last executing test programs: 27.207756615s ago: executing program 0 (id=470): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x193c7, 0x10, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000a0000000a70000000000140018000000000000000000000000000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) 26.53223634s ago: executing program 0 (id=473): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) r4 = syz_clone(0xc3000480, &(0x7f0000000c40), 0x0, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="2d749115443e0fc696f38278d7c61a2d6ca6732c98d72ca2a5b1655cad6b92bf6fd479123bd61d7f6bbdfdef271ee56789a87cf5dafd3f9ec0f707139150f0308ec2b1e0c79c6169b2c876f617d8b0749feb9a245935927278a77891fa05352f93b0cc5cbe3b7343689405aa5d234b766d32dc8fc299611d2157b848d1ce74") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 26.176211928s ago: executing program 3 (id=475): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) socket$kcm(0x18, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000eace20de2f02fb4c99ce962c38a1cec2189f49bee2efe8a4270420ce2e8140546745cd403c72d282737b3c4f269bdc883a5bba3187f28b2bba2c638369a5ab5aa424e03ec9f53ea940756903395d059bc4a85582de928b34c31737a93ebfbb59fde2b2aebaec11446d89a351448f78063f3fe4bdad72614ae9179ae3be4b30920e8f1a000000", @ANYRES32, @ANYRES32=0x0], 0x48) (async, rerun: 32) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)='5', 0x1}], 0x1}, 0x8041) (async) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x35}}) close(0x3) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r8}, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x50226066ac4dabd0, 0x0) 25.776655657s ago: executing program 3 (id=477): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, 0x0, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) r4 = syz_clone(0xc3000480, &(0x7f0000000c40), 0x0, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="2d749115443e0fc696f38278d7c61a2d6ca6732c98d72ca2a5b1655cad6b92bf6fd479123bd61d7f6bbdfdef271ee56789a87cf5dafd3f9ec0f707139150f0308ec2b1e0c79c6169b2c876f617d8b0749feb9a245935927278a77891fa05352f93b0cc5cbe3b7343689405aa5d234b766d32dc8fc299611d2157b848d1ce74") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 25.17531353s ago: executing program 1 (id=479): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b03e8ff000000004fa100000000000007010000f8ffffffb702000008000000b7030000fcffffff85000000990000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2300, 0x0, 0x0, 0x8, 0x80000000, 0x1, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) 22.760520224s ago: executing program 1 (id=480): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) r4 = syz_clone(0xc3000480, &(0x7f0000000c40), 0x0, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="2d749115443e0fc696f38278d7c61a2d6ca6732c98d72ca2a5b1655cad6b92bf6fd479123bd61d7f6bbdfdef271ee56789a87cf5dafd3f9ec0f707139150f0308ec2b1e0c79c6169b2c876f617d8b0749feb9a245935927278a77891fa05352f93b0cc5cbe3b7343689405aa5d234b766d32dc8fc299611d2157b848d1ce74") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 22.632878307s ago: executing program 2 (id=481): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) sendmsg$inet(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x5) gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x10090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000063d98a9b000000000000000000000700000001441407716401010100000000ac14141d000000050000007ced794d2408df51ff9ae7ecbe7f949e411543586f802a1367ffb81cf6b9110c4a9027fd3c26b03632d0c8de60bf6f7fa68f3dd0860a04bfc72286201f674996f0c5e25615281aaaa48b6eef7e2388259836ae28"], 0x48}, 0x200040c4) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000140)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 21.668307988s ago: executing program 2 (id=482): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1b, 0x17, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x43b}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @exit, @ldst={0x2, 0x2, 0x3, 0xb, 0x7, 0x2, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x4, 0xb8, &(0x7f0000000ac0)=""/184, 0x41100, 0x29, '\x00', 0x0, @fallback=0x68df203bdc5cd9ff, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0xb, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000c00)=[{0x1, 0x4, 0x10, 0x1}, {0x2, 0x4, 0xf}, {0x2, 0x4, 0xa, 0x8}, {0x5, 0x4, 0x8, 0x4}, {0x3, 0x4, 0x3, 0x2}], 0x10, 0x200}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={r0, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000d40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000e40)=[{}], 0x8, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg$kcm(r1, &(0x7f0000000980)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000440)=""/193, 0xc1}, {&(0x7f0000000580)=""/8, 0x8}, {&(0x7f00000005c0)=""/166, 0xa6}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000880)=""/100, 0x64}], 0x6}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710430000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r2, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r3, &(0x7f0000000400), 0x20000000}, 0x20) 21.443451743s ago: executing program 1 (id=483): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94ea}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6819, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0xfffffff9, 0x73c, 0x3020, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0xd}, 0x50) 21.442515953s ago: executing program 2 (id=484): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x894b, &(0x7f00000001c0)) socket$kcm(0xa, 0x2, 0x3a) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.1688509s ago: executing program 0 (id=485): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) (async, rerun: 32) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socket$kcm(0xa, 0x2, 0x3a) (async) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac141410e0000001000000002c0000000000000000000004"], 0x50}, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TUNGETVNETLE(r4, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 20.491172015s ago: executing program 3 (id=487): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r4 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\n\x00\x00\x00( \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="71a44711f5a02e06350e39e01c", @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r9 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 20.477667715s ago: executing program 2 (id=495): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, 0x0, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) r4 = syz_clone(0xc3000480, &(0x7f0000000c40), 0x0, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="2d749115443e0fc696f38278d7c61a2d6ca6732c98d72ca2a5b1655cad6b92bf6fd479123bd61d7f6bbdfdef271ee56789a87cf5dafd3f9ec0f707139150f0308ec2b1e0c79c6169b2c876f617d8b0749feb9a245935927278a77891fa05352f93b0cc5cbe3b7343689405aa5d234b766d32dc8fc299611d2157b848d1ce74") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 20.299978888s ago: executing program 0 (id=488): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001000000800000009ea445e5e50c31aa80c5ec079b4e314658dedb62b518f25b6ada052851b5280e9adcf3aea1e03b21356f66210540dc9228e5214cfec7b99d8277", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="00000100eeff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000f23c2bb63cdc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001000000800000009ea445e5e50c31aa80c5ec079b4e314658dedb62b518f25b6ada052851b5280e9adcf3aea1e03b21356f66210540dc9228e5214cfec7b99d8277", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="00000100eeff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000f23c2bb63cdc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) close(r2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) (async) 20.299419099s ago: executing program 1 (id=489): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000340)=""/232, 0x1c, 0xe3, 0x0, 0x5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x20000, 0x8, 0x9, 0x20000, 0xffffffffffffffff, 0x2, '\x00', 0x0, r1, 0x1, 0x0, 0x1}, 0x50) close(r1) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) 19.77209895s ago: executing program 1 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x30, 0x5, 0x3, 0x4}, {0x73, 0x0, 0x4, 0x6}, {0x1, 0xbc, 0x9, 0x4}, {0x0, 0x6a, 0x1, 0x7c}, {0x2, 0x9, 0x80, 0x1}, {0x1, 0x69, 0xc1, 0x3e8a}, {0x94, 0x4, 0x9, 0x8}]}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000140)) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'vlan1\x00', 0x400}) (async) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000200)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xf9, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd4, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x7fff, 0x8, 0x951d, 0x2200, 0x1, 0x2, '\x00', r4, r2, 0x3, 0x4, 0x0, 0x6}, 0x50) socketpair(0x21, 0x80001, 0x1ff, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="94d860aedc80caaa170fcf216ce508bed0985a29105e4b647bc8e60de3e4a7fd816a23124ff3087afb53f02a66a32a95dc91f417a37bc03152b61f9bda6d59b864e7c873e5f147bbf8c61ee67898b5c8cf6069ed30d566f3cddef4fccb3636d7484f881c3817b6f771a1debac65e3b38d08fff8b4a40804c9087381f16a168454ac983c345cb2b6ff436dc494d4359a6e54ad7037135f3e31a6693ef5f56c4f8adc5f88706c9c7", 0xa7}, {&(0x7f00000016c0)="9ba93c89ea3cda3784f91af84c5f2d7469ea4bf56942746f8d6a4b9ca2840ce4b257c2fed51da30bffb5dce46c2c904add575dfcaed7f42631dde14eba9330f0ed2db72c6782", 0x46}, {&(0x7f0000001740)="cf317345435b365e1db47205ac214d344e0e7492a87f238381c3db47daa39a7b21f2b189fa9ab4136d3bce75166f290d3fbfa8645c5232eebe55dff69c3a3cb4356dcfd89a8dbc35ba82a98df7e25a5bb9cb8f44b5384237485257d83fce65d3d809fcf2472c154d972ff072b3783f42ed17cb6fb8e6acaa6ce32b508271d96880a8af8e1b447634419a8872a98a26aca2e5dbbe576f036695c90573bd2e442273056f754873740db46d55c2aee515fc911926c301b0e6e7d2e49c8fd3afcd6c3b515d2020d407bb52854e80d735b7b901e4466f1e18fd", 0xd7}, {&(0x7f0000001840)="30f9e83b94a040baffa55fd2e6fab976be6dddc603bc3a1da8f15a615bf2bd2302e35329130a037927f355359b5555858a2bcebd50d07f85455b00348e98fa7a2add8b034630d26099f27a0fe3", 