16214'. [ 2492.466805][T25615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2492.564140][T25845] netlink: 'syz.7.16216': attribute type 10 has an invalid length. [ 2492.626493][T25845] team0: Device ipvlan1 failed to register rx_handler [ 2493.686157][T25869] mac80211_hwsim hwsim243 wlan1: entered promiscuous mode [ 2493.715191][T25869] mac80211_hwsim hwsim243 wlan1: entered allmulticast mode [ 2493.797066][T25615] veth0_vlan: entered promiscuous mode [ 2493.912204][T25615] veth1_vlan: entered promiscuous mode [ 2494.032023][T25615] veth0_macvtap: entered promiscuous mode [ 2494.062544][T25615] veth1_macvtap: entered promiscuous mode [ 2494.101471][T25615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2494.125749][T25615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2494.153840][T19690] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.173622][T19690] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.204607][T19690] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.290523][ T8488] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.432243][ T8488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2494.451751][ T8488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2494.512937][ T9895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2494.544709][ T9895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2494.735452][T25894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2494.881773][T25900] netlink: 'syz.5.16139': attribute type 10 has an invalid length. [ 2494.951154][T25901] netlink: 'syz.4.16233': attribute type 10 has an invalid length. [ 2495.020570][T25900] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2495.091940][T25901] team0: Device ipvlan1 failed to register rx_handler [ 2495.153018][T25906] netlink: 'syz.8.16234': attribute type 10 has an invalid length. [ 2495.283105][T25911] netlink: 'syz.0.16237': attribute type 10 has an invalid length. [ 2495.363940][T25919] __nla_validate_parse: 1 callbacks suppressed [ 2495.363964][T25919] netlink: 809 bytes leftover after parsing attributes in process `syz.7.16239'. [ 2495.405593][T25919] netlink: 130160 bytes leftover after parsing attributes in process `syz.7.16239'. [ 2495.454019][T25917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2495.497562][T25919] netlink: 809 bytes leftover after parsing attributes in process `syz.7.16239'. [ 2495.681092][T25927] netlink: 'syz.5.16244': attribute type 13 has an invalid length. [ 2495.692557][T25927] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16244'. [ 2495.703873][T25927] : renamed from syz_tun (while UP) [ 2495.756396][T25927] : refused to change device tx_queue_len [ 2495.785133][T25927] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2495.850049][T25932] netlink: 'syz.8.16246': attribute type 39 has an invalid length. [ 2495.860308][T25929] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2496.269618][T25947] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.16251'. [ 2496.802643][T25964] netlink: 'syz.8.16258': attribute type 13 has an invalid length. [ 2496.826594][T25964] netlink: 152 bytes leftover after parsing attributes in process `syz.8.16258'. [ 2496.936003][T25964] : refused to change device tx_queue_len [ 2496.971505][T25964] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2499.015755][T26023] netlink: 'syz.5.16276': attribute type 10 has an invalid length. [ 2499.026036][T26023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2499.089233][T26023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2499.135904][T26023] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2499.163083][T26022] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2499.447104][T26031] mac80211_hwsim hwsim259 .3ãc¤±: renamed from wlan1 (while UP) [ 2500.380978][T26055] netlink: 156 bytes leftover after parsing attributes in process `syz.7.16287'. [ 2501.433928][T26082] netlink: 'syz.7.16294': attribute type 13 has an invalid length. [ 2501.452027][T26082] netlink: 152 bytes leftover after parsing attributes in process `syz.7.16294'. [ 2501.479021][T26083] netlink: 144 bytes leftover after parsing attributes in process `syz.0.16295'. [ 2501.511575][T26082] : refused to change device tx_queue_len [ 2501.535124][T26082] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2501.980067][T26096] netlink: 'syz.8.16301': attribute type 10 has an invalid length. [ 2502.282610][T26096] team0: Device ipvlan1 failed to register rx_handler [ 2502.809296][T26109] netlink: 'syz.7.16303': attribute type 10 has an invalid length. [ 2502.852222][T26109] team0: Device ipvlan1 failed to register rx_handler [ 2503.086228][T26122] FAULT_INJECTION: forcing a failure. [ 2503.086228][T26122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2503.123420][T26122] CPU: 1 UID: 0 PID: 26122 Comm: syz.5.16308 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2503.123457][T26122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2503.123471][T26122] Call Trace: [ 2503.123490][T26122] [ 2503.123502][T26122] dump_stack_lvl+0x189/0x250 [ 2503.123542][T26122] ? __pfx____ratelimit+0x10/0x10 [ 2503.123580][T26122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2503.123614][T26122] ? __pfx__printk+0x10/0x10 [ 2503.123655][T26122] ? __might_fault+0xb0/0x130 [ 2503.123729][T26122] should_fail_ex+0x414/0x560 [ 2503.123783][T26122] _copy_from_iter+0x1db/0x16f0 [ 2503.123852][T26122] ? __pfx__copy_from_iter+0x10/0x10 [ 2503.123873][T26122] ? sock_alloc_send_pskb+0x875/0x990 [ 2503.123925][T26122] ? __pfx__copy_from_iter+0x10/0x10 [ 2503.123964][T26122] ? page_copy_sane+0x16a/0x280 [ 2503.124001][T26122] copy_page_from_iter+0xdd/0x170 [ 2503.124045][T26122] skb_copy_datagram_from_iter+0x306/0x720 [ 2503.124120][T26122] tun_get_user+0x1691/0x3e20 [ 2503.124219][T26122] ? __pfx_tun_get_user+0x10/0x10 [ 2503.124265][T26122] ? perf_trace_lock_acquire+0x335/0x410 [ 2503.124332][T26122] ? ref_tracker_alloc+0x318/0x460 [ 2503.124361][T26122] ? __lock_acquire+0xab9/0xd20 [ 2503.124406][T26122] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2503.124465][T26122] ? tun_get+0x1c/0x2f0 [ 2503.124517][T26122] ? tun_get+0x1c/0x2f0 [ 2503.124543][T26122] ? tun_get+0x1c/0x2f0 [ 2503.124587][T26122] tun_chr_write_iter+0x113/0x200 [ 2503.124638][T26122] vfs_write+0x5c6/0xb30 [ 2503.124691][T26122] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2503.124734][T26122] ? __pfx_vfs_write+0x10/0x10 [ 2503.124805][T26122] ? __fget_files+0x2a/0x420 [ 2503.124874][T26122] ksys_write+0x145/0x250 [ 2503.124919][T26122] ? __pfx_ksys_write+0x10/0x10 [ 2503.124947][T26122] ? rcu_is_watching+0x15/0xb0 [ 2503.124992][T26122] ? do_syscall_64+0xbe/0x3b0 [ 2503.125042][T26122] do_syscall_64+0xfa/0x3b0 [ 2503.125074][T26122] ? lockdep_hardirqs_on+0x9c/0x150 [ 2503.125108][T26122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2503.125133][T26122] ? clear_bhb_loop+0x60/0xb0 [ 2503.125172][T26122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2503.125196][T26122] RIP: 0033:0x7fbac838ebe9 [ 2503.125220][T26122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2503.125240][T26122] RSP: 002b:00007fbac925a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2503.125265][T26122] RAX: ffffffffffffffda RBX: 00007fbac85b5fa0 RCX: 00007fbac838ebe9 [ 2503.125283][T26122] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 2503.125298][T26122] RBP: 00007fbac925a090 R08: 0000000000000000 R09: 0000000000000000 [ 2503.125313][T26122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2503.125327][T26122] R13: 00007fbac85b6038 R14: 00007fbac85b5fa0 R15: 00007ffff67f45f8 [ 2503.125398][T26122] [ 2503.508843][T26126] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.16304'. [ 2504.086228][T26147] netlink: 'syz.7.16317': attribute type 10 has an invalid length. [ 2504.189328][T26147] team0: Device ipvlan1 failed to register rx_handler [ 2505.274275][T26180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2506.619228][T26207] netlink: 'syz.7.16338': attribute type 27 has an invalid length. [ 2506.633362][T26207] netlink: 164 bytes leftover after parsing attributes in process `syz.7.16338'. [ 2507.139587][T26207] syzkaller0: entered promiscuous mode [ 2507.145300][T26207] syzkaller0: entered allmulticast mode [ 2507.453858][T26213] netlink: 'syz.8.16340': attribute type 13 has an invalid length. [ 2507.478196][T26213] netlink: 152 bytes leftover after parsing attributes in process `syz.8.16340'. [ 2507.484336][T26215] warn_alloc: 7 callbacks suppressed [ 2507.484358][T26215] syz.4.16341: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2507.534569][T26215] CPU: 1 UID: 0 PID: 26215 Comm: syz.4.16341 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2507.534607][T26215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2507.534622][T26215] Call