last executing test programs: 8.33600767s ago: executing program 3 (id=64): socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, &(0x7f0000000440)="3a6107ce05dc35c982bb75d4635674d3ff033048eb0194337b1693f770806ca7f9a6831ea80c501011c0850332bfabfb1b26f27b5f26bd91da76523cd1088335efe5a6d426dc2d159c300517071d5b7d2dfc2c356238eea3c6a89e21ae587c02a5ae427f7dad3b0113d70403e0705f590fcaf38f352bff31679396efcd672f8596998aa92606d907fed83b90f2"}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone(0x1c48c9600, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="d50a000001000000631114000023deaf0d5527fe13d4f9219d398493d630000018000000000000cc19061297c628cb1310aef6b8000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000001a40)={r4}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb}, 0x38) socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 7.409159329s ago: executing program 2 (id=67): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x111480, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x2}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x3, 0x1ff, 0x8, 0x2}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000f40)}, 0x4048001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func={0xe, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x80d}}]}, {0x0, [0x30, 0x61]}}, &(0x7f00000003c0)=""/98, 0x40, 0x62, 0x1, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000040000000010000000900000050410000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="01000e5d0000000026a58b486349598e00"/28], 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001400), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f0000001580)=""/46, 0x2e, 0x0, &(0x7f00000015c0)=""/176, 0xb0}}, 0x10) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9}, &(0x7f0000000100), &(0x7f0000000140), 0x1000000000000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0x23, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000006c070000000000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000003b000000183a000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000065710000fcffffffb7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184a0000f9ffffff00000000000000002d913000ffffffff9500000000000000"], &(0x7f0000001300)='GPL\x00', 0xfffffffe, 0xa2, &(0x7f0000001340)=""/162, 0x40f00, 0x8, '\x00', r5, @fallback=0x2c, r7, 0x8, &(0x7f0000001440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0xb, 0x1, 0x6afe}, 0x10, r8, r0, 0x5, &(0x7f0000001700)=[r2, r9, r2, r2, r2, r2, r2], &(0x7f0000001740)=[{0x2, 0x3, 0x6, 0x9}, {0x0, 0x1, 0xa, 0xb}, {0x4, 0x5, 0x9, 0x9}, {0x0, 0x3, 0xf, 0x6}, {0x4, 0x1, 0xa, 0x7}], 0x10, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xffbf) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x14, &(0x7f00000000c0), 0xb9) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r11 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r11, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}], 0x50}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r0}, 0x20) 3.729192086s ago: executing program 1 (id=71): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x8}, 0x14105, 0x1, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="130000001000000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffeff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x22, &(0x7f0000000100)=r3, 0x120) 1.782792743s ago: executing program 1 (id=77): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x82c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x3, 0x10000000, 0x0, 0xd6ae, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.713790682s ago: executing program 2 (id=79): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffb, 0x20000000aea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0xffffffff, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) recvmsg(r2, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='i2c_write\x00', r5}, 0x10) close(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000040)=0x8000000000000000) setsockopt$sock_attach_bpf(r4, 0x84, 0x23, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0xffffffffffffec23, 0x0, 0x7, 0x1c3b0979, 0x0, 0x10, 0x0, 0x0, 0x0, 0x959}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) sendmsg$inet(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x5) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r8, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x24, 0x0, 0x0) close(r0) 1.64605937s ago: executing program 0 (id=80): socket$kcm(0x2, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xdec4, 0x9}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='module_request\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a00), &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000b00), 0x0, 0x0, 0x17, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) r3 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000140)='FROZEN\x00', 0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r3, r2, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114301, 0x4, 0x6, 0x0, 0xb, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x5, 0x0, 0xa9e6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x5, 0x14f}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0xee, &(0x7f0000000340)=""/238}, 0x94) 1.522449278s ago: executing program 4 (id=81): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x203) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) socketpair(0x27, 0x6, 0x10, 0x0) socket$kcm(0x29, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='ext4_da_write_pages\x00', r2, 0x0, 0x4}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89b1, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) 1.500807454s ago: executing program 3 (id=82): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 1.214006337s ago: executing program 2 (id=83): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0xfffffffffffffcde, 0x0, 0x1}, 0x28) 1.213540318s ago: executing program 3 (id=84): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) recvmsg$unix(r0, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYBLOB="b1e3658894e4f9db46a9c1fee64fd46dfc15e724daa697bf286826e618a9664dbd279891bb4e5b01ccdd14a1d3f0041b40279647ed9db756e4d63657281500534a9dcf8f7b095d98ec90d36d2396caf9222311e30a60dbb440fb14fc50248ce946aafd08e7d269338cf95d320d069663224d6f576fd34c3d3790ef59d679bb378b467916bf68f067af88"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) 1.12277834s ago: executing program 0 (id=85): perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x1, 0xb, 0xfd, 0x4, 0x0, 0x3, 0x10, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x3}, 0x3, 0x4, 0x51, 0x4, 0x5, 0x18d, 0x3, 0x0, 0xffffffff, 0x0, 0xe82}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.121978656s ago: executing program 2 (id=86): openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tcp_probe\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x30044889) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='\a', 0x1}], 0x1}, 0x241) 1.020008601s ago: executing program 4 (id=87): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 980.222309ms ago: executing program 0 (id=88): r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x172e4, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 882.538001ms ago: executing program 1 (id=89): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sock_ops=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x148b0, 0xc8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 855.974122ms ago: executing program 4 (id=90): r0 = socket$kcm(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x2040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000014c0)=ANY=[@ANYRES8=r2, @ANYBLOB="3e971b", @ANYBLOB, @ANYRESHEX], 0x9a) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000500)={[{0x2b, 'net_prio'}, {0x0, 'net_cls'}, {0x0, 'net_cls'}, {0x2d, 'net_prio'}]}, 0x26) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x12) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2d, &(0x7f00000000c0), 0xfdb8) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffff80, r4}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r0, r5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) 800.375919ms ago: executing program 3 (id=91): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8258000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x86652da295c9ade7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0xc}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 726.346089ms ago: executing program 2 (id=92): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0xf, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000ba000000bf090000008200950000a6bf91"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2, 0x2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000042c0)={@ifindex, 0xffffffffffffffff, 0x37, 0x3f}, 0x20) close(r4) r5 = getpid() syz_open_procfs$namespace(r5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x8, 0x0, 0x6, 0x6, 0x0, 0xf, 0x308, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x482, 0xaa, 0x16, 0x0, 0x5, 0x9, 0x101, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x9, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000001c0)=r3, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x9, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r8, &(0x7f00000000c0)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) 661.75884ms ago: executing program 1 (id=93): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000810000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="00000400"}) 638.945371ms ago: executing program 0 (id=94): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 608.602331ms ago: executing program 4 (id=95): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 484.371114ms ago: executing program 3 (id=96): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x4, 0xfffffffd, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 460.700155ms ago: executing program 2 (id=97): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000540)=""/114, 0x72}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000500)=""/42, 0x2a}, {&(0x7f00000001c0)=""/42, 0x2a}], 0x6}, 0x40000100) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/15, 0xcf}, 0x2062) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 354.649492ms ago: executing program 4 (id=98): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x4, 0x2, 0x0, 0x0, 0x2, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 284.088951ms ago: executing program 0 (id=99): socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000580)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x48) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x1, r0, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) 275.961836ms ago: executing program 4 (id=100): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061123c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0xf}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 249.513212ms ago: executing program 1 (id=101): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000280)=r2, 0x4) 127.782604ms ago: executing program 0 (id=102): r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x2, &(0x7f0000000900), 0x4) 36.877439ms ago: executing program 3 (id=103): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 0s ago: executing program 1 (id=104): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) close(r1) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x7, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x9000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x4000, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. [ 82.305913][ T5833] cgroup: Unknown subsys name 'net' [ 82.441690][ T5833] cgroup: Unknown subsys name 'cpuset' [ 