0x4d}, {&(0x7f00000018c0)="c49d0b8786ac2ecc6a574e512de1128351b00f0f5bf31568cb07d2ca59b4ab0f46e1d93277a9011c5d76fdc8f0dcda6a98b74a457e609110d818524c4dda30b5d9fe6d172f13af59d3a60956fb37ba7c38af434bd269534b6330ea81cdba8d518a28d2ec95ebb873", 0x68}], 0x6, &(0x7f00000019c0)=[@ip_tos_u8={{0x11}}], 0x18}, 0x40804) (async) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000001a40)=r5) (async) socketpair(0x2, 0x6, 0x5, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000004180)={&(0x7f0000001ac0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000001b40)=""/130, 0x82}, {&(0x7f0000001c00)=""/134, 0x86}, {&(0x7f0000001cc0)=""/53, 0x35}, {&(0x7f0000001d00)=""/65, 0x41}, {&(0x7f0000001d80)=""/255, 0xff}, {&(0x7f0000001e80)=""/28, 0x1c}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/178, 0xb2}, {&(0x7f0000002f80)=""/229, 0xe5}, {&(0x7f0000003080)=""/4096, 0x1000}], 0xa, &(0x7f0000004140)=""/48, 0x30}, 0x100) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000041c0)={'dvmrp0\x00'}) (async) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000004200)=0x3e) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004240)={r3}, 0x4) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000004280)=r9) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000042c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4, '\x00', 0x0, r2, 0x0, 0x2, 0x4}, 0x50) close(r9) (async) write$cgroup_devices(r1, &(0x7f0000004340)={'c', ' *:* ', 'rwm\x00'}, 0xa) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004540)={r1, 0x20, &(0x7f0000004500)={&(0x7f0000004380)=""/136, 0x88, 0x0, &(0x7f0000004440)=""/183, 0xb7}}, 0x10) (async) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000004580)) write$cgroup_pid(r1, &(0x7f00000045c0)=0xffffffffffffffff, 0x12) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000004600)={r7, r9}) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000004640)={r9}, 0xc) (async) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000004680)) 19.735401081s ago: executing program 3 (id=491): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 19.600173754s ago: executing program 0 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="18300000050000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa10000009f86fb594ba7e7c400000007010000f8ffffffb702000008000000b7030000fc0000008500000006000000850000001500000085100000f8ffffff0307030000000000186200000b00000000000000080000001800000007000000000000006600000018470000fdffffff00000000000000000b75ff0f05000000"], &(0x7f00000004c0)='syzkaller\x00', 0x1000, 0xaf, &(0x7f0000000580)=""/175, 0x41100, 0x24, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x5, 0x5, 0xffffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000700)=[{0x2, 0x1, 0xa, 0x5}], 0x10, 0xe0b}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0xf}, 0x2018, 0x0, 0x0, 0x8, 0x1002, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180040010000400", 0x33fe0}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000800)={r2, r0}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) (async) r5 = socket$kcm(0x2, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2df03c4ff4f84e5fbd9cb469900", 0x0, 0x95b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r5, 0x84, 0x82, &(0x7f0000000000), 0x8) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r8, @ANYBLOB="00009c000000000000b7080000000000007b8af8ff00000000bfa200000000000000f8ffffffb703000008000000bf040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9, r8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) close(r1) 19.443603368s ago: executing program 3 (id=493): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x6a, 0x0, 0x12, 0x6}, @enum64={0x1, 0x7, 0x0, 0x13, 0x0, 0x2, [{0x5, 0xff, 0x80000000}, {0xd, 0x3, 0x9252}, {0x9, 0xff, 0x4}, {0xa, 0x2}, {0x6, 0x101, 0x10}, {0x1, 0x0, 0xffffa9e5}, {0xa, 0x7, 0xd}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @const={0x5, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000440)=""/139, 0xaf, 0x8b, 0x0, 0x2, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xc, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe01}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sock_ops, r3}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000002000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x83, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000002c0)) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x8202) 19.124706165s ago: executing program 3 (id=494): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) r4 = syz_clone(0xc3000480, &(0x7f0000000c40), 0x0, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="2d749115443e0fc696f38278d7c61a2d6ca6732c98d72ca2a5b1655cad6b92bf6fd479123bd61d7f6bbdfdef271ee56789a87cf5dafd3f9ec0f707139150f0308ec2b1e0c79c6169b2c876f617d8b0749feb9a245935927278a77891fa05352f93b0cc5cbe3b7343689405aa5d234b766d32dc8fc299611d2157b848d1ce74") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 19.121980195s ago: executing program 0 (id=503): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000200)=r3, 0x21) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x24c, 0x6, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x50) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000081}, 0x20050) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffd}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) close(0xffffffffffffffff) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.119874945s ago: executing program 1 (id=496): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xa, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5d31, 0x12208, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x8120, 0x6, 0x0, 0x0, 0x3, 0x0, 0xcc0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xa, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5d31, 0x12208, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x8120, 0x6, 0x0, 0x0, 0x3, 0x0, 0xcc0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) socket$kcm(0xa, 0x1, 0x106) (async) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x2, 0x88) (async) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) (async) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) 19.063824796s ago: executing program 2 (id=497): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x9, 0x31}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) 15.420115087s ago: executing program 2 (id=498): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000001c0)="00000000ffffffff1f01a0c9a11713a56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc106ad3a6b5656235d60cb5af5c5a69e10ed9fd4ea9e79db5b23e11fb683f4", 0x55}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x4e1f, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="e0", 0x1}], 0x1}, 0xc000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.494025173s ago: executing program 32 (id=503): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000200)=r3, 0x21) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x24c, 0x6, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x50) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000081}, 0x20050) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffd}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) close(0xffffffffffffffff) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.370039955s ago: executing program 33 (id=496): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xa, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5d31, 0x12208, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x8120, 0x6, 0x0, 0x0, 0x3, 0x0, 0xcc0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xa, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5d31, 0x12208, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x8120, 0x6, 0x0, 0x0, 0x3, 0x0, 0xcc0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) socket$kcm(0xa, 0x1, 0x106) (async) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x2, 0x88) (async) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) (async) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) 2.486238205s ago: executing program 34 (id=494): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) r4 = syz_clone(0xc3000480, &(0x7f0000000c40), 0x0, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="2d749115443e0fc696f38278d7c61a2d6ca6732c98d72ca2a5b1655cad6b92bf6fd479123bd61d7f6bbdfdef271ee56789a87cf5dafd3f9ec0f707139150f0308ec2b1e0c79c6169b2c876f617d8b0749feb9a245935927278a77891fa05352f93b0cc5cbe3b7343689405aa5d234b766d32dc8fc299611d2157b848d1ce74") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 0s ago: executing program 35 (id=498): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000001c0)="00000000ffffffff1f01a0c9a11713a56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc106ad3a6b5656235d60cb5af5c5a69e10ed9fd4ea9e79db5b23e11fb683f4", 0x55}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x4e1f, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="e0", 0x1}], 0x1}, 0xc000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 75.485610][ T5760] cgroup: Unknown subsys name 'net' [ 75.621428][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.394444][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.334417][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.356107][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.364699][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.373271][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.381762][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.414426][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.421905][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.454398][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.456534][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.462664][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.478593][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.487048][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.495066][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.495151][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.502480][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.516689][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.517364][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.526846][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.531859][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.538856][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.545600][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.555704][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.573980][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.585209][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.007560][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 