last executing test programs: 24.658703198s ago: executing program 3 (id=448): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000080), 0xffffffffffffd95, 0x0, 0x1c}, 0x4000804) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x617, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f00000001c0)=r2, 0xa1) 24.63002092s ago: executing program 2 (id=450): perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffe}, 0x38) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x4, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x2004, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r3}) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000000c0)={'veth0_macvtap', 0x32, 0x31}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f00000000c0)}, 0x20) 24.523152026s ago: executing program 0 (id=451): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000007c0)}, 0x10) recvmsg(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x40000002) 24.413419283s ago: executing program 2 (id=452): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000030000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000efffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000072000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) (async) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x57, 0x0, 0x0, 0x0, 0xfffffffffffffea4}, 0x0) 24.312718469s ago: executing program 2 (id=454): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8", 0x19}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 24.312134699s ago: executing program 0 (id=455): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000008650e9a76d66b9a80000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xcc0f9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x100000000000000, 0x3fff7ffc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x402, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000440)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000014c0)={&(0x7f0000001000)=@caif=@dgm={0x25, 0x2, 0x1}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001080)="398679c6d5b78eaac85167abae27ecf4e9d3c5d253135e7b178a200ab165682aee20d35ba845150c92950ad45b1ebcee3909d5d575575602c1c7fda0c099b61546daf78a3179a12e3e743cebb00b0c2faec731eb05445e01fd4c3fb69638578bc6b84681a1a9f28494989e5527caafee398da0dd5083f1c01cc3221d1d776b2180ac6b87edb8e4c10a3271725583953fa3cca80744224a8aa2d84e2d27cf21bd55f96a8a589f5eac7dc18396d85d943c", 0xb0}, {&(0x7f0000000540)="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", 0x178}, {&(0x7f0000001240)="a1c63b01fb814ff4712075353812cd7a50c93e07fbc346f8d1662a1fdbfd6f5d90b1d879b5c4e20dd1746f1b0f0c1402faa45b6abe54e2741d799162254f4c125aaae89e57cc8f7a3484fbeebfc7bc0d2e634d07b33fcce7ab15edcf7d9f1eeb55", 0x61}, {&(0x7f00000012c0)="ca0709ae41b54704", 0x8}], 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="d80000000000000010010092516f2673c43c93ca72d409fe64c51754c718a37495e1d4761ee6d71385afe01755767e2a3b661a074dc6218f410e83ca717a6768639670b4bd96ef2b0f6289b47a919d858455e36ee1f888b4c992106765d9747f2cec57b9c22f368fcaefe8daaff4166073e235c95c76b7e8cfb00cf3074b3287222937ad83f4c8dc302ce359857406209df5a0b28f855c792167e8cad75951c12d8df3487c22f9e6f5b50dd48e3997293f03cca7d814cae99183ee41f91be7c8b23184e53cb29af2937fa18c826198983a00"], 0xd8}, 0x4000005) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10104, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x10, 0x3, 0x0, 0x1, 0xfffffefffff7bbfe, 0xfffefffb, 0x0, 0x0, 0x5fd}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000001500)='GPL\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00080000000000000000000000000000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000b477dc9093cf5e800000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff000000000100000085000000270000009500000094fd7340"], &(0x7f00000000c0)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0f000000010000000200"/28], 0x50) 24.311724289s ago: executing program 3 (id=456): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) 21.134593964s ago: executing program 2 (id=457): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'bond0\x00', @random="0134010100bf"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000900)={&(0x7f00000001c0), 