last executing test programs: 7.799919754s ago: executing program 2 (id=5300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x35}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r10}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xfffffd26) 6.618370007s ago: executing program 2 (id=5303): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000800) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x40002002) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.616977897s ago: executing program 0 (id=5312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/169, 0xa9}], 0x2}, 0x20000000) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x27, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260", 0xf}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)}, 0x20004000) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1}, 0x10100) r8 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES8=r8], 0xfe33) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18220000c4d296b3c1339bcb975175b4fd1de5ad471fbacfc672171c7fbaa7fc4d5d93a3ec93cf974c6aea98d94d3c1f2077ff0047bc128553b5ae7662ceca61a74ef9cda5b67a54db7f5baabbcf38c0bca81be9e371c999a16c4530612409eca349687ca80dc3b5aff02568914e8eb558c6b685c1fe2263cdc961", @ANYRES32=r2, @ANYBLOB="00000000040000009500000000000000850000009f000000"], &(0x7f0000000b40)='GPL\x00', 0x4, 0xc, &(0x7f0000000b80)=""/12, 0x41100, 0x10, '\x00', r3, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x4, 0x7, 0x7fffffff, 0x3}, 0x10, 0x9454, r0, 0x3, &(0x7f0000000c00)=[r4], &(0x7f0000000c40)=[{0x1, 0x2, 0x5, 0xc}, {0x5, 0x3, 0xf, 0x2}, {0x1, 0x2, 0x9, 0x9}], 0x10, 0x1000}, 0x94) recvmsg(r1, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0xfc, 0xff, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x5}, 0x8b001, 0x0, 0xfffffffd, 0x4, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0xffffffffffffd}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 6.615645297s ago: executing program 1 (id=5304): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) 6.568248988s ago: executing program 3 (id=5305): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 6.306260396s ago: executing program 1 (id=5306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x35}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r10}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xfffffd26) 6.306015746s ago: executing program 3 (id=5307): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x35}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r10}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xfffffd26) 5.110806819s ago: executing program 1 (id=5308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x35}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r10}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xfffffd26) 5.085978899s ago: executing program 3 (id=5309): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xce8, 0x0, &(0x7f00000002c0)="5fd63edbfd8ad8de16e687686f9a", 0x0, 0x707, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESHEX=r2], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xfffffd26) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff8d}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xb) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)={0x1}) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000200)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000280)="8d50895c4c690dea156e85f7db65", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.494519553s ago: executing program 0 (id=5311): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r3 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) 3.494074864s ago: executing program 1 (id=5313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x35}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r10}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xfffffd26) 3.433923405s ago: executing program 2 (id=5314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x35}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r9}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xfffffd26) 3.285070839s ago: executing program 0 (id=5315): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x400000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x97, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0xff, 0xfe, 0x0, 0x0, 0x0, 0x401, 0x80260, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}, 0x8e00, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x4, 0x0, r3, 0x2ab, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) mkdirat$cgroup(r6, 0x0, 0x1ff) socketpair(0x18, 0xa, 0x1, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 2.254077328s ago: executing program 2 (id=5319): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x35}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r9}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xfffffd26) 2.142344591s ago: executing program 0 (id=5320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/169, 0xa9}], 0x2}, 0x20000000) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x27, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260", 0xf}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)}, 0x20004000) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1}, 0x10100) r8 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES8=r8], 0xfe33) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18220000c4d296b3c1339bcb975175b4fd1de5ad471fbacfc672171c7fbaa7fc4d5d93a3ec93cf974c6aea98d94d3c1f2077ff0047bc128553b5ae7662ceca61a74ef9cda5b67a54db7f5baabbcf38c0bca81be9e371c999a16c4530612409eca349687ca80dc3b5aff02568914e8eb558c6b685c1fe2263cdc961", @ANYRES32=r2, @ANYBLOB="00000000040000009500000000000000850000009f000000"], &(0x7f0000000b40)='GPL\x00', 0x4, 0xc, &(0x7f0000000b80)=""/12, 0x41100, 0x10, '\x00', r3, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x4, 0x7, 0x7fffffff, 0x3}, 0x10, 0x9454, r0, 0x3, &(0x7f0000000c00)=[r4], &(0x7f0000000c40)=[{0x1, 0x2, 0x5, 0xc}, {0x5, 0x3, 0xf, 0x2}, {0x1, 0x2, 0x9, 0x9}], 0x10, 0x1000}, 0x94) recvmsg(r1, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0xfc, 0xff, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x5}, 0x8b001, 0x0, 0xfffffffd, 0x4, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0xffffffffffffd}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 1.758620401s ago: executing program 3 (id=5321): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x400000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x97, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0xff, 0xfe, 0x0, 0x0, 0x0, 0x401, 0x80260, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}, 0x8e00, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x4, 0x0, r4, 0x2ab, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) mkdirat$cgroup(r7, 0x0, 0x1ff) socketpair(0x18, 0xa, 0x1, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000800) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x40002002) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.190415288s ago: executing