80.129820][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 80.195806][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 80.206972][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.214441][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.221784][ T5781] bridge_slave_0: entered allmulticast mode [ 80.229375][ T5781] bridge_slave_0: entered promiscuous mode [ 80.295413][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.302590][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.310083][ T5781] bridge_slave_1: entered allmulticast mode [ 80.317742][ T5781] bridge_slave_1: entered promiscuous mode [ 80.363569][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 80.397244][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.444506][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.517829][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.526116][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.533329][ T5776] bridge_slave_0: entered allmulticast mode [ 80.541424][ T5776] bridge_slave_0: entered promiscuous mode [ 80.549438][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.556761][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.564321][ T5772] bridge_slave_0: entered allmulticast mode [ 80.571175][ T5772] bridge_slave_0: entered promiscuous mode [ 80.586523][ T5781] team0: Port device team_slave_0 added [ 80.604059][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.611323][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.618948][ T5776] bridge_slave_1: entered allmulticast mode [ 80.626964][ T5776] bridge_slave_1: entered promiscuous mode [ 80.646374][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.656148][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.664637][ T5772] bridge_slave_1: entered allmulticast mode [ 80.671801][ T5772] bridge_slave_1: entered promiscuous mode [ 80.681268][ T5781] team0: Port device team_slave_1 added [ 80.697161][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.704608][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.711883][ T5784] bridge_slave_0: entered allmulticast mode [ 80.719128][ T5784] bridge_slave_0: entered promiscuous mode [ 80.758256][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.765622][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.773101][ T5784] bridge_slave_1: entered allmulticast mode [ 80.781044][ T5784] bridge_slave_1: entered promiscuous mode [ 80.790614][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.814809][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.858789][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.879913][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.892517][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.899658][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.925913][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.941038][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.954661][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.986080][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.993200][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.022064][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.054213][ T5776] team0: Port device team_slave_0 added [ 81.092392][ T5776] team0: Port device team_slave_1 added [ 81.101073][ T5772] team0: Port device team_slave_0 added [ 81.127541][ T5784] team0: Port device team_slave_0 added [ 81.137268][ T5784] team0: Port device team_slave_1 added [ 81.153357][ T5772] team0: Port device team_slave_1 added [ 81.202333][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.209573][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.235917][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.261763][ T5781] hsr_slave_0: entered promiscuous mode [ 81.268220][ T5781] hsr_slave_1: entered promiscuous mode [ 81.288470][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.295827][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.322500][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.341643][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.349118][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.376160][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.389364][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.396578][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.423063][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.435640][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.442732][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.469565][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.483211][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.490261][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.516562][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.594553][ T5782] Bluetooth: hci2: command tx timeout [ 81.623804][ T5776] hsr_slave_0: entered promiscuous mode [ 81.632015][ T5776] hsr_slave_1: entered promiscuous mode [ 81.638961][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.647089][ T5776] Cannot create hsr debugfs directory [ 81.667872][ T5772] hsr_slave_0: entered promiscuous mode [ 81.674349][ T5785] Bluetooth: hci1: command tx timeout [ 81.674368][ T5780] Bluetooth: hci3: command tx timeout [ 81.683666][ T5782] Bluetooth: hci0: command tx timeout [ 81.691308][ T5772] hsr_slave_1: entered promiscuous mode [ 81.698114][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.705772][ T5772] Cannot create hsr debugfs directory [ 81.744247][ T5784] hsr_slave_0: entered promiscuous mode [ 81.751018][ T5784] hsr_slave_1: entered promiscuous mode [ 81.760315][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.768066][ T5784] Cannot create hsr debugfs directory [ 82.190855][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.203257][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.214650][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.227197][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.318313][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.332796][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.345598][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.358787][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.457859][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.486950][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.518792][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.526083][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.567773][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.611515][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.644540][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.656314][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.667030][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.706378][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.730999][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.741050][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.748954][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.798917][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.806376][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.871619][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.910316][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.917554][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.957259][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.964506][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.986409][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.051551][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.075753][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.083063][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.110740][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.138893][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.146166][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.244926][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.310079][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.318280][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.415449][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.422646][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.555998][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.679771][ T5782] Bluetooth: hci2: command tx timeout [ 83.691722][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.742653][ T5772] veth0_vlan: entered promiscuous mode [ 83.754259][ T5782] Bluetooth: hci0: command tx timeout [ 83.754970][ T5785] Bluetooth: hci3: command tx timeout [ 83.759857][ T5780] Bluetooth: hci1: command tx timeout [ 83.818532][ T5772] veth1_vlan: entered promiscuous mode [ 83.852499][ T5781] veth0_vlan: entered promiscuous mode [ 83.909781][ T5781] veth1_vlan: entered promiscuous mode [ 83.937314][ T5772] veth0_macvtap: entered promiscuous mode [ 83.949798][ T5772] veth1_macvtap: entered promiscuous mode [ 84.000034][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.029676][ T5781] veth0_macvtap: entered promiscuous mode [ 84.043106][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.058265][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.077280][ T5781] veth1_macvtap: entered promiscuous mode [ 