0x6e, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/231, 0xe7}, {&(0x7f0000000740)=""/135, 0x87}], 0x8, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2000) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x9000, 0x5, 0x40, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000080), &(0x7f0000000100)=r6}, 0x20) r7 = openat$cgroup_int(r2, &(0x7f0000001000)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000001040)=0x92e4, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace5198a46700fe80000008000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) ioctl$TUNSETVNETBE(r9, 0x400454de, &(0x7f0000000000)=0x1) setsockopt$sock_attach_bpf(r3, 0x29, 0x3, 0x0, 0x0) 21.134182754s ago: executing program 3 (id=458): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8", 0x19}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x64}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x43}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2c, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000440), 0x4) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x42) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r7}, 0x18) 21.131685524s ago: executing program 0 (id=459): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0x3) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) socket$kcm(0x29, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10, 0x112, 0x10000}, {0x10, 0x110, 0x75e}], 0x20}, 0x40004) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100)=0x2, &(0x7f00000005c0)=r2}, 0x20) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r5, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x2, 0x2c, 0x3, 0x10000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7, @void, @value, @value=r7}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f0300efff000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 20.629431824s ago: executing program 1 (id=461): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 20.408231817s ago: executing program 3 (id=462): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x1}, 0x110047, 0x0, 0x7fffffff, 0x0, 0x80, 0xffffffff, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x102) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10, 0x2, 0x80002, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff0000, 0xffffffffffff7fff}, 0x0, 0x0, 0x800, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000"], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) 20.381899728s ago: executing program 1 (id=463): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000007c0)}, 0x10) recvmsg(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x40000002) 20.321811402s ago: executing program 0 (id=464): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x3, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x3, @random="68dcc6ea0163", 'ip6gretap0\x00'}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000001c0)="6c90e8ddce20730f705c9abc14b098ee7610e3", 0x13}, {&(0x7f0000000d40)="ba114e511f38b4ca751ecb24e8097d7fe21c299faa1d230dff10f7581b7daf78165cba43b770a24a74cf9df9330c71c04b5cece7bce64d9d00315b7d5c77ce0dd435ab4dfbaa3dbb0be281742d8fa32f499f8d53f90701c8438e64539ef641ddd4d7de6d8a2fe7705d8cb7a96e964ee2b054d23c02404e652dcab1afe810ab387c390bb5fcc247941c7d66c792cc730f28232ce2e0c92e27b4f54ad07d01c3daab6928a7425f51e0ee9aa4a62f12d1e4045098a34a3982ea52a12d86700bd44cb9851dfb06915e717c7b4dd05c687836095b836dc8c830ed58b51ba004e59f79d1e0e714dd1e", 0xe6}, {&(0x7f00000003c0)="abbd5b7f94a6260d64eb5cfec8f1de2c89f159ca998c950d9651d5b9f98919ffacd6d34b48a29289734215b2de281f7d117d8a8fed28b6dcf8dd805ebef1433f33354a7d82511c6b24fb452527846ecd07b8e5", 0x53}, {&(0x7f0000000e40)="375fe3148485862b25c3657b89538b3e1581d444e631237af31aeb3136515e98497939ea7817ab6a501d56a2532bff1a4b890a08b358f51b527c7f871ce63b19c5049a0d4974f378cd71a1dd61098a57205afadf80c25f43c4856779faac8807711fceea98cbee78fb0a28d160fb81c7ed6bc2b2244eea75c1573a7459b8037dac832cca62ce42ad470ea3f7dfb9c7f9b06e4e245724540a5e7bf3d8349251d37b14577416fd118da41ff6391be30b9fe5e71aeeb47da5b99a8e9f85abe43f38a3962e705f101a2a691ca562a8a2442b9e1cfbc4cd60ae9b90306ef7dab765adf27716b8dd36e6802d22ff5c464a923c5b5e", 