program 3 (id=5324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x35}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r9}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xfffffd26) 1.0873642s ago: executing program 2 (id=5325): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x400000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x97, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0xff, 0xfe, 0x0, 0x0, 0x0, 0x401, 0x80260, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}, 0x8e00, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x4, 0x0, r3, 0x2ab, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) mkdirat$cgroup(r6, 0x0, 0x1ff) socketpair(0x18, 0xa, 0x1, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x97, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0xff, 0xfe, 0x0, 0x0, 0x0, 0x401, 0x80260, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}, 0x8e00, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x4, 0x0, r4, 0x2ab, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) mkdirat$cgroup(r7, 0x0, 0x1ff) socketpair(0x18, 0xa, 0x1, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8 1 [ 936.310499][T20860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 936.329627][T20860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 936.339391][T20860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 936.349212][T20860] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 936.358320][T20860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 936.593609][ T3463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.753776][ T3463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.942821][ T3463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.137702][ T3463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.210670][T20878] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4693'. [ 937.335300][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.341755][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.521380][T20878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 937.724333][T20859] chnl_net:caif_netlink_parms(): no params data found [ 938.321657][T20859] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.364508][T20859] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.371908][T20859] bridge_slave_0: entered allmulticast mode [ 938.406266][T20859] bridge_slave_0: entered promiscuous mode [ 938.435454][ T5792] Bluetooth: hci1: command tx timeout [ 938.552891][T20859] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.576080][T20859] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.594805][T20859] bridge_slave_1: entered allmulticast mode [ 938.607301][T20859] bridge_slave_1: entered promiscuous mode [ 938.870240][T20859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.007414][T20859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.061522][T20920] validate_nla: 73 callbacks suppressed [ 939.061563][T20920] netlink: 'syz.2.4701': attribute type 29 has an invalid length. [ 939.092510][T20920] netlink: 'syz.2.4701': attribute type 29 has an invalid length. [ 939.186189][T20922] netlink: 'syz.2.4701': attribute type 29 has an invalid length. [ 939.349007][T20920] netlink: 'syz.2.4701': attribute type 29 has an invalid length. [ 939.432243][T20859] team0: Port device team_slave_0 added [ 939.471355][T20922] netlink: 'syz.2.4701': attribute type 29 has an invalid length. [ 939.559081][T20859] team0: Port device team_slave_1 added [ 939.719579][T20859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.729645][T20859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.771635][T20859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.836448][T20859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.872030][T20859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.916476][T20859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.066386][T20935] netlink: 'syz.2.4703': attribute type 29 has an invalid length. [ 940.088532][T20935] netlink: 'syz.2.4703': attribute type 29 has an invalid length. [ 940.197072][T20937] netlink: 'syz.2.4703': attribute type 29 has an invalid length. [ 940.270519][ T3463] hsr_slave_0: left promiscuous mode [ 940.280935][ T3463] hsr_slave_1: left promiscuous mode [ 940.287740][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.312848][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.327513][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.341219][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.350464][ T3463] bridge_slave_1: left allmulticast mode [ 940.368921][ T3463] bridge_slave_1: left promiscuous mode [ 940.389415][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.421395][ T3463] bridge_slave_0: left allmulticast mode [ 940.444603][ T3463] bridge_slave_0: left promiscuous mode [ 940.458457][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.518593][ T5792] Bluetooth: hci1: command tx timeout [ 940.550135][T20944] netlink: 'syz.3.4705': attribute type 29 has an invalid length. [ 940.601065][ T3463] veth1_macvtap: left promiscuous mode [ 940.618947][ T3463] veth0_macvtap: left promiscuous mode [ 940.645457][ T3463] veth1_vlan: left promiscuous mode [ 940.662354][ T3463] veth0_vlan: left promiscuous mode [ 941.734288][ T3463] team0 (unregistering): Port device team_slave_1 removed [ 941.784122][ T3463] team0 (unregistering): Port device team_slave_0 removed [ 941.838155][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.889393][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.282273][ T3463] bond0 (unregistering): Released all slaves [ 942.372702][T20935] netlink: 'syz.2.4703': attribute type 29 has an invalid length. [ 942.387842][T20859] hsr_slave_0: entered promiscuous mode [ 942.395232][T20859] hsr_slave_1: entered promiscuous mode [ 942.402050][T20859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 942.411665][T20859] Cannot create hsr debugfs directory [ 942.418404][T20943] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4704'. [ 942.457040][T20943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 942.600165][ T5792] Bluetooth: hci1: command tx timeout [ 943.095713][T20972] syzkaller0: entered promiscuous mode [ 943.101467][T20972] syzkaller0: entered allmulticast mode [ 944.675385][ T5792] Bluetooth: hci1: command tx timeout [ 946.141344][T20993] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4714'. [ 946.170149][T20993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 946.494869][T21005] validate_nla: 10 callbacks suppressed [ 946.494907][T21005] netlink: 'syz.3.4716': attribute type 29 has an invalid length. [ 946.842845][T21005] netlink: 'syz.3.4716': attribute type 29 has an invalid length. [ 947.183204][T21007] netlink: 'syz.3.4716': attribute type 29 has an invalid length. [ 947.226163][T21011] netlink: 'syz.3.4716': attribute type 29 has an invalid length. [ 947.240853][T21006] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4715'. [ 947.259801][T21006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.349420][T20859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 