84.088764][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.099934][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.109057][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.118656][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.167049][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.179060][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.195377][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.224687][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.300115][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.311579][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.325690][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.370299][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.382237][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.392345][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.402271][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.440615][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.454010][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.482821][ T5776] veth0_vlan: entered promiscuous mode [ 84.519388][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.526065][ T5776] veth1_vlan: entered promiscuous mode [ 84.529473][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.539580][ T5784] veth0_vlan: entered promiscuous mode [ 84.600989][ T5776] veth0_macvtap: entered promiscuous mode [ 84.629827][ T5784] veth1_vlan: entered promiscuous mode [ 84.659212][ T5776] veth1_macvtap: entered promiscuous mode [ 84.724931][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.733263][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.818988][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.832052][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.845167][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.856725][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.868742][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.880152][ T5784] veth0_macvtap: entered promiscuous mode [ 84.911974][ T5835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.922253][ T5835] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.949031][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.949870][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.969938][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.971200][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.984718][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.000864][ T5835] Zero length message leads to an empty skb [ 85.011266][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.013090][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.031731][ T5784] veth1_macvtap: entered promiscuous mode [ 85.062340][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.093001][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.106618][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.125177][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.196752][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.220578][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.239067][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.250331][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.263415][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.275054][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.286531][ T5834] delete_channel: no stack [ 85.296992][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.352690][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.385414][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.399540][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.423364][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.461713][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.484314][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.526249][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.590858][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.612359][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.642348][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.653504][ C0] hrtimer: interrupt took 46753 ns [ 85.686870][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.755082][ T5780] Bluetooth: hci2: command tx timeout [ 85.835923][ T5780] Bluetooth: hci3: command tx timeout [ 85.841406][ T5780] Bluetooth: hci1: command tx timeout [ 85.847504][ T5782] Bluetooth: hci0: command tx timeout [ 86.049004][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.123815][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.281711][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.363964][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.515745][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.593387][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.711037][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.763784][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.231921][ T5852] sctp: [Deprecated]: syz.2.3 (pid 5852) Use of int in maxseg socket option. [ 87.231921][ T5852] Use struct sctp_assoc_value instead [ 87.670738][ T5858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 87.864499][ T5858] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8'. [ 88.723718][ T5780] Bluetooth: hci2: command tx timeout [ 88.723792][ T5780] Bluetooth: hci3: command tx timeout [ 88.723828][ T5780] Bluetooth: hci1: command tx timeout [ 88.723866][ T5780] Bluetooth: hci0: command tx timeout [ 93.634554][ T23] cfg80211: failed to load regulatory.db [ 99.172473][ T5854] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7'. [ 99.276391][ T5857] delete_channel: no stack [ 99.618776][ T5881] bridge_slave_1: left allmulticast mode [ 99.619993][ T5882] netlink: 'syz.1.13': attribute type 9 has an invalid length. [ 99.642828][ T5882] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13'. [ 99.644100][ T5881] bridge_slave_1: left promiscuous mode [ 99.730179][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.930484][ T5881] bridge_slave_0: left allmulticast mode [ 99.948580][ T5881] bridge_slave_0: left promiscuous mode [ 99.980695][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.317309][ T5893] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15'. [ 101.402767][ T5893] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15'. [ 101.463444][ T5900] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15'. [ 101.578894][ T5901] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15'. [ 102.342764][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 102.362103][ T5909] netlink: 152 bytes leftover after parsing attributes in process `syz.3.18'. [ 104.408723][ T5911] netlink: 'syz.2.19': attribute type 21 has an invalid length. [ 104.423225][ T5911] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.19'. [ 104.460120][ T5908] delete_channel: no stack [ 106.482340][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25'. [ 106.506288][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25'. [ 106.564604][ T5937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25'. [ 106.626316][ T5937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25'. [ 107.154540][ T5946] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28'. [ 107.463982][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 107.500334][ T5950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.29'. [ 108.092913][ T5949] delete_channel: no stack [ 108.285727][ T5958] netlink: 'syz.0.31': attribute type 21 has an invalid length. [ 108.308009][ T5958] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.31'. [ 110.362141][ T5975] netlink: 60 bytes leftover after parsing attributes in process `syz.2.37'. [ 110.443437][ T5975] netlink: 60 bytes leftover after parsing attributes in process `syz.2.37'. [ 110.521996][ T5976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.37'. [ 110.680282][ T5981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38'. [ 110.723686][ T5980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.37'. [ 113.427634][ T6012] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 114.046228][ T6029] netlink: 'syz.0.49': attribute type 3 has an invalid length. [ 114.074999][ T6029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.49'. [ 114.157254][ T6022] netlink: 'syz.1.48': attribute type 21 has an invalid length. [ 114.166818][ T6022] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.48'. [ 114.255221][ T6029] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.49'. [ 114.330357][ T6029] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.49'. [ 114.349439][ T6032] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.49'. [ 114.424634][ T6029] netlink: 'syz.0.49': attribute type 10 has an invalid length. [ 114.452015][ T6029] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 114.482031][ T6029] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.544157][ T6029] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 117.471951][ T6075] __nla_validate_parse: 1 callbacks suppressed [ 117.472004][ T6075] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.61'. [ 118.530374][ T6080] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.63'. [ 118.551317][ T6080] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.63'. [ 118.570231][ T6080] netlink: 6 bytes leftover after parsing attributes in process `syz.2.63'. [ 118.598233][ T6080] tc_dump_action: action bad kind [ 119.659211][ T6108] gre0: entered promiscuous mode [ 119.664562][ T6108] gre0: entered allmulticast mode [ 120.013327][ T6114] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.73'. [ 120.782842][ T6141] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.81'. [ 120.822752][ T6141] bridge_slave_1: default FDB implementation only supports local addresses [ 120.879599][ T6132] netlink: 'syz.1.78': attribute type 2 has an invalid length. [ 120.941930][ T6132] netlink: 'syz.1.78': attribute type 8 has an invalid length. [ 120.971254][ T6132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.78'. [ 121.073618][ T6136] netlink: 'syz.1.78': attribute type 11 has an invalid length. [ 121.151725][ T6155] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.182618][ T6149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.78'. [ 121.189069][ T6148] sctp: [Deprecated]: syz.0.82 (pid 6148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.189069][ T6148] Use struct sctp_sack_info instead [ 122.232441][ T6182] delete_channel: no stack [ 123.437251][ T6213] netlink: 199936 bytes leftover after parsing attributes in process `syz.3.101'. [ 124.680540][ T6235] netlink: 'syz.2.107': attribute type 2 has an invalid length. [ 124.714242][ T6230] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.107'. [ 125.818066][ T6250] netlink: 132 bytes leftover after parsing attributes in process `syz.1.112'. [ 127.055254][ T6274] netlink: 'syz.1.118': attribute type 3 has an invalid length. [ 127.079110][ T6274] netlink: 132 bytes leftover after parsing attributes in process `syz.1.118'. [ 127.217381][ T6279] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.118'. [ 127.265697][ T6279] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.118'. [ 127.517148][ T6279] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.118'. [ 127.543827][ T6279] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 127.552648][ T6279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.118'. [ 127.563108][ T6279] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 127.572341][ T6279] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.657296][ T6279] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 127.842160][ T6288] netlink: 'syz.3.122': attribute type 3 has an invalid length. [ 127.859678][ T6288] netlink: 132 bytes leftover after parsing attributes in process `syz.3.122'. [ 128.616955][ T6282] netlink: 'syz.0.129': attribute type 3 has an invalid length. [ 128.651205][ T6282] netlink: 'syz.0.129': attribute type 4 has an invalid length. [ 128.678687][ T6282] netlink: 'syz.0.129': attribute type 7 has an invalid length. [ 128.700220][ T6282] netlink: 'syz.0.129': attribute type 8 has an invalid length. [ 128.752490][ T6282] netlink: 'syz.0.129': attribute type 7 has an invalid length. [ 128.763660][ T6282] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.129'. [ 129.084432][ T6305] netlink: 'syz.1.128': attribute type 29 has an invalid length. [ 129.109246][ T6305] netlink: 'syz.1.128': attribute type 29 has an invalid length. [ 129.496615][ T6313] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.132'. [ 130.076967][ T6319] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.133'. [ 130.486236][ T6319] hsr0: entered promiscuous mode [ 130.553883][ T6319] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 130.703068][ T6319] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 130.808277][ T6319] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 130.826848][ T6319] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 131.315300][ T6341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.139'. [ 132.218952][ T6348] validate_nla: 11 callbacks suppressed [ 132.218972][ T6348] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 132.463714][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.478405][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.498398][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.509059][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.547360][ T6352] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 132.565190][ T6352] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 133.381703][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.394343][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.553843][ T6352] syz.1.142 (6352) used greatest stack depth: 18952 bytes left [ 133.776504][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 133.789152][ T6367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.147'. [ 134.629563][ T6366] delete_channel: no stack [ 134.940246][ T6396] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.155'. [ 138.741056][ T6418] syzkaller0: entered promiscuous mode [ 138.777495][ T6418] syzkaller0: entered allmulticast mode [ 140.041977][ T6432] delete_channel: no stack [ 140.970547][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 140.980848][ T6433] netlink: 152 bytes leftover after parsing attributes in process `syz.2.164'. [ 141.230664][ T6438] netlink: 1039 bytes leftover after parsing attributes in process `syz.0.166'. [ 142.038625][ T6461] netlink: 132 bytes leftover after parsing attributes in process `syz.3.173'. [ 143.326729][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 143.389117][ T6475] netlink: 152 bytes leftover after parsing attributes in process `syz.1.176'. [ 143.844367][ T6474] delete_channel: no stack [ 144.182567][ T6501] netlink: 'syz.2.184': attribute type 29 has an invalid length. [ 144.197991][ T6501] netlink: 'syz.2.184': attribute type 29 has an invalid length. [ 144.209530][ T6504] netlink: 'syz.3.182': attribute type 17 has an invalid length. [ 144.220846][ T6501] netlink: 'syz.2.184': attribute type 29 has an invalid length. [ 144.244899][ T6501] netlink: 'syz.2.184': attribute type 29 has an invalid length. [ 144.356237][ T6501] netlink: 'syz.2.184': attribute type 9 has an invalid length. [ 144.367863][ T6501] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.184'. [ 146.468550][ T6519] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 146.692451][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 146.738465][ T6527] netlink: 152 bytes leftover after parsing attributes in process `syz.2.191'. [ 147.458484][ T6526] delete_channel: no stack [ 150.225051][ T6542] syzkaller0: entered promiscuous mode [ 150.230714][ T6542] syzkaller0: entered allmulticast mode [ 150.752954][ T6556] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.196'. [ 152.234728][ T6554] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 152.247814][ T6554] netlink: 168 bytes leftover after parsing attributes in process `syz.0.196'. [ 152.529818][ T6566] netlink: 'syz.3.199': attribute type 21 has an invalid length. [ 152.538204][ T6566] netlink: 152 bytes leftover after parsing attributes in process `syz.3.199'. [ 152.768164][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'. [ 152.781519][ T6571] netlink: 152 bytes leftover after parsing attributes in process `syz.1.202'. [ 153.454897][ T6570] delete_channel: no stack [ 153.872645][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 153.913676][ T6587] netlink: 152 bytes leftover after parsing attributes in process `syz.0.215'. [ 154.345331][ T6586] delete_channel: no stack [ 156.738779][ T6622] netlink: 'syz.0.217': attribute type 6 has an invalid length. [ 159.211412][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 159.222752][ T6640] netlink: 152 bytes leftover after parsing attributes in process `syz.1.219'. [ 159.885931][ T6646] ipvlan1: entered promiscuous mode [ 159.941590][ T6646] ipvlan1: entered allmulticast mode [ 160.083284][ T6646] veth0_vlan: entered allmulticast mode [ 160.614163][ T6638] delete_channel: no stack [ 164.829117][ T6689] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.235'. [ 165.870594][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.238'. [ 165.888118][ T6696] netlink: 152 bytes leftover after parsing attributes in process `syz.3.238'. [ 166.250973][ T6704] netlink: 'syz.2.240': attribute type 10 has an invalid length. [ 166.269824][ T6704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.240'. [ 166.280005][ T6704] team0: entered promiscuous mode [ 166.289072][ T6704] team_slave_0: entered promiscuous mode [ 166.295478][ T6704] team_slave_1: entered promiscuous mode [ 166.305098][ T6704] team0: entered allmulticast mode [ 166.334223][ T6704] team_slave_0: entered allmulticast mode [ 166.340065][ T6704] team_slave_1: entered allmulticast mode [ 166.377324][ T6704] bridge0: port 3(team0) entered blocking state [ 166.411702][ T6704] bridge0: port 3(team0) entered disabled state [ 166.428005][ T6704] bridge0: port 3(team0) entered blocking state [ 166.434535][ T6704] bridge0: port 3(team0) entered forwarding state [ 166.448930][ T6695] delete_channel: no stack [ 166.460165][ T6705] netlink: 164 bytes leftover after parsing attributes in process `syz.2.240'. [ 167.037404][ T6728] netlink: 'syz.2.247': attribute type 46 has an invalid length. [ 167.392869][ T6741] syz.1.250 uses obsolete (PF_INET,SOCK_PACKET) [ 168.470813][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 168.595933][ T6756] netlink: 152 bytes leftover after parsing attributes in process `syz.3.252'. [ 168.980830][ T6754] delete_channel: no stack [ 168.984652][ T6769] C: renamed from team_slave_0 (while UP) [ 169.007785][ T6769] netlink: 'syz.1.257': attribute type 4 has an invalid length. [ 169.020279][ T6769] netlink: 116 bytes leftover after parsing attributes in process `syz.1.257'. [ 169.042611][ T6769] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 169.140045][ T6768] pimreg: tun_chr_ioctl cmd 1074025681 [ 169.187317][ T6768] netlink: 'syz.2.256': attribute type 29 has an invalid length. [ 169.364224][ T6768] netlink: 'syz.2.256': attribute type 29 has an invalid length. [ 169.373334][ T6771] netlink: 'syz.2.256': attribute type 10 has an invalid length. [ 169.395591][ T6771] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 169.434198][ T6773] netlink: 'syz.1.259': attribute type 6 has an invalid length. [ 169.445075][ T6773] netlink: 156 bytes leftover after parsing attributes in process `syz.1.259'. [ 169.518749][ T6770] netlink: 'syz.2.256': attribute type 29 has an invalid length. [ 170.006092][ T6778] netlink: 164 bytes leftover after parsing attributes in process `syz.1.260'. [ 170.070645][ T6778] sit0: entered allmulticast mode [ 170.191418][ T6783] sit0: entered promiscuous mode [ 171.232979][ T6793] netlink: 'syz.1.264': attribute type 39 has an invalid length. [ 172.063376][ T6802] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.265'. [ 172.284493][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 172.310041][ T6805] netlink: 152 bytes leftover after parsing attributes in process `syz.2.266'. [ 172.597051][ T6804] delete_channel: no stack [ 173.830585][ T6841] netlink: 'syz.1.276': attribute type 10 has an invalid length. [ 173.883948][ T6841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.276'. [ 173.922455][ T6841] dummy0: entered promiscuous mode [ 173.943820][ T6841] dummy0: entered allmulticast mode [ 173.964862][ T6841] bridge0: port 3(dummy0) entered blocking state [ 173.973795][ T6841] bridge0: port 3(dummy0) entered disabled state [ 174.024926][ T6841] bridge0: port 3(dummy0) entered blocking state [ 174.032342][ T6841] bridge0: port 3(dummy0) entered forwarding state [ 174.084751][ T6843] netlink: 'syz.1.276': attribute