0xf2}, {&(0x7f0000000f40)="3ca79cd090669f44b5e55f17066c8883c4b2dc62823997a0c3b4396647d040af419936c41439765fcc7171f826d025631fe6eef011e6101a3fcfde7b66a3d994963ab8696114aebed1db7731a7444dbf24fa3f8f211978ba2958fc6422f082c92fc19179fecd1e39d9d8972c560647da2b001a4fa706dca6894fb75111ad21e3a0ccb6bb8a6e7c70563d5f9cc44a2f3c53365bd34e0ee4e2f007e62d015668cca21da8da12bf52dfef640076ea790420196ce827dbe1ba6a010660fc9f413955df2c38419969c7b71da6e54a4f10c23113ce86a7343246b5beb5243cf32fd2bb9892047d0a4a2cd3b37690e5233af6cb5fbe1f17", 0xf4}, {&(0x7f0000000440)="54422f9bb64dfb8481a566d4d8e23e9f612be90b0d3b45dd5e130396ef7c4ec11ed85c0c6c7cf2c9874cb59009eb7393623a504a47fd98a5f9a9cab33671", 0x3e}, {&(0x7f0000001040)="a76e04fa6c69e5d84247056b028f709f086885ba7443233752877df79d965f2c4122f7e356a38a72e6a8680c97daff5ed41c8f5c48377507505be654de795672c417ed18009bec79fea6f3353bd83d2d052299318bfb25388e0a1dd4122cc1a86f7188e9a7ccfe88326f89d752d52bca1e09cdeac80e9fdcc01bea197bef215c6a47855b71cafac6805d316e8f55dc66f2087780ca89d904445827426a6bcac338e593510c0234101c8990dde2a88cffb93b62a768bd91a0fd46da13200129e59aad", 0xc2}, {&(0x7f00000013c0)="48911b1f6a1c9a0ae3b2d1a616abb00dc2118292320bf3cf1c59826dcacff3282af95a03cc9d258f02f9a65e10ffa39bec51d9a1771eadae4e1c35a665ef6643c16605a7445ae3a468c5c52754607b1124461cbfc275276b5ed5bb3244c3e483f53760dfee570e5d3cdb1512a039fe50de264e25c30aea462f7ac2130d82d62c89e6b6a18720fa8e55d922e3360f14e926ff0b60ec96051b4bf37dfce39effd4648fbb7346737fe9c0ea9383e7a2302ef48c228272feabf1cb9054231a6eefdb4ad8cf9e5194e8e79a29fa340273dc61b9a525c69bacd8756bfc65b6a95a882dec6c79d1fb13b1b1e6db20009881589c3c3f8847775cdeebc78b7c069f6863fed18a34bda621ecd273e1194a9a2312793769ab880791f87cc54eb3d707124bf14717f0aecb74a55d96d3772953141f03ea5c0d298a74d258d5b7b75b824df3d36da7ea6ba6f429f7da21cfac374b13a0398cc5c3c75c6561e3bd08f5c30aae7696a5ec83939b58660ac001a43e52ff2960544a6476ded35c1f5bb3721f0db6f019657304b6ccf65eda91b5135d557f6ed1838f8054bd91e59c178091e7317c7dcefe4153655898948bebfbe5829d1243f89ce242f13e101549ed2bb57bcaf8d3b86773cbeb7f9585f02a6470b277b7265151282b84a673623d0cee11221a74774e33a3ccbad0e7b1b29801884fdae5835325fa84efcf26de738f4b92888129259ac472f7d14faeb41692a986d38a30729ead4a4fa8c09cdcf4d04b61cff694dc73fee908ba76204e582c40bc4e87ddd4cb4b5c48d60edf1027590c5cbda4212138fb7896b967577be4d470f2be2ab6b1640ea53046b9152a21c0bc7dd4367e5b3255ab30e061674913b4631ea17318708718381e8e866a74bf8d2dcb74317a2a23bb5817019b6dd555c5bac472c2a8a241f207ea23637a457a0f381b02c49841d5d72ad4db3862faaa613fd5f26243a0c3ebbe03c98dc3f76a471d40a86621087b597bd19aff9c4df05effccef7a1bd7fa068d36d5d5c6c500b33d72f389a3410d07f2af4b7f34c83b60ef242136049a7659939062bfeb32a52f95e4264eaf49130f9841f86eb8e6c906133234b9af1db2bc46e4f57c4079456bb5c3f5c3667a4a6d4b9ce490a73705ee054dd5ab574e8199c585b593eb8c4abee2ea16d6b5c940451d575c87bfc6eb485aa4de15405d60c043f0f298531e0661db105a2228873c98cc4b51328c890c3a0a57a0e6afb6c4deddb3c1d9dd2c97c78b6b31ec655f8877c7039333e4014837b680e09334648630e4e28cd3f4438d0d213d116595154a2b5eadde4c5a55664abc6f661565d2cd9a9af230419945b7b25602dfa0d9d946af6e519f21f3ceb76beb5b92a890825cc5bdf2b06e5cbba9a4d11ed9a56a343c6d0a4303cc34a056b5c69ac873f875c49c88476cdd64d1e0bcf1d7569db3d399b7adf8e9fb54771da01417823992a8e5f6518a7f088401d4f5bb8ffd2d8c6785258731648b0231a4aadc683bace9b7cc7299d04357f3e443f30027684923a58125667f559c459d244c4631c5fc5a08ee3bc90d278266325536dae326073adb21d2b71440a04d69b0afe7af9b8b94c63587e8740cee0f8059579cda4d35c323b5ade69829e2273558d883d9f20ec030abe4c09d1272430b5b5494732501b56c5fffc69d49e34fd817feffdf67c817fa24ef5ca467f3767b1523c790a5e570972779ca7b53978badf91bd1f876f81060f27fcefcd80a95b35be536608c0dd2b33db4ddbf8e1d44b181636843e18148ac2643572da67e11aeb08ed0c95e60b4cd4cef71647fced70f321f91e33a993e77be57bb7686adf2bebe3be0bd7ea4410d0161c7ec8a1b567460d4c1ab091804866e125c5d072b5002e5e11cd0f1deeef7bfbf21e54f77202e453318215e6de399ff14b6c83f41ceeaccba306d8075466e17877cc17be0692f3968690f9cd625ec9768b7ad90801a92d56573dd720206de348123cc05b325156e5fa57186a58445bd7a339c2b146e71f43bc39ab0a8d80075c93b1c25d1382f53b5f97288665f152ca2f0b9369c01553af30f5a0190505393f03badd7f37c82b6207a6877549c3475052c8c5431c42374848602e4db5798d8b9836230bc0bdeea116517f4c17159e3219669928261d1bfa2a07aa9779792d885f1357a00d