Trace: [ 2507.534632][T26215] [ 2507.534642][T26215] dump_stack_lvl+0x189/0x250 [ 2507.534680][T26215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2507.534708][T26215] ? __pfx__printk+0x10/0x10 [ 2507.534741][T26215] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2507.534768][T26215] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2507.534798][T26215] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2507.534828][T26215] warn_alloc+0x214/0x310 [ 2507.534863][T26215] ? stack_depot_save_flags+0x40/0x860 [ 2507.534896][T26215] ? __pfx_warn_alloc+0x10/0x10 [ 2507.534932][T26215] ? kasan_save_track+0x4f/0x80 [ 2507.534961][T26215] ? xskq_create+0x56/0x170 [ 2507.534987][T26215] ? xsk_init_queue+0xb0/0x110 [ 2507.535012][T26215] ? xsk_setsockopt+0x57b/0x8d0 [ 2507.535036][T26215] ? do_sock_setsockopt+0x179/0x1b0 [ 2507.535070][T26215] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 2507.535113][T26215] ? do_syscall_64+0xfa/0x3b0 [ 2507.535143][T26215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2507.535175][T26215] __vmalloc_node_range_noprof+0x125/0x12f0 [ 2507.535243][T26215] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2507.535286][T26215] ? __kasan_kmalloc+0x93/0xb0 [ 2507.535320][T26215] vmalloc_user_noprof+0xad/0xf0 [ 2507.535352][T26215] ? xskq_create+0xbf/0x170 [ 2507.535383][T26215] xskq_create+0xbf/0x170 [ 2507.535415][T26215] xsk_init_queue+0xb0/0x110 [ 2507.535446][T26215] xsk_setsockopt+0x57b/0x8d0 [ 2507.535476][T26215] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2507.535503][T26215] ? __pfx_aa_sk_perm+0x10/0x10 [ 2507.535538][T26215] ? __fget_files+0x2a/0x420 [ 2507.535569][T26215] ? aa_sock_opt_perm+0xff/0x1b0 [ 2507.535607][T26215] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2507.535631][T26215] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2507.535661][T26215] do_sock_setsockopt+0x179/0x1b0 [ 2507.535702][T26215] __x64_sys_setsockopt+0x13f/0x1b0 [ 2507.535745][T26215] do_syscall_64+0xfa/0x3b0 [ 2507.535775][T26215] ? lockdep_hardirqs_on+0x9c/0x150 [ 2507.535805][T26215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2507.535827][T26215] ? clear_bhb_loop+0x60/0xb0 [ 2507.535855][T26215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2507.535877][T26215] RIP: 0033:0x7f3cba98ebe9 [ 2507.535898][T26215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2507.535920][T26215] RSP: 002b:00007f3cbb831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2507.535944][T26215] RAX: ffffffffffffffda RBX: 00007f3cbabb5fa0 RCX: 00007f3cba98ebe9 [ 2507.535962][T26215] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 2507.535976][T26215] RBP: 00007f3cbaa11e19 R08: 0000000000000004 R09: 0000000000000000 [ 2507.535990][T26215] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2507.536004][T26215] R13: 00007f3cbabb6038 R14: 00007f3cbabb5fa0 R15: 00007fff098f3918 [ 2507.536041][T26215] [ 2507.536716][T26218] FAULT_INJECTION: forcing a failure. [ 2507.536716][T26218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2507.538737][T26215] Mem-Info: [ 2507.557498][T26218] CPU: 0 UID: 0 PID: 26218 Comm: syz.0.16343 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2507.557536][T26218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2507.557553][T26218] Call Trace: [ 2507.557564][T26218] [ 2507.557575][T26218] dump_stack_lvl+0x189/0x250 [ 2507.557612][T26218] ? __pfx____ratelimit+0x10/0x10 [ 2507.557647][T26218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2507.557679][T26218] ? __pfx__printk+0x10/0x10 [ 2507.557714][T26218] ? __might_fault+0xb0/0x130 [ 2507.557765][T26218] should_fail_ex+0x414/0x560 [ 2507.557804][T26218] _copy_from_user+0x2d/0xb0 [ 2507.557842][T26218] generic_map_update_batch+0x51b/0x7f0 [ 2507.557884][T26218] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2507.557913][T26218] ? __fget_files+0x2a/0x420 [ 2507.557961][T26218] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2507.557988][T26218] bpf_map_do_batch+0x369/0x5f0 [ 2507.558032][T26218] __sys_bpf+0x6af/0x870 [ 2507.558066][T26218] ? __pfx___sys_bpf+0x10/0x10 [ 2507.558119][T26218] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2507.558157][T26218] ? __pfx_ksys_write+0x10/0x10 [ 2507.558187][T26218] ? rcu_is_watching+0x15/0xb0 [ 2507.558222][T26218] __x64_sys_bpf+0x7c/0x90 [ 2507.558254][T26218] do_syscall_64+0xfa/0x3b0 [ 2507.558287][T26218] ? lockdep_hardirqs_on+0x9c/0x150 [ 2507.558321][T26218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2507.558358][T26218] ? clear_bhb_loop+0x60/0xb0 [ 2507.558390][T26218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2507.558412][T26218] RIP: 0033:0x7fd79c58ebe9 [ 2507.558431][T26218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2507.558450][T26218] RSP: 002b:00007fd79d363038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2507.558473][T26218] RAX: ffffffffffffffda RBX: 00007fd79c7b5fa0 RCX: 00007fd79c58ebe9 [ 2507.558489][T26218] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 2507.558504][T26218] RBP: 00007fd79d363090 R08: 0000000000000000 R09: 0000000000000000 [ 2507.558518][T26218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2507.558532][T26218] R13: 00007fd79c7b6038 R14: 00007fd79c7b5fa0 R15: 00007ffd05866e48 [ 2507.558567][T26218] [ 2507.772691][ T3320] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 2507.836044][T26215] active_anon:12298 inactive_anon:0 isolated_anon:0 [ 2507.836044][T26215] active_file:22739 inactive_file:40851 isolated_file:0 [ 2507.836044][T26215] unevictable:768 dirty:429 writeback:0 [ 2507.836044][T26215] slab_reclaimable:12943 slab_unreclaimable:106052 [ 2507.836044][T26215] mapped:32924 shmem:4602 pagetables:1318 [ 2507.836044][T26215] sec_pagetables:0 bounce:0 [ 2507.836044][T26215] kernel_misc_reclaimable:0 [ 2507.836044][T26215] free:1292752 free_pcp:13141 free_cma:0 [ 2508.174281][T26215] Node 0 active_anon:53364kB inactive_anon:0kB active_file:90956kB inactive_file:163204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135940kB dirty:936kB writeback:0kB shmem:21084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11500kB pagetables:5172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2508.249463][T26215] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2508.297517][T26215] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2508.336344][T26215] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 2508.346960][T26215] Node 0 DMA32 free:1264292kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57120kB inactive_anon:0kB active_file:90956kB inactive_file:161624kB unevictable:1536kB writepending:848kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:28272kB local_pcp:16960kB free_cma:0kB [ 2508.391337][T26215] lowmem_reserve[]: 0 0 1 1 1 [ 2508.428672][T26215] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2508.486669][T26215] lowmem_reserve[]: 0 0 0 0 0 [ 2508.501696][T26215] Node 1 Normal free:3883020kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24292kB local_pcp:9760kB free_cma:0kB [ 2508.553421][T26215] lowmem_reserve[]: 0 0 0 0 0 [ 2508.558396][T26215] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2508.575740][T26215] Node 0 DMA32: 102*4kB (U) 403*8kB (UME) 998*16kB (UME) 717*32kB (UME) 564*64kB (UME) 469*128kB (UM) 511*256kB (UME) 315*512kB (UM) 202*1024kB (UME) 8*2048kB (UME) 148*4096kB (UM) = 1260208kB [ 2508.617173][T26215] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 2508.633809][T26215] Node 1 Normal: 211*4kB (UE) 48*8kB (UME) 32*16kB (UME) 70*32kB (UME) 18*64kB (UME) 6*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3883020kB [ 2508.659078][T26215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2508.671292][T26215] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2508.682691][T26215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2508.694886][T26215] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2508.706689][T26215] 72017 total pagecache pages [ 2508.714075][T26215] 0 pages in swap cache [ 2508.732446][T26215] Free swap = 124996kB [ 2508.736639][T26215] Total swap = 124996kB [ 2508.741003][T26215] 2097051 pages RAM [ 2508.745014][T26215] 0 pages HighMem/MovableOnly [ 2508.757785][T26215] 425654 pages reserved [ 2508.762177][T26215] 0 pages cma reserved [ 2510.563239][T26213] : refused to change device tx_queue_len [ 2510.569690][T26213] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2511.269966][T26248] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.16350'. [ 2511.308645][T26248] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 2511.428242][T26252] veth0_vlan: entered allmulticast mode [ 2512.003964][T26273] netlink: 'syz.0.16357': attribute type 13 has an invalid length. [ 