last executing test programs: 1m11.214983254s ago: executing program 0 (id=222): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='!\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x1d}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) 1m10.928409472s ago: executing program 0 (id=225): r0 = socket$kcm(0x10, 0x3, 0x10) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000c8000000c8"], 0x0, 0xe2, 0x0, 0x0, 0x8000}, 0x28) (async) recvmsg$unix(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20000100) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x30, 0x1, 0x3, 0xfffff034}, {0x16, 0xfb, 0x1, 0xfffffffb}]}) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="c01803001d020b63d25a80648c2594f91624fc60100c2140020000030505820137153e3702480600000070f047a768346938b230de686ea7049c846266ec5edf56b407e53be03615ba038e9f2296fc0d52a4100190aad817f9fbba51729b06b486926291c0ff64c79f861a81fc984f9ebcebb6d2d0c2179479789b3908f1acecd55b602b1faf11ab9af5a35797140955f29946ecc221a0be9b25a46de72d7b0830603e7912973e80697d08bee540a59851f8095f45bc1bcdf4d8ae8f2e10525a95", 0xc1}], 0x1}, 0x0) 1m10.454192395s ago: executing program 0 (id=228): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) close(0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0003400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x4, 0x0, 0xf000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x806, 0x40, 0x0, 0x8, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz1\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000f9ffffff83790f00001000004d0b0200000000008d42100010000000084d000003000000182b0000", @ANYRES32, @ANYBLOB="000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b75619286e00003cc16904000000196a924785f6f76b8dbe37014629986c89d91a7f57959f60fd7d24d3d478a0d1ab207c953e2e702bebeeced22a8cc0c0ba3a32d191f450f61767fce170a680dfff3ce06fd17f6175907036c4aeadc4a6de88", @ANYRES32, @ANYBLOB="000000000000000018210000", @ANYRES32, @ANYBLOB="0000000000020000bc913000010000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x2b7, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000ac0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xe, 0x5, 0x2}, 0x10, 0x579b, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xb}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000df26ff704db40d650000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, r0}, 0x94) 1m9.514948222s ago: executing program 0 (id=231): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x3, 0x80, 0x1, 0x0, 0x4, 0x3, 0x0, 0x6, 0x6000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x576}, 0x40, 0x8, 0x0, 0x9, 0x80000000, 0xc0000000, 0x0, 0x0, 0x401, 0x0, 0x100000001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xed, 0xf9, 0xfc, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x109101, 0x4, 0x0, 0x9, 0x0, 0x400000, 0x1}, 0x0, 0x1, r5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='GPL\x00', 0x200000, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r7, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b703000024000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) (async) setsockopt$sock_attach_bpf(r9, 0x84, 0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) (async) socket$kcm(0xa, 0x3, 0x73) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f00000011c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) 1m9.309698117s ago: executing program 0 (id=234): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x382, 0xffffffffffffffff, 0x35ac0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x382, 0xffffffffffffffff, 0x35ac0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x5}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x5}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) (async) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02", 0x3}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) 1m8.016730873s ago: executing program 0 (id=239): r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0xff, 0xf8, 0x4, 0x4, 0x0, 0x80, 0x2a04, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x101, 0x1e55}, 0x191, 0x0, 0x8, 0x8, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x1, 0x0, 0x200000000d01f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xe) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x1, 0x9}, 0x0, 0x400000, 0x0, 0x2, 0x0, 0xfffffffd, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x56cb4fc6b416271, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x56cb4fc6b416271, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0xff}, 0x100110, 0x7ff, 0x0, 0x7, 0x6, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0xa) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0xff}, 0x100110, 0x7ff, 0x0, 0x7, 0x6, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0xa) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a19, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 52.908341227s ago: executing program 32 (id=239): r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0xff, 0xf8, 0x4, 0x4, 0x0, 0x80, 0x2a04, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x101, 0x1e55}, 0x191, 0x0, 0x8, 0x8, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x1, 0x0, 0x200000000d01f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xe) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x1, 0x9}, 0x0, 0x400000, 0x0, 0x2, 0x0, 0xfffffffd, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x56cb4fc6b416271, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x56cb4fc6b416271, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0xff}, 0x100110, 0x7ff, 0x0, 0x7, 0x6, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0xa) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0xff}, 0x100110, 0x7ff, 0x0, 0x7, 0x6, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0xa) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a19, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 5.454882377s ago: executing program 4 (id=477): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r0) 5.436764678s ago: executing program 2 (id=478): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x33, &(0x7f0000001080)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000020000087b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018590000070000000000000000000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018430000fcffffff00000000000000009500000000000000180000000200000000000000000000801854000001000000000000000000000018270000", @ANYBLOB="00000000001000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x1, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63c78b5524ce5b8c97c7c10d3e8761960b00303234"], 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000003cd8a511e6dbb48bf8ff00000000bfa200000000000007020000f8ffff03001008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/175, 0xaf}, {&(0x7f00000003c0)=""/6, 0x6}, {0x0}, {&(0x7f0000000280)=""/162, 0xa2}], 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000800)=[{0x1c}, {0x28, 0x0, 0x1, 0xefff}, {0xb1, 0x0, 0xba, 0x8007}, {0x16, 0xfc, 0x5, 0xff}]}) 5.111333427s ago: executing program 4 (id=480): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 3.259867409s ago: executing program 4 (id=483): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000009000080850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffbd, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000000000000000304001ac00800120004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) 3.258923319s ago: executing program 3 (id=484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000040180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x2800}, 0x78) 3.046535025s ago: executing program 2 (id=485): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000400000000000000000000000000003a"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.687032495s ago: executing program 3 (id=487): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d80)={0xffffffffffffffff, 0x638, 0x28}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x1, 0x3e0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="180000000000ffffffff00d900000000950000000000f8e213f8944ec255623304cee3ef88c775ce149601d8453463e8ec8f993eab1bdf889242fadb6bceaf3d97cba121b441cc3a89bc4e425ae2d61da7f403f16089942846b9a5b85fa4d2424b936fcb3532d92ce44ec205a1a403c8812f57798b8e35b5bd3b21f7b4f43370f9ea8cdc3e834337115834ea7ecf7ad33eb861ee36656659a2f32c9260a275b4eaf14d83911b535d8b9d5e01acfd0a14a04cce485e0282d6169bd38187fee1cc7cbeb864a2ddf6d56ca79129895f6b992ee892170405c90143f7d56880cfe17fa22dff14401fe84bb277d5450a75413dff6a5901"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002180)={r5, &(0x7f00000002c0)="71d9b2c2590b0a4d6b9bb12fd6f85023c9b01ca68e4677e493c25c1bc76bfd7ae7ef9129854913d78dd82db6e84bfe5b98863ed1a3b7b35132", &(0x7f00000020c0)=""/184}, 0x20) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000180)=r0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/140, 0x8c}, {&(0x7f0000000840)=""/4112, 0x1010}, {&(0x7f0000002940)=""/4064, 0xfe0}, {&(0x7f0000000340)=""/221, 0xdd}], 0x4, 0x0, 0x41}, 0x40000120) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001dc0)={&(0x7f0000000080)="b9d4888da57277e0a3daf1a68fcdb2b3c12596b2c670eabba3eb70688dfd7334c7ae27debc8b57f6db3af2db59ea50ff9daf6ca64e36f481fb3805c0a0dc86719efc244cb56919eeb4149104c5558f8b8601f2f07385004f349841c64401f893da1fbdb02c1139443d016f0c41acbcf6c8b5538e903c0d7728713e066f517dd8bb9cf27b648ed3d09657c81b14fe46c07156e218c31d8bafc4c8b924add76c76f643464505592d70202c744f4a6c7dae44f52fb86c85f9a9ec8b73172b1dddab2a780c2aafc92589e1", &(0x7f0000000c80)=""/4096, &(0x7f0000001c80)="1cd0bcb92dbb0d28196db40b286242aeb963b9cfde185fb90c2dc6e25eb7c7d8391bacee4b1ab98408ca77a0f7c41c5cdbd87cd35d465c27452b21f89c0c288aa70b15f1121d5b4e237c2b38bfed9898bc27646abc5339c20395f3ba743013c15d6eef57399b4186", &(0x7f0000001d00)="78b3ba0d63a29ef5337184c97ca24823ff83f97ddbf7e27025a0c8dc04d9f60e20bf88d2e7bc0edccbed99709f2ad7c3194ddcf6f44e6ed420ec85ba8c7c0ffbd21e4913652b2476860b49", 