947.374964][T20859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 947.404848][T20859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 947.462672][T20859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 947.536231][T21015] netlink: 'syz.3.4717': attribute type 29 has an invalid length. [ 947.580976][T21015] netlink: 'syz.3.4717': attribute type 29 has an invalid length. [ 947.619350][T21020] netlink: 'syz.2.4719': attribute type 21 has an invalid length. [ 947.656400][T21021] netlink: 'syz.3.4717': attribute type 29 has an invalid length. [ 947.940781][T20859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.961397][T21022] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4718'. [ 948.081146][T21022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 948.248875][T20859] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.317761][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.325060][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.383960][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.391268][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.507041][T21038] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4720'. [ 948.579865][T21038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 948.783088][T20859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 948.854904][T20859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 949.133318][T21049] syzkaller0: entered promiscuous mode [ 949.166622][T21049] syzkaller0: entered allmulticast mode [ 952.252877][T21063] syzkaller0: entered promiscuous mode [ 952.263413][T21063] syzkaller0: entered allmulticast mode [ 955.279037][T20859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.372503][T20859] veth0_vlan: entered promiscuous mode [ 955.413923][T20859] veth1_vlan: entered promiscuous mode [ 955.507556][T20859] veth0_macvtap: entered promiscuous mode [ 955.524551][T20859] veth1_macvtap: entered promiscuous mode [ 955.587759][T20859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.622372][T20859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.661902][T20859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.704351][T20859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.743507][T20859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.794629][T20859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.837248][T20859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.894096][T21131] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4739'. [ 956.053118][T21131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 956.174629][T20859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.215203][T20859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.247211][T20859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.284357][T20859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.304709][T20859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.344670][T20859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.366465][T20859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.409155][T20859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.444889][T20859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.453733][T20859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.481985][T20859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.499892][T21132] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4732'. [ 956.519753][T21132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 956.693313][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.724658][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.786811][ T2941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.795643][ T2941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.312518][T21151] veth0_vlan: entered allmulticast mode [ 958.094457][T21160] veth0_vlan: left promiscuous mode [ 958.100757][T21160] veth0_vlan: entered promiscuous mode [ 958.272144][T21167] syzkaller0: entered promiscuous mode [ 958.279338][T21167] syzkaller0: entered allmulticast mode [ 958.444159][T21178] tap0: tun_chr_ioctl cmd 1074025681 [ 958.452820][T21178] tap0: tun_chr_ioctl cmd 2147767517 [ 961.386789][T21206] netlink: 'syz.0.4755': attribute type 21 has an invalid length. [ 961.709408][T21208] veth0_vlan: entered allmulticast mode [ 962.467220][T21216] veth0_vlan: entered allmulticast mode [ 962.522169][T21214] veth0_vlan: left promiscuous mode [ 962.530866][T21214] veth0_vlan: entered promiscuous mode [ 962.539807][T21210] veth0_vlan: left promiscuous mode [ 962.556445][T21210] veth0_vlan: entered promiscuous mode [ 963.026594][T21232] veth0_vlan: left promiscuous mode [ 963.054071][T21232] veth0_vlan: entered promiscuous mode [ 963.192882][T21238] netlink: 'syz.2.4767': attribute type 21 has an invalid length. [ 963.377405][T21240] tap0: tun_chr_ioctl cmd 1074025681 [ 963.385124][T21240] tap0: tun_chr_ioctl cmd 2147767517 [ 964.291981][T21253] netlink: 'syz.3.4778': attribute type 21 has an invalid length. [ 966.880863][T21260] veth0_vlan: entered allmulticast mode [ 967.642329][T21269] veth0_vlan: left promiscuous mode [ 967.662326][T21269] veth0_vlan: entered promiscuous mode [ 967.734624][T21265] veth0_vlan: left promiscuous mode [ 967.757420][T21265] veth0_vlan: entered promiscuous mode [ 967.780099][T21270] veth0_vlan: left promiscuous mode [ 967.789192][T21270] veth0_vlan: entered promiscuous mode [ 969.010288][T21283] veth0_vlan: left promiscuous mode [ 969.019688][T21283] veth0_vlan: entered promiscuous mode [ 969.292396][T21288] veth0_vlan: left promiscuous mode [ 969.333236][T21288] veth0_vlan: entered promiscuous mode [ 969.372359][T21291] veth0_vlan: left promiscuous mode [ 969.474671][T21291] veth0_vlan: entered promiscuous mode [ 971.265993][T21306] veth0_vlan: left promiscuous mode [ 971.286085][T21306] veth0_vlan: entered promiscuous mode [ 971.318742][T21305] veth0_vlan: left promiscuous mode [ 971.332302][T21305] veth0_vlan: entered promiscuous mode [ 975.369847][T21326] veth0_vlan: left promiscuous mode [ 975.376842][T21326] veth0_vlan: entered promiscuous mode [ 975.404596][T21334] veth0_vlan: left promiscuous mode [ 975.496189][T21334] veth0_vlan: entered promiscuous mode [ 975.757261][T21337] netlink: 'syz.3.4797': attribute type 21 has an invalid length. [ 977.295136][T20860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 977.306237][T20860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 977.319605][T20860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 977.336696][T20860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 977.345461][T20860] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 977.353019][T20860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 977.366494][T21358] veth0_vlan: left promiscuous mode [ 977.373052][T21358] veth0_vlan: entered promiscuous mode [ 977.779506][ T2960] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.916333][T21374] netlink: 'syz.1.4809': attribute type 21 has an