last executing test programs: 7.852164063s ago: executing program 2 (id=1953): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1a}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.328046251s ago: executing program 3 (id=1957): socket$kcm(0x11, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb013a9820d5f36668bac3d80018000000000000000000000001010000000000000000"], 0x0, 0x1a}, 0x28) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, r2, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.323225961s ago: executing program 0 (id=1965): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00\x00\x00', @ANYBLOB='\x00'/14], 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.322053901s ago: executing program 1 (id=1958): socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.321802461s ago: executing program 2 (id=1959): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb013a9820d5f36668bac3d80018000000000000000000000001010000000000000000"], 0x0, 0x1a}, 0x28) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, r0, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.05329046s ago: executing program 1 (id=1960): socket$kcm(0x11, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.007552892s ago: executing program 3 (id=1961): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x58020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211"], 0xcfa4) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 6.968316353s ago: executing program 2 (id=1962): socket$kcm(0x11, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb013a9820d5f36668bac3d80018000000000000000000000001010000000000000000"], 0x0, 0x1a}, 0x28) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r2 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, r2, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.897191926s ago: executing program 0 (id=1963): socket$kcm(0x15, 0x5, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYBLOB="1e000100110000001031bc22486b1ea92c3c4b1d6e576e016ba671b0", @ANYRES32=r1, @ANYBLOB], 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r5, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1f, 0x12, &(0x7f0000000600)=@raw=[@ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x56}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f00000006c0)='syzkaller\x00', 0x5662, 0x94, &(0x7f0000000700)=""/148, 0x41100, 0x0, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x0, 0x7, 0x4}, 0x10, 0x0, r5, 0x2, &(0x7f0000000a00)=[r5, r5, r3, r3], &(0x7f0000000a40)=[{0x4, 0x2, 0xa, 0x1}, {0x0, 0x4, 0x0, 0x9}]}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r5) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) 6.553922407s ago: executing program 1 (id=1964): socket$kcm(0x11, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb013a9820d5f36668bac3d80018000000000000000000000001010000000000000000"], 0x0, 0x1a}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.523132568s ago: executing program 3 (id=1966): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1a}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.521953168s ago: executing program 0 (id=1967): socket$kcm(0x11, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x50) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.294883146s ago: executing program 2 (id=1968): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.129844252s ago: executing program 3 (id=1969): socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.026418795s ago: executing program 1 (id=1970): socket$kcm(0x11, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb013a9820d5f36668bac3d80018000000000000000000000001010000000000000000"], 0x0, 0x1a}, 0x28) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r1 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, r1, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.910211779s ago: executing program 0 (id=1971): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb013a9820d5f36668bac3d80018000000000000000000000001010000000000000000"], 0x0, 0x1a}, 0x28) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, r0, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.89166746s ago: executing program 1 (id=1972): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00\x00\x00', @ANYBLOB='\x00'/14], 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.88017955s ago: executing program 3 (id=1973): socket$kcm(0x11, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.809601692s ago: executing program 2 (id=1974): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x58020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211"], 0xcfa4) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 5.611178229s ago: executing program 0 (id=1975): socket$kcm(0x15, 0x5, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYBLOB="1e000100110000001031bc22486b1ea92c3c4b1d6e576e016ba671b0", @ANYRES32=r1, @ANYBLOB], 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r5, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1f, 0x12, &(0x7f0000000600)=@raw=[@ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x56}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f00000006c0)='syzkaller\x00', 0x5662, 0x94, &(0x7f0000000700)=""/148, 0x41100, 0x0, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x0, 0x7, 0x4}, 0x10, 0x0, r5, 0x2, &(0x7f0000000a00)=[r5, r5, r3, r3], &(0x7f0000000a40)=[{0x4, 0x2, 0xa, 0x1}, {0x0, 0x4, 0x0, 0x9}]}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r5) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) 5.59451277s ago: executing program 1 (id=1976): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xda, 0xda, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0xa, 0x4}, {0xd, 0x1}]}, @enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x1, [{0xf, 0xe, 0x5}, {0x2, 0x6, 0x1000}]}, @datasec={0x9, 0x6, 0x0, 0xf, 0x2, [{0x4, 0x2, 0xff3}, {0x1, 0x8, 0xa9}, {0x3, 0x2c00, 0x4b}, {0x1, 0x2, 0x4}, {0x1, 0x7, 0x2}, {0x4, 0x8d, 0x10}], "b00e"}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x3e, [{0x2, 0x4, 0x11}, {0x8, 0x3, 0x1}]}, @const={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f, 0x61, 0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0xfa, 0x1000, 0x1, 0x7}, 0x28) close(0xffffffffffffffff) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8953, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x28, 0x5, 0x0) close(r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000020000000000000000000008000000001000770200000000000000090200000000"], 0x0, 0x36}, 0x28) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xa18, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) 5.521697002s ago: executing program 3 (id=1977): socket$kcm(0x11, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r2 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, r2, 0x1, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0], 0x50) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.467062834s ago: executing program 2 (id=1978): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 0s ago: executing program 0 (id=1979): socket$kcm(0x11, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb013a9820d5f36668bac3d80018000000000000000000000001010000000000000000"], 0x0, 0x1a}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 61.582857][ T5756] cgroup: Unknown subsys name 'net' [ 61.715315][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.080363][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.829587][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.859102][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.879985][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.889180][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.897265][ T5770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.905041][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.932416][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.942682][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.950826][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.969038][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.976802][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.984706][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.006425][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.014653][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.022992][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.067432][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.067495][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.082390][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.089301][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.090598][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.097052][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.104616][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.119082][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.127585][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.436374][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 65.474617][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 65.592109][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.601561][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.609124][ T5768] bridge_slave_0: entered allmulticast mode [ 65.615917][ T5768] bridge_slave_0: entered promiscuous mode [ 65.645869][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 65.656132][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.664733][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.672274][ T5768] bridge_slave_1: entered allmulticast mode [ 65.679729][ T5768] bridge_slave_1: entered promiscuous mode [ 65.737885][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.746401][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.753840][ T5771] bridge_slave_0: entered allmulticast mode [ 65.761852][ T5771] bridge_slave_0: entered promiscuous mode [ 65.780656][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.792821][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.802510][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.810219][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.817378][ T5771] bridge_slave_1: entered allmulticast mode [ 65.825288][ T5771] bridge_slave_1: entered promiscuous mode [ 65.868007][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 65.900692][ T5768] team0: Port device team_slave_0 added [ 65.924328][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.935017][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.942652][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.950109][ T5777] bridge_slave_0: entered allmulticast mode [ 65.956765][ T5777] bridge_slave_0: entered promiscuous mode [ 65.966462][ T5768] team0: Port device team_slave_1 added [ 65.989996][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.009530][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.016696][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.026353][ T5777] bridge_slave_1: entered allmulticast mode [ 66.033380][ T5777] bridge_slave_1: entered promiscuous mode [ 66.086200][ T5771] team0: Port device team_slave_0 added [ 66.094032][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.101207][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.127514][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.155294][ T5771] team0: Port device team_slave_1 added [ 66.171371][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.179115][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.205748][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.226016][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.249379][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.256366][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.283161][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.305122][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.334187][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.343609][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.372349][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.384248][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.391651][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.398990][ T5775] bridge_slave_0: entered allmulticast mode [ 66.405784][ T5775] bridge_slave_0: entered promiscuous mode [ 66.428045][ T5777] team0: Port device team_slave_0 added [ 66.447693][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.454943][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.462506][ T5775] bridge_slave_1: entered allmulticast mode [ 66.470389][ T5775] bridge_slave_1: entered promiscuous mode [ 66.485367][ T5777] team0: Port device team_slave_1 added [ 66.516496][ T5768] hsr_slave_0: entered promiscuous mode [ 66.522883][ T5768] hsr_slave_1: entered promiscuous mode [ 66.555936][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.565693][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.572899][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.599784][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.635245][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.645101][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.652244][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.678615][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.703312][ T5771] hsr_slave_0: entered promiscuous mode [ 66.709830][ T5771] hsr_slave_1: entered promiscuous mode [ 66.716045][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.724559][ T5771] Cannot create hsr debugfs directory [ 66.774112][ T5775] team0: Port device team_slave_0 added [ 66.783049][ T5775] team0: Port device team_slave_1 added [ 66.835382][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.842600][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.870158][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.912041][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.920294][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.947102][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.967159][ T5777] hsr_slave_0: entered promiscuous mode [ 66.975572][ T5777] hsr_slave_1: entered promiscuous mode [ 66.981943][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.990804][ T51] Bluetooth: hci0: command tx timeout [ 66.996616][ T5777] Cannot create hsr debugfs directory [ 67.069043][ T51] Bluetooth: hci1: command tx timeout [ 67.142998][ T5775] hsr_slave_0: entered promiscuous mode [ 67.148967][ T51] Bluetooth: hci2: command tx timeout [ 67.156458][ T5775] hsr_slave_1: entered promiscuous mode [ 67.163295][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.171363][ T5775] Cannot create hsr debugfs directory [ 67.239326][ T51] Bluetooth: hci3: command tx timeout [ 67.392521][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.404925][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.416091][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.426504][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.493157][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.502765][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.533264][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.543282][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.595593][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.619102][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.636294][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.683503][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.707934][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.732932][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.742807][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.763795][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.894762][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.922734][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.947744][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.975401][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.988256][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.002845][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.010496][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.042193][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.049419][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.058426][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.065707][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.092562][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.099846][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.124845][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.136957][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.168305][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.175533][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.222258][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.252705][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.259883][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.271775][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.278984][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.318462][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.325665][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.423995][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.763445][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.776602][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.899961][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.912630][ T5771] veth0_vlan: entered promiscuous mode [ 68.930429][ T5771] veth1_vlan: entered promiscuous mode [ 68.954336][ T5768] veth0_vlan: entered promiscuous mode [ 68.983232][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.998126][ T5768] veth1_vlan: entered promiscuous mode [ 69.035108][ T5771] veth0_macvtap: entered promiscuous mode [ 69.063783][ T5771] veth1_macvtap: entered promiscuous mode [ 69.072167][ T51] Bluetooth: hci0: command tx timeout [ 69.088363][ T5777] veth0_vlan: entered promiscuous mode [ 69.113911][ T5777] veth1_vlan: entered promiscuous mode [ 69.144265][ T5768] veth0_macvtap: entered promiscuous mode [ 69.150639][ T51] Bluetooth: hci1: command tx timeout [ 69.169170][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.180706][ T5768] veth1_macvtap: entered promiscuous mode [ 69.195739][ T5775] veth0_vlan: entered promiscuous mode [ 69.206394][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.232049][ T51] Bluetooth: hci2: command tx timeout [ 69.233411][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.248481][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.258167][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.267842][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.292417][ T5775] veth1_vlan: entered promiscuous mode [ 69.314114][ T5777] veth0_macvtap: entered promiscuous mode [ 69.320162][ T51] Bluetooth: hci3: command tx timeout [ 69.328379][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.340560][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.353878][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.364371][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.375298][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.387333][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.400453][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.409877][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.418568][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.427777][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.463345][ T5777] veth1_macvtap: entered promiscuous mode [ 69.555976][ T5775] veth0_macvtap: entered promiscuous mode [ 69.567179][ T5775] veth1_macvtap: entered promiscuous mode [ 69.586085][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.597577][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.601343][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.621589][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.632170][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.643054][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.654299][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.692821][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.703585][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.717433][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.729063][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.740243][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.757529][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.769229][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.784057][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.796029][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.807349][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.817853][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.829237][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.848292][ T5030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.856271][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.856305][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.856329][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.856352][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.895321][ T5030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.908704][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.920158][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.931060][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.941649][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.954312][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.966873][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.979896][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.992907][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.002228][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.011417][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.026205][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.084371][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.093178][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.232900][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.248650][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.291328][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.313445][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.346162][ T5826] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 70.368504][ T5826] geneve0: entered promiscuous mode [ 70.410345][ T5826] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 70.506469][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.530156][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.603224][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.658446][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.658979][ T5826] syz.3.4 (5826) used greatest stack depth: 18984 bytes left [ 70.718747][ C0] hrtimer: interrupt took 37534 ns [ 70.822262][ T3426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.833019][ T3426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.007857][ T5833] netlink: 'syz.0.1': attribute type 19 has an invalid length. [ 71.031776][ T5833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 71.051791][ T5837] netlink: 'syz.2.6': attribute type 13 has an invalid length. [ 71.066249][ T5837] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6'. [ 71.069204][ T5835] Zero length message leads to an empty skb [ 71.109838][ T5837] erspan0: refused to change device tx_queue_len [ 71.131948][ T5837] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 71.155841][ T51] Bluetooth: hci0: command tx timeout [ 71.231767][ T51] Bluetooth: hci1: command tx timeout [ 71.262335][ T5840] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 71.309677][ T51] Bluetooth: hci2: command tx timeout [ 71.392627][ T51] Bluetooth: hci3: command tx timeout [ 71.523438][ T5840] veth0_macvtap: left promiscuous mode [ 71.639357][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.646214][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.378201][ T5842] netlink: 'syz.0.7': attribute type 10 has an invalid length. [ 72.436563][ T5842] team0: Device ipvlan1 failed to register rx_handler [ 72.646638][ T5851] syzkaller0: entered promiscuous mode [ 72.652346][ T5851] syzkaller0: entered allmulticast mode [ 72.714900][ T5842] syz.0.7 (5842) used greatest stack depth: 18248 bytes left [ 72.953985][ T5855] sit0: entered promiscuous mode [ 73.230456][ T51] Bluetooth: hci0: command tx timeout [ 73.309596][ T51] Bluetooth: hci1: command tx timeout [ 73.388993][ T51] Bluetooth: hci2: command tx timeout [ 73.469463][ T51] Bluetooth: hci3: command tx timeout [ 73.505544][ T5868] warning: `syz.1.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.556523][ T5859] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 73.574659][ T5859] netlink: 69948 bytes leftover after parsing attributes in process `syz.0.11'. [ 73.594937][ T5859] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11'. [ 73.946827][ T5876] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 74.092699][ T5878] netlink: 'syz.3.17': attribute type 21 has an invalid length. [ 74.113833][ T5878] netlink: 128 bytes leftover after parsing attributes in process `syz.3.17'. [ 74.126454][ T5878] netlink: 'syz.3.17': attribute type 5 has an invalid length. [ 74.149223][ T5878] netlink: 3 bytes leftover after parsing attributes in process `syz.3.17'. [ 74.479723][ T5878] Illegal XDP return value 4294967283 on prog (id 19) dev N/A, expect packet loss! [ 75.139760][ T5910] syzkaller0: entered promiscuous mode [ 75.145508][ T5910] syzkaller0: entered allmulticast mode [ 75.167750][ T5913] netlink: 'syz.2.23': attribute type 21 has an invalid length. [ 75.249243][ T5916] netlink: 'syz.2.23': attribute type 10 has an invalid length. [ 75.327220][ T5916] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.355369][ T5916] bond0: (slave team0): Enslaving as an active interface with an up link [ 77.164688][ T5938] sit0: entered promiscuous mode [ 77.499588][ T5942] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 77.575875][ T5942] team0: Device ipvlan1 failed to register rx_handler [ 77.834557][ T5951] netlink: 'syz.0.35': attribute type 21 has an invalid length. [ 77.848227][ T5951] netlink: 128 bytes leftover after parsing attributes in process `syz.0.35'. [ 77.877947][ T5951] netlink: 'syz.0.35': attribute type 5 has an invalid length. [ 77.897659][ T5951] netlink: 3 bytes leftover after parsing attributes in process `syz.0.35'. [ 79.305877][ T5962] syzkaller0: entered promiscuous mode [ 79.317832][ T5962] syzkaller0: entered allmulticast mode [ 79.667620][ T5977] syzkaller0: entered promiscuous mode [ 79.673338][ T5977] syzkaller0: entered allmulticast mode [ 79.695923][ T5981] netlink: 'syz.3.43': attribute type 13 has an invalid length. [ 79.704495][ T5981] netlink: 152 bytes leftover after parsing attributes in process `syz.3.43'. [ 79.719328][ T5981] erspan0: refused to change device tx_queue_len [ 79.727411][ T5981] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 80.000208][ T5986] netlink: 'syz.1.44': attribute type 10 has an invalid length. [ 80.012185][ T5986] geneve0: entered promiscuous mode [ 80.046532][ T5986] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 80.466187][ T5999] netlink: 'syz.2.47': attribute type 10 has an invalid length. [ 80.521190][ T5999] veth0_macvtap: left promiscuous mode [ 81.009305][ T6013] syzkaller0: entered promiscuous mode [ 81.015036][ T6013] syzkaller0: entered allmulticast mode [ 82.888912][ T6028] netlink: 'syz.2.57': attribute type 10 has an invalid length. [ 82.898635][ T6028] geneve0: entered promiscuous mode [ 82.925147][ T6028] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 83.333379][ T6046] netlink: 'syz.0.71': attribute type 21 has an invalid length. [ 83.356066][ T6046] netlink: 168 bytes leftover after parsing attributes in process `syz.0.71'. [ 83.371448][ T6045] netlink: 'syz.3.65': attribute type 10 has an invalid length. [ 83.405584][ T6045] veth0_macvtap: left promiscuous mode [ 83.671003][ T6046] netlink: 'syz.0.71': attribute type 10 has an invalid length. [ 83.699528][ T6046] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.711472][ T6046] bond0: (slave team0): Enslaving as an active interface with an up link [ 84.074361][ T6063] netlink: 'syz.2.70': attribute type 13 has an invalid length. [ 84.087639][ T6063] netlink: 152 bytes leftover after parsing attributes in process `syz.2.70'. [ 84.113642][ T6063] erspan0: refused to change device tx_queue_len [ 84.133787][ T6063] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 84.674875][ T6069] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 84.692357][ T6069] netlink: 69948 bytes leftover after parsing attributes in process `syz.3.74'. [ 84.703438][ T6069] netlink: 9 bytes leftover after parsing attributes in process `syz.3.74'. [ 84.865343][ T6085] netlink: 'syz.0.80': attribute type 10 has an invalid length. [ 84.914881][ T6085] veth0_macvtap: left promiscuous mode [ 86.203412][ T6089] netlink: 'syz.2.82': attribute type 21 has an invalid length. [ 86.217041][ T6089] netlink: 168 bytes leftover after parsing attributes in process `syz.2.82'. [ 86.239523][ T6097] netlink: 'syz.2.82': attribute type 10 has an invalid length. [ 86.326739][ T6087] netlink: 'syz.1.90': attribute type 10 has an invalid length. [ 86.360599][ T6087] team0: Device ipvlan1 failed to register rx_handler [ 87.000380][ T788] cfg80211: failed to load regulatory.db [ 87.386808][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.421868][ T6122] netlink: 69948 bytes leftover after parsing attributes in process `syz.2.92'. [ 87.434852][ T6132] bond0: (slave team0): Enslaving as an active interface with an up link [ 87.456381][ T6122] netlink: 9 bytes leftover after parsing attributes in process `syz.2.92'. [ 88.219421][ T6138] validate_nla: 3 callbacks suppressed [ 88.219435][ T6138] netlink: 'syz.2.97': attribute type 10 has an invalid length. [ 88.326377][ T6138] team0: Device ipvlan1 failed to register rx_handler [ 89.568054][ T6172] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 89.603581][ T6172] netlink: 69948 bytes leftover after parsing attributes in process `syz.1.107'. [ 89.678272][ T6172] netlink: 9 bytes leftover after parsing attributes in process `syz.1.107'. [ 89.847417][ T6176] netlink: 'syz.3.110': attribute type 10 has an invalid length. [ 90.023620][ T6176] team0: Device ipvlan1 failed to register rx_handler [ 90.229420][ T6183] netlink: 'syz.2.113': attribute type 10 has an invalid length. [ 90.265873][ T6183] team0: Device ipvlan1 failed to register rx_handler [ 90.641240][ T6193] syzkaller0: entered promiscuous mode [ 90.667870][ T6193] syzkaller0: entered allmulticast mode [ 94.452887][ T6317] sit0: entered promiscuous mode [ 95.365021][ T6347] sit0: entered promiscuous mode [ 96.479910][ T6360] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 96.781018][ T6360] team0: Device ipvlan1 failed to register rx_handler [ 97.736891][ T6398] netlink: 'syz.1.205': attribute type 21 has an invalid length. [ 97.802666][ T6405] netlink: 'syz.1.205': attribute type 10 has an invalid length. [ 97.898136][ T6405] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.952620][ T6405] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.052343][ T6428] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 99.123459][ T6428] team0: Device ipvlan1 failed to register rx_handler [ 99.287682][ T6435] netlink: 'syz.2.219': attribute type 21 has an invalid length. [ 99.359596][ T6426] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 99.408766][ T6426] team0: Device ipvlan1 failed to register rx_handler [ 99.565707][ T6435] netlink: 'syz.2.219': attribute type 10 has an invalid length. [ 100.306180][ T6468] netlink: 'syz.0.226': attribute type 21 has an invalid length. [ 100.331999][ T6468] netlink: 'syz.0.226': attribute type 10 has an invalid length. [ 100.922857][ T6471] netlink: 'syz.3.229': attribute type 10 has an invalid length. [ 100.952344][ T6471] team0: Device ipvlan1 failed to register rx_handler [ 101.342881][ T6471] syz.3.229 (6471) used greatest stack depth: 17992 bytes left [ 101.512089][ T6479] netlink: 'syz.1.232': attribute type 10 has an invalid length. [ 101.586794][ T6479] team0: Device ipvlan1 failed to register rx_handler [ 102.453283][ T6509] netlink: 'syz.3.241': attribute type 21 has an invalid length. [ 102.502558][ T6509] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 103.293169][ T6520] netlink: 'syz.1.245': attribute type 10 has an invalid length. [ 103.347846][ T6520] team0: Device ipvlan1 failed to register rx_handler [ 104.002353][ T6520] syz.1.245 (6520) used greatest stack depth: 17544 bytes left [ 104.713916][ T6557] netlink: 'syz.0.256': attribute type 21 has an invalid length. [ 104.752353][ T6557] netlink: 'syz.0.256': attribute type 10 has an invalid length. [ 105.718530][ T6568] netlink: 'syz.3.260': attribute type 10 has an invalid length. [ 105.750654][ T6568] team0: Device ipvlan1 failed to register rx_handler [ 107.128435][ T6602] netlink: 'syz.0.273': attribute type 21 has an invalid length. [ 107.172178][ T6602] netlink: 'syz.0.273': attribute type 10 has an invalid length. [ 108.192690][ T6630] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 108.256094][ T6630] team0: Device ipvlan1 failed to register rx_handler [ 109.270902][ T6657] netlink: 'syz.2.294': attribute type 21 has an invalid length. [ 109.311468][ T6657] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 111.047913][ T6708] netlink: 'syz.3.311': attribute type 10 has an invalid length. [ 112.199000][ T6716] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 112.404061][ T6716] team0: Device ipvlan1 failed to register rx_handler [ 113.313917][ T6750] netlink: 'syz.1.325': attribute type 10 has an invalid length. [ 113.522797][ T6748] netlink: 'syz.0.332': attribute type 10 has an invalid length. [ 113.545530][ T6748] team0: Device ipvlan1 failed to register rx_handler [ 115.090760][ T6792] netlink: 'syz.1.340': attribute type 10 has an invalid length. [ 115.277286][ T6790] netlink: 'syz.2.339': attribute type 10 has an invalid length. [ 115.318458][ T6790] team0: Device ipvlan1 failed to register rx_handler [ 116.664126][ T6833] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 116.828518][ T6833] team0: Device ipvlan1 failed to register rx_handler [ 118.292153][ T6881] netlink: 'syz.2.369': attribute type 21 has an invalid length. [ 118.329849][ T6882] netlink: 'syz.2.369': attribute type 10 has an invalid length. [ 118.476967][ T6874] netlink: 'syz.3.370': attribute type 10 has an invalid length. [ 118.507174][ T6874] team0: Device ipvlan1 failed to register rx_handler [ 119.314713][ T6900] netlink: 'syz.2.376': attribute type 21 has an invalid length. [ 119.323114][ T6905] netlink: 'syz.2.376': attribute type 10 has an invalid length. [ 121.034372][ T6950] netlink: 'syz.0.393': attribute type 21 has an invalid length. [ 121.071787][ T6950] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 122.664878][ T6990] netlink: 'syz.3.410': attribute type 21 has an invalid length. [ 122.701584][ T6990] netlink: 'syz.3.410': attribute type 10 has an invalid length. [ 124.352094][ T7032] netlink: 'syz.1.427': attribute type 21 has an invalid length. [ 124.462256][ T7032] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 125.884022][ T7075] netlink: 'syz.1.443': attribute type 21 has an invalid length. [ 125.949733][ T7075] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 126.926483][ T7104] netlink: 'syz.2.462': attribute type 10 has an invalid length. [ 127.937975][ T7119] netlink: 'syz.3.463': attribute type 10 has an invalid length. [ 128.021244][ T7119] team0: Device ipvlan1 failed to register rx_handler [ 129.877575][ T7161] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 129.920461][ T7161] team0: Device ipvlan1 failed to register rx_handler [ 131.311469][ T7182] netlink: 'syz.3.486': attribute type 10 has an invalid length. [ 131.329678][ T7182] team0: Device ipvlan1 failed to register rx_handler [ 131.860441][ T7189] netlink: 'syz.1.488': attribute type 10 has an invalid length. [ 131.959903][ T7189] team0: Device ipvlan1 failed to register rx_handler [ 132.292275][ T7195] netlink: 'syz.2.490': attribute type 10 has an invalid length. [ 133.099600][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.106157][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.106514][ T7214] netlink: 'syz.1.493': attribute type 10 has an invalid length. [ 133.165580][ T7214] team0: Device ipvlan1 failed to register rx_handler [ 134.034134][ T7228] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 134.077079][ T7228] team0: Device ipvlan1 failed to register rx_handler [ 134.736604][ T7244] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 135.520960][ T7263] netlink: 'syz.3.516': attribute type 10 has an invalid length. [ 135.696054][ T7263] team0: Device ipvlan1 failed to register rx_handler [ 136.164998][ T7285] netlink: 'syz.1.521': attribute type 21 has an invalid length. [ 137.443175][ T7300] netlink: 'syz.3.530': attribute type 10 has an invalid length. [ 137.529899][ T7300] team0: Device ipvlan1 failed to register rx_handler [ 137.795747][ T7308] netlink: 'syz.1.532': attribute type 10 has an invalid length. [ 137.835135][ T7308] team0: Device ipvlan1 failed to register rx_handler [ 138.656688][ T7316] netlink: 'syz.0.542': attribute type 10 has an invalid length. [ 138.680874][ T7316] team0: Device ipvlan1 failed to register rx_handler [ 139.394064][ T7341] netlink: 'syz.1.540': attribute type 21 has an invalid length. [ 140.791440][ T7361] netlink: 'syz.1.552': attribute type 10 has an invalid length. [ 140.933291][ T7361] team0: Device ipvlan1 failed to register rx_handler [ 144.999566][ T7397] netlink: 'syz.2.568': attribute type 10 has an invalid length. [ 145.053124][ T7397] team0: Device ipvlan1 failed to register rx_handler [ 147.033661][ T7431] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 147.304053][ T7431] team0: Device ipvlan1 failed to register rx_handler [ 147.540250][ T7437] netlink: 'syz.0.585': attribute type 21 has an invalid length. [ 148.640155][ T7474] netlink: 'syz.3.598': attribute type 21 has an invalid length. [ 150.506601][ T7508] netlink: 'syz.0.615': attribute type 21 has an invalid length. [ 151.582017][ T7526] netlink: 'syz.2.621': attribute type 10 has an invalid length. [ 151.616760][ T7526] team0: Device ipvlan1 failed to register rx_handler [ 154.160520][ T7579] netlink: 'syz.1.646': attribute type 10 has an invalid length. [ 154.293961][ T7579] team0: Device ipvlan1 failed to register rx_handler [ 154.487930][ T7572] netlink: 'syz.3.643': attribute type 10 has an invalid length. [ 154.738767][ T7572] team0: Device ipvlan1 failed to register rx_handler [ 155.553324][ T7600] netlink: 'syz.2.651': attribute type 21 has an invalid length. [ 156.684774][ T7616] netlink: 'syz.0.661': attribute type 10 has an invalid length. [ 156.706338][ T7616] team0: Device ipvlan1 failed to register rx_handler [ 156.810239][ T7614] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 156.847201][ T7614] team0: Device ipvlan1 failed to register rx_handler [ 158.218705][ T7648] netlink: 'syz.0.671': attribute type 21 has an invalid length. [ 159.020296][ T7654] netlink: 'syz.2.674': attribute type 10 has an invalid length. [ 159.056840][ T7654] team0: Device ipvlan1 failed to register rx_handler [ 160.471591][ T7685] netlink: 'syz.3.686': attribute type 21 has an invalid length. [ 161.449729][ T7697] netlink: 'syz.0.690': attribute type 10 has an invalid length. [ 161.567245][ T7697] team0: Device ipvlan1 failed to register rx_handler [ 162.643752][ T7730] netlink: 'syz.0.701': attribute type 21 has an invalid length. [ 163.659524][ T7734] netlink: 'syz.1.704': attribute type 10 has an invalid length. [ 163.683089][ T7734] team0: Device ipvlan1 failed to register rx_handler [ 164.788022][ T7742] netlink: 'syz.0.707': attribute type 10 has an invalid length. [ 164.880833][ T7742] team0: Device ipvlan1 failed to register rx_handler [ 165.537830][ T7767] netlink: 'syz.2.715': attribute type 21 has an invalid length. [ 167.255454][ T7812] netlink: 'syz.1.733': attribute type 21 has an invalid length. [ 168.831826][ T7852] netlink: 'syz.2.753': attribute type 21 has an invalid length. [ 170.470079][ T7896] netlink: 'syz.3.770': attribute type 21 has an invalid length. [ 171.546758][ T7907] netlink: 'syz.2.777': attribute type 10 has an invalid length. [ 171.571489][ T7907] team0: Device ipvlan1 failed to register rx_handler [ 173.401039][ T7939] netlink: 'syz.3.788': attribute type 21 has an invalid length. [ 174.373816][ T7953] netlink: 'syz.1.794': attribute type 10 has an invalid length. [ 174.396097][ T7953] team0: Device ipvlan1 failed to register rx_handler [ 176.215930][ T7994] netlink: 'syz.1.807': attribute type 21 has an invalid length. [ 177.696491][ T8000] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 177.743646][ T8000] team0: Device ipvlan1 failed to register rx_handler [ 180.415145][ T8062] netlink: 'syz.1.838': attribute type 21 has an invalid length. [ 182.650104][ T8102] netlink: 'syz.0.855': attribute type 21 has an invalid length. [ 183.788458][ T8110] netlink: 'syz.3.859': attribute type 10 has an invalid length. [ 183.941993][ T8110] team0: Device ipvlan1 failed to register rx_handler [ 186.785133][ T8162] netlink: 'syz.2.884': attribute type 10 has an invalid length. [ 186.896091][ T8162] team0: Device ipvlan1 failed to register rx_handler [ 187.396159][ T8166] netlink: 'syz.0.883': attribute type 10 has an invalid length. [ 187.514760][ T8166] team0: Device ipvlan1 failed to register rx_handler [ 187.689731][ T8171] netlink: 'syz.1.886': attribute type 10 has an invalid length. [ 187.716074][ T8171] team0: Device ipvlan1 failed to register rx_handler [ 189.489016][ T8215] netlink: 'syz.0.902': attribute type 21 has an invalid length. [ 191.113042][ T8246] netlink: 'syz.1.915': attribute type 10 has an invalid length. [ 191.183456][ T8246] team0: Device ipvlan1 failed to register