2512.015197][T26273] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16357'. [ 2512.116218][T26273] : refused to change device tx_queue_len [ 2512.208612][T26273] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2512.803113][T26279] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2513.793957][T26318] netlink: 'syz.5.16371': attribute type 10 has an invalid length. [ 2513.910075][T26318] team0: Device ipvlan1 failed to register rx_handler [ 2513.970193][T26316] mac80211_hwsim hwsim245 .3ãc¤±: renamed from wlan1 (while UP) [ 2514.006915][T26324] netlink: 'syz.7.16373': attribute type 10 has an invalid length. [ 2514.070741][T26324] team0: Device ipvlan1 failed to register rx_handler [ 2515.404772][T26359] netlink: 'syz.0.16385': attribute type 13 has an invalid length. [ 2515.424934][T26359] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16385'. [ 2515.476034][T26359] : refused to change device tx_queue_len [ 2515.482855][T26359] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2515.517324][T26361] netlink: 'syz.5.16386': attribute type 10 has an invalid length. [ 2515.838491][T26361] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2516.136783][T26381] netlink: 209840 bytes leftover after parsing attributes in process `syz.5.16393'. [ 2516.239402][T26381] netlink: 'syz.5.16393': attribute type 2 has an invalid length. [ 2516.239653][T26389] netlink: 'syz.7.16396': attribute type 2 has an invalid length. [ 2516.264221][T26389] netlink: 'syz.7.16396': attribute type 8 has an invalid length. [ 2516.295310][T26389] netlink: 132 bytes leftover after parsing attributes in process `syz.7.16396'. [ 2516.694989][T26396] netlink: 'syz.5.16398': attribute type 13 has an invalid length. [ 2516.761257][T26396] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16398'. [ 2516.796747][T26396] : refused to change device tx_queue_len [ 2516.868775][T26396] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2518.091829][T26431] netlink: 'syz.7.16411': attribute type 13 has an invalid length. [ 2518.153098][T26431] netlink: 152 bytes leftover after parsing attributes in process `syz.7.16411'. [ 2518.170407][T26431] : refused to change device tx_queue_len [ 2518.223748][T26431] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2518.943187][T26461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2518.950589][T26464] netlink: 'syz.5.16422': attribute type 4 has an invalid length. [ 2518.950623][T26464] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.16422'. [ 2519.074380][T26454] netlink: 'syz.0.16419': attribute type 6 has an invalid length. [ 2519.124306][T26454] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16419'. [ 2519.284922][T26476] netlink: 'syz.4.16426': attribute type 13 has an invalid length. [ 2519.341954][T26476] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16426'. [ 2519.413750][T26476] : refused to change device tx_queue_len [ 2519.455366][T26476] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2519.637456][T26486] netlink: 132 bytes leftover after parsing attributes in process `syz.8.16430'. [ 2519.788641][T26498] netlink: 'syz.4.16435': attribute type 28 has an invalid length. [ 2519.845926][T26498] netlink: 'syz.4.16435': attribute type 3 has an invalid length. [ 2519.899124][T26498] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16435'. [ 2520.443326][T26519] netlink: 'syz.8.16441': attribute type 2 has an invalid length. [ 2520.509902][T26519] netlink: 'syz.8.16441': attribute type 8 has an invalid length. [ 2520.560024][T26519] netlink: 132 bytes leftover after parsing attributes in process `syz.8.16441'. [ 2520.709997][T26527] netlink: 'syz.4.16443': attribute type 13 has an invalid length. [ 2520.748146][T26527] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16443'. [ 2520.856832][T26527] : refused to change device tx_queue_len [ 2520.871604][T26527] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2521.565200][T26541] netlink: 'syz.8.16449': attribute type 2 has an invalid length. [ 2521.582032][T26541] netlink: 132 bytes leftover after parsing attributes in process `syz.8.16449'. [ 2521.922144][T26535] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2521.936667][T26539] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2522.195736][T26562] FAULT_INJECTION: forcing a failure. [ 2522.195736][T26562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2522.229387][T26559] warn_alloc: 1 callbacks suppressed [ 2522.229405][T26559] syz.7.16455: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2522.229846][T26562] CPU: 0 UID: 0 PID: 26562 Comm: syz.5.16457 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2522.229881][T26562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2522.229898][T26562] Call Trace: [ 2522.229909][T26562] [ 2522.229920][T26562] dump_stack_lvl+0x189/0x250 [ 2522.229956][T26562] ? __pfx____ratelimit+0x10/0x10 [ 2522.229990][T26562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2522.230022][T26562] ? __pfx__printk+0x10/0x10 [ 2522.230073][T26562] should_fail_ex+0x414/0x560 [ 2522.230114][T26562] _copy_to_user+0x31/0xb0 [ 2522.230146][T26562] simple_read_from_buffer+0xe1/0x170 [ 2522.230190][T26562] proc_fail_nth_read+0x1b3/0x220 [ 2522.230232][T26562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2522.230265][T26562] ? rw_verify_area+0x2a6/0x4d0 [ 2522.230295][T26562] ? __lock_acquire+0xab9/0xd20 [ 2522.230331][T26562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2522.230361][T26562] vfs_read+0x200/0xa30 [ 2522.230393][T26562] ? fdget_pos+0x247/0x320 [ 2522.230421][T26562] ? __pfx___mutex_lock+0x10/0x10 [ 2522.230458][T26562] ? __pfx_vfs_read+0x10/0x10 [ 2522.230494][T26562] ? __fget_files+0x2a/0x420 [ 2522.230538][T26562] ? __fget_files+0x3a0/0x420 [ 2522.230574][T26562] ? __fget_files+0x2a/0x420 [ 2522.230622][T26562] ksys_read+0x145/0x250 [ 2522.230659][T26562] ? __pfx_ksys_read+0x10/0x10 [ 2522.230688][T26562] ? rcu_is_watching+0x15/0xb0 [ 2522.230722][T26562] ? do_syscall_64+0xbe/0x3b0 [ 2522.230764][T26562] do_syscall_64+0xfa/0x3b0 [ 2522.230798][T26562] ? lockdep_hardirqs_on+0x9c/0x150 [ 2522.230830][T26562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.230855][T26562] ? clear_bhb_loop+0x60/0xb0 [ 2522.230887][T26562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.230911][T26562] RIP: 0033:0x7fbac838d5fc [ 2522.230934][T26562] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2522.230958][T26562] RSP: 002b:00007fbac925a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2522.230984][T26562] RAX: ffffffffffffffda RBX: 00007fbac85b5fa0 RCX: 00007fbac838d5fc [ 2522.231005][T26562] RDX: 000000000000000f RSI: 00007fbac925a0a0 RDI: 0000000000000008 [ 2522.231021][T26562] RBP: 00007fbac925a090 R08: 0000000000000000 R09: 0000000000000000 [ 2522.231038][T26562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2522.231054][T26562] R13: 00007fbac85b6038 R14: 00007fbac85b5fa0 R15: 00007ffff67f45f8 [ 2522.231096][T26562] [ 2522.255763][T26564] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16458'. [ 2522.298079][T26559] ,cpuset= [ 2522.333236][T26564] : refused to change device tx_queue_len [ 2522.368267][T26559] / [ 2522.532371][T26564] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2522.571635][T26559] ,mems_allowed=0-1 [ 2522.586001][T26559] CPU: 1 UID: 0 PID: 26559 Comm: syz.7.16455 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2522.586035][T26559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2522.586050][T26559] Call Trace: [ 2522.586060][T26559] [ 2522.586070][T26559] dump_stack_lvl+0x189/0x250 [ 2522.586102][T26559] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 2522.586135][T26559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2522.586163][T26559] ? __pfx__printk+0x10/0x10 [ 2522.586196][T26559] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2522.586223][T26559] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2522.586259][T26559] warn_alloc+0x214/0x310 [ 2522.586295][T26559] ? stack_depot_save_flags+0x40/0x860 [ 2522.586328][T26559] ? __pfx_warn_alloc+0x10/0x10 [ 2522.586366][T26559] ? kasan_save_track+0x4f/0x80 [ 2522.586394][T26559] ? xskq_create+0x56/0x170 [ 2522.586420][T26559] ? xsk_init_queue+0xb0/0x110 [ 2522.586445][T26559] ? xsk_setsockopt+0x57b/0x8d0 [ 2522.586470][T26559] ? do_sock_setsockopt+0x179/0x1b0 [ 2522.586503][T26559] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 2522.586538][T26559] ? do_syscall_64+0xfa/0x3b0 [ 2522.586579][T26559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.586609][T26559] __vmalloc_node_range_noprof+0x125/0x12f0 [ 2522.586674][T26559] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2522.586715][T26559] ? __kasan_kmalloc+0x93/0xb0 [ 2522.586747][T26559] vmalloc_user_noprof+0xad/0xf0 [ 2522.586781][T26559] ? xskq_create+0xbf/0x170 [ 2522.586811][T26559] xskq_create+0xbf/0x170 [ 2522.586843][T26559] xsk_init_queue+0xb0/0x110 [ 2522.586873][T26559] xsk_setsockopt+0x57b/0x8d0 [ 2522.586904][T26559] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2522.586940][T26559] ? __pfx_aa_sk_perm+0x10/0x10 [ 2522.586976][T26559] ? __fget_files+0x2a/0x420 [ 2522.587008][T26559] ? aa_sock_opt_perm+0xff/0x1b0 [ 2522.587046][T26559] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2522.587070][T26559] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2522.587099][T26559] do_sock_setsockopt+0x179/0x1b0 [ 2522.587138][T26559] __x64_sys_setsockopt+0x13f/0x1b0 [ 2522.587180][T26559] do_syscall_64+0xfa/0x3b0 [ 2522.587209][T26559] ? lockdep_hardirqs_on+0x9c/0x150 [ 2522.587237][T26559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.587259][T26559] ? clear_bhb_loop+0x60/0xb0 [ 2522.587287][T26559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.587308][T26559] RIP: 0033:0x7fd4e398ebe9 [ 2522.587328][T26559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2522.587348][T26559] RSP: 002b:00007fd4e47ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2522.587371][T26559] RAX: ffffffffffffffda RBX: 00007fd4e3bb5fa0 RCX: 00007fd4e398ebe9 [ 2522.587387][T26559] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 2522.587401][T26559] RBP: 00007fd4e3a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 2522.587414][T26559] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2522.587428][T26559] R13: 00007fd4e3bb6038 R14: 00007fd4e3bb5fa0 R15: 00007ffdefad52b8 [ 2522.587463][T26559] [ 2522.587475][T26559] Mem-Info: [ 2522.712455][T26569] netlink: 'syz.0.16459': attribute type 11 has an invalid length. [ 2522.719122][T26559] active_anon:9010 inactive_anon:0 isolated_anon:0 [ 2522.719122][T26559] active_file:22739 inactive_file:40857 isolated_file:0 [ 2522.719122][T26559] unevictable:768 dirty:451 writeback:0 [ 2522.719122][T26559] slab_reclaimable:12866 slab_unreclaimable:103748 [ 2522.719122][T26559] mapped:30046 shmem:1375 pagetables:1289 [ 2522.719122][T26559] sec_pagetables:0 bounce:0 [ 2522.719122][T26559] kernel_misc_reclaimable:0 [ 2522.719122][T26559] free:1295424 free_pcp:15820 free_cma:0 [ 2522.967072][T26559] Node 0 active_anon:35980kB inactive_anon:0kB active_file:90956kB inactive_file:163228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120156kB dirty:1812kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11440kB pagetables:5076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2523.029492][T26559] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2523.064970][T26559] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2523.099384][T26567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2523.116154][T26559] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 2523.117326][T26575] C: renamed from team_slave_0 (while UP) [ 2523.122224][T26559] Node 0 DMA32 free:1283436kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36036kB inactive_anon:0kB active_file:90956kB inactive_file:161648kB unevictable:1536kB writepending:1812kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:36692kB local_pcp:15640kB free_cma:0kB [ 2523.122302][T26559] lowmem_reserve[]: 0 0 1 1 1 [ 2523.122357][T26559] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2523.123072][T26559] lowmem_reserve[]: 0 0 0 0 0 [ 2523.123127][T26559] Node 1 Normal free:3883020kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24292kB local_pcp:9760kB free_cma:0kB [ 2523.123204][T26559] lowmem_reserve[]: 0 0 0 0 0 [ 2523.123259][T26559] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2523.123426][T26559] Node 0 DMA32: 3373*4kB (UM) 2169*8kB (UME) 1063*16kB (UME) 876*32kB (UME) 407*64kB (UME) 468*128kB (UM) 509*256kB (UM) 312*512kB (UME) 202*1024kB (UME) 9*2048kB (UME) 148*4096kB (UM) = 1283372kB [ 2523.123657][T26559] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB [ 2523.295964][T26575] validate_nla: 9 callbacks suppressed [ 2523.295987][T26575] netlink: 'syz.5.16462': attribute type 3 has an invalid length. [ 2523.307527][T26559] 0*128kB [ 2523.318240][T26575] __nla_validate_parse: 2 callbacks suppressed [ 2523.318259][T26575] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16462'. [ 2523.385213][T26559] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 2523.397576][T26575] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2523.429698][T26559] Node 1 Normal: 211*4kB (UE) 48*8kB (UME) 32*16kB (UME) 70*32kB (UME) 18*64kB (UME) 6*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3883020kB [ 2523.461521][T26559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2523.481074][T26559] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2523.495532][T26559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2523.738871][T26559] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2523.891343][T26559] 64968 total pagecache pages [ 2523.896167][T26559] 0 pages in swap cache [ 2523.945931][T26559] Free swap = 124996kB [ 2523.970678][T26559] Total swap = 124996kB [ 2523.990439][T26559] 2097051 pages RAM [ 2524.010741][T26559] 0 pages HighMem/MovableOnly [ 2524.036493][T26559] 425654 pages reserved [ 2524.062053][T26559] 0 pages cma reserved [ 2524.273920][T26602] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16469'. [ 2524.555007][T26598] syzkaller0: entered promiscuous mode [ 2524.583177][T26605] netlink: 146936 bytes leftover after parsing attributes in process `syz.7.16471'. [ 2524.605477][T26598] syzkaller0: entered allmulticast mode [ 2524.678347][T26605] openvswitch: netlink: Message has 6 unknown bytes. [ 2524.693632][T26608] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.16472'. [ 2524.793905][T26608] netlink: 'syz.5.16472': attribute type 29 has an invalid length. [ 2525.129206][T26617] netlink: 'syz.0.16474': attribute type 13 has an invalid length. [ 2525.149844][T26617] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16474'. [ 2525.219540][T26623] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.16477'. [ 2526.095320][T26636] netlink: 'syz.8.16483': attribute type 10 has an invalid length. [ 2526.927210][T26617] : refused to change device tx_queue_len [ 2526.934377][T26617] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2526.955190][T26636] team0: Device ipvlan1 failed to register rx_handler [ 2527.135066][T26644] netlink: 'syz.8.16488': attribute type 13 has an invalid length. [ 2527.177279][T26644] netlink: 152 bytes leftover after parsing attributes in process `syz.8.16488'. [ 2527.202342][T26644] : refused to change device tx_queue_len [ 2527.210647][T26644] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2528.090070][T26663] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.16494'. [ 2528.266997][T26671] netlink: 'syz.8.16498': attribute type 10 has an invalid length. [ 2528.380602][T26671] team0: Device ipvlan1 failed to register rx_handler [ 2528.775121][T26696] netlink: 'syz.7.16509': attribute type 27 has an invalid length. [ 2528.785533][T26696] netlink: 164 bytes leftover after parsing attributes in process `syz.7.16509'. [ 2528.900916][T26700] netlink: 'syz.4.16510': attribute type 13 has an invalid length. [ 2528.911188][T26700] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16510'. [ 2528.956767][T26700] : refused to change device tx_queue_len [ 2528.969769][T26700] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2529.063144][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.070287][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.685188][T26709] FAULT_INJECTION: forcing a failure. [ 2529.685188][T26709] name failslab, interval 1, probability 0, space 0, times 0 [ 2529.731538][T26709] CPU: 1 UID: 0 PID: 26709 Comm: syz.8.16513 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2529.731570][T26709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2529.731584][T26709] Call Trace: [ 2529.731596][T26709] [ 2529.731608][T26709] dump_stack_lvl+0x189/0x250 [ 2529.731646][T26709] ? __pfx____ratelimit+0x10/0x10 [ 2529.731685][T26709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2529.731720][T26709] ? __pfx__printk+0x10/0x10 [ 2529.731790][T26709] ? __pfx___might_resched+0x10/0x10 [ 2529.731808][T26709] ? fs_reclaim_acquire+0x7d/0x100 [ 2529.731871][T26709] should_fail_ex+0x414/0x560 [ 2529.731934][T26709] should_failslab+0xa8/0x100 [ 2529.731980][T26709] __kmalloc_noprof+0xcb/0x4f0 [ 2529.732011][T26709] ? security_sk_alloc+0x52/0x390 [ 2529.732067][T26709] security_sk_alloc+0x52/0x390 [ 2529.732114][T26709] sk_prot_alloc+0x101/0x220 [ 2529.732135][T26709] ? sk_alloc+0x24/0x370 [ 2529.732175][T26709] sk_alloc+0x3a/0x370 [ 2529.732197][T26709] ? bpf_ctx_init+0x167/0x1d0 [ 