378f86dfd37dec3338168e7e1a1a518148ec189227084137385272ca95a98797baa29aa9673650e269dd3bf54775ae6d7ff1931f39a51744c41f379555f293ccba7b8ab7be543e954b29347068ec2b44900ea360a6ebf11407d51ad0da0c493b9ec8be1d1b3a6121d2c646912fbcaffe23d24f5f7673c283eab121f9a1b3893b2be3cb2cdae8a5cb9d251ce516624f89869096e860ebaa94a056a23f9893870b293bd3a6c88970bb0c73b3fd6639f8b048e662d98207ac34181e8e4b730598306b20521a2abe6955785da7b65489be673d6da52fac79e3a7851e25c9d566f7b671dfcf85e7911a40b037d985695d474c766327e858a18a92dd158aabfe04de25b78d0bf820842c072bc8234295829f07ce99bc0fda31c4e5b5bfb3362343931c50daa9281986995736504f62981642d2cd68f600a238038c16352b07ee2959e9859638175d41c992073844aa6fcdd3bea7c368974da45f7b7a1a105ac865d99c37c207b1a4408fe89fed40c23934db75177286c9e5057e81f1f8d2c559c1721744211e5a0017f41aeacbe6e7ca247899697a05982bf8d7853799272b3a1de4426dd9c2290e47b9e424a1921ec38ca075a7f4deea7edfddd79c84fb801524308ba3df6d03d34f6a0b0d9ea9f9148b17416dc1878fe15adec748b06fe486afbc1fce23580c3806c227f35cb15f8c96bdeed5b58bf920f21eaa581ccb8b57c660da31b1b2cf10ef178be5a744963f67c4e37956cdf1a8498921405acbde1004ba5733209152875f8b883d16128bfb766fd543a9230956674c12e4c1f8858593e700b17e8f577ffe5f291a584e81a1164f67057fc03fc1e4cb42bf8f8767f20fdb0b3e3e933c1539e79791f8982a6519f7128850543ec9e577b83b02b7d67bb0cc8617b22bfdf035e7d86f2dee1a4b083ef208d740480f175cc82a12514cda6de12314e431c3ec5a9e12ae7c19901755627451114a69050f6bc1b94f826c1b0cc84f4e5601fa24e001b09de3161b4cb512546de32ee37795d344bc3f884bbcadb6333538ee627887267bfc55958656c62942a0551bc8f7d2ab727ea58c59f31391d71ab96c4482a1ad1b1e1c1a21b54076a9b0a49b44c6bd232f9a63e2b79bd7983013cb60f8a001af018ef8112067de7bf7c4e8403ddc6af7009652eff7e2f32cd1a5032f1a9a70a80c4abe4761d2ccd06d63e956d7f90a812c3ea5044c867f3bf6f40167e0c3fdfbe70ad2d22cea811799a4fa3e7d7dda1f9d57452ebb7df82657fd21887db5634cbe088a654ffcce9399ff1db2de2603c20e0d8a35dc4394f1b49840fe9d99d8a964007ebcc10abe2c98f67d8b8f684bd6083ccec6d1f5e0f19a4658d2eeb994e7fbaf0a01cba0e671dfc1c51fe6ff9371f3a970a87feccecc66858c4d2efb6ba0be109317526025471fbd3ad10a5b501c6e051380df944b08972c628e1a10b1c6d02410c44fe6a38949dbe9a3db2450794990199c2f45f5dc1a892da86e9420b820be346d0732a32905f19b5b52438ed8e7b1eedc97c013fe3a1b1cf47844ae82fa5d57b27c8e90d2029720fc500cb91b00190649af284397121f26a877c7008676d3733b33a45b62b54db203002a5d2f3c41d6b0f221a4e85aba365cc5ccf9625cb369c12a31eddd79f1103aeee50176217ff10fead3d3cf55187e6522cc752cdc665c1be6e2830bf7245870b082651b68e397d6bed0d5c96ac789b990b95fe367f0c4e93bfbed0379faaa87acd4314d130e56d08d8c7d7c9981edb3102ce77be121979ae3781bb0d54dd5d45c465833dad061dff1c041585c03ef0ebd64e962baea1ea3982506cf59b866db83197c73701fa68cdf5caee2c7afdde3c8cb2611172cb624d8d4684a3a0da8112ff467757450467029b4e8d65e3edffdc3e979fac54d5775336df9669e9f26e5ec5af020f1afe9a1a5802077ecbbf3757ef1a9d4391c23280eff9eed57b6ba7b7f24ea3010eac63ac71b4c8b7670bebab311d95eae3462f718c09d9cad430a742920c3fa08af9351b41d5ebf727d102ac55f8d0db0dfc752d2b7b441334e7f566e3d4da15b816aa8a2662e89fff89c3944be7e5c264bc5b4b14ff86f6e5505f7277ad8fd3abd1f8067342234f0ab73184d0020ef559d73a6dd4c10076ba744bbe913eee5797b6763de8869d049163c736e24ffbc34499d32daafecea4ec98f7e67093ae1af79a0f0a989269105b28b559527f178227a11622dc5ce7ea49ccfb4d35c4d29ba87c5261197a0cedfb64ad70c9ba52586077798e04efc0893990fda5923f5d7ffe8ce27097e669083011d40f6ae11c0450264398849196a43d65fde99df7ae37442b8527df4cba966756f190fafed0afe5547cd6d7a34427d11cc10fe31eab1109d10fac73ccec7a7ca3782c8d7a3ce4750620fe054ff6146a37970278e7a9d26b719767b165ec65069f6e71d7eb3b484debcae4d0dc8d3d7b20bac6391ddba9dfd0cb7d656284329a4a1cbc410dd25a0948e39b245019c2610d651fd5e76426f469d5e7aa11b752fea0c77885e30cb5bd5875e5651846104a196fcf5d34058afdc104c03b07947a1d8832037c6eca2d26462ecec868ca09ba04a2839c6651476895aaeee9b425800824fdfe1cad82e5b4212b8ae3d58861ca58a971d54cf7ff5f7e7796931a7580c7297cd3f3286b0b21e9c665c103dc048f9eca06a731191dffb9f4386372be11a21ca28a9cfe082102a779136d64f05b71e868f1d7725516b34d56182565092815d0f900a782caffe68024458c0a35d56dea023ddb8f8a56e3102079000dcdc1d4a18f861d152b3a959ef28661a03a68d0ad5660bf7aed49f4b1983b989894f54866cbebe3cf08bef00f4258863f2d5862418dafc881ad5d543f6325711048419463babb18a5c272226a970162ef25eb39f407aa4c60f9c4cb67e39b484eb846990eaebbb742f66a46580c18c0c2fd7acb7cfaa9b00b4275ff1e4da110ecb8d4c0ec897285ab5bab1fa2027fb0ea2be0f454e28f3d0b05199c2b5e141180da1ac5918f8cc0d0103b9932ac229561be6119bf10ed67a14363a630f35ef72a13382c44f81c86beb441bf16dbd0954b5d07dd9e6ad84e6e9ab09e5509938d7a51ecc01e5931ab29cab68e2ddb5b07e6ee43b912758b400402c98cc9f1bb2cf51366e742f96c1ff794db7c26a9a50a97b20b27d18b2d7ecc4c70661ac6d1d31c37a2bfc23e515f9029d29e71886fdeddc065120a76ae098fe0118fffbcb62473baa9fcdb6e1b2a04652363743d69746725b2782b6632a3c1782ee4bad249664f542b8ba765de9588a947b0954cb377d58b346653d4e7d893ecd63a11d6727b44f498c4e8393cb783664cbee3b972f12aae19e1260b5e5ae9d15015f58aad91683c2a81bccc687349c0c2721111c42c579024343461ecc0c65a0dfd9ef3e72929dcdbea4cc28c5c31cf69aad4febcc7c134cd3ccfc79482d7061cd66904c485bacb652bdb9c8685d0534fd2c9dfec6916dc1c446a902f7ea3292a3405c36f757c67b66d35e669b4ac1023b3522eb2bf08faa205b148a09e39149494705e0c18c8a85427c95b272b86ed4e18df2d3435c377a88b28b315c3b5a7dc1ff4", 0x1000}, {&(0x7f0000001140)="e705d5360b0a1d31d48fc792b44549c05a492893fe1949aab45a493384ed3e764229f95407b28447cefc0dcdd64033e9a1b725d9e208255882d29ef849d0e44c0ccad49b313eb8b7e051dce67c6a5db2a89d57d9529801bd65e1ba8b22092a823a6b437d9ce124041c5bf4baacf6ed9cb654751e886619c96c0e8b2a55ac5912e59d2a32e2f0192fb730a1660ab7b3a927a4a858e4f672989ea7cf87f7760fa88096f4bac6414c40de8325bfd9e8b5aeb09bc0ba0e6ad9918aeaef7a30ddf16d4330a1aed4f651008edfc35de12758d134de8075", 0xd4}], 0x9}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000780)=ANY=[], 0x0, 0x4a, 0x0, 0x1, 0x8}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000121800007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 20.17475612s ago: executing program 1 (id=465): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000a40)=ANY=[@ANYBLOB="2d33d8"], 0x27) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x25, 0x1, 0x0) 20.135837143s ago: executing program 2 (id=466): socket$kcm(0x10, 0x5, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0x0, 0x10, 0x1, 0x0, 0x1, 0x659e, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x7fc}, 0x11efa, 0x4, 0x98, 0x4, 0x2, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x1d}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, 0x0, 0x41) close(r2) gettid() socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 20.089437786s ago: executing program 0 (id=467): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.959856513s ago: executing program 3 (id=468): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8", 0x19}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 16.896217492s ago: executing program 2 (id=469): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x1}, 0x110047, 0x0, 0x7fffffff, 0x0, 0x80, 0xffffffff, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x102) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10, 0x2, 0x80002, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff0000, 0xffffffffffff7fff}, 0x0, 0x0, 0x800, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) 16.895184722s ago: executing program 3 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) close(0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x4}, 0x381}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x100000, 0x215b4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782db020000071d080006007c09e8fe08a104000e800a00142603600e1208000fc01e000406a80016c008000e6f94007134cff6d26efb8000a0ffa290457f0189b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a", 0xb4}], 0x1}, 0x40400) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000024000000000000000000000007000000441407"], 0x48}, 0x200040c4) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="08bfff52e31f072973ba1b433e2fc4379f388befab7fb6bdf06bdd47f909f0128abba1f5c64ea661300cabbe59", 0x2d}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x410080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000a00000000000000242332a32a6b91ed575dc2f034638029beeaaf38059c1479c10532e4a0c981a9eda894956752455b71e60c7177eaac8aee0e1ebc025b4a630e2a27ab0586f466ae6a3eee74a37ae4272f044cf5e27627fdfbd9425773aca75e4a3769ae799011", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.847216025s ago: executing program 1 (id=471): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.747166511s