82.451275][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.057618][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.806162][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.818607][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.838288][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.867739][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.875450][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.888066][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.888928][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.895609][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.910539][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.918110][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.925723][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.926169][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.933355][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.942665][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.947831][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.954098][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.962654][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.969677][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.982139][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.989896][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.989960][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.004228][ T5166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.006455][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.018463][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.020006][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.733320][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 88.746929][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 88.782610][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 88.879545][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 88.890862][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 89.046626][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.054256][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.062081][ T5848] bridge_slave_0: entered allmulticast mode [ 89.069907][ T5848] bridge_slave_0: entered promiscuous mode [ 89.078990][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.086108][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.093384][ T5848] bridge_slave_1: entered allmulticast mode [ 89.101471][ T5848] bridge_slave_1: entered promiscuous mode [ 89.195960][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.203754][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.211041][ T5855] bridge_slave_0: entered allmulticast mode [ 89.218462][ T5855] bridge_slave_0: entered promiscuous mode [ 89.225551][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.233856][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.243167][ T5849] bridge_slave_0: entered allmulticast mode [ 89.250816][ T5849] bridge_slave_0: entered promiscuous mode [ 89.262602][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.304772][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.312288][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.319769][ T5855] bridge_slave_1: entered allmulticast mode [ 89.326816][ T5855] bridge_slave_1: entered promiscuous mode [ 89.334023][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.341387][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.348578][ T5849] bridge_slave_1: entered allmulticast mode [ 89.355527][ T5849] bridge_slave_1: entered promiscuous mode [ 89.364493][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.386790][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.394070][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.401874][ T5850] bridge_slave_0: entered allmulticast mode [ 89.409233][ T5850] bridge_slave_0: entered promiscuous mode [ 89.453315][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.462861][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.470542][ T5852] bridge_slave_0: entered allmulticast mode [ 89.477501][ T5852] bridge_slave_0: entered promiscuous mode [ 89.486034][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.493402][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.500723][ T5852] bridge_slave_1: entered allmulticast mode [ 89.508184][ T5852] bridge_slave_1: entered promiscuous mode [ 89.515265][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.522493][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.530132][ T5850] bridge_slave_1: entered allmulticast mode [ 89.537357][ T5850] bridge_slave_1: entered promiscuous mode [ 89.574190][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.625891][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.637556][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.660308][ T5848] team0: Port device team_slave_0 added [ 89.694640][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.719660][ T5848] team0: Port device team_slave_1 added [ 89.727676][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.741306][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.752966][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.777970][ T5849] team0: Port device team_slave_0 added [ 89.821841][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.833529][ T5849] team0: Port device team_slave_1 added [ 89.842692][ T5855] team0: Port device team_slave_0 added [ 89.852145][ T5855] team0: Port device team_slave_1 added [ 89.925953][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.933262][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.959578][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.973178][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.980267][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.007046][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.008719][ T5861] Bluetooth: hci0: command tx timeout [ 90.022285][ T5852] team0: Port device team_slave_0 added [ 90.072368][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.079607][ T5864] Bluetooth: hci2: command tx timeout [ 90.085208][ T5864] Bluetooth: hci1: command tx timeout [ 90.085277][ T5866] Bluetooth: hci4: command tx timeout [ 90.090715][ T5861] Bluetooth: hci3: command tx timeout [ 