0x8000, r1}, 0x38) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = syz_clone(0x86200, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0), &(0x7f0000001f00), &(0x7f0000001f40)="3492faf3c9c86df0e91d46ef72d790076cb5fb505f7fceba7bccb7f97501cd3bbbc68bc8413ffe52a5073ac821d64aeb66682e3135de03009b71ad7267bf23f81554941f2e89ee00e813fe33334587c4c1523da69cb6dcabbafc62ee75e285c8c84854059ea7b58b") r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r12, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r13, r11, 0x0, r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002300)={0x6, 0xf, &(0x7f00000021c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000002240)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002280)={0x1, 0x1, 0x2db, 0x8}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000022c0)=[{0x3, 0x5, 0x10, 0x2}, {0x3, 0x2, 0xe, 0xc}, {0x4, 0x3, 0x10, 0xe}, {0x1, 0x5, 0x8, 0x19}], 0x10, 0xfc}, 0x94) perf_event_open(&(0x7f0000001e00)={0x5, 0x80, 0x2, 0x0, 0x3, 0x5, 0x0, 0x7fff, 0x4400, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x11dc0c, 0x80000001, 0x723, 0x8, 0x7, 0x2, 0x8b, 0x0, 0x92, 0x0, 0x4}, r9, 0x5, r2, 0x1) 2.575946179s ago: executing program 2 (id=488): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r2, r1, 0x0, 0xffffffffffffff8f, 0xfffffffffffffffe}, 0x30) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/mnt\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x8b, 0x5, 0x81, 0x4, 0x0, 0x6, 0x100, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x3ff, 0xfff}, 0x486, 0xfffffffffffffff7, 0xdbe, 0x7, 0xb5, 0x8, 0x5, 0x0, 0x2, 0x0, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x47}, 0x80, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="47e042a8e798457d46933373a78418238fdd405af2897f1e042153625837f96c2d10d70a9b52a1a6a90442fa06528a868af937bdb6a3fa0a540ca1a1c327ed11f673c95217b040a979941cbfcdb19859dd39cb09106b36f1c53c8e43d336724333dfd36f2486aab838d2d06abee4570851", 0x71}, {&(0x7f0000000200)="f0e5d72acf665ff1a7eda558b58bdfebaf1185cd129c50d7aedd076ae243b5c217dde6a07ad8e4a40fc833195093c8b863452bafdbebc87141e9f8f1b461459ce4136fe74660195cc3763f90e7c67187d505f7a8ccbbb75564e24776bd767dbbe32a4ec3b6ecc969c362cea394bcc5a61479305620bffa4ba4cce4f9f5b4", 0x7e}], 0x2, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4f490c49}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xb0}, 0x810) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000080)=0x1) 2.452261962s ago: executing program 1 (id=489): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x81, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x4002, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0xffffffffffffff79, 0x0}, 0x24000001) (async) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0xffffffffffffff79, 0x0}, 0x24000001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xfffffffffffff24b) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015001800142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00100000000c000000000000000000000000000000000063dcc4a8227b5c9f720e1f0000000000"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00100000000c000000000000000000000000000000000063dcc4a8227b5c9f720e1f0000000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="05000000000000000000000000000000410ca9ff3d8121890000ebff", @ANYRES32=r6, @ANYBLOB="040000000100"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="05000000000000000000000000000000410ca9ff3d8121890000ebff", @ANYRES32=r6, @ANYBLOB="040000000100"/28], 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002b40)={&(0x7f0000001980), &(0x7f0000002980)=""/206, 0x0, &(0x7f0000002b00), 0x8000, r9, 0x4}, 0x38) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x162e, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.008522204s ago: executing program 2 (id=490): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000180000000000000000000090b00"/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r4}, 0x20) recvmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) openat$cgroup_int(r2, &(0x7f0000000200)='cpuset.sched_load_balance\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e000000114000e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) recvmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x20) 1.948567056s ago: executing program 4 (id=491): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x20000800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/209, 0xd1}, 0x40002000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) socket$kcm(0xa, 0x2, 0x11) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) r6 = getpid() r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x5, 0xe, 0x20, 0x0, 0xe96, 0x4004, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3, 0x81}, 0x4120, 0x1, 0x7, 0x0, 0xffffffffffffb126, 0x6, 0x0, 0x0, 0x200, 0x0, 0xf}, r6, 0xffffffffffffffff, r0, 0x2) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 1.873929768s ago: executing program 1 (id=492): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000ae"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/12], 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={@cgroup=r1, 0x16, 0x0, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)={@ifindex, 0xffffffffffffffff, 0x2f, 0x2000, r1, @value=r1, @void, @void, @void, r2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x8000}, 0x8) r3 = gettid() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x11, 0x6, 0x9, 0x0, 0x5, 0x4016, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x2, 0x9}, 0x104040, 0x5, 0xe, 0x3, 0x2, 0xfffffffd, 0x85, 0x0, 0x7, 0x0, 0x1}, r3, 0x5, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000500), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) socketpair(0x2a, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={0x0, 0x0, 0x10}, 0x18) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x2, 0x0, 0x0, 0x2, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x3, 0xffffffffffffbbfe, 0x40000, 0x0, 0x0, 0x6fd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe1205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x80001, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @remote}, 0x0, 0x4, 0x3, 0x1}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xe8}, 0x40080) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8130008800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 1.483347439s ago: executing program 1 (id=493): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0x0, 0x0}, 0x10) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xd, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x1, 0xfee8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4177, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100000000, 0x80}, 0x105e39, 0x0, 0x10001, 0x6, 0x5, 0x2, 0x1, 0x0, 0x100, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 1.42116096s ago: executing program 3 (id=494): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x1, 0x84) socketpair(0x1, 0x1, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x6, 0xe4, 0xc}]}]}, {0x0, [0x5f, 0x0, 0x61, 0x5f, 0x5f, 0x61, 0x2e]}}, 0x0, 0x39, 0x0, 0x4}, 0x28) socket$kcm(0xa, 0x3, 0x3a) (async) r0 = socket$kcm(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.192134447s ago: executing program 4 (id=495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000040180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x3000}, 0x78) 1.191403647s ago: executing program 1 (id=496): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4000003, '\x00', 0x0, 0x0}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000200)=@raw=[@ldst, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc72}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r3, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 64) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r9, 0x58}, 0x10) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x58, &(0x7f00000002c0)}, 0x10) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x20, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0x7, 0xe, 0x7, 0x6, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xb, 0x0, 0x0, 0x56, 0xfffffffffffffff0}, @generic={0x1, 0x4, 0x7, 0x6, 0xffff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x4}]}, &(0x7f0000000700)='GPL\x00', 0x7, 0x65, &(0x7f00000009c0)=""/101, 0x41100, 0x40, '\x00', r8, 0x25, r4, 0x8, &(0x7f0000000b00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x0, 0x4, 0x100}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b80)=[r3, r9, r0, r2], &(0x7f0000000bc0)=[{0x2, 0x1, 0xb, 0x5}, {0x2, 0x1, 0x7, 0xa}, {0x3, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x9, 0x6}, {0x0, 0x3, 0xf, 0x2}, {0x3, 0x4, 0x3, 0x4}, {0x3, 0x3, 0xf, 0x6}], 0x10, 0xfffffff9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002f40)={0x1d, 0x11, &(0x7f0000000d00)=ANY=[@ANYBLOB="000000181100000000000000000000000000000090558333520b1873cac89deddf5e30edc48c83e56ce9333af43d02ea58c748d1745b426a5c0e8a3dfc9746ec3fad3c4b02900c15bb5b762dbe2bcbed236026e9c24479c1a90c493411071c38ae4304c7e7b571aff5e41160a13876d876", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000f9ffffff05840400ffffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000002d80)='syzkaller\x00', 0xfffff9d6, 0x2a, &(0x7f0000002dc0)=""/42, 0x41000, 0x1, '\x00', r6, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002ec0)=[{0x5, 0x2, 0x5, 0x9}], 0x10, 0x1}, 0x94) (async) socketpair(0x10, 0x3, 0x5, &(0x7f0000001640)) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="080000000001000000000000000000000000000f0f000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000400000000000000080000009010fcfff0ffffff950000000000000018440000050000000000000000000000185400000a0000020000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r10) 