ago: executing program 0 (id=472): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8", 0x19}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x64}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x43}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2c, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000440), 0x4) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x42) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r7}, 0x18) 16.671300256s ago: executing program 1 (id=473): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000038730000000000000000020071123800bb49f02a176019ebc1662f84"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff73, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0xffffffffffffffff, 0x62) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="02000000d5"], 0xffffffffffffffe6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0xc, 0x42, 0x40}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000540)={&(0x7f00000001c0)="8f7497b8c2b4dcb2a00ff759d6a82b6d4692e30ed0cf105f2489b3f0323e2c91dab4", &(0x7f00000003c0)=""/45, &(0x7f0000000680)="de229fda27912faeadc991a5782a048254170c855263b919070756b65d054fa7c94668ae5df47117b13f8dee451876542a4f05e8cd470176afb1859bca9521a5655b5016798589cd91706b5b50dbdd03e21e7159598491213be467ff2892769236dfbe7fd39c951430bd8b69cf25ccd9f1ce996ca1", &(0x7f0000000700)="76db62282ddaab9e69f56a8a144bb66efdb82c7488c8479fcccbedddf5810c5f2e3a4f4d3cecc7f85976af1aea7e1d5042861d44348451ce9fcb0e506ebc66642feafaaecef99d14c5d8c625a54e9ee9448782f13cd143c6cc8d969b723a826aa4cf75995fac0cda719f37c6c0278cccac052aebda266a0ea5299c9af92eea32f2de8f", 0x9, r3, 0x4}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) close(r6) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x14}, 0x0) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/238, 0xee}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r3}, 0x38) 15.694581792s ago: executing program 1 (id=474): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x4, 0x0, 0x0, 0x21}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0xfffffffffffffe72, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @cred]}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB=','], 0x9a) close(0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x4, 0x0, 0x0, 0x21}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0xfffffffffffffe72, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @cred]}, 0x1c0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB=','], 0x9a) (async) 1.399514268s ago: executing program 32 (id=472): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8", 0x19}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x64}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x43}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2c, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000440), 0x4) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x42) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r7}, 0x18) 1.260241056s ago: executing program 33 (id=469): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x1}, 0x110047, 0x0, 0x7fffffff, 0x0, 0x80, 0xffffffff, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x102) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10, 0x2, 0x80002, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff0000, 0xffffffffffff7fff}, 0x0, 0x0, 0x800, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) 1.147802933s ago: executing program 34 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) close(0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x4}, 0x381}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x100000, 0x215b4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782db020000071d080006007c09e8fe08a104000e800a00142603600e1208000fc01e000406a80016c008000e6f94007134cff6d26efb8000a0ffa290457f0189b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a", 0xb4}], 0x1}, 0x40400) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000024000000000000000000000007000000441407"], 0x48}, 0x200040c4) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="08bfff52e31f072973ba1b433e2fc4379f388befab7fb6bdf06bdd47f909f0128abba1f5c64ea661300cabbe59", 