rx_handler [ 191.470312][ T8222] Bluetooth: hci1: command 0x0406 tx timeout [ 191.476390][ T8222] Bluetooth: hci0: command 0x0406 tx timeout [ 191.483326][ T8222] Bluetooth: hci2: command 0x0406 tx timeout [ 191.489354][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 191.624279][ T8268] netlink: 'syz.2.920': attribute type 21 has an invalid length. [ 192.596174][ T8291] netlink: 'syz.1.937': attribute type 21 has an invalid length. [ 192.782441][ T8296] netlink: 'syz.1.937': attribute type 10 has an invalid length. [ 193.076898][ T8289] netlink: 'syz.2.929': attribute type 10 has an invalid length. [ 193.114907][ T8289] team0: Device ipvlan1 failed to register rx_handler [ 193.417423][ T8288] netlink: 'syz.0.930': attribute type 10 has an invalid length. [ 193.434636][ T8288] team0: Device ipvlan1 failed to register rx_handler [ 194.296237][ T8325] netlink: 'syz.3.941': attribute type 21 has an invalid length. [ 194.329720][ T8325] netlink: 'syz.3.941': attribute type 10 has an invalid length. [ 194.518705][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.525717][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.957646][ T8330] netlink: 'syz.2.945': attribute type 10 has an invalid length. [ 195.001001][ T8330] team0: Device ipvlan1 failed to register rx_handler [ 196.092961][ T8361] netlink: 'syz.0.956': attribute type 21 has an invalid length. [ 196.138311][ T8361] netlink: 'syz.0.956': attribute type 10 has an invalid length. [ 196.467316][ T8357] netlink: 'syz.3.955': attribute type 10 has an invalid length. [ 196.496769][ T8357] team0: Device ipvlan1 failed to register rx_handler [ 197.056482][ T8357] syz.3.955 (8357) used greatest stack depth: 16968 bytes left [ 197.328979][ T8371] netlink: 'syz.0.960': attribute type 10 has an invalid length. [ 197.346275][ T8371] team0: Device ipvlan1 failed to register rx_handler [ 198.119000][ T8394] netlink: 'syz.1.968': attribute type 21 has an invalid length. [ 198.148308][ T8394] netlink: 'syz.1.968': attribute type 10 has an invalid length. [ 198.780586][ T8406] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 198.810131][ T8406] team0: Device ipvlan1 failed to register rx_handler [ 200.321025][ T8419] netlink: 'syz.0.978': attribute type 10 has an invalid length. [ 200.465489][ T8419] team0: Device ipvlan1 failed to register rx_handler [ 203.797731][ T8436] netlink: 'syz.0.986': attribute type 10 has an invalid length. [ 203.848061][ T8436] team0: Device ipvlan1 failed to register rx_handler [ 204.500606][ T8457] netlink: 'syz.0.993': attribute type 21 has an invalid length. [ 204.533000][ T8457] netlink: 'syz.0.993': attribute type 10 has an invalid length. [ 205.943729][ T8476] netlink: 'syz.2.1002': attribute type 10 has an invalid length. [ 206.062686][ T8476] team0: Device ipvlan1 failed to register rx_handler [ 206.913941][ T8496] netlink: 'syz.3.1009': attribute type 21 has an invalid length. [ 206.956056][ T8496] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 208.333817][ T8518] netlink: 'syz.0.1018': attribute type 10 has an invalid length. [ 208.532301][ T8518] team0: Device ipvlan1 failed to register rx_handler [ 209.191535][ T8542] netlink: 'syz.3.1025': attribute type 21 has an invalid length. [ 209.246894][ T8542] netlink: 'syz.3.1025': attribute type 10 has an invalid length. [ 210.218168][ T8560] netlink: 'syz.2.1033': attribute type 10 has an invalid length. [ 210.229008][ T8560] team0: Device ipvlan1 failed to register rx_handler [ 215.626607][ T8669] TCP: out of memory -- consider tuning tcp_mem [ 215.628807][ C1] TCP: out of memory -- consider tuning tcp_mem [ 216.098423][ T8678] TCP: out of memory -- consider tuning tcp_mem [ 216.107242][ T8682] TCP: out of memory -- consider tuning tcp_mem [ 216.115603][ C1] TCP: out of memory -- consider tuning tcp_mem [ 216.116437][ T8681] TCP: out of memory -- consider tuning tcp_mem [ 216.325754][ T8693] netlink: 'syz.3.1092': attribute type 21 has an invalid length. [ 216.384520][ T8687] netlink: 'syz.3.1092': attribute type 10 has an invalid length. [ 216.485246][ T8696] TCP: out of memory -- consider tuning tcp_mem [ 216.590535][ T8698] TCP: out of memory -- consider tuning tcp_mem [ 216.668760][ C1] TCP: out of memory -- consider tuning tcp_mem [ 216.970855][ T8706] TCP: out of memory -- consider tuning tcp_mem [ 217.843496][ T8735] netlink: 'syz.0.1113': attribute type 21 has an invalid length. [ 217.855306][ T8735] netlink: 'syz.0.1113': attribute type 10 has an invalid length. [ 219.383479][ T8779] netlink: 'syz.2.1133': attribute type 21 has an invalid length. [ 219.413885][ T8779] netlink: 'syz.2.1133': attribute type 10 has an invalid length. [ 221.208614][ T8825] netlink: 'syz.1.1154': attribute type 21 has an invalid length. [ 221.270948][ T8825] netlink: 'syz.1.1154': attribute type 10 has an invalid length. [ 221.607831][ T8834] net_ratelimit: 25 callbacks suppressed [ 221.607850][ T8834] TCP: out of memory -- consider tuning tcp_mem [ 221.619755][ T8832] TCP: out of memory -- consider tuning tcp_mem [ 221.776136][ T8838] TCP: out of memory -- consider tuning tcp_mem [ 222.028766][ C1] TCP: out of memory -- consider tuning tcp_mem [ 222.036992][ T8842] TCP: out of memory -- consider tuning tcp_mem [ 222.246605][ T8847] TCP: out of memory -- consider tuning tcp_mem [ 222.385754][ T8856] TCP: out of memory -- consider tuning tcp_mem [ 222.532838][ T8854] TCP: out of memory -- consider tuning tcp_mem [ 222.545429][ T8860] TCP: out of memory -- consider tuning tcp_mem [ 222.588785][ C1] TCP: out of memory -- consider tuning tcp_mem [ 222.657564][ T8865] netlink: 'syz.0.1173': attribute type 21 has an invalid length. [ 222.689967][ T8865] netlink: 'syz.0.1173': attribute type 10 has an invalid length. [ 224.168500][ T8913] netlink: 'syz.1.1193': attribute type 21 has an invalid length. [ 224.249124][ T8915] netlink: 'syz.1.1193': attribute type 10 has an invalid length. [ 224.888709][ T8930] netlink: 'syz.2.1202': attribute type 10 has an invalid length. [ 224.912220][ T8930] team0: Device ipvlan1 failed to register rx_handler [ 225.971089][ T8960] netlink: 'syz.3.1213': attribute type 21 has an invalid length. [ 226.000141][ T8960] netlink: 'syz.3.1213': attribute type 10 has an invalid length. [ 226.795227][ T8963] netlink: 'syz.1.1216': attribute type 10 has an invalid length. [ 226.951908][ T8963] team0: Device ipvlan1 failed to register rx_handler [ 227.443384][ T8977] net_ratelimit: 18 callbacks suppressed [ 227.443400][ T8977] TCP: out of memory -- consider tuning tcp_mem [ 227.469005][ C1] TCP: out of memory -- consider tuning tcp_mem [ 227.477280][ T8980] TCP: out of memory -- consider tuning tcp_mem [ 227.902747][ T8994] netlink: 'syz.2.1227': attribute type 21 has an invalid length. [ 227.942867][ T8988] TCP: out of memory -- consider tuning tcp_mem [ 227.948881][ C1] TCP: out of memory -- consider tuning tcp_mem [ 227.950756][ C0] TCP: out of memory -- consider tuning tcp_mem [ 227.983902][ T8991] netlink: 'syz.2.1227': attribute type 10 has an invalid length. [ 228.323096][ T9004] TCP: out of memory -- consider tuning tcp_mem [ 228.325907][ T9002] TCP: out of memory -- consider tuning tcp_mem [ 228.419129][ C1] TCP: out of memory -- consider tuning tcp_mem [ 228.429570][ C0] TCP: out of memory -- consider tuning tcp_mem [ 228.842908][ T9007] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 228.958788][ T9007] team0: Device ipvlan1 failed to register rx_handler [ 229.821809][ T9036] netlink: 'syz.3.1244': attribute type 21 has an invalid length. [ 229.851004][ T9036] netlink: 'syz.3.1244': attribute type 10 has an invalid length. [ 230.546794][ T9050] netlink: 'syz.2.1250': attribute type 10 has an invalid length. [ 230.635703][ T9050] team0: Device ipvlan1 failed to register rx_handler [ 231.038085][ T9061] netlink: 'syz.1.1260': attribute type 21 has an invalid length. [ 231.054995][ T9062] netlink: 'syz.1.1260': attribute type 10 has an invalid length. [ 231.733995][ T9086] netlink: 'syz.0.1269': attribute type 21 has an invalid length. [ 231.813284][ T9086] netlink: 'syz.0.1269': attribute type 10 has an invalid length. [ 232.576499][ T9096] team0: Device ipvlan1 failed to register rx_handler [ 233.801335][ T9113] validate_nla: 1 callbacks suppressed [ 233.801353][ T9113] netlink: 'syz.3.1271': attribute type 10 has an invalid length. [ 233.882284][ T9113] team0: Device ipvlan1 failed to register rx_handler [ 234.361189][ T9135] netlink: 'syz.1.1276': attribute type 21 has an invalid length. [ 234.397003][ T9135] netlink: 'syz.1.1276': attribute type 10 has an invalid length. [ 234.455920][ T9132] net_ratelimit: 7 callbacks suppressed [ 234.455936][ T9132] TCP: out of memory -- consider tuning tcp_mem [ 234.614409][ T9139] TCP: out of memory -- consider tuning tcp_mem [ 234.615520][ T9142] TCP: out of memory -- consider tuning tcp_mem [ 234.945742][ T9150] TCP: out of memory -- consider tuning tcp_mem [ 234.947316][ T9148] TCP: out of memory -- consider tuning tcp_mem [ 235.068773][ C0] TCP: out of memory -- consider tuning tcp_mem [ 235.960144][ T9170] netlink: 'syz.2.1289': attribute type 10 has an invalid length. [ 236.018275][ T9170] team0: Device ipvlan1 failed to register rx_handler [ 236.637558][ T9193] netlink: 'syz.3.1296': attribute type 21 has an invalid length. [ 236.651549][ T9193] netlink: 'syz.3.1296': attribute type 10 has an invalid length. [ 238.957329][ T9241] netlink: 'syz.1.1319': attribute type 21 has an invalid length. [ 239.006176][ T9241] netlink: 'syz.1.1319': attribute type 10 has an invalid length. [ 240.753448][ T9278] netlink: 'syz.1.1332': attribute type 21 has an invalid length. [ 240.785094][ T9278] netlink: 'syz.1.1332': attribute type 10 has an invalid length. [ 242.098809][ C0] TCP: out of memory -- consider tuning tcp_mem [ 242.106896][ T9307] TCP: out of memory -- consider tuning tcp_mem [ 242.443683][ T9317] TCP: out of memory -- consider tuning tcp_mem [ 242.453288][ T9320] netlink: 'syz.0.1353': attribute type 21 has an invalid length. [ 242.465855][ T9320] netlink: 'syz.0.1353': attribute type 10 has an invalid length. [ 242.508766][ C1] TCP: out of memory -- consider tuning tcp_mem [ 242.861701][ T9329] TCP: out of memory -- consider tuning tcp_mem [ 242.989051][ C1] TCP: out of memory -- consider tuning tcp_mem [ 243.205165][ T9333] TCP: out of memory -- consider tuning tcp_mem [ 243.208484][ T9334] TCP: out of memory -- consider tuning tcp_mem [ 243.467499][ T9339] TCP: out of memory -- consider tuning tcp_mem [ 243.608387][ T9345] TCP: out of memory -- consider tuning tcp_mem [ 244.134541][ T9359] netlink: 'syz.1.1371': attribute type 21 has an invalid length. [ 244.161789][ T9359] netlink: 'syz.1.1371': attribute type 10 has an invalid length. [ 245.668622][ T9408] netlink: 'syz.1.1392': attribute type 21 has an invalid length. [ 245.763823][ T9408] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 246.202834][ T9407] netlink: 'syz.3.1394': attribute type 10 has an invalid length. [ 246.220099][ T9407] team0: Device ipvlan1 failed to register rx_handler [ 247.489935][ T9433] net_ratelimit: 13 callbacks suppressed [ 247.489949][ T9433] TCP: out of memory -- consider tuning tcp_mem [ 247.541948][ T9435] TCP: out of memory -- consider tuning tcp_mem [ 247.548854][ C1] TCP: out of memory -- consider tuning tcp_mem [ 247.629001][ C1] TCP: out of memory -- consider tuning tcp_mem [ 247.662225][ T9444] netlink: 'syz.2.1406': attribute type 21 has an invalid length. [ 247.699618][ T9444] netlink: 'syz.2.1406': attribute type 10 has an invalid length. [ 248.115454][ T9451] TCP: out of memory -- consider tuning tcp_mem [ 248.331481][ T9453] TCP: out of memory -- consider tuning tcp_mem [ 248.617493][ T9461] TCP: out of memory -- consider tuning tcp_mem [ 248.659688][ C0] TCP: out of memory -- consider tuning tcp_mem [ 248.932125][ T9473] TCP: out of memory -- consider tuning tcp_mem [ 248.940025][ C1] TCP: out of memory -- consider tuning tcp_mem [ 249.123286][ T9482] netlink: 'syz.3.1423': attribute type 21 has an invalid length. [ 249.134938][ T9482] netlink: 'syz.3.1423': attribute type 10 has an invalid length. [ 250.633745][ T9527] netlink: 'syz.0.1444': attribute type 21 has an invalid length. [ 250.678314][ T9527] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 252.285208][ T9573] netlink: 'syz.3.1465': attribute type 21 has an invalid length. [ 252.301928][ T9573] netlink: 'syz.3.1465': attribute type 10 has an invalid length. [ 252.829098][ C0] net_ratelimit: 15 callbacks suppressed [ 252.829129][ C0] TCP: out of memory -- consider tuning tcp_mem [ 252.831226][ T9586] TCP: out of memory -- consider tuning tcp_mem [ 252.911500][ T9588] TCP: out of memory -- consider tuning tcp_mem [ 253.038794][ C0] TCP: out of memory -- consider tuning tcp_mem [ 253.325932][ T9597] TCP: out of memory -- consider tuning tcp_mem [ 253.331506][ T9600] TCP: out of memory -- consider tuning tcp_mem [ 253.488263][ T9595] TCP: out of memory -- consider tuning tcp_mem [ 253.647298][ T9604] TCP: out of memory -- consider tuning tcp_mem [ 253.852333][ T9612] TCP: out of memory -- consider tuning tcp_mem [ 253.994565][ T9614] TCP: out of memory -- consider tuning tcp_mem [ 255.992946][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.000627][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.458524][ T9732] net_ratelimit: 13 callbacks suppressed [ 258.458542][ T9732] TCP: out of memory -- consider tuning tcp_mem [ 258.475833][ T9730] TCP: out of memory -- consider tuning tcp_mem [ 258.513177][ T9736] TCP: out of memory -- consider tuning tcp_mem [ 258.773275][ T9740] TCP: out of memory -- consider tuning tcp_mem [ 259.069574][ C0] TCP: out of memory -- consider tuning tcp_mem [ 259.118886][ C1] TCP: out of memory -- consider tuning tcp_mem [ 259.158887][ C1] TCP: out of memory -- consider tuning tcp_mem [ 259.325151][ T9749] netlink: 'syz.3.1554': attribute type 10 has an invalid length. [ 259.506554][ T9749] team0: Device ipvlan1 failed to register rx_handler [ 259.545312][ T9757] TCP: out of memory -- consider tuning tcp_mem [ 259.556268][ T9759] TCP: out of memory -- consider tuning tcp_mem [ 259.866944][ T9766] TCP: out of memory -- consider tuning tcp_mem [ 260.892638][ T9791] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 260.966017][ T9791] team0: Device ipvlan1 failed to register rx_handler [ 262.621538][ T9838] netlink: 'syz.1.1590': attribute type 21 has an invalid length. [ 262.699115][ T9841] netlink: 'syz.1.1590': attribute type 10 has an invalid length. [ 263.467529][ T9852] netlink: 'syz.0.1602': attribute type 21 has an invalid length. [ 263.531852][ T9853] netlink: 'syz.0.1602': attribute type 10 has an invalid length. [ 265.251986][ T9896] netlink: 'syz.2.1614': attribute type 21 has an invalid length. [ 265.289359][ T9896] netlink: 'syz.2.1614': attribute type 10 has an invalid length. [ 265.708785][ C0] net_ratelimit: 8 callbacks suppressed [ 265.708803][ C0] TCP: out of memory -- consider tuning tcp_mem [ 266.136097][ T9919] netlink: 'syz.0.1632': attribute type 21 has an invalid length. [ 266.188785][ C0] TCP: out of memory -- consider tuning tcp_mem [ 266.189254][ C1] TCP: out of memory -- consider tuning tcp_mem [ 266.218069][ T9919] netlink: 'syz.0.1632': attribute type 10 has an invalid length. [ 266.379518][ T9915] netlink: 'syz.3.1625': attribute type 10 has an invalid length. [ 266.557385][ T9915] team0: Device ipvlan1 failed to register rx_handler [ 267.872148][ T9948] netlink: 'syz.1.1638': attribute type 21 has an invalid length. [ 267.901608][ T9948] netlink: 'syz.1.1638': attribute type 10 has an invalid length. [ 268.867275][ T9965] netlink: 'syz.0.1645': attribute type 10 has an invalid length. [ 269.072759][ T9965] team0: Device ipvlan1 failed to register rx_handler [ 269.262658][ T9977] TCP: out of memory -- consider tuning tcp_mem [ 269.298803][ C1] TCP: out of memory -- consider tuning tcp_mem [ 269.564500][ T9988] TCP: out of memory -- consider tuning tcp_mem [ 269.578834][ C1] TCP: out of memory -- consider tuning tcp_mem [ 269.594833][ T9985] TCP: out of memory -- consider tuning tcp_mem [ 269.628793][ C0] TCP: out of memory -- consider tuning tcp_mem [ 269.727830][ T9998] netlink: 'syz.2.1657': attribute type 21 has an invalid length. [ 269.788361][ T9998] netlink: 'syz.2.1657': attribute type 10 has an invalid length. [ 270.121029][T10005] TCP: out of memory -- consider tuning tcp_mem [ 270.503735][T10011] netlink: 'syz.0.1665': attribute type 10 has an invalid length. [ 270.518634][T10011] team0: Device ipvlan1 failed to register rx_handler [ 271.152917][T10016] net_ratelimit: 1 callbacks suppressed [ 271.152935][T10016] TCP: out of memory -- consider tuning tcp_mem [ 271.228835][ C1] TCP: out of memory -- consider tuning tcp_mem [ 272.011575][T10038] netlink: 'syz.0.1675': attribute type 21 has an invalid length. [ 272.040631][T10038] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 272.545026][T10040] netlink: 'syz.3.1677': attribute type 10 has an invalid length. [ 272.563171][T10040] team0: Device ipvlan1 failed to register rx_handler [ 273.707355][T10070] netlink: 'syz.2.1689': attribute type 21 has an invalid length. [ 273.751493][T10070] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 275.406390][T10110] netlink: 'syz.0.1709': attribute type 21 has an invalid length. [ 275.436254][T10110] netlink: 'syz.0.1709': attribute type 10 has an invalid length. [ 276.021571][T10121] netlink: 'syz.2.1713': attribute type 10 has an invalid length. [ 276.044232][T10121] team0: Device ipvlan1 failed to register rx_handler [ 276.976541][T10134] netlink: 'syz.3.1717': attribute type 10 has an invalid length. [ 277.041503][T10134] team0: Device ipvlan1 failed to register rx_handler [ 277.507971][T10157] netlink: 'syz.2.1724': attribute type 21 has an invalid length. [ 277.595464][T10160] netlink: 'syz.2.1724': attribute type 10 has an invalid length. [ 278.035886][T10156] netlink: 'syz.0.1727': attribute type 10 has an invalid length. [ 278.084456][T10156] team0: Device ipvlan1 failed to register rx_handler [ 279.184535][T10183] netlink: 'syz.0.1736': attribute type 10 has an invalid length. [ 279.346030][T10183] team0: Device ipvlan1 failed to register rx_handler [ 279.506812][T10194] netlink: 'syz.3.1738': attribute type 21 has an invalid length. [ 279.526762][T10197] netlink: 'syz.3.1738': attribute type 10 has an invalid length. [ 280.860175][T10239] netlink: 'syz.1.1757': attribute type 21 has an invalid length. [ 280.912688][T10239] netlink: 'syz.1.1757': attribute type 10 has an invalid length. [ 281.188538][T10246] TCP: out of memory -- consider tuning tcp_mem [ 281.388808][ C0] TCP: out of memory -- consider tuning tcp_mem [ 282.675214][T10279] netlink: 'syz.3.1775': attribute type 21 has an invalid length. [ 282.729184][T10284] netlink: 'syz.3.1775': attribute type 10 has an invalid length. [ 284.296170][T10322] netlink: 'syz.1.1796': attribute type 21 has an invalid length. [ 284.320765][T10322] netlink: 'syz.1.1796': attribute type 10 has an invalid length. [ 285.283639][T10352] TCP: out of memory -- consider tuning tcp_mem [ 285.319243][ C1] TCP: out of memory -- consider tuning tcp_mem [ 285.682223][T10360] TCP: out of memory -- consider tuning tcp_mem [ 285.690790][T10365] TCP: out of memory -- consider tuning tcp_mem [ 285.698506][T10362] TCP: out of memory -- consider tuning tcp_mem [ 285.717705][T10364] TCP: out of memory -- consider tuning tcp_mem [ 285.738871][ C1] TCP: out of memory -- consider tuning tcp_mem [ 285.972670][T10378] netlink: 'syz.3.1818': attribute type 21 has an invalid length. [ 286.000898][T10378] netlink: 'syz.3.1818': attribute type 10 has an invalid length. [ 286.388590][T10387] TCP: out of memory -- consider tuning tcp_mem [ 286.417425][T10388] TCP: out of memory -- consider tuning tcp_mem [ 286.429493][ C1] TCP: out of memory -- consider tuning tcp_mem [ 286.518902][ C1] TCP: out of memory -- consider tuning tcp_mem [ 286.519788][T10391] TCP: out of memory -- consider tuning tcp_mem [ 287.565952][T10422] netlink: 'syz.0.1841': attribute type 21 has an invalid length. [ 287.598013][T10422] netlink: 'syz.0.1841': attribute type 10 has an invalid length. [ 289.335829][T10474] netlink: 'syz.2.1862': attribute type 21 has an invalid length. [ 289.376608][T10474] netlink: 'syz.2.1862': attribute type 10 has an invalid length. [ 290.759432][ C0] TCP: out of memory -- consider tuning tcp_mem [ 290.967226][T10523] netlink: 'syz.0.1886': attribute type 21 has an invalid length. [ 291.016036][T10523] netlink: 'syz.0.1886': attribute type 10 has an invalid length. [ 291.293905][T10530] TCP: out of memory -- consider tuning tcp_mem [ 291.299164][T10528] TCP: out of memory -- consider tuning tcp_mem [ 291.308864][ C0] TCP: out of memory -- consider tuning tcp_mem [ 291.628848][ C0] TCP: out of memory -- consider tuning tcp_mem [ 298.822447][T10703] netlink: 'syz.1.1976': attribute type 10 has an invalid length. [ 298.911126][T10703] team0: Device ipvlan1 failed to register