1.190691937s ago: executing program 3 (id=497): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9f0649807610b761ac963b206b010018000000000000001c0000001c00000000010000000000000000000f03000000000038040000000000000f0100"], 0x0, 0x36}, 0x28) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0xf0ff1f00000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x10\x04/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) r3 = socket$kcm(0x2, 0x2, 0x0) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x400120c3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) 860.891376ms ago: executing program 4 (id=498): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0209000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000380)}, 0x8000, 0x5, 0x8, 0x6, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) (async) perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000380)}, 0x8000, 0x5, 0x8, 0x6, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0xb5, 0x0, 0x0, 0x8000000000000001, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, @perf_config_ext={0x7, 0x2}, 0x114905, 0x4, 0x8, 0x1, 0x0, 0x0, 0x81, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x7, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x4a, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x29, 0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x4000040) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x4000040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) close(r4) write$cgroup_pid(r4, &(0x7f0000000100)=r3, 0x12) (async) write$cgroup_pid(r4, &(0x7f0000000100)=r3, 0x12) syz_clone(0x880200, &(0x7f0000000140), 0x0, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000300)="5dc46fc7ff07a7039a221fe66888e152e18055a93d7eb14ac385d745cfa7ed0b34e71cbd") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x0, 0xe0, &(0x7f00000003c0)='5\x04\xdeNP\xcbt\xec\xfc\xa6\xcd\x87\xcf\x06\xdc\x18\xca\x9e\xeb\x01\x98\a\xd1\xb4\x8c\xeb\xb8\x01\'\xc3%\xc0t\x9c5x\xc10\xedh<\x98\xb6\x1fr=\xa1\xc3\xe3\xfb\x17\x1c\xe6\x1b\xb1\xa8F7V\xab\xa0\x0f\xbc\xa5s\x80\"\x7fiS5zHM\x83\a\xc7\x05^\xe5\xaem\b\akx\xf0\'\xb1]\xa7`\xdb\x06GA\xc7\x9c\xf1\x97\xf9\xdf\x1e\xf8\x0f]\xce]!\xc9D\xce\xcf\r\xd4\xc3\xa9|\xa5\xc4\x8bV\xca\xe6\xb8u\x90\x1a\xa90\x9e\x99\x84\xd4\"1\x96\xec\x86\xd1\xec\xc3\xda\xb1\x15%\v0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0xef) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0xef) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042712590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 401.104219ms ago: executing program 3 (id=502): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d081efe007c05e8fe55a10a0015000200142603600e12080005007f370401a800160020000600046efb8000a007a290457f0189b316212915588ec379eff59a6aea9fef277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775338d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d405b2fb84b6d2d229a63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93454c46560b440db1233ab7dae3", 0xd8}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000000c0)=""/146, 0x92}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/185, 0xb9}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/8, 0x8}], 0x6, &(0x7f0000002580)=""/244, 0xf4}, 0x2043) 122.308047ms ago: executing program 3 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000000000000700000044140823e000000200000002e00000010000100000000000dc00000000000000840000000700000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='c 12:'], 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) 0s ago: executing program 2 (id=504): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3ff, 0x10}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0x2, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x3, 0x84) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x56, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socket$kcm(0x2a, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x100007, 0x4, 0x21, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) socket$kcm(0xa, 0x2, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x1, 0x0) sendmsg$kcm(r6, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 84.646175][ T5760] cgroup: Unknown subsys name 'net' [ 84.757845][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.505472][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.480559][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.491108][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.499278][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.507606][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.516364][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.529470][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.537830][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.550814][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.559059][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.566899][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.575188][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.583110][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.590739][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.592916][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.600553][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.613001][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.616853][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.623506][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.630217][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.635277][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.642208][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.657221][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.665251][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.673039][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.133861][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 89.266322][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 89.344516][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 89.373018][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.382038][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.389535][ T5779] bridge_slave_0: entered allmulticast mode [ 89.396734][ T5779] bridge_slave_0: entered promiscuous mode [ 89.412354][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.419645][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.426817][ T5779] bridge_slave_1: entered allmulticast mode [ 89.434936][ T5779] bridge_slave_1: entered promiscuous mode [ 89.469465][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 89.566981][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.574378][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.581694][ T5772] bridge_slave_0: entered allmulticast mode [ 89.589377][ T5772] bridge_slave_0: entered promiscuous mode [ 89.602777][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.631524][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.638702][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.647390][ T5772] bridge_slave_1: entered allmulticast mode [ 89.655187][ T5772] bridge_slave_1: entered promiscuous mode [ 89.664342][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.776339][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.789932][ T5779] team0: Port device team_slave_0 added [ 89.800945][ T5779] team0: Port device team_slave_1 added [ 89.807218][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.815418][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.823200][ T5776] bridge_slave_0: entered allmulticast mode [ 89.831415][ T5776] bridge_slave_0: entered promiscuous mode [ 89.840397][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.847558][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.855117][ T5777] bridge_slave_0: entered allmulticast mode [ 89.862382][ T5777] bridge_slave_0: entered promiscuous mode [ 89.871233][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.878644][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.886229][ T5777] bridge_slave_1: entered allmulticast mode [ 89.893628][ T5777] bridge_slave_1: entered promiscuous mode [ 89.903433][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.944004][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.951253][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.958422][ T5776] bridge_slave_1: entered allmulticast mode [ 89.965815][ T5776] bridge_slave_1: entered promiscuous mode [ 89.996542][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.003729][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.030031][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.044574][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.051739][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.078516][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.125040][ T5772] team0: Port device team_slave_0 added [ 90.140886][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.153644][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.173083][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.186606][ T5772] team0: Port device team_slave_1 added [ 90.216679][ T5776] team0: Port device team_slave_0 added [ 90.236247][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.281094][ T5776] team0: Port device team_slave_1 added [ 90.309752][ T5777] team0: Port device team_slave_0 added [ 90.336872][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.344415][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.370904][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.384175][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.391602][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.417737][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.432742][ T5777] team0: Port device team_slave_1 added [ 90.458372][ T5779] hsr_slave_0: entered promiscuous mode [ 90.464955][ T5779] hsr_slave_1: entered promiscuous mode [ 90.493692][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.500807][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.526811][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.540880][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.547878][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.574209][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.609301][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.616329][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.642738][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.681927][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.689353][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.716798][ T5783] Bluetooth: hci3: command tx timeout [ 90.717147][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.723958][ T5084] Bluetooth: hci0: command tx timeout [ 90.734078][ T5786] Bluetooth: hci2: command tx timeout [ 90.739659][ T5783] Bluetooth: hci1: command tx timeout [ 90.824369][ T5772] hsr_slave_0: entered promiscuous mode [ 90.831805][ T5772] hsr_slave_1: entered promiscuous mode [ 90.838174][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.846155][ T5772] Cannot create hsr debugfs directory [ 90.878188][ T5776] hsr_slave_0: entered promiscuous mode [ 90.885574][ T5776] hsr_slave_1: entered promiscuous mode [ 90.892240][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.900085][ T5776] Cannot create hsr debugfs directory [ 90.949094][ T5777] hsr_slave_0: entered promiscuous mode [ 90.955642][ T5777] hsr_slave_1: entered promiscuous mode [ 90.962697][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.970574][ T5777] Cannot create hsr debugfs directory [ 91.412016][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.435356][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.446890][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.457484][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.565170][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.577908][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.590259][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.604324][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.710876][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.725447][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.748133][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.786613][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.814518][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.854826][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.867008][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.899865][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.911808][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.943803][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.995559][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.002998][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.042681][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.049877][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.144048][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.154741][ T9] cfg80211: failed to load regulatory.db [ 92.202494][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.227894][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.261538][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.268732][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.320743][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.381141][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.403110][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.410485][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.435451][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.442654][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.465731][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.472970][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.551419][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.660557][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.685018][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.692308][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.765385][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.772623][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.790003][ T5084] Bluetooth: hci0: command tx timeout [ 92.795496][ T5084] Bluetooth: hci1: command tx timeout [ 92.806261][ T5783] Bluetooth: hci2: command tx timeout [ 92.812455][ T5778] Bluetooth: hci3: command tx timeout [ 92.857931][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.043348][ T5772] veth0_vlan: entered promiscuous mode [ 93.084475][ T5772] veth1_vlan: entered promiscuous mode [ 93.154369][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.220821][ T5772] veth0_macvtap: entered promiscuous mode [ 93.231900][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.288362][ T5772] veth1_macvtap: entered promiscuous mode [ 93.337950][ T5779] veth0_vlan: entered promiscuous mode [ 93.383545][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.404087][ T5779] veth1_vlan: entered promiscuous mode [ 93.426412][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.445047][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.454890][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.463786][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.473015][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.538553][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.548409][ T5776] veth0_vlan: entered promiscuous mode [ 93.588828][ T5776] veth1_vlan: entered promiscuous mode [ 93.684868][ T5779] veth0_macvtap: entered promiscuous mode [ 93.698123][ T5779] veth1_macvtap: entered promiscuous mode [ 93.714139][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.723789][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.782751][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.794721][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.806477][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.824319][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.842166][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.854219][ T5776] veth0_macvtap: entered promiscuous mode [ 93.864426][ T5777] veth0_vlan: entered promiscuous mode [ 93.889403][ T5776] veth1_macvtap: entered promiscuous mode [ 93.902419][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.914940][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.932807][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.942939][ T5777] veth1_vlan: entered promiscuous mode [ 93.967174][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.977752][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.987924][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.998148][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.023935][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.038707][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.053550][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.064479][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.078447][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.107298][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.118554][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.132303][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.143060][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.155933][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.265313][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.274730][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.284796][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.294210][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.711358][ T5777] veth0_macvtap: entered promiscuous mode [ 94.749104][ T5842] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.795278][ T5777] veth1_macvtap: entered promiscuous mode [ 94.854610][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.863454][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.871247][ T5783] Bluetooth: hci2: command tx timeout [ 94.876675][ T5783] Bluetooth: hci1: command tx timeout [ 94.882836][ T5084] Bluetooth: hci3: command tx timeout [ 94.888370][ T5084] Bluetooth: hci0: command tx timeout [ 94.953586][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.969011][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.979417][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.992271][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.003334][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.014548][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.026381][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.067124][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.080943][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.102096][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.112313][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.124431][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.135397][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.147224][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.162968][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.171274][ C1] hrtimer: interrupt took 207203 ns [ 