90.091799][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.128627][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.141994][ T5852] team0: Port device team_slave_1 added [ 90.164355][ T5850] team0: Port device team_slave_0 added [ 90.173825][ T5850] team0: Port device team_slave_1 added [ 90.180600][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.187559][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.213981][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.226323][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.233423][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.259546][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.287041][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.296453][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.322943][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.404042][ T5848] hsr_slave_0: entered promiscuous mode [ 90.410722][ T5848] hsr_slave_1: entered promiscuous mode [ 90.417920][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.424882][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.451235][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.463969][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.471161][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.497677][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.512874][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.520034][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.546294][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.569588][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.576554][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.602777][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.707486][ T5849] hsr_slave_0: entered promiscuous mode [ 90.714473][ T5849] hsr_slave_1: entered promiscuous mode [ 90.721358][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.729267][ T5849] Cannot create hsr debugfs directory [ 90.741791][ T5855] hsr_slave_0: entered promiscuous mode [ 90.748541][ T5855] hsr_slave_1: entered promiscuous mode [ 90.754586][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.762207][ T5855] Cannot create hsr debugfs directory [ 90.786577][ T5850] hsr_slave_0: entered promiscuous mode [ 90.793109][ T5850] hsr_slave_1: entered promiscuous mode [ 90.799775][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.807345][ T5850] Cannot create hsr debugfs directory [ 90.871173][ T5852] hsr_slave_0: entered promiscuous mode [ 90.877465][ T5852] hsr_slave_1: entered promiscuous mode [ 90.884180][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.892307][ T5852] Cannot create hsr debugfs directory [ 91.449973][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.463274][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.475358][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.494335][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.560842][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.580686][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.604760][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.616406][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.680407][ T92] cfg80211: failed to load regulatory.db [ 91.694190][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.733413][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.744103][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.770062][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.835878][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.853798][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.879792][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.896844][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.922673][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.967701][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.009123][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.020714][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.034346][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.057169][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.064428][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.083301][ T5866] Bluetooth: hci0: command tx timeout [ 92.084239][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.095812][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.104657][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.158217][ T5866] Bluetooth: hci1: command tx timeout [ 92.163658][ T5866] Bluetooth: hci4: command tx timeout [ 92.169678][ T52] Bluetooth: hci3: command tx timeout [ 92.169698][ T5864] Bluetooth: hci2: command tx timeout [ 92.195260][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.294502][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.322981][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.330189][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.385640][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.402717][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.409894][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.446191][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.523822][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.545583][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.576619][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.600116][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.607263][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.645202][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.652380][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.666455][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.673564][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.721778][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.728934][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.749102][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.796319][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.833200][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.868804][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.875937][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.976734][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.983991][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.076303][ T5848] veth0_vlan: entered promiscuous mode [ 93.147678][ T5848] veth1_vlan: entered promiscuous mode [ 93.161946][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.327691][ T5848] veth0_macvtap: entered promiscuous mode [ 93.370656][ T5848] veth1_macvtap: entered promiscuous mode [ 93.456048][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.472372][ T5850] veth0_vlan: entered promiscuous mode [ 93.502587][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.519676][ T5850] veth1_vlan: entered promiscuous mode [ 93.532160][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.580999][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.608919][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.617654][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.626947][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.645193][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.753050][ T5850] veth0_macvtap: entered promiscuous mode [ 93.771114][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.824950][ T5850] veth1_macvtap: entered promiscuous mode [ 93.906066][ T5852] veth0_vlan: entered promiscuous mode [ 93.926225][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.964086][ T5852] veth1_vlan: entered promiscuous mode [ 93.973801][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.982306][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.997663][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.042889][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.052804][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.061628][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.070376][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.103424][ T5855] veth0_vlan: entered promiscuous mode [ 94.122079][ T5855] veth1_vlan: entered promiscuous mode [ 94.137590][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.150737][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.166134][ T5864] Bluetooth: hci0: command tx timeout [ 94.186334][ T5852] veth0_macvtap: entered promiscuous mode [ 94.213326][ T5849] veth0_vlan: entered promiscuous mode [ 94.239063][ T5864] Bluetooth: hci2: command tx timeout [ 94.244510][ T5864] Bluetooth: hci4: command tx timeout [ 94.244663][ T5861] Bluetooth: hci3: command tx timeout [ 94.249988][ T5866] Bluetooth: hci1: command tx timeout [ 94.270376][ T5852] veth1_macvtap: entered promiscuous mode [ 94.305333][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.341533][ T5849] veth1_vlan: entered promiscuous mode [ 94.357556][ T5855] veth0_macvtap: entered promiscuous mode [ 94.364223][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.392559][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.451276][ T5855] veth1_macvtap: entered promiscuous mode [ 94.511444][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.544402][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.555619][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.566565][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.576767][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.585662][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.598686][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.607839][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.653438][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.722349][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.737460][ T5970] FAULT_INJECTION: forcing a failure. [ 94.737460][ T5970] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.753055][ T5849] veth0_macvtap: entered promiscuous mode [ 94.753132][ T5970] CPU: 0 UID: 0 PID: 5970 Comm: syz.2.6 Not tainted 6.16.0-rc3-syzkaller-gea2aecdf7a95 #0 PREEMPT(full) [ 94.753160][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.753182][ T5970] Call Trace: [ 94.753192][ T5970] [ 94.753202][ T5970] dump_stack_lvl+0x189/0x250 [ 94.753243][ T5970] ? __pfx____ratelimit+0x10/0x10 [ 94.753272][ T5970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.753298][ T5970] ? __pfx__printk+0x10/0x10 [ 94.753329][ T5970] ? __might_fault+0xb0/0x130 [ 94.753379][ T5970] should_fail_ex+0x414/0x560 [ 94.753410][ T5970] _copy_from_user+0x2d/0xb0 [ 94.753445][ T5970] ___sys_sendmsg+0x158/0x2a0 [ 94.753470][ T5970] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.753531][ T5970] ? __fget_files+0x2a/0x420 [ 94.753552][ T5970] ? __fget_files+0x3a0/0x420 [ 94.753585][ T5970] __x64_sys_sendmsg+0x19b/0x260 [ 94.753618][ T5970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 94.753650][ T5970] ? __pfx_ksys_write+0x10/0x10 [ 94.753679][ T5970] ? rcu_is_watching+0x15/0xb0 [ 94.753711][ T5970] ? do_syscall_64+0xbe/0x3b0 [ 94.753743][ T5970] do_syscall_64+0xfa/0x3b0 [ 94.753769][ T5970] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.753795][ T5970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.753817][ T5970] ? clear_bhb_loop+0x60/0xb0 [ 94.753843][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.753864][ T5970] RIP: 0033:0x7fa38c38e929 [ 94.753887][ T5970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.753906][ T5970] RSP: 002b:00007fa38d17d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.753928][ T5970] RAX: ffffffffffffffda RBX: 00007fa38c5b5fa0 RCX: 00007fa38c38e929 [ 94.753944][ T5970] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 94.753958][ T5970] RBP: 00007fa38d17d090 R08: 0000000000000000 R09: 0000000000000000 [ 94.753972][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.753983][ T5970] R13: 0000000000000000 R14: 00007fa38c5b5fa0 R15: 00007ffca8fa6028 [ 94.754015][ T5970] [ 95.003621][ T5849] veth1_macvtap: entered promiscuous mode [ 95.026985][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.056640][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.090614][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.103574][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.139382][ C1] hrtimer: interrupt took 80459 ns [ 95.171404][ T5974] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.274491][ T5976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8'. [ 95.309295][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.335307][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.432728][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.462966][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.474795][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.494249][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.556226][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.580570][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.590351][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.600886][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.650705][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.670462][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.931380][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.955205][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.966172][ T5987] FAULT_INJECTION: forcing a failure. [ 95.966172][ T5987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.984349][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.018705][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.11 Not tainted 6.16.0-rc3-syzkaller-gea2aecdf7a95 #0 PREEMPT(full) [ 96.018732][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.018763][ T5987] Call Trace: [ 96.018772][ T5987] [ 96.018780][ T5987] dump_stack_lvl+0x189/0x250 [ 96.018812][ T5987] ? __pfx____ratelimit+0x10/0x10 [ 96.018839][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.018865][ T5987] ? __pfx__printk+0x10/0x10 [ 96.018896][ T5987] ? __might_fault+0xb0/0x130 [ 96.018933][ T5987] ? __might_fault+0xb0/0x130 [ 96.018972][ T5987] should_fail_ex+0x414/0x560 [ 96.019004][ T5987] _copy_from_user+0x2d/0xb0 [ 96.019039][ T5987] __sys_bpf+0x1ed/0x870 [ 96.019064][ T5987] ? __pfx___sys_bpf+0x10/0x10 [ 96.019125][ T5987] __x64_sys_bpf+0x7c/0x90 [ 96.019159][ T5987] do_syscall_64+0xfa/0x3b0 [ 96.019188][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.019208][ T5987] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.019229][ T5987] ? clear_bhb_loop+0x60/0xb0 [ 96.019255][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.019275][ T5987] RIP: 0033:0x7fe71278e929 [ 96.019294][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.019311][ T5987] RSP: 002b:00007fe7136cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.019333][ T5987] RAX: ffffffffffffffda RBX: 00007fe7129b5fa0 RCX: 00007fe71278e929 [ 96.019349][ T5987] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 96.019362][ T5987] RBP: 00007fe7136cb090 R08: 0000000000000000 R09: 0000000000000000 [ 96.019374][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.019386][ T5987] R13: 0000000000000000 R14: 00007fe7129b5fa0 R15: 00007ffc9e56ea38 [ 96.019420][ T5987] [ 96.020366][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.242534][ T5864] Bluetooth: hci0: command tx timeout [ 96.261510][ T5990] FAULT_INJECTION: forcing a failure. [ 96.261510][ T5990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.264647][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.283506][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.298097][ T5990] CPU: 0 UID: 0 PID: 5990 Comm: syz.3.12 Not tainted 6.16.0-rc3-syzkaller-gea2aecdf7a95 #0 PREEMPT(full) [ 96.298121][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.298133][ T5990] Call Trace: [ 96.298140][ T5990] [ 96.298148][ T5990] dump_stack_lvl+0x189/0x250 [ 96.298177][ T5990] ? __pfx____ratelimit+0x10/0x10 [ 96.298201][ T5990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.298225][ T5990] ? __pfx__printk+0x10/0x10 [ 96.298252][ T5990] ? __might_fault+0xb0/0x130 [ 96.298292][ T5990] should_fail_ex+0x414/0x560 [ 96.298320][ T5990] _copy_from_user+0x2d/0xb0 [ 96.298350][ T5990] __sys_bpf+0x1ed/0x870 [ 96.298372][ T5990] ? __pfx___sys_bpf+0x10/0x10 [ 96.298407][ T5990] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 96.298439][ T5990] ? __pfx_ksys_write+0x10/0x10 [ 96.298473][ T5990] ? rcu_is_watching+0x15/0xb0 [ 96.298504][ T5990] __x64_sys_bpf+0x7c/0x90 [ 96.298534][ T5990] do_syscall_64+0xfa/0x3b0 [ 96.298558][ T5990] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.298581][ T5990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.298600][ T5990] ? clear_bhb_loop+0x60/0xb0 [ 96.298623][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.298641][ T5990] RIP: 0033:0x7f405f58e929 [ 96.298658][ T5990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.298673][ T5990] RSP: 002b:00007f4060455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.298693][ T5990] RAX: ffffffffffffffda RBX: 00007f405f7b5fa0 RCX: 00007f405f58e929 [ 96.298706][ T5990] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000002 [ 96.298718][ T5990] RBP: 00007f4060455090 R08: 0000000000000000 R09: 0000000000000000 [ 96.298729][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.298740][ T5990] R13: 0000000000000000 R14: 00007f405f7b5fa0 R15: 00007ffd9bc7f358 [ 96.298769][ T5990] [ 96.516268][ T5864] Bluetooth: hci4: command tx timeout [ 96.516309][ T52] Bluetooth: hci3: command tx timeout [ 96.521750][ T5864] Bluetooth: hci2: command tx timeout [ 96.551057][ T5866] Bluetooth: hci1: command tx timeout [ 100.918003][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.046425][ T6023] netlink: 'syz.4.20': attribute type 10 has an invalid length. [ 101.546019][ T6032] netlink: 'syz.3.23': attribute type 10 has an invalid length. [ 101.555913][ T6023] team0: Port device wlan1 added [ 105.314555][ T6032] bond0: (slave bond_slave_0): Releasing backup interface [ 105.583871][ T6052] netlink: 'syz.0.28': attribute type 10 has an invalid length. [ 105.787956][ T6059] Zero length message leads to an empty skb [ 105.941240][ T6052] veth0_vlan: left promiscuous mode [ 105.970317][ T6052] veth0_vlan: entered promiscuous mode [ 106.017300][ T6052] team0: Device veth0_vlan failed to register rx_handler [ 106.198696][ T6052] syz.0.28 (6052) used greatest stack depth: 17112 bytes left [ 107.106005][ T6085] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 107.145450][ T6085] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.30'. [ 107.272162][ T6088] FAULT_INJECTION: forcing a failure. [ 107.272162][ T6088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.298585][ T6089] netlink: 52 bytes leftover after parsing attributes in process `syz.1.40'. [ 107.318145][ T6089] team_slave_0: entered allmulticast mode [ 107.324045][ T6088] CPU: 1 UID: 0 PID: 6088 Comm: syz.4.39 Not tainted 6.16.0-rc3-syzkaller-gea2aecdf7a95 #0 PREEMPT(full) [ 107.324070][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.324081][ T6088] Call Trace: [ 107.324089][ T6088] [ 107.324097][ T6088] dump_stack_lvl+0x189/0x250 [ 107.324125][ T6088] ? __pfx____ratelimit+0x10/0x10 [ 107.324148][ T6088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.324172][ T6088] ? __pfx__printk+0x10/0x10 [ 107.324216][ T6088] ? __might_fault+0xb0/0x130 [ 107.324259][ T6088] should_fail_ex+0x414/0x560 [ 107.324289][ T6088] _copy_from_user+0x2d/0xb0 [ 107.324341][ T6088] xsk_setsockopt+0x32c/0x710 [ 107.324383][ T6088] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.324412][ T6088] ? aa_sock_opt_perm+0x74/0x110 [ 107.324439][ T6088] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 107.324464][ T6088] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.324488][ T6088] do_sock_setsockopt+0x25a/0x3e0 [ 107.324524][ T6088] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 107.324561][ T6088] ? __fget_files+0x2a/0x420 [ 107.324592][ T6088] __x64_sys_setsockopt+0x18b/0x220 [ 107.324631][ T6088] do_syscall_64+0xfa/0x3b0 [ 107.324656][ T6088] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.324681][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.324702][ T6088] ? clear_bhb_loop+0x60/0xb0 [ 107.324726][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.324746][ T6088] RIP: 0033:0x7fbc0f58e929 [ 107.324763][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.324780][ T6088] RSP: 002b:00007fbc103ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.324801][ T6088] RAX: ffffffffffffffda RBX: 00007fbc0f7b5fa0 RCX: 00007fbc0f58e929 [ 107.324815][ T6088] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 107.324826][ T6088] RBP: 00007fbc103ac090 R08: 0000000000000004 R09: 0000000000000000 [ 107.324838][ T6088] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 107.324850][ T6088] R13: 0000000000000000 R14: 00007fbc0f7b5fa0 R15: 00007ffcaafde7c8 [ 107.324882][ T6088] [ 107.585655][ T6089] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 107.847167][ T6094] warning: `syz.4.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.915723][ T6097] syz.2.41 (6097) used greatest stack depth: 15240 bytes left [ 108.577596][ T6110] netlink: 'syz.2.45': attribute type 10 has an invalid length. [ 108.849654][ T6110] team0: Port device wlan1 added [ 109.768207][ T6124] netlink: 'syz.4.50': attribute type 10 has an invalid length. [ 109.877258][ T6127] sit0: entered allmulticast mode [ 109.897117][ T6129] sit0: entered promiscuous mode [ 110.458791][ T6141] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 110.488591][ T6141] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.54'. [ 112.055998][ T6153] sit0: entered allmulticast mode [ 112.068976][ T6155] sit0: entered promiscuous mode [ 112.728124][ T6170] netlink: 'syz.0.63': attribute type 10 has an invalid length. [ 112.829814][ T6174] netlink: 'syz.3.64': attribute type 10 has an invalid length. [ 113.197846][ T6172] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.65'. [ 113.276869][ T6170] bond0: (slave bond_slave_0): Releasing backup interface [ 113.498383][ T6174] team0: Port device wlan1 added [ 118.949565][ T6217] netlink: 60 bytes leftover after parsing attributes in process `syz.0.76'. [ 118.965523][ T6216] netlink: 60 bytes leftover after parsing attributes in process `syz.0.76'. [ 118.975127][ T6218] netlink: 60 bytes leftover after parsing attributes in process `syz.0.76'. [ 119.130872][ T6220] netlink: 'syz.1.77': attribute type 39 has an invalid length. [ 119.690218][ T6237] syzkaller0: entered promiscuous mode [ 119.696498][ T6237] syzkaller0: entered allmulticast mode [ 120.283902][ T52] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 120.291619][ T52] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 120.509600][ T52] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 120.723017][ T6274] ------------[ cut here ]------------ [ 120.739313][ T6274] verifier bug: error during ctx access conversion(1) [ 120.801266][ T6274] WARNING: CPU: 0 PID: 6274 at kernel/bpf/verifier.c:21409 bpf_check+0x1b6ec/0x1d2e0 [ 120.811628][ T6274] Modules linked in: [ 120.816547][ T6274] CPU: 0 UID: 0 PID: 6274 Comm: syz.4.100 Not tainted 6.16.0-rc3-syzkaller-gea2aecdf7a95 #0 PREEMPT(full) [ 120.837688][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.850868][ T6274] RIP: 0010:bpf_check+0x1b6ec/0x1d2e0 [ 120.858466][ T6274] Code: 8b e8 68 4e af ff 90 0f 0b 90 90 e9 6b 60 ff ff e8 49 ab eb ff c6 05 83 1f b7 0d 01 90 48 c7 c7 c0 fb 91 8b e8 45 4e af ff 90 <0f> 0b 90 90 e9 b5 bd ff ff e8 26 ab eb ff c6 05 65 1f b7 0d 01 90 [ 120.878807][ T6274] RSP: 0018:ffffc9000bf27600 EFLAGS: 00010246 [ 120.885577][ T6274] RAX: 14b04048867b4900 RBX: 0000000000000000 RCX: 0000000000080000 [ 120.894198][ T6274] RDX: ffffc9000d23c000 RSI: 0000000000011e3b RDI: 0000000000011e3c [ 120.903026][ T6274] RBP: ffffc9000bf27b50 R08: 0000000000000003 R09: 0000000000000004 [ 120.916557][ T6274] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffffc9000bf0905a [ 120.942218][ T6274] R13: dffffc0000000000 R14: ffff888077578000 R15: 0000000000000004 [ 120.952868][ T6274] FS: 00007fbc103ac6c0(0000) GS:ffff888125c19000(0000) knlGS:0000000000000000 [ 120.967765][ T6274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.975412][ T6274] CR2: 00007f5dd31fb220 CR3: 000000002a35a000 CR4: 00000000003526f0 [ 120.984391][ T6274] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.995192][ T6274] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 121.004441][ T6274] Call Trace: [ 121.010026][ T6274] [ 121.013681][ T6274] ? perf_tp_event+0x664/0x1380 [ 121.019557][ T6274] ? __pfx_sock_addr_convert_ctx_access+0x10/0x10 [ 121.041267][ T6274] ? __pfx_bpf_check+0x10/0x10 [ 121.046518][ T6274] ? ktime_get_with_offset+0x8c/0x2a0 [ 121.052637][ T6274] ? irqentry_exit+0x74/0x90 [ 121.058255][ T6274] ? bpf_obj_name_cpy+0x194/0x1e0 [ 121.063822][ T6274] ? bpf_obj_name_cpy+0x1b9/0x1e0 [ 121.069531][ T6274] ? bpf_obj_name_cpy+0x194/0x1e0 [ 121.075257][ T6274] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 121.082047][ T6274] ? security_bpf_prog_load+0x7f/0x310 [ 121.088198][ T6274] bpf_prog_load+0x1318/0x1930 [ 121.093686][ T6274] ? __pfx_bpf_prog_load+0x10/0x10 [ 121.099911][ T6274] ? bpf_lsm_bpf+0x9/0x20 [ 121.104951][ T6274] ? security_bpf+0x7e/0x300 [ 121.110371][ T6274] __sys_bpf+0x528/0x870 [ 121.115618][ T6274] ? __pfx___sys_bpf+0x10/0x10 [ 121.169426][ T6274] __x64_sys_bpf+0x7c/0x90 [ 121.174238][ T6274] do_syscall_64+0xfa/0x3b0 [ 121.179226][ T6274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.186026][ T6274] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.192619][ T6274] ? clear_bhb_loop+0x60/0xb0 [ 121.197651][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.203771][ T6274] RIP: 0033:0x7fbc0f58e929 [ 121.208508][ T6274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.228768][ T6274] RSP: 002b:00007fbc103ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.251482][ T6274] RAX: ffffffffffffffda RBX: 00007fbc0f7b5fa0 RCX: 00007fbc0f58e929 [ 121.271414][ T6274] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000005 [ 121.284487][ T6274] RBP: 00007fbc0f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.294071][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.302580][ T6274] R13: 0000000000000000 R14: 00007fbc0f7b5fa0 R15: 00007ffcaafde7c8 [ 121.312634][ T6274] [ 121.315880][ T6274] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.323204][ T6274] CPU: 0 UID: 0 PID: 6274 Comm: syz.4.100 Not tainted 6.16.0-rc3-syzkaller-gea2aecdf7a95 #0 PREEMPT(full) [ 121.334616][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.344807][ T6274] Call Trace: [ 121.348128][ T6274] [ 121.351097][ T6274] dump_stack_lvl+0x99/0x250 [ 121.355726][ T6274] ? __asan_memcpy+0x40/0x70 [ 121.360358][ T6274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.365598][ T6274] ? __pfx__printk+0x10/0x10 [ 121.370284][ T6274] panic+0x2db/0x790 [ 121.374234][ T6274] ? __pfx_panic+0x10/0x10 [ 121.378671][ T6274] ? show_trace_log_lvl+0x4fb/0x550 [ 121.383965][ T6274] __warn+0x31b/0x4b0 [ 121.387970][ T6274] ? bpf_check+0x1b6ec/0x1d2e0 [ 121.392785][ T6274] ? bpf_check+0x1b6ec/0x1d2e0 [ 121.397585][ T6274] report_bug+0x2be/0x4f0 [ 121.401945][ T6274] ? bpf_check+0x1b6ec/0x1d2e0 [ 121.406740][ T6274] ? bpf_check+0x1b6ec/0x1d2e0 [ 121.411536][ T6274] ? bpf_check+0x1b6ee/0x1d2e0 [ 121.416360][ T6274] handle_bug+0x84/0x160 [ 121.420655][ T6274] exc_invalid_op+0x1a/0x50 [ 121.425197][ T6274] asm_exc_invalid_op+0x1a/0x20 [ 121.430076][ T6274] RIP: 0010:bpf_check+0x1b6ec/0x1d2e0 [ 121.435491][ T6274] Code: 8b e8 68 4e af ff 90 0f 0b 90 90 e9 6b 60 ff ff e8 49 ab eb ff c6 05 83 1f b7 0d 01 90 48 c7 c7 c0 fb 91 8b e8 45 4e af ff 90 <0f> 0b 90 90 e9 b5 bd ff ff e8 26 ab eb ff c6 05 65 1f b7 0d 01 90 [ 121.455143][ T6274] RSP: 0018:ffffc9000bf27600 EFLAGS: 00010246 [ 121.461253][ T6274] RAX: 14b04048867b4900 RBX: 0000000000000000 RCX: 0000000000080000 [ 121.469256][ T6274] RDX: ffffc9000d23c000 RSI: 0000000000011e3b RDI: 0000000000011e3c [ 121.477256][ T6274] RBP: ffffc9000bf27b50 R08: 0000000000000003 R09: 0000000000000004 [ 121.485251][ T6274] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffffc9000bf0905a [ 121.493246][ T6274] R13: dffffc0000000000 R14: ffff888077578000 R15: 0000000000000004 [ 121.501329][ T6274] ? perf_tp_event+0x664/0x1380 [ 121.506300][ T6274] ? __pfx_sock_addr_convert_ctx_access+0x10/0x10 [ 121.512952][ T6274] ? __pfx_bpf_check+0x10/0x10 [ 121.517756][ T6274] ? ktime_get_with_offset+0x8c/0x2a0 [ 121.523201][ T6274] ? irqentry_exit+0x74/0x90 [ 121.527868][ T6274] ? bpf_obj_name_cpy+0x194/0x1e0 [ 121.532924][ T6274] ? bpf_obj_name_cpy+0x1b9/0x1e0 [ 121.537988][ T6274] ? bpf_obj_name_cpy+0x194/0x1e0 [ 121.543043][ T6274] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 121.548290][ T6274] ? security_bpf_prog_load+0x7f/0x310 [ 121.553800][ T6274] bpf_prog_load+0x1318/0x1930 [ 121.558631][ T6274] ? __pfx_bpf_prog_load+0x10/0x10 [ 121.563845][ T6274] ? bpf_lsm_bpf+0x9/0x20 [ 121.568212][ T6274] ? security_bpf+0x7e/0x300 [ 121.572858][ T6274] __sys_bpf+0x528/0x870 [ 121.577136][ T6274] ? __pfx___sys_bpf+0x10/0x10 [ 121.582019][ T6274] __x64_sys_bpf+0x7c/0x90 [ 121.586471][ T6274] do_syscall_64+0xfa/0x3b0 [ 121.591006][ T6274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.597101][ T6274] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.603278][ T6274] ? clear_bhb_loop+0x60/0xb0 [ 121.607997][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.613918][ T6274] RIP: 0033:0x7fbc0f58e929 [ 121.618355][ T6274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.638067][ T6274] RSP: 002b:00007fbc103ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.646510][ T6274] RAX: ffffffffffffffda RBX: 00007fbc0f7b5fa0 RCX: 00007fbc0f58e929 [ 121.654503][ T6274] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000005 [ 121.662500][ T6274] RBP: 00007fbc0f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.670514][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.678502][ T6274] R13: 0000000000000000 R14: 00007fbc0f7b5fa0 R15: 00007ffcaafde7c8 [ 121.686543][ T6274] [ 121.689894][ T6274] Kernel Offset: disabled [ 121.694247][ T6274] Rebooting in 86400 seconds..