invalid length. [ 978.010363][ T2960] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.190017][ T2960] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.341114][T21365] chnl_net:caif_netlink_parms(): no params data found [ 978.437561][ T2960] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.158854][T21396] veth0_vlan: left promiscuous mode [ 979.192117][T21396] veth0_vlan: entered promiscuous mode [ 979.235907][T21365] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.243255][T21365] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.258428][T21365] bridge_slave_0: entered allmulticast mode [ 979.269007][T21365] bridge_slave_0: entered promiscuous mode [ 979.291455][T21365] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.303946][T21365] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.322068][T21365] bridge_slave_1: entered allmulticast mode [ 979.332424][T21365] bridge_slave_1: entered promiscuous mode [ 979.394779][ T5792] Bluetooth: hci0: command tx timeout [ 979.535500][T21365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.588777][T21365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.732463][T21365] team0: Port device team_slave_0 added [ 979.766264][T21365] team0: Port device team_slave_1 added [ 980.750183][T21365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.757755][T21365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.792700][T21365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.867398][T21424] veth0_vlan: left promiscuous mode [ 980.881084][T21424] veth0_vlan: entered promiscuous mode [ 980.892447][T21415] netlink: 'syz.1.4821': attribute type 21 has an invalid length. [ 980.977672][T21435] tap0: tun_chr_ioctl cmd 1074025681 [ 980.994629][T21437] tap0: tun_chr_ioctl cmd 2147767517 [ 981.000855][T21365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.024251][T21365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.112719][T21365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.321884][T21365] hsr_slave_0: entered promiscuous mode [ 981.339909][T21365] hsr_slave_1: entered promiscuous mode [ 981.398526][T21365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.480604][ T5792] Bluetooth: hci0: command tx timeout [ 981.486282][T21365] Cannot create hsr debugfs directory [ 982.602585][ T2960] hsr_slave_0: left promiscuous mode [ 982.660386][ T2960] hsr_slave_1: left promiscuous mode [ 982.732043][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.760121][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.786548][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.823535][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.845520][ T2960] bridge_slave_1: left allmulticast mode [ 982.851266][ T2960] bridge_slave_1: left promiscuous mode [ 982.865727][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.890970][ T2960] bridge_slave_0: left allmulticast mode [ 982.904451][ T2960] bridge_slave_0: left promiscuous mode [ 982.917329][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.949245][ T2960] veth1_macvtap: left promiscuous mode [ 982.958954][ T2960] veth0_macvtap: left promiscuous mode [ 982.965250][ T2960] veth1_vlan: left promiscuous mode [ 982.970820][ T2960] veth0_vlan: left promiscuous mode [ 983.557461][ T5792] Bluetooth: hci0: command tx timeout [ 983.980847][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 984.039414][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 984.094232][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.149859][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.543867][ T2960] bond0 (unregistering): Released all slaves [ 985.635968][ T5792] Bluetooth: hci0: command tx timeout [ 985.819252][T21491] syzkaller0: entered promiscuous mode [ 985.825161][T21491] syzkaller0: entered allmulticast mode [ 985.941609][T21500] veth0_vlan: left promiscuous mode [ 985.985545][T21500] veth0_vlan: entered promiscuous mode [ 988.613525][T21365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 988.784107][T21365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 988.880573][T21365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 988.917457][T21365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 989.074740][T21522] tap0: tun_chr_ioctl cmd 1074025681 [ 989.098157][T21516] tap0: tun_chr_ioctl cmd 2147767517 [ 989.711187][T21365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.811334][T21365] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.908199][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.915536][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.946594][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.953925][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.418085][T21539] tap0: tun_chr_ioctl cmd 2147767517 [ 990.448674][T21538] tap0: tun_chr_ioctl cmd 1074025681 [ 991.039086][T21365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.196811][T21365] veth0_vlan: entered promiscuous mode [ 991.232466][T21365] veth1_vlan: entered promiscuous mode [ 991.327549][T21365] veth0_macvtap: entered promiscuous mode [ 991.357279][T21365] veth1_macvtap: entered promiscuous mode [ 991.393666][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.412609][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.423268][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.440399][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.450502][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.465843][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.481037][T21365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.541581][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.560417][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.570626][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.581323][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.592386][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.624436][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.643783][T21365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.673605][T21565] tap0: tun_chr_ioctl cmd 1074025681 [ 991.703264][T21567] tap0: tun_chr_ioctl cmd 2147767517 [ 991.717638][T21365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.750446][T21365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.764719][T21365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.773543][T21365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.943232][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.960339][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.020164][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.030883][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.118274][T21594] veth0_vlan: left promiscuous mode [ 993.126461][T21594] veth0_vlan: entered promiscuous mode [ 993.338324][T21601] veth0_vlan: entered allmulticast mode [ 994.455640][T20860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 994.468531][T20860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 994.484591][T20860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 