95.178367][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.244654][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.257875][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.266828][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.277308][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.303599][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.340315][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.520726][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.558236][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.721047][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.751484][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.847525][ T5856] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.907869][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.942075][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.636082][ T5783] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 96.950399][ T5783] Bluetooth: hci1: command tx timeout [ 96.956224][ T5084] Bluetooth: hci0: command tx timeout [ 96.962056][ T5778] Bluetooth: hci3: command tx timeout [ 96.964900][ T5786] Bluetooth: hci2: command tx timeout [ 98.019750][ T5887] Zero length message leads to an empty skb [ 98.632757][ T5890] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11'. [ 98.840286][ T5890] netlink: 'syz.0.11': attribute type 28 has an invalid length. [ 98.879463][ T5890] netlink: 'syz.0.11': attribute type 29 has an invalid length. [ 98.887209][ T5890] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11'. [ 99.133780][ T5886] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.276656][ T5896] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.12'. [ 103.642072][ T5931] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 105.162927][ T5937] netlink: 10 bytes leftover after parsing attributes in process `syz.3.23'. [ 105.584983][ T5941] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.24'. [ 105.714483][ T5947] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.746056][ T5948] netlink: 156 bytes leftover after parsing attributes in process `syz.2.25'. [ 105.828552][ T5943] netlink: 'syz.2.25': attribute type 28 has an invalid length. [ 105.840649][ T5943] netlink: 'syz.2.25': attribute type 29 has an invalid length. [ 105.849609][ T5943] netlink: 132 bytes leftover after parsing attributes in process `syz.2.25'. [ 106.362845][ T5959] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 106.384172][ T5959] netlink: 2 bytes leftover after parsing attributes in process `syz.0.29'. [ 106.464685][ T5959] batadv_slave_1: entered promiscuous mode [ 106.476576][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.489103][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.484449][ T5985] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.36'. [ 115.650338][ T6043] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.49'. [ 117.245785][ T6055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.370725][ T6055] syz.0.65 (6055) used greatest stack depth: 19816 bytes left [ 117.422572][ T6073] netlink: 'syz.1.57': attribute type 27 has an invalid length. [ 118.112501][ T6104] netlink: 'syz.3.68': attribute type 10 has an invalid length. [ 118.912068][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 118.949071][ T6113] netlink: 128 bytes leftover after parsing attributes in process `syz.2.70'. [ 119.856770][ T6137] netlink: 'syz.2.77': attribute type 10 has an invalid length. [ 119.899888][ T6137] veth1_macvtap: left promiscuous mode [ 121.053999][ T6155] netlink: 144 bytes leftover after parsing attributes in process `syz.2.83'. [ 121.135480][ T6155] team0: Port device team_slave_0 removed [ 121.158055][ T6155] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 122.077103][ T6168] Driver unsupported XDP return value 0 on prog (id 82) dev N/A, expect packet loss! [ 122.353714][ T6173] netlink: 'syz.3.86': attribute type 10 has an invalid length. [ 122.562529][ T6178] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.88'. [ 122.917827][ T6190] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.92'. [ 122.940582][ T6190] netlink: del zone limit has 8 unknown bytes [ 122.969241][ T6190] netlink: 'syz.3.92': attribute type 10 has an invalid length. [ 122.989082][ T6190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.92'. [ 123.048908][ T6190] vcan0: entered promiscuous mode [ 123.089946][ T6190] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 123.241364][ T6192] delete_channel: no stack [ 123.402150][ T6201] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 123.440474][ T6201] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 123.458905][ T6201] netlink: 132 bytes leftover after parsing attributes in process `syz.1.94'. [ 123.633649][ T6208] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 123.683466][ T6208] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.95'. [ 123.702058][ T6198] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 123.717592][ T6198] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 123.743295][ T6198] dvmrp1: linktype set to 804 [ 124.019388][ T6216] netlink: 132 bytes leftover after parsing attributes in process `syz.2.99'. [ 124.494546][ T6224] netlink: 'syz.2.102': attribute type 29 has an invalid length. [ 124.882921][ T6233] netlink: 'syz.0.107': attribute type 21 has an invalid length. [ 124.904201][ T6233] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.919867][ T6233] IPv6: Can't replace route, no match found [ 126.167963][ T6233] netlink: 'syz.0.107': attribute type 10 has an invalid length. [ 126.261939][ T6233] team0: Device wg1 is of different type [ 126.383678][ T6251] netlink: 'syz.3.110': attribute type 10 has an invalid length. [ 127.331118][ T6251] team0: Port device wlan1 added [ 127.347923][ T6251] syz.3.110 (6251) used greatest stack depth: 19432 bytes left [ 127.886346][ T6277] netlink: 48 bytes leftover after parsing attributes in process `syz.3.118'. [ 128.033464][ T6278] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.117'. [ 128.506585][ T6285] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.120'. [ 128.974693][ T6289] netlink: 'syz.0.122': attribute type 10 has an invalid length. [ 129.008624][ T6289] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 129.967927][ T6299] netlink: 'syz.3.124': attribute type 3 has an invalid length. [ 129.981280][ T6289] netlink: 'syz.0.122': attribute type 39 has an invalid length. [ 129.992691][ T6302] netlink: 'syz.3.124': attribute type 12 has an invalid length. [ 130.009488][ T6299] netlink: 16795 bytes leftover after parsing attributes in process `syz.3.124'. [ 130.041165][ T6302] netlink: 171408 bytes leftover after parsing attributes in process `syz.3.124'. [ 130.257458][ T6299] C: renamed from team_slave_0 (while UP) [ 130.274068][ T6306] netlink: 'syz.1.125': attribute type 3 has an invalid length. [ 130.359855][ T6306] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.125'. [ 130.498935][ T6299] netlink: 152 bytes leftover after parsing attributes in process `syz.3.124'. [ 131.346852][ T6322] netlink: 'syz.1.129': attribute type 4 has an invalid length. [ 132.584281][ T6336] netlink: 'syz.0.131': attribute type 9 has an invalid length. [ 132.659422][ T6336] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.131'. [ 133.223078][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.230293][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.073176][ T6366] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.139'. [ 141.200939][ T6378] netlink: 'syz.1.142': attribute type 39 has an invalid length. [ 146.318999][ T6390] netlink: 'syz.2.146': attribute type 27 has an invalid length. [ 146.353138][ T6390] netlink: 164 bytes leftover after parsing attributes in process `syz.2.146'. [ 146.380236][ T6393] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.147'. [ 146.807499][ T6418] netlink: 44 bytes leftover after parsing attributes in process `syz.0.154'. [ 147.422345][ T6430] netlink: 'syz.3.158': attribute type 1 has an invalid length. [ 148.255063][ T6455] netlink: 150404 bytes leftover after parsing attributes in process `syz.1.166'. [ 148.286738][ T6455] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.166'. [ 148.333843][ T6437] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 148.343829][ T6437] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.160'. [ 150.087049][ T6496] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.174'. [ 150.149125][ T6497] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.175'. [ 151.602413][ T6510] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 151.639041][ T6510] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.178'. [ 152.037208][ T6533] netlink: 'syz.3.185': attribute type 39 has an invalid length. [ 152.151301][ T6540] netlink: 171208 bytes leftover after parsing attributes in process `syz.2.187'. [ 152.178375][ T6540] netlink: zone id is out of range [ 152.193204][ T6540] netlink: zone id is out of range [ 152.205282][ T6540] netlink: zone id is out of range [ 152.243289][ T6540] netlink: zone id is out of range [ 152.259416][ T6533] hsr_slave_1 (unregistering): left promiscuous mode [ 152.266768][ T6540] netlink: zone id is out of range [ 152.285002][ T6540] netlink: zone id is out of range [ 152.317446][ T6540] netlink: zone id is out of range [ 152.335523][ T6540] netlink: zone id is out of range [ 152.351382][ T6540] netlink: zone id is out of range [ 152.366999][ T6540] netlink: zone id is out of range [ 152.777054][ T6550] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 152.831635][ T6556] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.190'. [ 152.873240][ T6556] netlink: 156 bytes leftover after parsing attributes in process `syz.2.190'. [ 152.879360][ T6550] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.189'. [ 153.459466][ T6568] netlink: 'syz.2.195': attribute type 2 has an invalid length. [ 153.467207][ T6568] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.195'. [ 153.564559][ T6568] netlink: 15534 bytes leftover after parsing attributes in process `syz.2.195'. [ 153.644179][ T6575] netlink: 'syz.1.196': attribute type 39 has an invalid length. [ 153.839834][ T6559] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.192'. [ 153.887750][ T6559] bridge_slave_1: default FDB implementation only supports local addresses [ 153.909171][ T6581] netlink: 'syz.2.198': attribute type 29 has an invalid length. [ 153.937991][ T6581] netlink: 'syz.2.198': attribute type 29 has an invalid length. [ 154.207849][ T6590] netlink: 'syz.0.199': attribute type 21 has an invalid length. [ 154.244223][ T6590] netlink: 100 bytes leftover after parsing attributes in process `syz.0.199'. [ 154.276278][ T6593] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 154.292297][ T6593] netlink: 'syz.2.200': attribute type 3 has an invalid length. [ 154.323400][ T6593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.200'. [ 155.136184][ T6607] delete_channel: no stack [ 155.448399][ T6617] syz.0.206[6617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.449718][ T6617] syz.0.206[6617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.925902][ T6646] validate_nla: 1 callbacks suppressed [ 159.925919][ T6646] netlink: 'syz.2.214': attribute type 10 has an invalid length. [ 160.005171][ T6646] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.038484][ T6646] bond0: (slave team0): Enslaving as an active interface with an up link [ 160.047852][ T6645] netlink: 'syz.2.214': attribute type 10 has an invalid length. [ 160.430821][ T6660] netlink: 'syz.3.219': attribute type 10 has an invalid length. [ 160.557685][ T6660] team0: Port device geneve1 added [ 160.572022][ T6662] Q6`Ҙ: renamed from lo (while UP) [ 160.603642][ T6663] __nla_validate_parse: 2 callbacks suppressed [ 160.603661][ T6663] netlink: 132 bytes leftover after parsing attributes in process `syz.2.217'. [ 160.654569][ T6671] net_ratelimit: 6 callbacks suppressed [ 160.654588][ T6671] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 161.670541][ T6689] netlink: 'syz.0.228': attribute type 27 has an invalid length. [ 161.678447][ T6689] netlink: 152 bytes leftover after parsing attributes in process `syz.0.228'. [ 161.719463][ T6689] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.006738][ T6726] bridge0: port 3(batadv0) entered blocking state [ 163.015150][ T6726] bridge0: port 3(batadv0) entered disabled state [ 163.023950][ T6726] batadv0: entered allmulticast mode [ 163.049613][ T6726] batadv0: entered promiscuous mode [ 163.062296][ T1091] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 163.071935][ T6726] bridge0: port 3(batadv0) entered blocking state [ 163.078419][ T1091] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 163.089671][ T6726] bridge0: port 3(batadv0) entered forwarding state [ 164.099821][ T6735] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 164.185870][ T5786] Bluetooth: hci0: ISO packet for unknown connection handle 62 [ 164.932442][ T6753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.245'. [ 168.731698][ T6771] netlink: 60 bytes leftover after parsing attributes in process `syz.3.249'. [ 169.081096][ T6771] netlink: 60 bytes leftover after parsing attributes in process `syz.3.249'. [ 169.404231][ T6768] delete_channel: no stack [ 170.961617][ T6784] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.252'. [ 170.967605][ T6794] netlink: 'syz.2.254': attribute type 9 has an invalid length. [ 170.997381][ T6792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.005206][ T6792] IPv6: NLM_F_CREATE should be set when creating new route [ 171.013175][ T6792] IPv6: NLM_F_CREATE should be set when creating new route [ 171.020882][ T6792] IPv6: NLM_F_CREATE should be set when creating new route [ 171.039137][ T6794] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.254'. [ 174.987885][ T6849] netlink: 'syz.3.269': attribute type 6 has an invalid length. [ 175.689883][ T6865] ipvlan1: entered promiscuous mode [ 175.761435][ T6865] ipvlan1: entered allmulticast mode [ 175.767992][ T6865] veth0_vlan: entered allmulticast mode [ 177.590059][ T6883] sctp: [Deprecated]: syz.1.277 (pid 6883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.590059][ T6883] Use struct sctp_sack_info instead [ 178.763344][ T6896] ipvlan1: entered promiscuous mode [ 178.778495][ T6896] ipvlan1: entered allmulticast mode [ 178.808657][ T6896] veth0_vlan: entered allmulticast mode [ 178.888341][ T6896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.954199][ T6900] netlink: 'syz.1.283': attribute type 9 has an invalid length. [ 179.000685][ T6900] netlink: 391 bytes leftover after parsing attributes in process `syz.1.283'. [ 179.041127][ T6902] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.283'. [ 179.081285][ T6898] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.283'. [ 179.704228][ T6915] netlink: 'syz.1.288': attribute type 4 has an invalid length. [ 180.020143][ T6923] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 180.038327][ T6923] netlink: 'syz.2.289': attribute type 3 has an invalid length. [ 180.069656][ T6923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.289'. [ 180.458251][ T6931] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.293'. [ 180.507939][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.520447][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.528516][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.532794][ T6931] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 180.589102][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.620697][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 180.631484][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.642914][ T6931] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.293'. [ 180.652894][ T6937] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.293'. [ 180.950641][ T6945] netlink: 6 bytes leftover after parsing attributes in process `syz.3.296'. [ 180.988936][ T6945] openvswitch: netlink: Flow actions attr not present in new flow. [ 181.043260][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.199744][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.215703][ T6949] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 181.417205][ T6949] team0: Port device wlan1 added [ 181.466341][ T6954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.299'. [ 181.545076][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.558696][ T6957] netlink: 'syz.1.299': attribute type 12 has an invalid length. [ 181.566863][ T6957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.299'. [ 181.618649][ T6959] syzkaller0: entered promiscuous mode [ 181.624409][ T6959] syzkaller0: entered allmulticast mode [ 181.649362][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.725795][ T6967] ksmbd: Unknown IPC event: 0, ignore. [ 182.714086][ T5786] Bluetooth: hci4: command tx timeout [ 183.482736][ T6948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.531501][ T6949] syz.2.298 (6949) used greatest stack depth: 19304 bytes left [ 183.947884][ T6935] chnl_net:caif_netlink_parms(): no params data found [ 184.521389][ T6935] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.549859][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.557176][ T6935] bridge_slave_0: entered allmulticast mode [ 184.583642][ T6935] bridge_slave_0: entered promiscuous mode [ 184.665247][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.681755][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.692548][ T6935] bridge_slave_1: entered allmulticast mode [ 184.719231][ T6935] bridge_slave_1: entered promiscuous mode [ 184.788968][ T5786] Bluetooth: hci4: command tx timeout [ 184.971722][ T7024] __nla_validate_parse: 3 callbacks suppressed [ 184.971741][ T7024] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.316'. [ 185.000296][ T7026] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.316'. [ 185.127174][ T6935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.173159][ T6935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.366538][ T5786] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 185.380784][ T7039] netlink: 'syz.3.318': attribute type 39 has an invalid length. [ 185.833033][ T7040] netlink: 64 bytes leftover after parsing attributes in process `syz.1.319'. [ 186.031735][ T6935] team0: Port device team_slave_0 added [ 186.261772][ T6935] team0: Port device team_slave_1 added [ 186.489771][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.496819][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.562075][ T7064] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.323'. [ 186.578072][ T6935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.621623][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.628657][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.708199][ T6935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.869151][ T5786] Bluetooth: hci4: command tx timeout [ 187.077206][ T7062] syzkaller0: entered promiscuous mode [ 187.087013][ T7062] syzkaller0: entered allmulticast mode [ 187.434960][ T5786] Bluetooth: hci2: command tx timeout [ 187.656706][ T7088] netlink: 'syz.2.328': attribute type 9 has an invalid length. [ 187.665020][ T7088] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.328'. [ 188.948975][ T5786] Bluetooth: hci4: command tx timeout [ 189.345262][ T6935] hsr_slave_0: entered promiscuous mode [ 189.352092][ T6935] hsr_slave_1: entered promiscuous mode [ 189.358267][ T6935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.366030][ T6935] Cannot create hsr debugfs directory [ 189.605615][ T7097] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.331'. [ 189.657254][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 189.792664][ T12] hsr_slave_0: left promiscuous mode [ 189.823808][ T12] hsr_slave_1: left promiscuous mode [ 