type 21 has an invalid length. [ 174.119154][ T6843] netlink: 128 bytes leftover after parsing attributes in process `syz.1.276'. [ 174.171770][ T6843] netlink: 'syz.1.276': attribute type 4 has an invalid length. [ 174.589452][ T6851] syz.1.279[6851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.589808][ T6851] syz.1.279[6851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.825892][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 174.897493][ T6849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.278'. [ 175.144724][ T6848] delete_channel: no stack [ 178.419336][ T6879] netlink: 'syz.1.287': attribute type 29 has an invalid length. [ 178.453248][ T6879] netlink: 'syz.1.287': attribute type 29 has an invalid length. [ 178.623840][ T6885] syz.0.289[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.624701][ T6885] syz.0.289[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.800261][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 178.891179][ T6887] netlink: 152 bytes leftover after parsing attributes in process `syz.1.290'. [ 179.546786][ T6886] delete_channel: no stack [ 179.758320][ T6896] netlink: 'syz.2.291': attribute type 10 has an invalid length. [ 179.886679][ T6896] bridge0: port 3(team0) entered disabled state [ 179.934060][ T6896] team0: left allmulticast mode [ 179.965486][ T6896] team_slave_0: left allmulticast mode [ 180.058060][ T6896] team_slave_1: left allmulticast mode [ 180.133713][ T6896] team0: left promiscuous mode [ 180.223596][ T6896] team_slave_0: left promiscuous mode [ 180.298309][ T6896] team_slave_1: left promiscuous mode [ 180.328269][ T6896] bridge0: port 3(team0) entered disabled state [ 180.792565][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.807127][ T6896] bond0: (slave team0): Enslaving as an active interface with an up link [ 180.818820][ T6900] netlink: 'syz.2.291': attribute type 10 has an invalid length. [ 180.827355][ T6900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.291'. [ 180.837986][ T6900] team0: entered promiscuous mode [ 180.843129][ T6900] team_slave_0: entered promiscuous mode [ 180.859496][ T6900] team_slave_1: entered promiscuous mode [ 180.867709][ T6900] team0: entered allmulticast mode [ 180.872886][ T6900] team_slave_0: entered allmulticast mode [ 180.907417][ T6900] team_slave_1: entered allmulticast mode [ 180.929592][ T6900] bond0: (slave team0): Releasing backup interface [ 180.947818][ T6900] bridge0: port 3(team0) entered blocking state [ 180.957562][ T6900] bridge0: port 3(team0) entered disabled state [ 182.373818][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 182.395337][ T6948] netlink: 152 bytes leftover after parsing attributes in process `syz.0.302'. [ 182.525194][ T6953] syz.3.303[6953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.526070][ T6953] syz.3.303[6953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.748535][ T6947] delete_channel: no stack [ 183.408680][ T6979] netlink: 'syz.3.310': attribute type 9 has an invalid length. [ 183.452148][ T6979] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.310'. [ 183.468975][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 183.481503][ T6983] netlink: 152 bytes leftover after parsing attributes in process `syz.0.312'. [ 183.492946][ T6979] netlink: 'syz.3.310': attribute type 10 has an invalid length. [ 183.558088][ T6979] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 183.581771][ T6986] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 183.599808][ T6986] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.311'. [ 184.332904][ T6982] delete_channel: no stack [ 184.561866][ T7007] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 184.613274][ T7007] syz.0.316 (7007) used greatest stack depth: 18744 bytes left [ 186.903899][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 186.915128][ T7032] netlink: 152 bytes leftover after parsing attributes in process `syz.0.325'. [ 186.965144][ T7031] delete_channel: no stack [ 187.175573][ T7041] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.328'. [ 187.242990][ T7043] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 187.266690][ T7041] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.328'. [ 187.350546][ T7044] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.328'. [ 189.144933][ T7060] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.331'. [ 190.783265][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 190.857636][ T7077] netlink: 152 bytes leftover after parsing attributes in process `syz.1.336'. [ 190.867261][ T7078] netlink: 'syz.3.337': attribute type 3 has an invalid length. [ 190.950658][ T7078] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.337'. [ 191.372293][ T7088] netlink: 'syz.0.339': attribute type 21 has an invalid length. [ 191.502851][ T7067] delete_channel: no stack [ 192.076487][ T7106] syzkaller0: entered promiscuous mode [ 192.082481][ T7106] syzkaller0: entered allmulticast mode [ 192.707050][ T7108] delete_channel: no stack [ 194.171608][ T7109] netlink: 10 bytes leftover after parsing attributes in process `syz.0.346'. [ 194.387837][ T7130] netlink: 'syz.0.351': attribute type 10 has an invalid length. [ 194.414773][ T7130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.351'. [ 194.443927][ T7130] dummy0: entered promiscuous mode [ 194.450035][ T7130] dummy0: entered allmulticast mode [ 194.471555][ T7130] bridge0: port 3(dummy0) entered blocking state [ 194.480045][ T7130] bridge0: port 3(dummy0) entered disabled state [ 194.597611][ T7130] bridge0: port 3(dummy0) entered blocking state [ 194.605486][ T7130] bridge0: port 3(dummy0) entered forwarding state [ 194.801945][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.804328][ T7146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.355'. [ 194.808517][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.853115][ T7146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.355'. [ 194.883085][ T7150] netlink: 60 bytes leftover after parsing attributes in process `syz.3.355'. [ 194.915082][ T7146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.355'. [ 194.925526][ T7151] syz.1.357[7151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.925829][ T7151] syz.1.357[7151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.978795][ T7151] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.357'. [ 196.049648][ T7167] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.360'. [ 198.074085][ T7196] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.369'. [ 199.123859][ T7183] netlink: 'syz.3.366': attribute type 10 has an invalid length. [ 199.131711][ T7183] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.366'. [ 199.443015][ T7204] netlink: 'syz.0.370': attribute type 3 has an invalid length. [ 199.456183][ T7204] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.370'. [ 199.476136][ T7202] netlink: 'syz.0.370': attribute type 3 has an invalid length. [ 199.508035][ T7202] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.370'. [ 199.529040][ T7205] netlink: 'syz.3.371': attribute type 3 has an invalid length. [ 199.605949][ T7205] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 199.635389][ T7205] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 199.665807][ T7205] netlink: 'syz.3.371': attribute type 2 has an invalid length. [ 199.696976][ T7205] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.371'. [ 199.821580][ T7213] netlink: 152 bytes leftover after parsing attributes in process `syz.0.373'. [ 199.831481][ T7213] netlink: 6 bytes leftover after parsing attributes in process `syz.0.373'. [ 200.224042][ T7224] netlink: 'syz.0.375': attribute type 21 has an invalid length. [ 200.243966][ T7224] netlink: 'syz.0.375': attribute type 15 has an invalid length. [ 200.779193][ T7238] netlink: 'syz.3.379': attribute type 10 has an invalid length. [ 200.812693][ T7238] hsr0: entered promiscuous mode [ 200.929505][ T7238] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 201.048520][ T7238] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 201.119331][ T7238] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 201.133863][ T7238] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 201.141327][ T7241] netlink: 'syz.2.380': attribute type 39 has an invalid length. [ 201.345618][ T7251] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.382'. [ 201.538898][ T7251] netlink: 9 bytes leftover after parsing attributes in process `syz.0.382'. [ 201.996661][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 202.003038][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 202.016951][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 202.017013][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 202.224094][ T7263] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.385'. [ 202.572063][ T7265] cgroup: fork rejected by pids controller in /syz2 [ 202.701628][ T7276] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.388'. [ 202.744497][ T7276] openvswitch: netlink: Flow key attribute not present in set flow. [ 202.844232][ T7276] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.388'. [ 203.779671][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.896072][ T7287] warning: `syz.3.393' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 204.449795][ T7289] sit0: entered allmulticast mode [ 204.767540][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.787205][ T7290] sit0: entered promiscuous mode [ 204.967053][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.122273][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.155288][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.164989][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.173078][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.193014][ T7301] validate_nla: 3 callbacks suppressed [ 205.193035][ T7301] netlink: 'syz.1.396': attribute type 4 has an invalid length. [ 205.220652][ T7301] __nla_validate_parse: 1 callbacks suppressed [ 205.220670][ T7301] netlink: 152 bytes leftover after parsing attributes in process `syz.1.396'. [ 