994.505085][T20860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 994.519412][T20860] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 994.529985][T20860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 994.715404][ T2941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.869906][ T2941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.959310][T21627] tap0: tun_chr_ioctl cmd 1074025681 [ 994.982581][T21631] tap0: tun_chr_ioctl cmd 2147767517 [ 995.051939][ T2941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.150960][ T2941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.561395][T21617] chnl_net:caif_netlink_parms(): no params data found [ 996.308606][T21617] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.336865][T21617] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.359367][T21617] bridge_slave_0: entered allmulticast mode [ 996.384445][T21617] bridge_slave_0: entered promiscuous mode [ 996.406476][T21617] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.455097][T21617] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.462564][T21617] bridge_slave_1: entered allmulticast mode [ 996.479945][T21617] bridge_slave_1: entered promiscuous mode [ 996.573118][T21666] tap0: tun_chr_ioctl cmd 1074025681 [ 996.594438][T20860] Bluetooth: hci2: command tx timeout [ 996.604696][T21668] tap0: tun_chr_ioctl cmd 2147767517 [ 996.853932][T21617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.868048][T21617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.939004][T21617] team0: Port device team_slave_0 added [ 996.949500][T21617] team0: Port device team_slave_1 added [ 997.030762][T21617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.038769][T21617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.066492][T21617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.126035][T21617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.133731][T21617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.177820][T21617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.765847][T21688] tap0: tun_chr_ioctl cmd 1074025681 [ 997.788888][T21690] tap0: tun_chr_ioctl cmd 2147767517 [ 997.847753][T21617] hsr_slave_0: entered promiscuous mode [ 997.862472][T21617] hsr_slave_1: entered promiscuous mode [ 998.089200][ T2941] hsr_slave_0: left promiscuous mode [ 998.102754][ T2941] hsr_slave_1: left promiscuous mode [ 998.113200][ T2941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.131623][ T2941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.142269][ T2941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.157505][ T2941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.168730][ T2941] bridge_slave_1: left allmulticast mode [ 998.178940][ T2941] bridge_slave_1: left promiscuous mode [ 998.187523][ T2941] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.201362][ T2941] bridge_slave_0: left allmulticast mode [ 998.211837][ T2941] bridge_slave_0: left promiscuous mode [ 998.222506][ T2941] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.290529][ T2941] veth1_macvtap: left promiscuous mode [ 998.297459][ T2941] veth0_macvtap: left promiscuous mode [ 998.303105][ T2941] veth1_vlan: left promiscuous mode [ 998.309580][ T2941] veth0_vlan: left promiscuous mode [ 998.691579][T20860] Bluetooth: hci2: command tx timeout [ 998.764157][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.780727][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.126612][ T2941] team0 (unregistering): Port device team_slave_1 removed [ 999.233740][ T2941] team0 (unregistering): Port device team_slave_0 removed [ 999.323815][ T2941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.401410][ T2941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.053986][ T2941] bond0 (unregistering): Released all slaves [ 1000.803251][T20860] Bluetooth: hci2: command tx timeout [ 1002.398369][T21739] veth0_vlan: left promiscuous mode [ 1002.419514][T21739] veth0_vlan: entered promiscuous mode [ 1002.518482][T21741] netlink: 'syz.1.4888': attribute type 21 has an invalid length. [ 1002.728876][T21617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1002.750487][T21617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1002.824726][T21617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1002.834608][T20860] Bluetooth: hci2: command tx timeout [ 1002.906180][T21617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1003.308901][T21617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.391272][T21617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.426063][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.433311][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.459585][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.466875][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.276331][T21617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.382880][T21617] veth0_vlan: entered promiscuous mode [ 1004.435623][T21617] veth1_vlan: entered promiscuous mode [ 1004.623125][T21617] veth0_macvtap: entered promiscuous mode [ 1004.736433][T21617] veth1_macvtap: entered promiscuous mode [ 1004.878586][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.892969][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.912825][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.923898][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.957539][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.974400][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.997514][T21617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.010407][T21782] netlink: 'syz.3.4896': attribute type 21 has an invalid length. [ 1005.198615][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.275451][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.355775][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.375528][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.389195][T21617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.410565][T21617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.429847][T21617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.442026][T21795] veth0_vlan: left promiscuous mode [ 1005.462391][T21795] veth0_vlan: entered promiscuous mode [ 1005.595452][T21617] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.643424][T21617] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.677812][T21617] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.703134][T21617] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.052887][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.079001][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.187226][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.223488][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.284774][T21888] tap0: tun_chr_ioctl cmd 1074025681 [ 1010.300372][T21888] tap0: tun_chr_ioctl cmd 2147767517 [ 1012.722139][T21931] syzkaller0: entered promiscuous mode [ 1012.820374][T21931] syzkaller0: entered allmulticast mode [ 1012.898461][T21932] veth0_vlan: entered allmulticast