189.863532][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.898952][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.937832][ T12] bridge_slave_1: left allmulticast mode [ 189.945552][ T12] bridge_slave_1: left promiscuous mode [ 189.954708][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.975868][ T12] bridge_slave_0: left promiscuous mode [ 190.007481][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.159188][ T12] veth1_macvtap: left promiscuous mode [ 190.165438][ T12] veth0_macvtap: left promiscuous mode [ 190.179951][ T12] veth1_vlan: left promiscuous mode [ 190.185869][ T12] veth0_vlan: left promiscuous mode [ 193.615530][ T12] team0 (unregistering): Port device team_slave_1 removed [ 193.682705][ T12] team0 (unregistering): Port device team_slave_0 removed [ 193.766528][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.837558][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.338878][ T12] bond0 (unregistering): Released all slaves [ 194.518866][ T7115] netlink: 'syz.1.334': attribute type 21 has an invalid length. [ 194.526828][ T7115] netlink: 132 bytes leftover after parsing attributes in process `syz.1.334'. [ 194.559458][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.565893][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.073128][ T7142] netlink: 48 bytes leftover after parsing attributes in process `syz.3.339'. [ 196.232291][ T6935] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.278404][ T6935] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.287778][ T7166] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 196.363946][ T6935] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.469959][ T7169] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.342'. [ 196.499046][ T6935] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.910479][ T6935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.948644][ T6935] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.017105][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.024399][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.095474][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.102726][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.364908][ T7189] netlink: 128 bytes leftover after parsing attributes in process `syz.2.346'. [ 197.471927][ T7189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.547061][ T7202] netlink: 'syz.1.350': attribute type 29 has an invalid length. [ 197.580496][ T7203] netlink: 'syz.1.350': attribute type 29 has an invalid length. [ 197.588592][ T7203] netlink: 'syz.1.350': attribute type 29 has an invalid length. [ 197.666269][ T7210] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.349'. [ 198.273350][ T6935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.202731][ T7245] netlink: 56855 bytes leftover after parsing attributes in process `syz.1.356'. [ 199.463766][ T6935] veth0_vlan: entered promiscuous mode [ 199.492369][ T6935] veth1_vlan: entered promiscuous mode [ 199.606493][ T6935] veth0_macvtap: entered promiscuous mode [ 199.761192][ T6935] veth1_macvtap: entered promiscuous mode [ 199.986343][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.997251][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.026760][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.110348][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.175824][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.188864][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.207625][ T6935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.270770][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.281676][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.298963][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.313359][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.329099][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.340985][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.352896][ T6935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.366966][ T6935] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.376396][ T6935] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.386240][ T6935] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.396401][ T6935] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.379564][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.387470][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.461575][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.471181][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.857274][ T7307] netlink: 'syz.2.367': attribute type 29 has an invalid length. [ 201.870767][ T7307] netlink: 'syz.2.367': attribute type 29 has an invalid length. [ 202.341876][ T7327] netlink: 132 bytes leftover after parsing attributes in process `syz.4.372'. [ 203.576338][ T7368] netlink: 'syz.4.381': attribute type 21 has an invalid length. [ 203.615852][ T7368] netlink: 'syz.4.381': attribute type 3 has an invalid length. [ 203.645590][ T7373] netlink: 'syz.3.382': attribute type 9 has an invalid length. [ 203.653766][ T7368] netlink: 144 bytes leftover after parsing attributes in process `syz.4.381'. [ 203.705944][ T7373] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.382'. [ 203.979455][ T7377] netlink: 'syz.3.382': attribute type 9 has an invalid length. [ 203.998815][ T7377] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.382'. [ 206.994633][ T7492] netlink: 'syz.2.397': attribute type 39 has an invalid length. [ 207.035178][ T7492] hsr_slave_1 (unregistering): left promiscuous mode [ 207.155408][ T7493] netlink: 'syz.2.397': attribute type 21 has an invalid length. [ 207.163663][ T7493] netlink: 'syz.2.397': attribute type 6 has an invalid length. [ 207.171535][ T7493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.397'. [ 207.328486][ T7499] netlink: 'syz.1.406': attribute type 12 has an invalid length. [ 207.357740][ T7499] netlink: 'syz.1.406': attribute type 11 has an invalid length. [ 207.377813][ T7499] netlink: 188816 bytes leftover after parsing attributes in process `syz.1.406'. [ 207.527602][ T7507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 207.559509][ T7500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.399'. [ 208.349529][ T7531] netlink: 'syz.3.403': attribute type 2 has an invalid length. [ 208.404957][ T7531] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.403'. [ 208.948656][ T7539] netlink: 156 bytes leftover after parsing attributes in process `syz.3.404'. [ 208.984046][ T7537] netlink: 'syz.3.404': attribute type 28 has an invalid length. [ 208.984840][ T7536] netlink: 'syz.3.404': attribute type 28 has an invalid length. [ 209.002382][ T7536] netlink: 'syz.3.404': attribute type 29 has an invalid length. [ 209.029181][ T7536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.404'. [ 209.155243][ T7537] netlink: 'syz.3.404': attribute type 29 has an invalid length. [ 209.212371][ T7537] netlink: 132 bytes leftover after parsing attributes in process `syz.3.404'. [ 211.230028][ T7569] netlink: 'syz.1.411': attribute type 2 has an invalid length. [ 211.237797][ T7569] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.411'. [ 211.992017][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 211.998113][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 212.004441][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.982536][ T7609] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.422'. [ 213.022537][ T7611] syz.4.422[7611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.022861][ T7611] syz.4.422[7611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.334635][ T7633] netlink: 'syz.4.428': attribute type 10 has an invalid length. [ 213.429276][ T7633] macvlan0: entered promiscuous mode [ 213.434663][ T7633] macvlan0: entered allmulticast mode [ 213.567119][ T7633] veth1_vlan: entered allmulticast mode [ 213.603995][ T7633] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 213.879064][ T7645] netlink: 'syz.1.431': attribute type 33 has an invalid length. [ 213.931625][ T7645] netlink: 152 bytes leftover after parsing attributes in process `syz.1.431'. [ 217.817333][ T7705] netlink: 'syz.2.442': attribute type 3 has an invalid length. [ 217.862898][ T7705] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 217.879295][ T7705] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.442'. [ 218.331749][ T7716] netlink: 48 bytes leftover after parsing attributes in process `syz.3.445'. [ 218.477777][ T7728] syzkaller0: entered promiscuous mode [ 218.488876][ T7728] syzkaller0: entered allmulticast mode [ 219.055131][ T1144] syzkaller0: tun_net_xmit 48 [ 219.127969][ T7716] syz.3.445 (7716) used greatest stack depth: 19176 bytes left [ 219.322905][ T7749] sctp: [Deprecated]: syz.3.455 (pid 7749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.322905][ T7749] Use struct sctp_sack_info instead [ 220.223054][ T7756] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.456'. [ 221.542751][ T7767] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.458'. [ 221.598367][ T7767] netlink: 'syz.4.458': attribute type 29 has an invalid length. [ 221.626864][ T7767] netlink: 'syz.4.458': attribute type 29 has an invalid length. [ 222.579590][ T7797] netlink: 'syz.1.463': attribute type 10 has an invalid length. [ 222.590324][ T7799] netlink: 'syz.4.464': attribute type 11 has an invalid length. [ 222.630210][ T7799] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.464'. [ 222.851923][ T7808] netlink: 48 bytes leftover after parsing attributes in process `syz.2.465'. [ 223.235815][ T7819] netlink: 'syz.4.469': attribute type 13 has an invalid length. [ 223.254076][ T7819] netlink: 'syz.4.469': attribute type 58 has an invalid length. [ 223.262543][ T7819] netlink: 152 bytes leftover after parsing attributes in process `syz.4.469'. [ 