rx_handler [ 407.018751][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 407.025412][ C0] rcu: 0-...!: (10814 ticks this GP) idle=4e24/1/0x4000000000000000 softirq=34693/34699 fqs=26 [ 407.036941][ C0] rcu: (t=10501 jiffies g=47089 q=405 ncpus=2) [ 407.043205][ C0] rcu: rcu_preempt kthread starved for 9995 jiffies! g47089 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 407.054349][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 407.064337][ C0] rcu: RCU grace-period kthread stack dump: [ 407.070250][ C0] task:rcu_preempt state:R running task stack:26952 pid:17 ppid:2 flags:0x00004000 [ 407.081161][ C0] Call Trace: [ 407.084457][ C0] [ 407.087418][ C0] __schedule+0x1553/0x45a0 [ 407.091984][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 407.097909][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 407.103831][ C0] ? asan.module_dtor+0x20/0x20 [ 407.108706][ C0] ? enqueue_timer+0x23d/0x550 [ 407.113497][ C0] ? __mod_timer+0x984/0xdb0 [ 407.118125][ C0] schedule+0xbd/0x170 [ 407.122221][ C0] schedule_timeout+0x188/0x2d0 [ 407.127097][ C0] ? console_conditional_schedule+0x40/0x40 [ 407.133102][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 407.139024][ C0] ? update_process_times+0x1b0/0x1b0 [ 407.144425][ C0] ? prepare_to_swait_event+0x339/0x360 [ 407.150008][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 407.154898][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 407.161159][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 407.166395][ C0] ? rcu_gp_init+0x1560/0x1560 [ 407.171176][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 407.177110][ C0] ? finish_swait+0xc7/0x1d0 [ 407.181723][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 407.186348][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 407.191479][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 407.196438][ C0] ? __kthread_parkme+0x162/0x1c0 [ 407.201512][ C0] kthread+0x2fa/0x390 [ 407.205608][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 407.210759][ C0] ? kthread_blkcg+0xd0/0xd0 [ 407.215375][ C0] ret_from_fork+0x48/0x80 [ 407.219813][ C0] ? kthread_blkcg+0xd0/0xd0 [ 407.224427][ C0] ret_from_fork_asm+0x11/0x20 [ 407.229240][ C0] [ 407.232280][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 407.238632][ C0] Sending NMI from CPU 0 to CPUs 1: [ 407.243859][ C1] NMI backtrace for cpu 1 [ 407.243877][ C1] CPU: 1 PID: 10709 Comm: syz.2.1978 Not tainted syzkaller #0 [ 407.243890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.243898][ C1] RIP: 0010:kasan_check_range+0x7c/0x290 [ 407.243920][ C1] Code: 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 <4c> 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 8d 01 00 00 49 ff c3 [ 407.243931][ C1] RSP: 0018:ffffc900001efda8 EFLAGS: 00000002 [ 407.243949][ C1] RAX: 0000000000000001 RBX: dffffc0000000001 RCX: ffffffff8168b326 [ 407.243958][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e8b5028 [ 407.243967][ C1] RBP: ffffc900001efef0 R08: ffffffff8e8b502f R09: 1ffffffff1d16a05 [ 407.243977][ C1] R10: dffffc0000000000 R11: fffffbfff1d16a05 R12: 0000000000000001 [ 407.243985][ C1] R13: dffffc0000000000 R14: fffffbfff1d16a06 R15: 1ffffffff1d16a05 [ 407.243996][ C1] FS: 00007f937e9c06c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 407.244007][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.244017][ C1] CR2: 0000200000136000 CR3: 0000000025c8f000 CR4: 00000000003506e0 [ 407.244029][ C1] Call Trace: [ 407.244034][ C1] [ 407.244040][ C1] ? ktime_get+0x7f/0x280 [ 407.244059][ C1] lock_release+0xa6/0x8c0 [ 407.244081][ C1] ? ktime_get+0x35/0x280 [ 407.244097][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 407.244115][ C1] ? perf_event_output_forward+0x330/0x3e0 [ 407.244132][ C1] ? perf_event_output_forward+0xb9/0x3e0 [ 407.244147][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 407.244161][ C1] ? ktime_get+0x7f/0x280 [ 407.244174][ C1] ? ktime_get+0x7f/0x280 [ 407.244192][ C1] seqcount_lockdep_reader_access+0xe4/0x1d0 [ 407.244209][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 407.244231][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 407.244254][ C1] ktime_get+0x7f/0x280 [ 407.244273][ C1] perf_swevent_hrtimer+0x4ad/0x610 [ 407.244294][ C1] ? cpu_clock_event_read+0x40/0x40 [ 407.244336][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 407.244356][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 407.244376][ C1] ? _raw_spin_unlock+0x40/0x40 [ 407.244405][ C1] __hrtimer_run_queues+0x4e1/0xc40 [ 407.244429][ C1] ? cpu_clock_event_read+0x40/0x40 [ 407.244452][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 407.244465][ C1] ? read_tsc+0x9/0x20 [ 407.244491][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 407.244555][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 407.244576][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 407.244595][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 407.244615][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x27/0x90 [ 407.244633][ C1] Code: 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 10 86 7c 7e 65 8b 0d 11 86 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b <83> ba 1c 16 00 00 00 74 52 8b 8a f8 15 00 00 83 f9 03 75 47 48 8b [ 407.244643][ C1] RSP: 0018:ffffc900001f05d0 EFLAGS: 00000246 [ 407.244654][ C1] RAX: ffffffff813b46c0 RBX: ffffc900001e9000 RCX: 0000000000000100 [ 407.244663][ C1] RDX: ffff88802ba73c00 RSI: 0000000000000002 RDI: 0000000000000000 [ 407.244671][ C1] RBP: 0000000000000002 R08: ffff88802ba73c00 R09: 0000000000000003 [ 407.244680][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: 1ffff9200003e0d6 [ 407.244688][ C1] R13: 1ffff9200003e0d7 R14: ffffc900001f0e18 R15: ffffc900001f1000 [ 407.244706][ C1] ? unwind_next_frame+0xf00/0x2970 [ 407.244727][ C1] unwind_next_frame+0xf00/0x2970 [ 407.244751][ C1] ? __run_timers+0x542/0x800 [ 407.244767][ C1] ? __run_timers+0x542/0x800 [ 407.244780][ C1] ? stack_trace_save+0x100/0x100 [ 407.244797][ C1] arch_stack_walk+0x144/0x190 [ 407.244817][ C1] ? __run_timers+0x542/0x800 [ 407.244836][ C1] stack_trace_save+0xaa/0x100 [ 407.244852][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 407.244867][ C1] ? mark_lock+0x94/0x320 [ 407.244892][ C1] save_stack+0x125/0x230 [ 407.244909][ C1] ? __reset_page_owner+0x190/0x190 [ 407.244922][ C1] ? free_unref_page_prepare+0x7b2/0x8c0 [ 407.244945][ C1] ? free_unref_page+0x32/0x2e0 [ 407.244962][ C1] ? skb_release_data+0x3a9/0x7b0 [ 407.244977][ C1] ? __kfree_skb+0x57/0x70 [ 407.244990][ C1] ? tcp_write_queue_purge+0x143/0x2f0 [ 407.245005][ C1] ? tcp_done_with_error+0x43/0xc0 [ 407.245019][ C1] ? tcp_write_timer_handler+0x672/0x920 [ 407.245032][ C1] ? tcp_write_timer+0x12a/0x280 [ 407.245043][ C1] ? call_timer_fn+0x189/0x540 [ 407.245056][ C1] ? __run_timers+0x542/0x800 [ 407.245081][ C1] ? page_ext_get+0x1e2/0x2b0 [ 407.245101][ C1] __reset_page_owner+0x4e/0x190 [ 407.245120][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 407.245145][ C1] free_unref_page+0x32/0x2e0 [ 407.245163][ C1] ? destroy_large_folio+0x170/0x2f0 [ 407.245186][ C1] skb_release_data+0x3a9/0x7b0 [ 407.245214][ C1] __kfree_skb+0x57/0x70 [ 407.245230][ C1] tcp_write_queue_purge+0x143/0x2f0 [ 407.245251][ C1] tcp_done_with_error+0x43/0xc0 [ 407.245270][ C1] tcp_write_timer_handler+0x672/0x920 [ 407.245289][ C1] tcp_write_timer+0x12a/0x280 [ 407.245305][ C1] call_timer_fn+0x189/0x540 [ 407.245319][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 407.245331][ C1] ? call_timer_fn+0xd2/0x540 [ 407.245345][ C1] ? __run_timers+0x800/0x800 [ 407.245372][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 407.245388][ C1] __run_timers+0x542/0x800 [ 407.245416][ C1] ? detach_timer+0x2b0/0x2b0 [ 407.245447][ C1] run_timer_softirq+0x67/0xf0 [ 407.245462][ C1] handle_softirqs+0x280/0x820 [ 407.245483][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 407.245502][ C1] ? do_softirq+0x1a0/0x1a0 [ 407.245522][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 407.245543][ C1] __irq_exit_rcu+0xd3/0x190 [ 407.245557][ C1] ? irq_exit_rcu+0x20/0x20 [ 407.245580][ C1] irq_exit_rcu+0x9/0x20 [ 407.245592][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 407.245610][ C1] [ 407.245614][ C1] [ 407.245620][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 407.245638][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 407.245656][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 407.245666][ C1] RSP: 0018:ffffc9000454edb8 EFLAGS: 00000206 [ 407.245676][ C1] RAX: 33a6882220300400 RBX: ffff88802ba73c00 RCX: 33a6882220300400 [ 407.245686][ C1] RDX: ffff88802ba73c00 RSI: ffffffff8acadd60 RDI: ffffffff8b1c9a20 [ 407.245695][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff22398a0 [ 407.245704][ C1] R10: dffffc0000000000 R11: fffffbfff22398a1 R12: 0000000000000002 [ 407.245713][ C1] R13: 0000000000000246 R14: ffffffff8d132120 R15: ffff88802ba74730 [ 407.245747][ C1] trace_call_bpf+0x1aa/0x6c0 [ 407.245767][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 407.245787][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 407.245808][ C1] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 407.245833][ C1] ? perf_trace_buf_alloc+0x14a/0x290 [ 407.245854][ C1] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 407.245875][ C1] perf_trace_lock_acquire+0x34f/0x410 [ 407.245903][ C1] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 407.245923][ C1] ? perf_trace_lock_acquire+0x34f/0x410 [ 407.245962][ C1] lock_acquire+0x3ef/0x420 [ 407.245977][ C1] ? page_ext_get+0x22/0x2b0 [ 407.246002][ C1] ? read_lock_is_recursive+0x20/0x20 [ 407.246019][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 407.246035][ C1] ? __rwlock_init+0x150/0x150 [ 407.246054][ C1] ? rcu_is_watching+0x15/0xb0 [ 407.246071][ C1] ? pfn_valid+0xcd/0x420 [ 407.246086][ C1] ? page_ext_get+0x22/0x2b0 [ 407.246104][ C1] page_ext_get+0x3e/0x2b0 [ 407.246118][ C1] ? page_ext_get+0x22/0x2b0 [ 407.246137][ C1] page_table_check_set+0x51/0x6e0 [ 407.246160][ C1] handle_mm_fault+0x487e/0x4c00 [ 407.246177][ C1] ? handle_mm_fault+0xe7/0x4c00 [ 407.246206][ C1] ? numa_migrate_prep+0x350/0x350 [ 407.246237][ C1] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 407.246254][ C1] do_user_addr_fault+0x730/0x12c0 [ 407.246286][ C1] exc_page_fault+0x64/0x100 [ 407.246307][ C1] asm_exc_page_fault+0x26/0x30 [ 407.246324][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 407.246340][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 407.246350][ C1] RSP: 