0x2d}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x410080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000a00000000000000242332a32a6b91ed575dc2f034638029beeaaf38059c1479c10532e4a0c981a9eda894956752455b71e60c7177eaac8aee0e1ebc025b4a630e2a27ab0586f466ae6a3eee74a37ae4272f044cf5e27627fdfbd9425773aca75e4a3769ae799011", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 35 (id=474): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x4, 0x0, 0x0, 0x21}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0xfffffffffffffe72, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @cred]}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB=','], 0x9a) close(0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x4, 0x0, 0x0, 0x21}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0xfffffffffffffe72, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @cred]}, 0x1c0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB=','], 0x9a) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 81.159331][ T5752] cgroup: Unknown subsys name 'net' [ 81.271136][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.987256][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.574644][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.585726][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.612346][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.639151][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.652091][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.659693][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.660719][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.670944][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.682614][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.685857][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.693039][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.697783][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.705469][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.713705][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.725221][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.729482][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.739680][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.740554][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.754307][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.762351][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.771179][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.774896][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.785587][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.802900][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.282378][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 85.323006][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 85.409258][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 85.497333][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 85.526066][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.533488][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.541043][ T5764] bridge_slave_0: entered allmulticast mode [ 85.548437][ T5764] bridge_slave_0: entered promiscuous mode [ 85.588862][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.598780][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.606151][ T5764] bridge_slave_1: entered allmulticast mode [ 85.614142][ T5764] bridge_slave_1: entered promiscuous mode [ 85.649210][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.656566][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.664230][ T5765] bridge_slave_0: entered allmulticast mode [ 85.671493][ T5765] bridge_slave_0: entered promiscuous mode [ 85.710575][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.718691][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.726181][ T5765] bridge_slave_1: entered allmulticast mode [ 85.733875][ T5765] bridge_slave_1: entered promiscuous mode [ 85.799508][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.811627][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.818867][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.826171][ T5766] bridge_slave_0: entered allmulticast mode [ 85.833672][ T5766] bridge_slave_0: entered