2529.732251][T26709] bpf_prog_test_run_skb+0x2ed/0x1560 [ 2529.732284][T26709] ? __fget_files+0x2a/0x420 [ 2529.732402][T26709] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2529.732445][T26709] bpf_prog_test_run+0x2c7/0x340 [ 2529.732503][T26709] __sys_bpf+0x581/0x870 [ 2529.732553][T26709] ? __pfx___sys_bpf+0x10/0x10 [ 2529.732667][T26709] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2529.732707][T26709] ? __pfx_ksys_write+0x10/0x10 [ 2529.732732][T26709] ? rcu_is_watching+0x15/0xb0 [ 2529.732798][T26709] __x64_sys_bpf+0x7c/0x90 [ 2529.732838][T26709] do_syscall_64+0xfa/0x3b0 [ 2529.732868][T26709] ? lockdep_hardirqs_on+0x9c/0x150 [ 2529.732901][T26709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2529.732925][T26709] ? clear_bhb_loop+0x60/0xb0 [ 2529.732972][T26709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2529.732995][T26709] RIP: 0033:0x7efd7678ebe9 [ 2529.733020][T26709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2529.733039][T26709] RSP: 002b:00007efd7755a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2529.733061][T26709] RAX: ffffffffffffffda RBX: 00007efd769b5fa0 RCX: 00007efd7678ebe9 [ 2529.733077][T26709] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 2529.733090][T26709] RBP: 00007efd7755a090 R08: 0000000000000000 R09: 0000000000000000 [ 2529.733104][T26709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2529.733116][T26709] R13: 00007efd769b6038 R14: 00007efd769b5fa0 R15: 00007ffeb27a13c8 [ 2529.733215][T26709] [ 2530.150451][T26721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16518'. [ 2530.238302][T26724] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2530.496560][T26734] netlink: 'syz.8.16523': attribute type 10 has an invalid length. [ 2530.589842][T26740] netlink: 'syz.5.16525': attribute type 10 has an invalid length. [ 2530.608275][T26734] team0: Device ipvlan1 failed to register rx_handler [ 2530.804282][T26740] team0: Device ipvlan1 failed to register rx_handler [ 2531.608662][T26775] netlink: 22 bytes leftover after parsing attributes in process `syz.7.16535'. [ 2531.852236][T26787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2532.050491][T26797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2532.058011][T26797] IPv6: NLM_F_CREATE should be set when creating new route [ 2532.065397][T26797] IPv6: NLM_F_CREATE should be set when creating new route [ 2532.421865][T26808] netlink: 'syz.4.16549': attribute type 21 has an invalid length. [ 2532.573417][T26808] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16549'. [ 2532.631171][T26808] netlink: 'syz.4.16549': attribute type 5 has an invalid length. [ 2532.643874][T26808] netlink: 'syz.4.16549': attribute type 6 has an invalid length. [ 2532.655977][T26808] netlink: 3 bytes leftover after parsing attributes in process `syz.4.16549'. [ 2533.303676][T26820] netlink: 'syz.8.16552': attribute type 13 has an invalid length. [ 2533.343475][T26820] netlink: 152 bytes leftover after parsing attributes in process `syz.8.16552'. [ 2533.371753][T26820] : refused to change device tx_queue_len [ 2533.389990][T26820] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2533.559818][T26830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2534.265827][T26853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2534.378061][T26855] bond0: (slave ): Error: Device can not be enslaved while up [ 2534.650250][T26872] FAULT_INJECTION: forcing a failure. [ 2534.650250][T26872] name failslab, interval 1, probability 0, space 0, times 0 [ 2534.663962][T26872] CPU: 1 UID: 0 PID: 26872 Comm: syz.7.16573 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2534.663991][T26872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2534.664004][T26872] Call Trace: [ 2534.664012][T26872] [ 2534.664022][T26872] dump_stack_lvl+0x189/0x250 [ 2534.664052][T26872] ? __pfx____ratelimit+0x10/0x10 [ 2534.664081][T26872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2534.664105][T26872] ? __pfx__printk+0x10/0x10 [ 2534.664131][T26872] ? __pfx___might_resched+0x10/0x10 [ 2534.664145][T26872] ? fs_reclaim_acquire+0x7d/0x100 [ 2534.664171][T26872] should_fail_ex+0x414/0x560 [ 2534.664194][T26872] should_failslab+0xa8/0x100 [ 2534.664216][T26872] __kmalloc_noprof+0xcb/0x4f0 [ 2534.664234][T26872] ? tomoyo_encode+0x28b/0x550 [ 2534.664251][T26872] tomoyo_encode+0x28b/0x550 [ 2534.664269][T26872] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2534.664285][T26872] ? tomoyo_domain+0xd9/0x130 [ 2534.664303][T26872] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2534.664323][T26872] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2534.664351][T26872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2534.664383][T26872] ? __lock_acquire+0xab9/0xd20 [ 2534.664419][T26872] ? __fget_files+0x2a/0x420 [ 2534.664442][T26872] ? __fget_files+0x2a/0x420 [ 2534.664462][T26872] ? __fget_files+0x3a0/0x420 [ 2534.664482][T26872] ? __fget_files+0x2a/0x420 [ 2534.664506][T26872] security_file_ioctl+0xcb/0x2d0 [ 2534.664527][T26872] __se_sys_ioctl+0x47/0x170 [ 2534.664546][T26872] do_syscall_64+0xfa/0x3b0 [ 2534.664566][T26872] ? lockdep_hardirqs_on+0x9c/0x150 [ 2534.664584][T26872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2534.664598][T26872] ? clear_bhb_loop+0x60/0xb0 [ 2534.664615][T26872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2534.664629][T26872] RIP: 0033:0x7fd4e398ebe9 [ 2534.664641][T26872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2534.664654][T26872] RSP: 002b:00007fd4e47ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2534.664669][T26872] RAX: ffffffffffffffda RBX: 00007fd4e3bb5fa0 RCX: 00007fd4e398ebe9 [ 2534.664680][T26872] RDX: 0000200000000cc0 RSI: 0000000000008913 RDI: 0000000000000004 [ 2534.664689][T26872] RBP: 00007fd4e47ad090 R08: 0000000000000000 R09: 0000000000000000 [ 2534.664698][T26872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2534.664707][T26872] R13: 00007fd4e3bb6038 R14: 00007fd4e3bb5fa0 R15: 00007ffdefad52b8 [ 2534.664729][T26872] [ 2534.664760][T26872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2535.084735][T26878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2535.165895][T26883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16576'. [ 2535.264657][T26888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16578'. [ 2535.313677][T26890] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2535.404343][T26888] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2535.605665][T26895] netlink: 'syz.5.16580': attribute type 2 has an invalid length. [ 2535.640658][T26895] netlink: 'syz.5.16580': attribute type 1 has an invalid length. [ 2535.648789][T26895] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.16580'. [ 2536.145376][T26913] warn_alloc: 1 callbacks suppressed [ 2536.145399][T26913] syz.8.16587: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2536.166472][T26913] CPU: 0 UID: 0 PID: 26913 Comm: syz.8.16587 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2536.166503][T26913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2536.166529][T26913] Call Trace: [ 2536.166537][T26913] [ 2536.166546][T26913] dump_stack_lvl+0x189/0x250 [ 2536.166596][T26913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2536.166623][T26913] ? __pfx__printk+0x10/0x10 [ 2536.166653][T26913] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2536.166679][T26913] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2536.166706][T26913] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2536.166736][T26913] warn_alloc+0x214/0x310 [ 2536.166770][T26913] ? stack_depot_save_flags+0x40/0x860 [ 2536.166802][T26913] ? __pfx_warn_alloc+0x10/0x10 [ 2536.166836][T26913] ? kasan_save_track+0x4f/0x80 [ 2536.166892][T26913] ? xskq_create+0x56/0x170 [ 2536.166919][T26913] ? xsk_init_queue+0xb0/0x110 [ 2536.166944][T26913] ? xsk_setsockopt+0x57b/0x8d0 [ 2536.166968][T26913] ? do_sock_setsockopt+0x179/0x1b0 [ 2536.167001][T26913] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 2536.167034][T26913] ? do_syscall_64+0xfa/0x3b0 [ 2536.167064][T26913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2536.167096][T26913] __vmalloc_node_range_noprof+0x125/0x12f0 [ 2536.167168][T26913] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2536.167210][T26913] ? __kasan_kmalloc+0x93/0xb0 [ 2536.167245][T26913] vmalloc_user_noprof+0xad/0xf0 [ 2536.167278][T26913] ? xskq_create+0xbf/0x170 [ 2536.167304][T26913] xskq_create+0xbf/0x170 [ 2536.167328][T26913] xsk_init_queue+0xb0/0x110 [ 2536.167350][T26913] xsk_setsockopt+0x57b/0x8d0 [ 2536.167372][T26913] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2536.167391][T26913] ? __pfx_aa_sk_perm+0x10/0x10 [ 2536.167417][T26913] ? __fget_files+0x2a/0x420 [ 2536.167440][T26913] ? aa_sock_opt_perm+0xff/0x1b0 [ 2536.167467][T26913] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2536.167485][T26913] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2536.167505][T26913] do_sock_setsockopt+0x179/0x1b0 [ 2536.167535][T26913] __x64_sys_setsockopt+0x13f/0x1b0 [ 2536.167565][T26913] do_syscall_64+0xfa/0x3b0 [ 2536.167586][T26913] ? lockdep_hardirqs_on+0x9c/0x150 [ 2536.167607][T26913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2536.167623][T26913] ? clear_bhb_loop+0x60/0xb0 [ 2536.167656][T26913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2536.167671][T26913] RIP: 0033:0x7efd7678ebe9 [ 2536.167686][T26913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2536.167699][T26913] RSP: 002b:00007efd7755a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2536.167715][T26913] RAX: ffffffffffffffda RBX: 00007efd769b5fa0 RCX: 00007efd7678ebe9 [ 2536.167727][T26913] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 2536.167736][T26913] RBP: 00007efd76811e19 R08: 0000000000000004 R09: 0000000000000000 [ 2536.167765][T26913] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2536.167775][T26913] R13: 00007efd769b6038 R14: 00007efd769b5fa0 R15: 00007ffeb27a13c8 [ 2536.167800][T26913] [ 2536.468234][T26913] Mem-Info: [ 2536.471735][T26913] active_anon:9000 inactive_anon:0 isolated_anon:0 [ 2536.471735][T26913] active_file:22739 inactive_file:40861 isolated_file:0 [ 2536.471735][T26913] unevictable:768 dirty:383 writeback:0 [ 2536.471735][T26913] slab_reclaimable:12941 slab_unreclaimable:105623 [ 2536.471735][T26913] mapped:30028 shmem:1375 pagetables:1238 [ 2536.471735][T26913] sec_pagetables:0 bounce:0 [ 2536.471735][T26913] kernel_misc_reclaimable:0 [ 2536.471735][T26913] free:1293482 free_pcp:16056 free_cma:0 [ 2536.554060][T26913] Node 0 active_anon:35900kB inactive_anon:0kB active_file:90956kB inactive_file:163244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120112kB dirty:1532kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11024kB pagetables:4816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2536.653583][T26919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2536.696915][T26913] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2536.735817][T26913] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2536.766495][T26913] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 2536.772860][T26913] Node 0 DMA32 free:1283728kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35856kB inactive_anon:0kB active_file:90956kB inactive_file:161664kB unevictable:1536kB writepending:1532kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:40372kB local_pcp:19768kB free_cma:0kB [ 2536.808727][T26913] lowmem_reserve[]: 0 0 1 1 1 [ 2536.813554][T26913] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2536.844169][T26913] lowmem_reserve[]: 0 0 0 0 0 [ 2536.849013][T26913] Node 1 Normal free:3883020kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24292kB local_pcp:9760kB free_cma:0kB [ 2536.880624][T26913] lowmem_reserve[]: 0 0 0 0 0 [ 2536.885475][T26913] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2536.909793][T26913] Node 0 DMA32: 3704*4kB (UM) 2262*8kB (UME) 1080*16kB (UME) 818*32kB (UME) 411*64kB (UME) 467*128kB (UM) 510*256kB (UM) 311*512kB (UME) 202*1024kB (UME) 9*2048kB (UME) 148*4096kB (UM) = 1283728kB [ 2536.953049][T26913] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 2537.021292][T26913] Node 1 Normal: 211*4kB (UE) 48*8kB (UME) 32*16kB (UME) 70*32kB (UME) 18*64kB (UME) 6*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3883020kB [ 2537.065644][T26932] FAULT_INJECTION: forcing a failure. [ 2537.065644][T26932] name failslab, interval 1, probability 0, space 0, times 0 [ 2537.078648][T26913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2537.078675][T26913] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2537.078694][T26913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2537.078714][T26913] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2537.078732][T26913] 64972 total pagecache pages [ 2537.078742][T26913] 0 pages in swap cache [ 2537.078752][T26913] Free swap = 124996kB [ 2537.078761][T26913] Total swap = 124996kB [ 2537.078772][T26913] 2097051 pages RAM [ 2537.078782][T26913] 0 pages HighMem/MovableOnly [ 2537.078791][T26913] 425654 pages reserved [ 2537.078800][T26913] 0 pages cma reserved [ 2537.155200][T26932] CPU: 0 UID: 0 PID: 26932 Comm: syz.0.16593 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2537.155231][T26932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2537.155246][T26932] Call Trace: [ 2537.155255][T26932] [ 2537.155264][T26932] dump_stack_lvl+0x189/0x250 [ 2537.155296][T26932] ? __pfx____ratelimit+0x10/0x10 [ 2537.155324][T26932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2537.155350][T26932] ? __pfx__printk+0x10/0x10 [ 2537.155381][T26932] ? stack_trace_save+0x9c/0xe0 [ 2537.155424][T26932] ? __pfx_stack_trace_save+0x10/0x10 [ 2537.155453][T26932] ? stack_depot_save_flags+0x40/0x860 [ 2537.155487][T26932] should_fail_ex+0x414/0x560 [ 2537.155521][T26932] should_failslab+0xa8/0x100 [ 2537.155555][T26932] __kmalloc_noprof+0xcb/0x4f0 [ 2537.155583][T26932] ? __x64_sys_sendmsg+0x19b/0x260 [ 2537.155604][T26932] ? ___neigh_create+0x6d5/0x2260 [ 2537.155630][T26932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2537.155658][T26932] ___neigh_create+0x6d5/0x2260 [ 2537.155714][T26932] ip_neigh_gw4+0x289/0x3b0 [ 2537.155744][T26932] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 2537.155769][T26932] ? __lock_acquire+0xab9/0xd20 [ 2537.155812][T26932] ip_finish_output2+0x57a/0x1160 [ 2537.155846][T26932] ? ip_finish_output2+0x452/0x1160 [ 2537.155872][T26932] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 2537.155896][T26932] ? __pfx_ip_finish_output2+0x10/0x10 [ 2537.155922][T26932] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 2537.155944][T26932] ? ip_skb_dst_mtu+0x866/0xab0 [ 2537.155971][T26932] ? ip_finish_output+0x33a/0x3f0 [ 2537.155998][T26932] ip_output+0x2a1/0x3c0 [ 2537.156023][T26932] ? ip_output+0x60/0x3c0 [ 2537.156047][T26932] ip_send_skb+0x74/0x100 [ 2537.156074][T26932] udp_send_skb+0xaf1/0x14c0 [ 2537.156124][T26932] udp_sendmsg+0x195a/0x2170 [ 2537.156172][T26932] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2537.156201][T26932] ? __pfx_udp_sendmsg+0x10/0x10 [ 2537.156262][T26932] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2537.156293][T26932] ? inet_sendmsg+0x14f/0x370 [ 2537.156322][T26932] ? inet_sendmsg+0x29c/0x370 [ 2537.156352][T26932] __sock_sendmsg+0x19c/0x270 [ 2537.156384][T26932] ____sys_sendmsg+0x505/0x830 [ 2537.156414][T26932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2537.156448][T26932] ? import_iovec+0x74/0xa0 [ 2537.156478][T26932] ___sys_sendmsg+0x21f/0x2a0 [ 2537.156503][T26932] ? __pfx____sys_sendmsg+0x10/0x10 [ 2537.156569][T26932] ? __fget_files+0x2a/0x420 [ 2537.156602][T26932] ? __fget_files+0x3a0/0x420 [ 2537.156647][T26932] __x64_sys_sendmsg+0x19b/0x260 [ 2537.156673][T26932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2537.156707][T26932] ? __pfx_ksys_write+0x10/0x10 [ 2537.156734][T26932] ? rcu_is_watching+0x15/0xb0 [ 2537.156763][T26932] ? do_syscall_64+0xbe/0x3b0 [ 2537.156824][T26932] do_syscall_64+0xfa/0x3b0 [ 2537.156854][T26932] ? lockdep_hardirqs_on+0x9c/0x150 [ 2537.156883][T26932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2537.156905][T26932] ? clear_bhb_loop+0x60/0xb0 [ 2537.156932][T26932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2537.156954][T26932] RIP: 0033:0x7fd79c58ebe9 [ 2537.156974][T26932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2537.156994][T26932] RSP: 002b:00007fd79d363038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2537.157018][T26932] RAX: ffffffffffffffda RBX: 00007fd79c7b5fa0 RCX: 00007fd79c58ebe9 [ 2537.157035][T26932] RDX: 0000000000040880 RSI: 0000200000007940 RDI: 0000000000000007 [ 2537.157050][T26932] RBP: 00007fd79d363090 R08: 0000000000000000 R09: 0000000000000000 [ 2537.157064][T26932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2537.157077][T26932] R13: 00007fd79c7b6038 R14: 00007fd79c7b5fa0 R15: 00007ffd05866e48 [ 2537.157113][T26932] [ 2537.616705][T26942] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2537.623273][T26942] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2537.676931][T26946] netlink: 'syz.4.16599': attribute type 2 has an invalid length. [ 2537.695282][T26946] netlink: 'syz.4.16599': attribute type 8 has an invalid length. [ 2537.712541][T26946] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16599'. [ 2537.807808][T26951] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.16600'. [ 2537.876979][T26951] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16600'. [ 