0018:ffffc9000454f5b8 EFLAGS: 00050206 [ 407.246360][ C1] RAX: ffffffff84282501 RBX: 0000000000007fe5 RCX: 0000000000001ee2 [ 407.246369][ C1] RDX: 0000000000000001 RSI: 0000200000136000 RDI: ffff888025b06103 [ 407.246378][ C1] RBP: ffffc9000454f710 R08: ffff888025b07fe4 R09: 1ffff11004b60ffc [ 407.246387][ C1] R10: dffffc0000000000 R11: ffffed1004b60ffd R12: ffff888025b00000 [ 407.246397][ C1] R13: 000020000012fefd R14: ffffc9000454fe38 R15: 1ffff920008a9fc7 [ 407.246414][ C1] ? _copy_from_iter+0x131/0x12e0 [ 407.246441][ C1] _copy_from_iter+0x24e/0x12e0 [ 407.246459][ C1] ? __virt_addr_valid+0x18c/0x540 [ 407.246478][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 407.246493][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 407.246516][ C1] ? copyout_mc+0x70/0x70 [ 407.246533][ C1] ? __virt_addr_valid+0x18c/0x540 [ 407.246551][ C1] ? __virt_addr_valid+0x18c/0x540 [ 407.246567][ C1] ? __virt_addr_valid+0x469/0x540 [ 407.246587][ C1] ? __check_object_size+0x506/0xa20 [ 407.246606][ C1] tcp_sendmsg_locked+0x1e39/0x4bd0 [ 407.246620][ C1] ? verify_lock_unused+0x140/0x140 [ 407.246686][ C1] ? tcp_set_state+0x680/0x680 [ 407.246716][ C1] tcp_sendmsg+0x2f/0x50 [ 407.246728][ C1] ? inet_send_prepare+0x260/0x260 [ 407.246747][ C1] ____sys_sendmsg+0x5ba/0x960 [ 407.246771][ C1] ? __asan_memset+0x22/0x40 [ 407.246788][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 407.246802][ C1] ? __import_iovec+0x5f2/0x850 [ 407.246825][ C1] ? import_iovec+0x73/0xa0 [ 407.246843][ C1] ___sys_sendmsg+0x2a6/0x360 [ 407.246866][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 407.246939][ C1] __se_sys_sendmsg+0x1c2/0x2b0 [ 407.246958][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 407.246992][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 407.247015][ C1] do_syscall_64+0x55/0xb0 [ 407.247028][ C1] ? clear_bhb_loop+0x40/0x90 [ 407.247046][ C1] ? clear_bhb_loop+0x40/0x90 [ 407.247066][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.247084][ C1] RIP: 0033:0x7f937db9ce59 [ 407.247102][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.247112][ C1] RSP: 002b:00007f937e9c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.247125][ C1] RAX: ffffffffffffffda RBX: 00007f937de15fa0 RCX: 00007f937db9ce59 [ 407.247134][ C1] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000007 [ 407.247143][ C1] RBP: 00007f937dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 407.247151][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.247158][ C1] R13: 00007f937de16038 R14: 00007f937de15fa0 R15: 00007fff56c1d6a8 [ 407.247185][ C1] [ 407.247857][ C0] CPU: 0 PID: 10706 Comm: syz.3.1977 Not tainted syzkaller #0 [ 408.334366][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.344443][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 408.350977][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ab c8 ca f6 65 8b 05 3c f0 71 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 408.370696][ C0] RSP: 0018:ffffc90000007740 EFLAGS: 00000206 [ 408.376797][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 89195e8ef1767500 [ 408.384869][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 408.392858][ C0] RBP: ffffc900000077c0 R08: ffffffff911cc5c7 R09: 1ffffffff22398b8 [ 408.400932][ C0] R10: dffffc0000000000 R11: fffffbfff22398b9 R12: dffffc0000000000 [ 408.409006][ C0] R13: ffff888032260000 R14: ffffffff97528160 R15: 1ffff92000000ee8 [ 408.416996][ C0] FS: 00007f8b0c93f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 408.425950][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.432546][ C0] CR2: 0000200000031000 CR3: 000000002b765000 CR4: 00000000003506f0 [ 408.440536][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.448523][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 408.456515][ C0] Call Trace: [ 408.459816][ C0] [ 408.462679][ C0] ? _raw_spin_unlock+0x40/0x40 [ 408.467575][ C0] debug_check_no_obj_freed+0x51f/0x540 [ 408.473169][ C0] free_unref_page_prepare+0x1da/0x8c0 [ 408.478662][ C0] free_unref_page+0x32/0x2e0 [ 408.483375][ C0] ? destroy_large_folio+0x170/0x2f0 [ 408.488692][ C0] skb_release_data+0x3a9/0x7b0 [ 408.493583][ C0] __kfree_skb+0x57/0x70 [ 408.497856][ C0] tcp_write_queue_purge+0x203/0x2f0 [ 408.503208][ C0] tcp_done_with_error+0x43/0xc0 [ 408.508183][ C0] tcp_retransmit_timer+0x1728/0x3020 [ 408.513608][ C0] ? tcp_delack_timer_handler+0x4d0/0x4d0 [ 408.519372][ C0] ? __sanitizer_cov_trace_cmp8+0x8/0x80 [ 408.525038][ C0] ? read_tsc+0x9/0x20 [ 408.529129][ C0] ? ktime_get+0x24b/0x280 [ 408.533578][ C0] ? tcp_write_timer_handler+0x2f7/0x920 [ 408.539235][ C0] tcp_write_timer+0x12a/0x280 [ 408.544019][ C0] call_timer_fn+0x189/0x540 [ 408.548717][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 408.553931][ C0] ? call_timer_fn+0xd2/0x540 [ 408.558626][ C0] ? __run_timers+0x800/0x800 [ 408.563349][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 408.568566][ C0] __run_timers+0x542/0x800 [ 408.573114][ C0] ? detach_timer+0x2b0/0x2b0 [ 408.577846][ C0] run_timer_softirq+0x67/0xf0 [ 408.582644][ C0] handle_softirqs+0x280/0x820 [ 408.587458][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 408.592272][ C0] ? do_softirq+0x1a0/0x1a0 [ 408.596820][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 408.602400][ C0] __irq_exit_rcu+0xd3/0x190 [ 408.607016][ C0] ? irq_exit_rcu+0x20/0x20 [ 408.611567][ C0] irq_exit_rcu+0x9/0x20 [ 408.615891][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 408.621552][ C0] [ 408.624499][ C0] [ 408.627446][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.633453][ C0] RIP: 0010:migrate_enable+0xfe/0x3d0 [ 408.639024][ C0] Code: 00 00 fc ff df 42 0f b6 04 23 84 c0 0f 85 75 02 00 00 66 44 89 3a e9 e5 01 00 00 66 45 85 ff 0f 84 26 02 00 00 48 89 54 24 20 01 00 00 00 e8 c8 b1 ff ff 4d 8d be 18 04 00 00 4c 89 f8 48 c1 [ 408.658656][ C0] RSP: 0018:ffffc900035bed00 EFLAGS: 00000202 [ 408.664763][ C0] RAX: 0000000000000000 RBX: 1ffff11005e6c447 RCX: dffffc0000000000 [ 408.672749][ C0] RDX: ffff88802f362238 RSI: 00000000000131e6 RDI: 00000000000131e7 [ 408.680746][ C0] RBP: ffffc900035bedf0 R08: ffffc900035bee8f R09: 0000000000000000 [ 408.688771][ C0] R10: ffffc900035bee80 R11: fffff520006b7dd2 R12: ffff88802f362228 [ 408.697052][ C0] R13: 1ffff920006b7da8 R14: ffff88802f361e00 R15: 0000000000000001 [ 408.705073][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 408.710316][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.716499][ C0] ? migrate_disable+0x180/0x180 [ 408.721563][ C0] ? migrate_disable+0xe5/0x180 [ 408.726446][ C0] trace_call_bpf+0x4c2/0x6c0 [ 408.731146][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 408.735943][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 408.741263][ C0] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 408.747370][ C0] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 408.752945][ C0] perf_trace_lock_acquire+0x34f/0x410 [ 408.758439][ C0] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 408.765060][ C0] ? perf_trace_lock_acquire+0x34f/0x410 [ 408.770730][ C0] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 408.777428][ C0] lock_acquire+0x3ef/0x420 [ 408.781967][ C0] ? __pte_offset_map+0x2c/0x2c0 [ 408.786948][ C0] ? read_lock_is_recursive+0x20/0x20 [ 408.792354][ C0] ? mt_find+0x169/0x650 [ 408.796630][ C0] __pte_offset_map+0x48/0x2c0 [ 408.801427][ C0] ? __pte_offset_map+0x2c/0x2c0 [ 408.806397][ C0] pte_offset_map_nolock+0x44/0x130 [ 408.811622][ C0] handle_mm_fault+0xe37/0x4c00 [ 408.816605][ C0] ? handle_mm_fault+0xe7/0x4c00 [ 408.821583][ C0] ? numa_migrate_prep+0x350/0x350 [ 408.826754][ C0] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 408.832073][ C0] do_user_addr_fault+0x730/0x12c0 [ 408.837332][ C0] exc_page_fault+0x64/0x100 [ 408.842080][ C0] asm_exc_page_fault+0x26/0x30 [ 408.846949][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 408.852786][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 408.872592][ C0] RSP: 0018:ffffc900035bf5b8 EFLAGS: 00050206 [ 408.879208][ C0] RAX: ffffffff84282501 RBX: 0000000000007367 RCX: 0000000000006667 [ 408.887216][ C0] RDX: 0000000000000001 RSI: 0000200000031000 RDI: ffff8880455a8d00 [ 408.895232][ C0] RBP: ffffc900035bf710 R08: ffff8880455af366 R09: 1ffff11008ab5e6c [ 408.903400][ C0] R10: dffffc0000000000 R11: ffffed1008ab5e6d R12: ffff8880455a8000 [ 408.911390][ C0] R13: 0000200000030300 R14: ffffc900035bfe38 R15: 1ffff920006b7fc7 [ 408.919399][ C0] ? _copy_from_iter+0x131/0x12e0 [ 408.924461][ C0] _copy_from_iter+0x24e/0x12e0 [ 408.929343][ C0] ? __virt_addr_valid+0x18c/0x540 [ 408.934498][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 408.939546][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 408.944872][ C0] ? copyout_mc+0x70/0x70 [ 408.949233][ C0] ? __virt_addr_valid+0x18c/0x540 [ 408.954452][ C0] ? __virt_addr_valid+0x18c/0x540 [ 408.959581][ C0] ? __virt_addr_valid+0x469/0x540 [ 408.964721][ C0] ? __check_object_size+0x506/0xa20 [ 408.970044][ C0] tcp_sendmsg_locked+0x1e39/0x4bd0 [ 408.975266][ C0] ? verify_lock_unused+0x140/0x140 [ 408.980557][ C0] ? tcp_set_state+0x680/0x680 [ 408.985872][ C0] tcp_sendmsg+0x2f/0x50 [ 408.990130][ C0] ? inet_send_prepare+0x260/0x260 [ 408.995269][ C0] ____sys_sendmsg+0x5ba/0x960 [ 409.000067][ C0] ? __asan_memset+0x22/0x40 [ 409.004683][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 409.009723][ C0] ? __import_iovec+0x5f2/0x850 [ 409.014608][ C0] ? import_iovec+0x73/0xa0 [ 409.019134][ C0] ___sys_sendmsg+0x2a6/0x360 [ 409.023846][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 409.028708][ C0] __se_sys_sendmsg+0x1c2/0x2b0 [ 409.033580][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 409.038568][ C0] ? syscall_enter_from_user_mode+0x2e/0x80 [ 409.044498][ C0] do_syscall_64+0x55/0xb0 [ 409.048942][ C0] ? clear_bhb_loop+0x40/0x90 [ 409.053663][ C0] ? clear_bhb_loop+0x40/0x90 [ 409.058403][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.064601][ C0] RIP: 0033:0x7f8b0b99ce59 [ 409.069044][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.088702][ C0] RSP: 002b:00007f8b0c93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.097229][ C0] RAX: ffffffffffffffda RBX: 00007f8b0bc15fa0 RCX: 00007f8b0b99ce59 [ 409.105306][ C0] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000009 [ 409.113291][ C0] RBP: 00007f8b0ba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 409.121289][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.129369][ C0] R13: 00007f8b0bc16038 R14: 00007f8b0bc15fa0 R15: 00007ffcedb97ee8 [ 409.137386][ C0]