mode [ 1014.706231][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1014.726630][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1014.802842][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1014.818925][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1014.827424][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1014.835565][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1016.928686][ T5792] Bluetooth: hci3: command tx timeout [ 1017.679435][ T2960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.917878][ T2960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.982026][T21950] chnl_net:caif_netlink_parms(): no params data found [ 1018.093586][ T2960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.218711][ T2960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.313301][T21950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.351909][T21950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.384382][T21950] bridge_slave_0: entered allmulticast mode [ 1018.412025][T21950] bridge_slave_0: entered promiscuous mode [ 1018.422298][T21950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.430701][T21950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.438624][T21950] bridge_slave_1: entered allmulticast mode [ 1018.446331][T21950] bridge_slave_1: entered promiscuous mode [ 1018.590193][T21950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.613891][T21950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.743476][T21950] team0: Port device team_slave_0 added [ 1018.883651][T21950] team0: Port device team_slave_1 added [ 1018.994772][ T5792] Bluetooth: hci3: command tx timeout [ 1019.142030][T21950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.422832][T21950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.624740][T21950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.015366][T21950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.053047][T21950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.112331][T21950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.192324][T21992] veth0_vlan: left promiscuous mode [ 1020.293271][T21992] veth0_vlan: entered promiscuous mode [ 1021.017261][T21950] hsr_slave_0: entered promiscuous mode [ 1021.056133][T21950] hsr_slave_1: entered promiscuous mode [ 1021.094514][ T5792] Bluetooth: hci3: command tx timeout [ 1021.113006][T21950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1021.136724][T21950] Cannot create hsr debugfs directory [ 1022.170318][T22027] veth0_vlan: left promiscuous mode [ 1022.237659][T22027] veth0_vlan: entered promiscuous mode [ 1023.158894][ T5792] Bluetooth: hci3: command tx timeout [ 1024.037997][T22050] netlink: 'syz.1.4954': attribute type 21 has an invalid length. [ 1024.330593][ T2960] hsr_slave_0: left promiscuous mode [ 1024.454201][ T2960] hsr_slave_1: left promiscuous mode [ 1024.507013][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.531696][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.635628][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.671794][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.715535][ T2960] bridge_slave_1: left allmulticast mode [ 1024.742657][ T2960] bridge_slave_1: left promiscuous mode [ 1024.770537][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.806860][ T2960] bridge_slave_0: left allmulticast mode [ 1024.829520][ T2960] bridge_slave_0: left promiscuous mode [ 1024.860096][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.066168][ T2960] veth1_macvtap: left promiscuous mode [ 1025.086933][ T2960] veth0_macvtap: left promiscuous mode [ 1025.092727][ T2960] veth1_vlan: left promiscuous mode [ 1025.125036][ T2960] veth0_vlan: left promiscuous mode [ 1026.477289][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 1026.533060][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 1026.590773][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.642444][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.069561][ T2960] bond0 (unregistering): Released all slaves [ 1027.609573][T21950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1027.702391][T21950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1027.743621][T21950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1027.779988][T21950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1028.168215][T21950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.321733][T21950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.388816][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.396122][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.451285][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.458563][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.723630][T22103] netlink: 'syz.3.4966': attribute type 21 has an invalid length. [ 1029.425644][T21950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.715913][T21950] veth0_vlan: entered promiscuous mode [ 1029.793440][T21950] veth1_vlan: entered promiscuous mode [ 1030.099173][T21950] veth0_macvtap: entered promiscuous mode [ 1030.202174][T21950] veth1_macvtap: entered promiscuous mode [ 1030.262008][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.360202][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.440521][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.475649][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.488535][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.499721][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.519744][T21950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.596795][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.626589][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.649036][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.675569][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.699393][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.734273][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.775847][T21950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.787921][T21950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.807083][T21950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.826703][T21950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.848154][T21950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.874067][T22138] tap0: tun_chr_ioctl cmd 1074025681 [ 1030.881187][T22139] tap0: tun_chr_ioctl cmd 2147767517 [ 1031.461954][ T4803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.507144][ T4803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.635643][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.644075][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.585431][T22167] tap0: tun_chr_ioctl cmd 1074025681 [ 1032.592432][T22167] tap0: tun_chr_ioctl cmd 2147767517 [ 1033.583673][T22190] veth0_vlan: left promiscuous mode [ 1033.758682][T22190] veth0_vlan: entered promiscuous mode [ 1035.040497][T22208] tap0: tun_chr_ioctl cmd 1074025681 [ 1035.047917][T22208] tap0: tun_chr_ioctl cmd 2147767517 [ 1035.061243][ T5792] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7 [ 1035.597921][T22218] netlink: 'syz.3.4987': attribute type 21 has an invalid length. [ 1035.720820][T22219] syzkaller0: entered promiscuous mode [ 1035.729917][T22219] syzkaller0: entered allmulticast mode [ 1040.288206][T22247] veth0_vlan: entered allmulticast mode [ 1040.295274][T22250] netlink: 'syz.1.4996': attribute type 21 has an invalid length. [ 1040.892477][T22259] tap0: tun_chr_ioctl cmd 1074025681 [ 1040.944585][T22259] tap0: tun_chr_ioctl cmd 2147767517 [ 1044.315266][ T5792] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10 [ 1045.067523][T22296] tap0: tun_chr_ioctl cmd 1074025681 [ 1045.136663][T22297] tap0: tun_chr_ioctl cmd 2147767517 [ 1047.488971][ T5792] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10 [ 1048.455718][T22324] netlink: 'syz.3.5024': attribute type 21 has an invalid length. [ 1051.990385][T22366] netlink: 'syz.3.5036': attribute type 21 has an invalid length. [ 1052.188326][ T5792] Bluetooth: hci3: unexpected event 0x3c length: 15 > 7 [ 1052.698683][T22380] syzkaller0: entered promiscuous mode [ 1052.717618][T22380] syzkaller0: entered allmulticast mode [ 1052.855432][T22384] veth0_vlan: left promiscuous mode [ 1053.013618][T22384] veth0_vlan: entered promiscuous mode [ 1054.998168][ T5792] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7 [ 1056.811485][T22404] netlink: 'syz.3.5051': attribute type 21 has an invalid length. [ 1057.812228][T22437] netlink: 'syz.2.5063': attribute type 21 has an invalid length. [ 1058.618988][T22441] netlink: 'syz.2.5072': attribute type 21 has an invalid length. [ 1058.973132][T22447] syzkaller0: entered promiscuous mode [ 1059.000647][T22447] syzkaller0: entered allmulticast mode [ 1060.211099][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.219363][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.287470][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 1065.370711][T22475] netlink: 'syz.1.5077': attribute type 21 has an invalid length. [ 1067.630535][T22505] syzkaller0: entered promiscuous mode [ 1067.638139][T22505] syzkaller0: entered allmulticast mode [ 1071.262552][T22510] netlink: 'syz.2.5086': attribute type 21 has an invalid length. [ 1071.282534][T22521] tap0: tun_chr_ioctl cmd 1074025681 [ 1071.289564][T22522] tap0: tun_chr_ioctl cmd 2147767517 [ 1073.091958][T22551] veth0_vlan: left promiscuous mode [ 1073.230105][T22551] veth0_vlan: entered promiscuous mode [ 1073.537458][T22554] netlink: 'syz.1.5105': attribute type 21 has an invalid length. [ 1074.131926][T22560] tap0: tun_chr_ioctl cmd 1074025681 [ 1074.150273][T22560] tap0: tun_chr_ioctl cmd 2147767517 [ 1076.109482][T22580] netlink: 'syz.3.5116': attribute type 21 has an invalid length. [ 1076.786522][T22592] tap0: tun_chr_ioctl cmd 1074025681 [ 1076.816995][T22592] tap0: tun_chr_ioctl cmd 2147767517 [ 1078.666076][T22608] netlink: 'syz.3.5128': attribute type 21 has an invalid length. [ 1079.093788][T22613] netlink: 'syz.1.5138': attribute type 21 has an invalid length. [ 1081.128546][T22635] netlink: 'syz.1.5140': attribute type 21 has an invalid length. [ 1092.615363][T22740] veth0_vlan: left promiscuous mode [ 1092.695989][T22740] veth0_vlan: entered promiscuous mode [ 1093.301239][T22752] tap0: tun_chr_ioctl cmd 1074025681 [ 1093.319017][T22752] tap0: tun_chr_ioctl cmd 2147767517 [ 1093.562480][T20860] Bluetooth: hci0: unexpected event 0x3d length: 15 > 14 [ 1094.133663][T22767] tap0: tun_chr_ioctl cmd 1074025681 [ 1094.199154][T22767] tap0: tun_chr_ioctl cmd 2147767517 [ 1094.423006][T22770] tap0: tun_chr_ioctl cmd 1074025681 [ 1094.430428][T22770] tap0: tun_chr_ioctl cmd 2147767517 [ 1097.601900][T22818] syzkaller0: entered promiscuous mode [ 1097.659146][T22818] syzkaller0: entered allmulticast mode [ 1097.750194][T22822] tap0: tun_chr_ioctl cmd 1074025681 [ 1097.758851][T22822] tap0: tun_chr_ioctl cmd 2147767517 [ 1101.106939][T22842] tap0: tun_chr_ioctl cmd 1074025681 [ 1101.115058][T22843] tap0: tun_chr_ioctl cmd 2147767517 [ 1101.510601][T22850] tap0: tun_chr_ioctl cmd 1074025681 [ 1101.540107][T22850] tap0: tun_chr_ioctl cmd 2147767517 [ 1102.065441][T22862] tap0: tun_chr_ioctl cmd 1074025681 [ 1102.071990][T22862] tap0: tun_chr_ioctl cmd 2147767517 [ 1102.584767][T22866] tap0: tun_chr_ioctl cmd 1074025681 [ 1102.603878][T22866] tap0: tun_chr_ioctl cmd 2147767517 [ 1103.241241][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 1106.866129][T22906] tap0: tun_chr_ioctl cmd 1074025681 [ 1106.900659][T22906] tap0: tun_chr_ioctl cmd 2147767517 [ 1107.109812][T22911] tap0: tun_chr_ioctl cmd 1074025681 [ 1107.140145][T22911] tap0: tun_chr_ioctl cmd 2147767517 [ 1107.172410][T22913] tap0: tun_chr_ioctl cmd 1074025681 [ 1107.179753][T22913] tap0: tun_chr_ioctl cmd 2147767517 [ 1112.323570][T22938] netlink: 'syz.1.5263': attribute type 21 has an invalid length. [ 1113.020582][T22949] tap0: tun_chr_ioctl cmd 1074025681 [ 1113.028087][T22949] tap0: tun_chr_ioctl cmd 2147767517 [ 1115.985257][T20860] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7 [ 1116.214598][T22956] tap0: tun_chr_ioctl cmd 1074025681 [ 1116.228290][T22957] tap0: tun_chr_ioctl cmd 2147767517 [ 1118.005994][T22974] tap0: tun_chr_ioctl cmd 1074025681 [ 1118.083304][T22974] tap0: tun_chr_ioctl cmd 2147767517 [ 1118.597357][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 1118.981721][T22986] tap0: tun_chr_ioctl cmd 1074025681 [ 1118.990544][T22986] tap0: tun_chr_ioctl cmd 2147767517 [ 1119.181437][T22990] tap0: tun_chr_ioctl cmd 1074025681 [ 1119.189013][T22990] tap0: tun_chr_ioctl cmd 2147767517 [ 1119.957918][T20860] Bluetooth: hci3: unexpected event 0x3c length: 15 > 7 [ 1121.639888][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.655086][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.211672][T23004] tap0: tun_chr_ioctl cmd 1074025681 [ 1122.221662][T23004] tap0: tun_chr_ioctl cmd 2147767517 [ 1124.039198][T20860] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7 [ 1125.532602][T23029] netlink: 'syz.0.5301': attribute type 21 has an invalid length. [ 1126.748309][T23045] netlink: 'syz.0.5312': attribute type 21 has an invalid length. [ 1129.164608][T23061] tap0: tun_chr_ioctl cmd 1074025681 [ 1129.170154][T23062] tap0: tun_chr_ioctl cmd 2147767517 [ 1131.366133][T23083] netlink: 'syz.0.5320': attribute type 21 has an invalid length. [ 1132.000364][T23088] tap0: tun_chr_ioctl cmd 1074025681 [ 1132.014571][T23088] tap0: tun_chr_ioctl cmd 2147767517 [ 1134.560978][T23088] ------------[ cut here ]------------ [ 1134.566860][T23088] WARNING: CPU: 0 PID: 23088 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 1134.576957][T23088] Modules linked in: [ 1134.580933][T23088] CPU: 0 PID: 23088 Comm: syz.1.5322 Not tainted syzkaller #0 [ 1134.588702][T23088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1134.599156][T23088] RIP: 0010:perf_pending_task+0x357/0x480 [ 1134.605022][T23088] Code: e8 3e ce d5 ff 84 db 75 10 e8 a5 cb d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 