2537.927921][T26951] netlink: 'syz.7.16600': attribute type 41 has an invalid length. [ 2537.941060][T26951] netlink: 40 bytes leftover after parsing attributes in process `syz.7.16600'. [ 2538.046964][T26955] netlink: 'syz.5.16601': attribute type 10 has an invalid length. [ 2538.065918][T26955] team0: Device ipvlan1 failed to register rx_handler [ 2538.337463][T26960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16603'. [ 2538.440401][T26960] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2538.823914][T26964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2540.142593][T26989] netlink: 'syz.8.16615': attribute type 29 has an invalid length. [ 2540.247526][T26995] netlink: 'syz.8.16615': attribute type 29 has an invalid length. [ 2540.561996][T27004] netlink: 'syz.8.16618': attribute type 10 has an invalid length. [ 2540.625076][T27004] team0: Device ipvlan1 failed to register rx_handler [ 2540.996553][ T3320] Bluetooth: hci5: unexpected cc 0x1004 length: 12 > 11 [ 2541.004468][ T3320] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 2541.020682][T27011] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16621'. [ 2541.271864][T27019] netlink: 830 bytes leftover after parsing attributes in process `syz.5.16623'. [ 2541.891320][T27035] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16630'. [ 2542.112880][T27037] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2542.234183][T27040] bond0: (slave ): Error: Device can not be enslaved while up [ 2542.448808][T27045] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.16635'. [ 2542.476789][T27047] netlink: 'syz.0.16636': attribute type 10 has an invalid length. [ 2542.507695][T27047] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16636'. [ 2542.692488][T27060] netlink: 'syz.0.16638': attribute type 10 has an invalid length. [ 2542.757508][T27063] netlink: 'syz.8.16640': attribute type 10 has an invalid length. [ 2542.844429][T27063] team0: Device ipvlan1 failed to register rx_handler [ 2543.989110][T27082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16645'. [ 2544.154983][T27084] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2544.282552][T27085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16644'. [ 2545.039708][ T3320] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2545.049032][ T3320] Bluetooth: hci5: Injecting HCI hardware error event [ 2545.059238][T20188] Bluetooth: hci5: hardware error 0x00 [ 2545.340414][T27098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2546.219262][T27115] netlink: 'syz.7.16654': attribute type 3 has an invalid length. [ 2546.282074][T27115] netlink: 132 bytes leftover after parsing attributes in process `syz.7.16654'. [ 2547.198067][T20188] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2549.769243][T27135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16658'. [ 2549.871347][T27136] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2553.677094][T27188] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16677'. [ 2553.678565][T27189] FAULT_INJECTION: forcing a failure. [ 2553.678565][T27189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2553.679232][T27189] [ 2553.679241][T27189] ====================================================== [ 2553.679250][T27189] WARNING: possible circular locking dependency detected [ 2553.679276][T27189] 6.16.0-syzkaller-g561c80369df0 #0 Not tainted [ 2553.679289][T27189] ------------------------------------------------------ [ 2553.679298][T27189] syz.5.16676/27189 is trying to acquire lock: [ 2553.679310][T27189] ffffffff8e12e120 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x444/0x7a0 [ 2553.679367][T27189] [ 2553.679367][T27189] but task is already holding lock: [ 2553.679375][T27189] ffff8880b8739718 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x809/0xfb0 [ 2553.679422][T27189] [ 2553.679422][T27189] which lock already depends on the new lock. [ 2553.679422][T27189] [ 2553.679430][T27189] [ 2553.679430][T27189] the existing dependency chain (in reverse order) is: [ 2553.679439][T27189] [ 2553.679439][T27189] -> #3 (&pool->lock){-.-.}-{2:2}: [ 2553.679467][T27189] lock_acquire+0x120/0x360 [ 2553.679498][T27189] _raw_spin_lock+0x2e/0x40 [ 2553.679522][T27189] __queue_work+0x809/0xfb0 [ 2553.679541][T27189] queue_work_on+0x181/0x270 [ 2553.679561][T27189] rpm_suspend+0xe54/0x1720 [ 2553.679580][T27189] __pm_runtime_idle+0x12f/0x1a0 [ 2553.679598][T27189] __device_attach+0x342/0x400 [ 2553.679619][T27189] bus_probe_device+0x185/0x260 [ 2553.679648][T27189] device_add+0x7b6/0xb50 [ 2553.679665][T27189] serial_base_port_add+0x2e3/0x410 [ 2553.679688][T27189] serial_core_register_port+0x369/0x27c0 [ 2553.679718][T27189] serial8250_register_8250_port+0x16db/0x2050 [ 2553.679746][T27189] serial_pnp_probe+0x527/0x790 [ 2553.679779][T27189] pnp_device_probe+0x308/0x4c0 [ 2553.679826][T27189] really_probe+0x26d/0x9e0 [ 2553.679850][T27189] __driver_probe_device+0x18c/0x2f0 [ 2553.679872][T27189] driver_probe_device+0x4f/0x430 [ 2553.679896][T27189] __driver_attach+0x452/0x700 [ 2553.679918][T27189] bus_for_each_dev+0x233/0x2b0 [ 2553.679948][T27189] bus_add_driver+0x345/0x640 [ 2553.679977][T27189] driver_register+0x23a/0x320 [ 2553.680003][T27189] serial8250_init+0x8f/0x160 [ 2553.680034][T27189] do_one_initcall+0x233/0x820 [ 2553.680062][T27189] do_initcall_level+0x104/0x190 [ 2553.680088][T27189] do_initcalls+0x59/0xa0 [ 2553.680110][T27189] kernel_init_freeable+0x334/0x4b0 [ 2553.680133][T27189] kernel_init+0x1d/0x1d0 [ 2553.680154][T27189] ret_from_fork+0x3fc/0x770 [ 2553.680175][T27189] ret_from_fork_asm+0x1a/0x30 [ 2553.680204][T27189] [ 2553.680204][T27189] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 2553.680235][T27189] lock_acquire+0x120/0x360 [ 2553.680265][T27189] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2553.680292][T27189] __pm_runtime_resume+0x10f/0x180 [ 2553.680314][T27189] __uart_start+0x171/0x460 [ 2553.680343][T27189] uart_write+0xdc/0x130 [ 2553.680374][T27189] n_tty_write+0xd2c/0x1200 [ 2553.680398][T27189] file_tty_write+0x554/0xa20 [ 2553.680427][T27189] vfs_write+0x5c6/0xb30 [ 2553.680455][T27189] ksys_write+0x145/0x250 [ 2553.680482][T27189] do_syscall_64+0xfa/0x3b0 [ 2553.680514][T27189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2553.680536][T27189] [ 2553.680536][T27189] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 2553.680566][T27189] lock_acquire+0x120/0x360 [ 2553.680597][T27189] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2553.680623][T27189] serial8250_console_write+0x17e/0x1ba0 [ 2553.680644][T27189] console_flush_all+0x728/0xc40 [ 2553.680669][T27189] console_unlock+0xc4/0x270 [ 2553.680690][T27189] vprintk_emit+0x5b7/0x7a0 [ 2553.680712][T27189] _printk+0xcf/0x120 [ 2553.680741][T27189] register_console+0xa8b/0xf90 [ 2553.680774][T27189] univ8250_console_init+0x3a/0x70 [ 2553.680802][T27189] console_init+0x10e/0x430 [ 2553.680828][T27189] start_kernel+0x254/0x410 [ 2553.680847][T27189] x86_64_start_reservations+0x24/0x30 [ 2553.680877][T27189] x86_64_start_kernel+0x143/0x1c0 [ 2553.680904][T27189] common_startup_64+0x13e/0x147 [ 2553.680934][T27189] [ 2553.680934][T27189] -> #0 (console_owner){-.-.}-{0:0}: [ 2553.680964][T27189] validate_chain+0xb9b/0x2140 [ 2553.680986][T27189] __lock_acquire+0xab9/0xd20 [ 2553.681016][T27189] lock_acquire+0x120/0x360 [ 2553.681048][T27189] vprintk_emit+0x460/0x7a0 [ 2553.681070][T27189] _printk+0xcf/0x120 [ 2553.681099][T27189] should_fail_ex+0x3f5/0x560 [ 2553.681125][T27189] strncpy_from_user+0x36/0x290 [ 2553.681151][T27189] strncpy_from_user_nofault+0x72/0x150 [ 2553.681177][T27189] bpf_probe_read_compat_str+0xe2/0x180 [ 2553.681199][T27189] bpf_prog_0565b0211d4cea8c+0x4e/0x54 [ 2553.681219][T27189] bpf_trace_run1+0x27f/0x4b0 [ 2553.681246][T27189] __bpf_trace_workqueue_activate_work+0xae/0x100 [ 2553.681281][T27189] trace_workqueue_activate_work+0x170/0x1d0 [ 2553.681314][T27189] __queue_work+0xcc2/0xfb0 [ 2553.681335][T27189] queue_work_on+0x181/0x270 [ 2553.681354][T27189] net_enable_timestamp+0x145/0x190 [ 2553.681385][T27189] sk_setsockopt+0x1adb/0x2dc0 [ 2553.681414][T27189] do_sock_setsockopt+0x11b/0x1b0 [ 2553.681447][T27189] __x64_sys_setsockopt+0x13f/0x1b0 [ 2553.681481][T27189] do_syscall_64+0xfa/0x3b0 [ 2553.681511][T27189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2553.681530][T27189] [ 2553.681530][T27189] other info that might help us debug this: [ 2553.681530][T27189] [ 2553.681540][T27189] Chain exists of: [ 2553.681540][T27189] console_owner --> &dev->power.lock --> &pool->lock [ 2553.681540][T27189] [ 2553.681574][T27189] Possible unsafe locking scenario: [ 2553.681574][T27189] [ 2553.681581][T27189] CPU0 CPU1 [ 2553.681589][T27189] ---- ---- [ 