205.220693][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.246443][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.255106][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.287828][ T7301] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 205.355267][ T7307] netlink: 188 bytes leftover after parsing attributes in process `syz.1.396'. [ 205.504803][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 205.550981][ T7309] netlink: 152 bytes leftover after parsing attributes in process `syz.3.397'. [ 205.814731][ T7308] delete_channel: no stack [ 207.022431][ T7345] netlink: 144 bytes leftover after parsing attributes in process `syz.1.402'. [ 207.096593][ T7333] syzkaller0: entered promiscuous mode [ 207.102430][ T7333] syzkaller0: entered allmulticast mode [ 207.172391][ T7305] chnl_net:caif_netlink_parms(): no params data found [ 207.273607][ T51] Bluetooth: hci1: command tx timeout [ 207.563744][ T7354] netlink: 'syz.1.403': attribute type 29 has an invalid length. [ 207.594169][ T7354] netlink: 'syz.1.403': attribute type 3 has an invalid length. [ 207.602107][ T7354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.403'. [ 208.528711][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.536445][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.545419][ T7305] bridge_slave_0: entered allmulticast mode [ 208.552953][ T7305] bridge_slave_0: entered promiscuous mode [ 208.629652][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.653740][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.661114][ T7305] bridge_slave_1: entered allmulticast mode [ 208.690824][ T7305] bridge_slave_1: entered promiscuous mode [ 208.823102][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.851716][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 208.865241][ T7378] netlink: 152 bytes leftover after parsing attributes in process `syz.1.408'. [ 209.047223][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.137308][ T7377] delete_channel: no stack [ 209.239157][ T7305] team0: Port device team_slave_0 added [ 209.364470][ T51] Bluetooth: hci1: command tx timeout [ 209.426445][ T7305] team0: Port device team_slave_1 added [ 209.500495][ T7389] netlink: 'syz.0.410': attribute type 5 has an invalid length. [ 209.984209][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.991414][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.149655][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.311324][ T7412] netlink: 'syz.1.415': attribute type 39 has an invalid length. [ 210.451776][ T7406] syzkaller0: entered promiscuous mode [ 210.465721][ T7406] syzkaller0: entered allmulticast mode [ 210.489238][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.502588][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.542372][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.797789][ T7395] delete_channel: no stack [ 211.350336][ T7305] hsr_slave_0: entered promiscuous mode [ 211.399470][ T7305] hsr_slave_1: entered promiscuous mode [ 211.433816][ T7305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.443785][ T51] Bluetooth: hci1: command tx timeout [ 211.467313][ T7305] Cannot create hsr debugfs directory [ 211.485643][ T34] hsr_slave_0: left promiscuous mode [ 211.492390][ T34] hsr_slave_1: left promiscuous mode [ 211.499486][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.507180][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.518484][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.533621][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.553358][ T34] bridge0: port 3(team0) entered disabled state [ 211.587250][ T34] bridge_slave_1: left allmulticast mode [ 211.593187][ T34] bridge_slave_1: left promiscuous mode [ 211.600099][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.817977][ T34] bridge_slave_0: left allmulticast mode [ 211.827561][ T34] bridge_slave_0: left promiscuous mode [ 211.847274][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.032419][ T34] veth1_macvtap: left promiscuous mode [ 212.048193][ T34] veth0_macvtap: left promiscuous mode [ 212.070932][ T34] veth1_vlan: left promiscuous mode [ 212.099245][ T34] veth0_vlan: left promiscuous mode [ 212.270566][ T7439] delete_channel: no stack [ 213.137878][ T34] team_slave_1 (unregistering): left promiscuous mode [ 213.145799][ T34] team_slave_1 (unregistering): left allmulticast mode [ 213.160442][ T34] team0 (unregistering): Port device team_slave_1 removed [ 213.201826][ T34] team_slave_0 (unregistering): left promiscuous mode [ 213.210577][ T34] team_slave_0 (unregistering): left allmulticast mode [ 213.220160][ T34] team0 (unregistering): Port device team_slave_0 removed [ 213.259566][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.305143][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.515871][ T51] Bluetooth: hci1: command tx timeout [ 213.632498][ T34] bond0 (unregistering): Released all slaves [ 213.731610][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'. [ 213.740967][ T7440] netlink: 152 bytes leftover after parsing attributes in process `syz.0.420'. [ 214.008265][ T7468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.423'. [ 215.016047][ T7486] netlink: 'syz.3.428': attribute type 39 has an invalid length. [ 215.559583][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 215.613785][ T7496] netlink: 152 bytes leftover after parsing attributes in process `syz.0.430'. [ 215.735985][ T7495] delete_channel: no stack [ 216.055235][ T7305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.117603][ T7305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.190723][ T7305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.329446][ T7510] netlink: 144 bytes leftover after parsing attributes in process `syz.0.432'. [ 216.341480][ T7506] netlink: 'syz.3.431': attribute type 5 has an invalid length. [ 216.887914][ T7305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.192121][ T7305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.222494][ T7305] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.286045][ T7514] syzkaller0: entered promiscuous mode [ 217.291956][ T7514] syzkaller0: entered allmulticast mode [ 217.321520][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.328814][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.351651][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.359026][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.515649][ T7513] delete_channel: no stack [ 218.081993][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 218.108904][ T7541] netlink: 152 bytes leftover after parsing attributes in process `syz.0.440'. [ 218.420942][ T7305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.604524][ T7305] veth0_vlan: entered promiscuous mode [ 218.657867][ T7305] veth1_vlan: entered promiscuous mode [ 218.766504][ T7305] veth0_macvtap: entered promiscuous mode [ 218.813533][ T7305] veth1_macvtap: entered promiscuous mode [ 218.887259][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.923693][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.956617][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.988201][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.011099][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.032278][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.045316][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.066135][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.077209][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.088828][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.098308][ T7540] delete_channel: no stack [ 219.177128][ T7305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.222173][ T7305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.260775][ T7305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.293561][ T7305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.643667][ T6833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.651666][ T6833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.656227][ T7563] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.443'. [ 219.769837][ T7563] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.443'. [ 219.859975][ T7563] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.443'. [ 219.860285][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.960692][ T7569] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.443'. [ 219.999409][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.184234][ T7576] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.443'. [ 221.980262][ T7573] delete_channel: no stack [ 222.537656][ T7569] netlink: 'syz.3.443': attribute type 10 has an invalid length. [ 222.554141][ T7569] netlink: 40 bytes leftover after parsing attributes in process `syz.3.443'. [ 222.564554][ T7569] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 222.571803][ T7569] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.613089][ T7569] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 225.916572][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 225.934741][ T7644] netlink: 152 bytes leftover after parsing attributes in process `syz.1.453'. [ 226.267258][ T7643] delete_channel: no stack [ 227.522114][ T6833] tipc: Subscription rejected, illegal request [ 227.544538][ T7664] netlink: 'syz.1.459': attribute type 21 has an invalid length. [ 227.592078][ T7664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.459'. [ 227.981194][ T7683] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.463'. [ 238.736139][ T7769] netlink: 'syz.2.481': attribute type 10 has an invalid length. [ 238.854022][ T7769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.481'. [ 238.938775][ T7769] batman_adv: batadv0: Adding interface: vlan1 [ 238.946069][ T7769] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.985126][ T7769] batman_adv: batadv0: Interface activated: vlan1 [ 241.400514][ T7808] netlink: 'syz.3.491': attribute type 10 has an invalid length. [ 241.421703][ T7808] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.491'. [ 