95 cb d5 ff e8 a0 f9 4e ff eb e9 e8 89 cb d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1134.625103][T23088] RSP: 0018:ffffc9000c8e79c8 EFLAGS: 00010293 [ 1134.631436][T23088] RAX: ffffffff81b1a397 RBX: ffff888030824770 RCX: ffff88805f8fbc00 [ 1134.639720][T23088] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1134.647940][T23088] RBP: ffff888030824530 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 1134.657102][T23088] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffff88805f8fbc00 [ 1134.665457][T23088] R13: ffff888066557930 R14: 0000000000000000 R15: 1ffff110061048a6 [ 1134.673552][T23088] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1134.682757][T23088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1134.689812][T23088] CR2: 0000000100000000 CR3: 000000004943e000 CR4: 00000000003506f0 [ 1134.698069][T23088] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1134.706238][T23088] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1134.714432][T23088] Call Trace: [ 1134.718027][T23088] [ 1134.721015][T23088] task_work_run+0x1d4/0x260 [ 1134.725905][T23088] ? task_work_cancel+0x220/0x220 [ 1134.731109][T23088] do_exit+0x986/0x2530 [ 1134.735409][T23088] ? put_task_struct+0xc0/0xc0 [ 1134.740262][T23088] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1134.746448][T23088] ? get_signal+0x100e/0x1390 [ 1134.751208][T23088] ? lock_chain_count+0x20/0x20 [ 1134.757448][T23088] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1134.762719][T23088] do_group_exit+0x22d/0x2f0 [ 1134.767639][T23088] ? lockdep_hardirqs_on+0x98/0x150 [ 1134.773016][T23088] get_signal+0x12a6/0x1390 [ 1134.777752][T23088] arch_do_signal_or_restart+0xc2/0x7b0 [ 1134.783474][T23088] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1134.789563][T23088] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1134.795866][T23088] ? get_sigframe_size+0x20/0x20 [ 1134.800919][T23088] ? exit_to_user_mode_loop+0x3b/0x110 [ 1134.806575][T23088] exit_to_user_mode_loop+0x70/0x110 [ 1134.811946][T23088] exit_to_user_mode_prepare+0xee/0x180 [ 1134.817627][T23088] syscall_exit_to_user_mode+0x1a/0x50 [ 1134.823195][T23088] do_syscall_64+0x61/0xb0 [ 1134.827763][T23088] ? clear_bhb_loop+0x40/0x90 [ 1134.832626][T23088] ? clear_bhb_loop+0x40/0x90 [ 1134.837546][T23088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.843514][T23088] RIP: 0033:0x7fad3999e019 [ 1134.848622][T23088] Code: Unable to access opcode bytes at 0x7fad3999dfef. [ 1134.856133][T23088] RSP: 002b:00007fad3a8b80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1134.866128][T23088] RAX: fffffffffffffe00 RBX: 00007fad39c25fa8 RCX: 00007fad3999e019 [ 1134.874851][T23088] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad39c25fa8 [ 1134.882899][T23088] RBP: 00007fad39c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.891610][T23088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.900210][T23088] R13: 00007fad39c26038 R14: 00007fffe090bc40 R15: 00007fffe090bd28 [ 1134.908731][T23088] [ 1134.911813][T23088] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1134.919276][T23088] CPU: 0 PID: 23088 Comm: syz.1.5322 Not tainted syzkaller #0 [ 1134.926888][T23088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1134.936998][T23088] Call Trace: [ 1134.940330][T23088] [ 1134.943365][T23088] dump_stack_lvl+0x18c/0x250 [ 1134.948096][T23088] ? show_regs_print_info+0x20/0x20 [ 1134.953337][T23088] ? load_image+0x420/0x420 [ 1134.958082][T23088] panic+0x2ca/0x720 [ 1134.962071][T23088] ? bpf_jit_dump+0xd0/0xd0 [ 1134.966670][T23088] __warn+0x2e0/0x470 [ 1134.970701][T23088] ? perf_pending_task+0x357/0x480 [ 1134.975934][T23088] ? perf_pending_task+0x357/0x480 [ 1134.981113][T23088] report_bug+0x2be/0x4f0 [ 1134.985584][T23088] ? perf_pending_task+0x357/0x480 [ 1134.990837][T23088] ? perf_pending_task+0x357/0x480 [ 1134.996000][T23088] ? perf_pending_task+0x359/0x480 [ 1135.001166][T23088] handle_bug+0xcf/0x120 [ 1135.005537][T23088] exc_invalid_op+0x1a/0x50 [ 1135.010130][T23088] asm_exc_invalid_op+0x1a/0x20 [ 1135.015048][T23088] RIP: 0010:perf_pending_task+0x357/0x480 [ 1135.021089][T23088] Code: e8 3e ce d5 ff 84 db 75 10 e8 a5 cb d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 95 cb d5 ff e8 a0 f9 4e ff eb e9 e8 89 cb d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1135.040746][T23088] RSP: 0018:ffffc9000c8e79c8 EFLAGS: 00010293 [ 1135.046855][T23088] RAX: ffffffff81b1a397 RBX: ffff888030824770 RCX: ffff88805f8fbc00 [ 1135.054874][T23088] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1135.062931][T23088] RBP: ffff888030824530 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 1135.070959][T23088] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffff88805f8fbc00 [ 1135.078972][T23088] R13: ffff888066557930 R14: 0000000000000000 R15: 1ffff110061048a6 [ 1135.086997][T23088] ? perf_pending_task+0x357/0x480 [ 1135.092169][T23088] ? perf_pending_task+0x357/0x480 [ 1135.097336][T23088] task_work_run+0x1d4/0x260 [ 1135.101983][T23088] ? task_work_cancel+0x220/0x220 [ 1135.107085][T23088] do_exit+0x986/0x2530 [ 1135.111298][T23088] ? put_task_struct+0xc0/0xc0 [ 1135.116118][T23088] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1135.122164][T23088] ? get_signal+0x100e/0x1390 [ 1135.126881][T23088] ? lock_chain_count+0x20/0x20 [ 1135.131771][T23088] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1135.136854][T23088] do_group_exit+0x22d/0x2f0 [ 1135.141498][T23088] ? lockdep_hardirqs_on+0x98/0x150 [ 1135.146764][T23088] get_signal+0x12a6/0x1390 [ 1135.151344][T23088] arch_do_signal_or_restart+0xc2/0x7b0 [ 1135.157119][T23088] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1135.163064][T23088] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1135.169181][T23088] ? get_sigframe_size+0x20/0x20 [ 1135.174370][T23088] ? exit_to_user_mode_loop+0x3b/0x110 [ 1135.179902][T23088] exit_to_user_mode_loop+0x70/0x110 [ 1135.185240][T23088] exit_to_user_mode_prepare+0xee/0x180 [ 1135.190940][T23088] syscall_exit_to_user_mode+0x1a/0x50 [ 1135.196454][T23088] do_syscall_64+0x61/0xb0 [ 1135.200919][T23088] ? clear_bhb_loop+0x40/0x90 [ 1135.205637][T23088] ? clear_bhb_loop+0x40/0x90 [ 1135.210365][T23088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.216312][T23088] RIP: 0033:0x7fad3999e019 [ 1135.220771][T23088] Code: Unable to access opcode bytes at 0x7fad3999dfef. [ 1135.227819][T23088] RSP: 002b:00007fad3a8b80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1135.236290][T23088] RAX: fffffffffffffe00 RBX: 00007fad39c25fa8 RCX: 00007fad3999e019 [ 1135.244301][T23088] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad39c25fa8 [ 1135.252319][T23088] RBP: 00007fad39c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1135.260365][T23088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1135.268413][T23088] R13: 00007fad39c26038 R14: 00007fffe090bc40 R15: 00007fffe090bd28 [ 1135.276449][T23088] [ 1135.280093][T23088] Kernel Offset: disabled [ 1135.284463][T23088] Rebooting in 86400 seconds..