2553.681595][T27189] lock(&pool->lock); [ 2553.681609][T27189] lock(&dev->power.lock); [ 2553.681626][T27189] lock(&pool->lock); [ 2553.681642][T27189] lock(console_owner); [ 2553.681657][T27189] [ 2553.681657][T27189] *** DEADLOCK *** [ 2553.681657][T27189] [ 2553.681664][T27189] 4 locks held by syz.5.16676/27189: [ 2553.681676][T27189] #0: ffff888029495218 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: sk_setsockopt+0xe10/0x2dc0 [ 2553.681736][T27189] #1: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: __queue_work+0x102/0xfb0 [ 2553.681793][T27189] #2: ffff8880b8739718 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x809/0xfb0 [ 2553.681843][T27189] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run1+0x181/0x4b0 [ 2553.681897][T27189] [ 2553.681897][T27189] stack backtrace: [ 2553.681909][T27189] CPU: 1 UID: 0 PID: 27189 Comm: syz.5.16676 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2553.681937][T27189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2553.681950][T27189] Call Trace: [ 2553.681960][T27189] [ 2553.681970][T27189] dump_stack_lvl+0x189/0x250 [ 2553.681998][T27189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2553.682024][T27189] ? __pfx__printk+0x10/0x10 [ 2553.682055][T27189] ? print_lock_name+0xde/0x100 [ 2553.682087][T27189] print_circular_bug+0x2ee/0x310 [ 2553.682115][T27189] check_noncircular+0x134/0x160 [ 2553.682143][T27189] validate_chain+0xb9b/0x2140 [ 2553.682177][T27189] __lock_acquire+0xab9/0xd20 [ 2553.682214][T27189] ? vprintk_emit+0x444/0x7a0 [ 2553.682235][T27189] lock_acquire+0x120/0x360 [ 2553.682265][T27189] ? vprintk_emit+0x444/0x7a0 [ 2553.682311][T27189] ? do_raw_spin_unlock+0x122/0x240 [ 2553.682341][T27189] ? vprintk_emit+0x444/0x7a0 [ 2553.682366][T27189] vprintk_emit+0x460/0x7a0 [ 2553.682388][T27189] ? vprintk_emit+0x444/0x7a0 [ 2553.682414][T27189] ? __pfx_vprintk_emit+0x10/0x10 [ 2553.682439][T27189] ? up_write+0x1c4/0x420 [ 2553.682467][T27189] ? process_measurement+0x1640/0x1a40 [ 2553.682501][T27189] _printk+0xcf/0x120 [ 2553.682531][T27189] ? __pfx____ratelimit+0x10/0x10 [ 2553.682564][T27189] ? __pfx__printk+0x10/0x10 [ 2553.682603][T27189] should_fail_ex+0x3f5/0x560 [ 2553.682635][T27189] strncpy_from_user+0x36/0x290 [ 2553.682666][T27189] strncpy_from_user_nofault+0x72/0x150 [ 2553.682695][T27189] bpf_probe_read_compat_str+0xe2/0x180 [ 2553.682721][T27189] bpf_prog_0565b0211d4cea8c+0x4e/0x54 [ 2553.682741][T27189] bpf_trace_run1+0x27f/0x4b0 [ 2553.682777][T27189] ? bpf_trace_run1+0x181/0x4b0 [ 2553.682808][T27189] ? __pfx_bpf_trace_run1+0x10/0x10 [ 2553.682841][T27189] ? __bpf_trace_workqueue_activate_work+0xa1/0x100 [ 2553.682872][T27189] __bpf_trace_workqueue_activate_work+0xae/0x100 [ 2553.682899][T27189] ? __pfx___bpf_trace_workqueue_activate_work+0x10/0x10 [ 2553.682924][T27189] ? do_raw_spin_lock+0x121/0x290 [ 2553.682955][T27189] ? __pfx_pwq_tryinc_nr_active+0x10/0x10 [ 2553.682996][T27189] trace_workqueue_activate_work+0x170/0x1d0 [ 2553.683034][T27189] __queue_work+0xcc2/0xfb0 [ 2553.683060][T27189] ? __queue_work+0x102/0xfb0 [ 2553.683087][T27189] queue_work_on+0x181/0x270 [ 2553.683111][T27189] ? __local_bh_enable_ip+0xce/0x1c0 [ 2553.683134][T27189] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2553.683169][T27189] ? __pfx_queue_work_on+0x10/0x10 [ 2553.683198][T27189] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2553.683223][T27189] net_enable_timestamp+0x145/0x190 [ 2553.683258][T27189] ? __pfx_net_enable_timestamp+0x10/0x10 [ 2553.683295][T27189] ? __sock_set_timestamps+0x16a/0x1b0 [ 2553.683330][T27189] sk_setsockopt+0x1adb/0x2dc0 [ 2553.683364][T27189] ? __pfx___might_resched+0x10/0x10 [ 2553.683392][T27189] ? __pfx_sk_setsockopt+0x10/0x10 [ 2553.683426][T27189] ? __lock_acquire+0xab9/0xd20 [ 2553.683462][T27189] ? aa_sk_perm+0x81e/0x950 [ 2553.683498][T27189] ? __pfx_aa_sk_perm+0x10/0x10 [ 2553.683533][T27189] ? __fget_files+0x2a/0x420 [ 2553.683568][T27189] ? aa_sock_opt_perm+0xff/0x1b0 [ 2553.683605][T27189] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2553.683635][T27189] do_sock_setsockopt+0x11b/0x1b0 [ 2553.683674][T27189] __x64_sys_setsockopt+0x13f/0x1b0 [ 2553.683715][T27189] do_syscall_64+0xfa/0x3b0 [ 2553.683746][T27189] ? lockdep_hardirqs_on+0x9c/0x150 [ 2553.683784][T27189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2553.683807][T27189] ? clear_bhb_loop+0x60/0xb0 [ 2553.683833][T27189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2553.683857][T27189] RIP: 0033:0x7fbac838ebe9 [ 2553.683877][T27189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2553.683899][T27189] RSP: 002b:00007fbac925a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2553.683922][T27189] RAX: ffffffffffffffda RBX: 00007fbac85b5fa0 RCX: 00007fbac838ebe9 [ 2553.683942][T27189] RDX: 000000000000001d RSI: 0000000000000001 RDI: 000000000000000a [ 2553.683956][T27189] RBP: 00007fbac925a090 R08: 0000000000000004 R09: 0000000000000000 [ 2553.683973][T27189] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2553.683989][T27189] R13: 00007fbac85b6038 R14: 00007fbac85b5fa0 R15: 00007ffff67f45f8 [ 2553.684016][T27189] [ 2554.743490][T27189] CPU: 1 UID: 0 PID: 27189 Comm: syz.5.16676 Not tainted 6.16.0-syzkaller-g561c80369df0 #0 PREEMPT(full) [ 2554.743511][T27189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2554.743522][T27189] Call Trace: [ 2554.743530][T27189] [ 2554.743537][T27189] dump_stack_lvl+0x189/0x250 [ 2554.743557][T27189] ? __pfx____ratelimit+0x10/0x10 [ 2554.743577][T27189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2554.743593][T27189] ? __pfx__printk+0x10/0x10 [ 2554.743617][T27189] should_fail_ex+0x414/0x560 [ 2554.743637][T27189] strncpy_from_user+0x36/0x290 [ 2554.743674][T27189] strncpy_from_user_nofault+0x72/0x150 [ 2554.743694][T27189] bpf_probe_read_compat_str+0xe2/0x180 [ 2554.743726][T27189] bpf_prog_0565b0211d4cea8c+0x4e/0x54 [ 2554.743739][T27189] bpf_trace_run1+0x27f/0x4b0 [ 2554.743757][T27189] ? bpf_trace_run1+0x181/0x4b0 [ 2554.743774][T27189] ? __pfx_bpf_trace_run1+0x10/0x10 [ 2554.743793][T27189] ? __bpf_trace_workqueue_activate_work+0xa1/0x100 [ 2554.743810][T27189] __bpf_trace_workqueue_activate_work+0xae/0x100 [ 2554.743825][T27189] ? __pfx___bpf_trace_workqueue_activate_work+0x10/0x10 [ 2554.743839][T27189] ? do_raw_spin_lock+0x121/0x290 [ 2554.743857][T27189] ? __pfx_pwq_tryinc_nr_active+0x10/0x10 [ 2554.743881][T27189] trace_workqueue_activate_work+0x170/0x1d0 [ 2554.743923][T27189] __queue_work+0xcc2/0xfb0 [ 2554.743940][T27189] ? __queue_work+0x102/0xfb0 [ 2554.743957][T27189] queue_work_on+0x181/0x270 [ 2554.743972][T27189] ? __local_bh_enable_ip+0xce/0x1c0 [ 2554.743988][T27189] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2554.744010][T27189] ? __pfx_queue_work_on+0x10/0x10 [ 2554.744027][T27189] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2554.744042][T27189] net_enable_timestamp+0x145/0x190 [ 2554.744065][T27189] ? __pfx_net_enable_timestamp+0x10/0x10 [ 2554.744109][T27189] ? __sock_set_timestamps+0x16a/0x1b0 [ 2554.744132][T27189] sk_setsockopt+0x1adb/0x2dc0 [ 2554.744155][T27189] ? __pfx___might_resched+0x10/0x10 [ 2554.744173][T27189] ? __pfx_sk_setsockopt+0x10/0x10 [ 2554.744195][T27189] ? __lock_acquire+0xab9/0xd20 [ 2554.744219][T27189] ? aa_sk_perm+0x81e/0x950 [ 2554.744243][T27189] ? __pfx_aa_sk_perm+0x10/0x10 [ 2554.744266][T27189] ? __fget_files+0x2a/0x420 [ 2554.744289][T27189] ? aa_sock_opt_perm+0xff/0x1b0 [ 2554.744314][T27189] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2554.744333][T27189] do_sock_setsockopt+0x11b/0x1b0 [ 2554.744359][T27189] __x64_sys_setsockopt+0x13f/0x1b0 [ 2554.744385][T27189] do_syscall_64+0xfa/0x3b0 [ 2554.744408][T27189] ? lockdep_hardirqs_on+0x9c/0x150 [ 2554.744428][T27189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2554.744448][T27189] ? clear_bhb_loop+0x60/0xb0 [ 2554.744465][T27189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2554.744481][T27189] RIP: 0033:0x7fbac838ebe9 [ 2554.744496][T27189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2554.744510][T27189] RSP: 002b:00007fbac925a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2554.744527][T27189] RAX: ffffffffffffffda RBX: 00007fbac85b5fa0 RCX: 00007fbac838ebe9 [ 2554.744539][T27189] RDX: 000000000000001d RSI: 0000000000000001 RDI: 000000000000000a [ 2554.744549][T27189] RBP: 00007fbac925a090 R08: 0000000000000004 R09: 0000000000000000 [ 2554.744559][T27189] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2554.744570][T27189] R13: 00007fbac85b6038 R14: 00007fbac85b5fa0 R15: 00007ffff67f45f8 [ 2554.744588][T27189] [ 2555.124471][T27188] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2557.117967][T27196] Bluetooth: hci1: command 0x0406 tx timeout