257.114775][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.121532][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.987531][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.997682][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.005879][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.014660][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.022766][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 259.035785][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.717414][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 259.732854][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 259.741437][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 259.750262][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 259.759394][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 259.768772][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 259.777526][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 259.787140][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 259.796078][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 259.814949][ T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 259.822752][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 259.833905][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.455419][ T7856] chnl_net:caif_netlink_parms(): no params data found [ 260.801149][ T7865] chnl_net:caif_netlink_parms(): no params data found [ 261.115639][ T5785] Bluetooth: hci4: command tx timeout [ 261.913767][ T5780] Bluetooth: hci6: command tx timeout [ 261.919692][ T5780] Bluetooth: hci5: command tx timeout [ 261.971084][ T5780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 261.982514][ T5780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 262.006960][ T5780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 262.022696][ T5780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 262.040262][ T5780] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 262.051507][ T5780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 262.171924][ T7856] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.182374][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.194684][ T7856] bridge_slave_0: entered allmulticast mode [ 262.209334][ T7856] bridge_slave_0: entered promiscuous mode [ 262.223000][ T7856] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.240195][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.247884][ T7856] bridge_slave_1: entered allmulticast mode [ 262.265846][ T7856] bridge_slave_1: entered promiscuous mode [ 262.555485][ T7856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.587884][ T7856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.691350][ T7860] chnl_net:caif_netlink_parms(): no params data found [ 262.831578][ T7856] team0: Port device team_slave_0 added [ 262.879551][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.899645][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.918442][ T7865] bridge_slave_0: entered allmulticast mode [ 262.932386][ T7865] bridge_slave_0: entered promiscuous mode [ 262.954660][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.961843][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.980258][ T7865] bridge_slave_1: entered allmulticast mode [ 262.998563][ T7865] bridge_slave_1: entered promiscuous mode [ 263.018997][ T7856] team0: Port device team_slave_1 added [ 263.193628][ T5780] Bluetooth: hci4: command tx timeout [ 263.336662][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.356388][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.399696][ T7856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.993776][ T5780] Bluetooth: hci5: command tx timeout [ 263.999266][ T5780] Bluetooth: hci6: command tx timeout [ 264.153848][ T5780] Bluetooth: hci7: command tx timeout [ 265.273621][ T5780] Bluetooth: hci4: command tx timeout [ 266.073720][ T5780] Bluetooth: hci6: command tx timeout [ 266.079296][ T5780] Bluetooth: hci5: command tx timeout [ 266.234638][ T5780] Bluetooth: hci7: command tx timeout [ 267.353796][ T5780] Bluetooth: hci4: command tx timeout [ 268.153732][ T5785] Bluetooth: hci6: command tx timeout [ 268.159332][ T5780] Bluetooth: hci5: command tx timeout [ 268.323707][ T5780] Bluetooth: hci7: command tx timeout [ 270.393788][ T5780] Bluetooth: hci7: command tx timeout [ 361.223380][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 361.230260][ C0] rcu: 0-....: (1 GPs behind) idle=9484/1/0x4000000000000000 softirq=23656/23657 fqs=5139 [ 361.241267][ C0] rcu: hardirqs softirqs csw/system [ 361.247815][ C0] rcu: number: 994006 0 0 [ 361.254335][ C0] rcu: cputime: 22553 29936 49 ==> 52510(ms) [ 361.262149][ C0] rcu: (t=10502 jiffies g=26189 q=2064 ncpus=2) [ 361.268522][ C0] CPU: 0 PID: 7828 Comm: syz.0.503 Not tainted syzkaller #0 [ 361.275855][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.285987][ C0] RIP: 0010:kcov_remote_stop+0x28/0x6e0 [ 361.291685][ C0] Code: eb 8c f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 65 4c 8b 35 16 c2 7c 7e 65 8b 05 17 c2 7c 7e a9 00 00 ff 00 74 0f <48> 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 [ 361.311419][ C0] RSP: 0018:ffffc90000007950 EFLAGS: 00000206 [ 361.317558][ C0] RAX: 1eed56ac2040e000 RBX: ffffc90000007a80 RCX: 1eed56ac2040e000 [ 361.325547][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 361.333539][ C0] RBP: ffffc90000007c10 R08: ffffffff911e75ff R09: 1ffffffff223cebf [ 361.341555][ C0] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: 0000000000000246 [ 361.349542][ C0] R13: ffffffff8186f683 R14: ffff88807a3bda00 R15: ffff8880b8e2c388 [ 361.357703][ C0] FS: 00007f52754a66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 361.366645][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.373326][ C0] CR2: 0000000100000000 CR3: 0000000054bdd000 CR4: 00000000003506f0 [ 361.381322][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.389316][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 361.397329][ C0] Call Trace: [ 361.400794][ C0] [ 361.403688][ C0] ? sta_info_get_bss+0x309/0x320 [ 361.408933][ C0] ? ieee80211_rx_data_set_sta+0x228/0x3e0 [ 361.414866][ C0] ieee80211_rx_list+0x291b/0x3240 [ 361.420270][ C0] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 361.426545][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 361.431826][ C0] ? read_lock_is_recursive+0x20/0x20 [ 361.437244][ C0] ? ieee80211_rx_napi+0xd2/0x3c0 [ 361.442311][ C0] ieee80211_rx_napi+0x1ae/0x3c0 [ 361.447263][ C0] ? ieee80211_rx_list+0x3240/0x3240 [ 361.452583][ C0] ? skb_dequeue+0x124/0x160 [ 361.457240][ C0] ieee80211_handle_queued_frames+0x105/0x190 [ 361.463385][ C0] ? ieee80211_reconfig_filter+0x20/0x20 [ 361.469032][ C0] tasklet_action_common+0x2d4/0x460 [ 361.474364][ C0] ? net_tx_action+0x950/0x950 [ 361.479520][ C0] ? trace_raw_output_tasklet+0xc0/0xc0 [ 361.485093][ C0] handle_softirqs+0x27d/0x820 [ 361.490223][ C0] ? read_tsc+0x9/0x20 [ 361.494315][ C0] ? ktime_get+0x24b/0x280 [ 361.498752][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 361.503541][ C0] ? do_softirq+0x1a0/0x1a0 [ 361.508059][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 361.513302][ C0] __irq_exit_rcu+0xd3/0x190 [ 361.517912][ C0] ? irq_exit_rcu+0x20/0x20 [ 361.522439][ C0] irq_exit_rcu+0x9/0x20 [ 361.526690][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 361.532338][ C0] [ 361.535279][ C0] [ 361.538223][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 361.544296][ C0] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 361.550206][ C0] Code: 75 11 e8 4c 00 0b 00 48 85 db 75 16 e8 42 00 0b 00 eb 15 e8 3b 00 0b 00 e8 06 e3 0f 09 48 85 db 74 ea e8 2c 00 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 361.570180][ C0] RSP: 0018:ffffc90004c6fa00 EFLAGS: 00000246 [ 361.576275][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 361.584264][ C0] RDX: ffffc9000d42b000 RSI: 0000000000003206 RDI: 0000000000003207 [ 361.592253][ C0] RBP: ffffc90004c6fad0 R08: ffffffff911e75ff R09: 1ffffffff223cebf [ 361.600332][ C0] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: 1ffff9200098df44 [ 361.608593][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200098df65 [ 361.616620][ C0] ? event_function+0x300/0x300 [ 361.621518][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 361.627252][ C0] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 361.633029][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 361.638246][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 361.643908][ C0] smp_call_function_single+0x36d/0x5a0 [ 361.649476][ C0] ? event_function+0x300/0x300 [ 361.654345][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 361.660516][ C0] ? event_function+0x300/0x300 [ 361.665400][ C0] perf_install_in_context+0x5bb/0x920 [ 361.670878][ C0] ? alloc_file_pseudo+0x1ae/0x210 [ 361.676115][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 361.682118][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 361.687351][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 361.692588][ C0] ? perf_event__header_size+0x165/0x220 [ 361.698245][ C0] __se_sys_perf_event_open+0x1841/0x1c60 [ 361.703998][ C0] ? security_bpf+0x7e/0xa0 [ 361.708567][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 361.714228][ C0] ? lock_chain_count+0x20/0x20 [ 361.719143][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 361.724361][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 361.730126][ C0] do_syscall_64+0x55/0xb0 [ 361.734605][ C0] ? clear_bhb_loop+0x40/0x90 [ 361.739315][ C0] ? clear_bhb_loop+0x40/0x90 [ 361.744021][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.749942][ C0] RIP: 0033:0x7f527459de59 [ 361.754374][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.774006][ C0] RSP: 002b:00007f52754a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 361.782439][ C0] RAX: ffffffffffffffda RBX: 00007f5274825fa0 RCX: 00007f527459de59 [ 361.790424][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 361.798506][ C0] RBP: 00007f5274633e6f R08: 0000000000000000 R09: 0000000000000000 [ 361.806498][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 361.814688][ C0] R13: 00007f5274826038 R14: 00007f5274825fa0 R15: 00007ffe49dd1fe8 [ 361.822690][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 369.613483][ T5780] Bluetooth: hci8: Opcode 0x0c03 failed: -110