223.332982][ T7822] netlink: 'syz.4.469': attribute type 29 has an invalid length. [ 223.359474][ T7822] netlink: 'syz.4.469': attribute type 29 has an invalid length. [ 223.398047][ T7819] netlink: 'syz.4.469': attribute type 29 has an invalid length. [ 226.151780][ T7856] netlink: 'syz.3.472': attribute type 9 has an invalid length. [ 226.180883][ T7856] netlink: 399 bytes leftover after parsing attributes in process `syz.3.472'. [ 226.347720][ T7856] syzkaller0: entered promiscuous mode [ 226.364402][ T7856] syzkaller0: entered allmulticast mode [ 226.415969][ T5084] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 228.438923][ T7886] netlink: 'syz.4.480': attribute type 10 has an invalid length. [ 228.446832][ T7886] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.480'. [ 228.848999][ T7895] netlink: 48 bytes leftover after parsing attributes in process `syz.4.483'. [ 229.692501][ T7915] netlink: 164 bytes leftover after parsing attributes in process `syz.1.489'. [ 229.749351][ T7920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.487'. [ 229.778497][ T7920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.487'. [ 229.824595][ T7920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.487'. [ 230.323850][ T7924] netlink: 'syz.2.490': attribute type 2 has an invalid length. [ 230.362817][ T7924] netlink: 'syz.2.490': attribute type 8 has an invalid length. [ 230.392229][ T7924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.490'. [ 231.133758][ T7958] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 231.195391][ T7958] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.499'. [ 231.513816][ T7970] netlink: 'syz.3.502': attribute type 21 has an invalid length. [ 231.884046][ C1] [ 231.884056][ C1] ================================ [ 231.884063][ C1] WARNING: inconsistent lock state [ 231.884083][ C1] syzkaller #0 Not tainted [ 231.884094][ C1] -------------------------------- [ 231.884098][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 231.884107][ C1] syz.1.500/7975 [HC2[2]:SC0[0]:HE0:SE1] takes: [ 231.884140][ C1] ffff88802c35a218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 231.884219][ C1] {INITIAL USE} state was registered at: [ 231.884227][ C1] lock_acquire+0x19e/0x420 [ 231.884253][ C1] _raw_spin_lock+0x2e/0x40 [ 231.884278][ C1] htab_lock_bucket+0x17d/0x300 [ 231.884299][ C1] htab_map_delete_elem+0x19f/0x640 [ 231.884317][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 231.884344][ C1] bpf_overflow_handler+0x1fc/0x510 [ 231.884374][ C1] __perf_event_overflow+0x461/0x660 [ 231.884397][ C1] perf_swevent_overflow+0x274/0x340 [ 231.884424][ C1] perf_swevent_event+0x45c/0x570 [ 231.884446][ C1] perf_bp_event+0x319/0x430 [ 231.884467][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 231.884491][ C1] notifier_call_chain+0x18f/0x380 [ 231.884514][ C1] atomic_notifier_call_chain+0xda/0x180 [ 231.884539][ C1] notify_die+0x145/0x1a0 [ 231.884562][ C1] notify_debug+0x2e/0x50 [ 231.884579][ C1] noist_exc_debug+0x77/0x120 [ 231.884597][ C1] asm_exc_debug+0x33/0x40 [ 231.884631][ C1] irq event stamp: 7266 [ 231.884639][ C1] hardirqs last enabled at (7265): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.884680][ C1] hardirqs last disabled at (7266): [] irqentry_enter+0x13/0x50 [ 231.884710][ C1] softirqs last enabled at (7172): [] __irq_exit_rcu+0xd3/0x190 [ 231.884736][ C1] softirqs last disabled at (7103): [] __irq_exit_rcu+0xd3/0x190 [ 231.884761][ C1] [ 231.884761][ C1] other info that might help us debug this: [ 231.884768][ C1] Possible unsafe locking scenario: [ 231.884768][ C1] [ 231.884772][ C1] CPU0 [ 231.884776][ C1] ---- [ 231.884779][ C1] lock(&htab->lockdep_key); [ 231.884793][ C1] [ 231.884796][ C1] lock(&htab->lockdep_key); [ 231.884810][ C1] [ 231.884810][ C1] *** DEADLOCK *** [ 231.884810][ C1] [ 231.884814][ C1] 1 lock held by syz.1.500/7975: [ 231.884826][ C1] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xb9/0x3e0 [ 231.884880][ C1] [ 231.884880][ C1] stack backtrace: [ 231.884896][ C1] CPU: 1 PID: 7975 Comm: syz.1.500 Not tainted syzkaller #0 [ 231.884917][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 231.884939][ C1] Call Trace: [ 231.884947][ C1] <#DB> [ 231.884962][ C1] dump_stack_lvl+0x18c/0x250 [ 231.885006][ C1] ? show_regs_print_info+0x20/0x20 [ 231.885063][ C1] ? print_usage_bug+0x43d/0x6a0 [ 231.885095][ C1] ? verify_lock_unused+0x15/0x140 [ 231.885140][ C1] lock_acquire+0x2c2/0x420 [ 231.885175][ C1] ? htab_lock_bucket+0x17d/0x300 [ 231.885202][ C1] ? read_lock_is_recursive+0x20/0x20 [ 231.885260][ C1] _raw_spin_lock+0x2e/0x40 [ 231.885285][ C1] ? htab_lock_bucket+0x17d/0x300 [ 231.885309][ C1] htab_lock_bucket+0x17d/0x300 [ 231.885343][ C1] ? htab_lru_map_delete_node+0x770/0x770 [ 231.885373][ C1] ? look_up_lock_class+0x75/0x140 [ 231.885405][ C1] ? verify_lock_unused+0x15/0x140 [ 231.885437][ C1] ? htab_map_hash+0x1d7/0x330 [ 231.885472][ C1] htab_map_delete_elem+0x19f/0x640 [ 231.885513][ C1] ? htab_map_update_elem+0x1270/0x1270 [ 231.885542][ C1] ? perf_callchain+0x220/0x220 [ 231.885588][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 231.885617][ C1] bpf_overflow_handler+0x1fc/0x510 [ 231.885654][ C1] ? perf_tp_event+0x1550/0x1550 [ 231.885683][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 231.885708][ C1] ? bpf_overflow_handler+0xde/0x510 [ 231.885741][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 231.885794][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 231.885832][ C1] __perf_event_overflow+0x461/0x660 [ 231.885878][ C1] perf_swevent_overflow+0x274/0x340 [ 231.885920][ C1] ? perf_event_switch_output+0x790/0x790 [ 231.885982][ C1] perf_swevent_event+0x45c/0x570 [ 231.886019][ C1] ? perf_tp_event+0x1550/0x1550 [ 231.886079][ C1] perf_bp_event+0x319/0x430 [ 231.886133][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 231.886245][ C1] ? lock_acquire+0x2c2/0x420 [ 231.886295][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 231.886340][ C1] notifier_call_chain+0x18f/0x380 [ 231.886380][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 231.886418][ C1] atomic_notifier_call_chain+0xda/0x180 [ 231.886457][ C1] notify_die+0x145/0x1a0 [ 231.886495][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 231.886560][ C1] notify_debug+0x2e/0x50 [ 231.886586][ C1] exc_debug+0xde/0x140 [ 231.886620][ C1] asm_exc_debug+0x1e/0x40 [ 231.886660][ C1] RIP: 0010:__get_user_nocheck_8+0xd/0x20 [ 231.886686][ C1] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca [ 231.886705][ C1] RSP: 0000:ffffc9000f8ff640 EFLAGS: 00040806 [ 231.886725][ C1] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff92001f1fee6 [ 231.886742][ C1] RDX: 000074656e2f736e RSI: 0000200000000300 RDI: 0000000000000000 [ 231.886757][ C1] RBP: 0000200000000300 R08: 000000000000007f R09: 0000000000000000 [ 231.886771][ C1] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: 0000000000000001 [ 231.886786][ C1] R13: 1ffff92001f1fee4 R14: 000000000000007f R15: dffffc0000000000 [ 231.886845][ C1] [ 231.886852][ C1] [ 231.886858][ C1] perf_callchain_user+0xbdd/0x15d0 [ 231.886914][ C1] ? get_callchain_entry+0x185/0x3c0 [ 231.886949][ C1] get_perf_callchain+0x394/0x510 [ 231.886984][ C1] ? put_callchain_entry+0xb0/0xb0 [ 231.887012][ C1] ? __task_pid_nr_ns+0x390/0x470 [ 231.887041][ C1] ? __task_pid_nr_ns+0x28/0x470 [ 231.887082][ C1] ? __perf_event_header__init_id+0x3b7/0x470 [ 231.887118][ C1] perf_prepare_sample+0x3c7/0x1db0 [ 231.887173][ C1] ? read_lock_is_recursive+0x20/0x20 [ 231.887202][ C1] ? perf_callchain+0x220/0x220 [ 231.887254][ C1] perf_event_output_forward+0x187/0x3e0 [ 231.887285][ C1] ? perf_event_output_forward+0xb9/0x3e0 [ 231.887311][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 231.887345][ C1] ? verify_lock_unused+0x140/0x140 [ 231.887383][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 231.887416][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 231.887453][ C1] __perf_event_overflow+0x461/0x660 [ 231.887499][ C1] perf_swevent_hrtimer+0x437/0x610 [ 231.887541][ C1] ? cpu_clock_event_read+0x40/0x40 [ 231.887571][ C1] ? __hrtimer_run_queues+0x426/0xc10 [ 231.887660][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 231.887700][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 231.887733][ C1] ? _raw_spin_unlock+0x40/0x40 [ 231.887782][ C1] ? cpu_clock_event_read+0x40/0x40 [ 231.887807][ C1] __hrtimer_run_queues+0x4e8/0xc10 [ 231.887831][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 231.887857][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 231.887931][ C1] ? hrtimer_interrupt+0x980/0x980 [ 231.887958][ C1] ? read_tsc+0x9/0x20 [ 231.887981][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 231.888033][ C1] hrtimer_interrupt+0x39d/0x980 [ 231.888111][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 231.888158][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 231.888187][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.888221][ C1] RIP: 0033:0x7f45a6978063 [ 231.888245][ C1] Code: 1f 84 00 00 00 00 00 c5 f9 6e c6 89 f8 25 ff 0f 00 00 c4 e2 7d 78 c0 c5 f1 ef c9 3d e0 0f 00 00 0f 87 91 01 00 00 c5 fe 6f 17 fd 74 da c5 f5 74 d2 c5 ed eb db c5 fd d7 c3 85 c0 74 59 f3 0f [ 231.888263][ C1] RSP: 002b:00007f45a78d48a8 EFLAGS: 00000283 [ 231.888280][ C1] RAX: 00000000000001f3 RBX: 00007f45a78d4de0 RCX: 0000000074656e2f [ 231.888301][ C1] RDX: 0000000000000006 RSI: 0000000000000025 RDI: 00007f45a6a331f3 [ 231.888314][ C1] RBP: 0000200000000300 R08: 00007f45a78d5010 R09: 00000000ffffffff [ 231.888330][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f45a6a331f3 [ 231.888343][ C1] R13: 00000000fffffffa R14: 00007f45a6a331f2 R15: 00007f45a78d4ea0 [ 231.888400][ C1] [ 232.844285][ T7991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.500'.