promiscuous mode [ 85.864150][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.884804][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.894918][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.902354][ T5766] bridge_slave_1: entered allmulticast mode [ 85.909470][ T5766] bridge_slave_1: entered promiscuous mode [ 85.928243][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.935729][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.943708][ T5767] bridge_slave_0: entered allmulticast mode [ 85.950700][ T5767] bridge_slave_0: entered promiscuous mode [ 85.961073][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.994440][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.002056][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.009273][ T5767] bridge_slave_1: entered allmulticast mode [ 86.016598][ T5767] bridge_slave_1: entered promiscuous mode [ 86.025957][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.049897][ T5764] team0: Port device team_slave_0 added [ 86.058927][ T5764] team0: Port device team_slave_1 added [ 86.067537][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.079953][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.144090][ T5765] team0: Port device team_slave_0 added [ 86.156587][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.190102][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.197534][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.223745][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.238311][ T5765] team0: Port device team_slave_1 added [ 86.246851][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.270018][ T5766] team0: Port device team_slave_0 added [ 86.278895][ T5766] team0: Port device team_slave_1 added [ 86.296756][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.303867][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.329965][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.394782][ T5767] team0: Port device team_slave_0 added [ 86.412146][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.419150][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.445409][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.475058][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.482181][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.508707][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.523126][ T5767] team0: Port device team_slave_1 added [ 86.540422][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.547662][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.576720][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.588623][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.595818][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.622810][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.656112][ T5764] hsr_slave_0: entered promiscuous mode [ 86.663438][ T5764] hsr_slave_1: entered promiscuous mode [ 86.718344][ T5765] hsr_slave_0: entered promiscuous mode [ 86.724845][ T5765] hsr_slave_1: entered promiscuous mode [ 86.731018][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.739810][ T5765] Cannot create hsr debugfs directory [ 86.757230][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.764468][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.790886][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.804629][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.811629][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.848345][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.854703][ T5769] Bluetooth: hci1: command tx timeout [ 86.859747][ T51] Bluetooth: hci0: command tx timeout [ 86.866134][ T5769] Bluetooth: hci3: command tx timeout [ 86.876988][ T5774] Bluetooth: hci2: command tx timeout [ 86.932033][ T5766] hsr_slave_0: entered promiscuous mode [ 86.938532][ T5766] hsr_slave_1: entered promiscuous mode [ 86.944946][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.952713][ T5766] Cannot create hsr debugfs directory [ 87.102961][ T5767] hsr_slave_0: entered promiscuous mode [ 87.117430][ T5767] hsr_slave_1: entered promiscuous mode [ 87.124009][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.131617][ T5767] Cannot create hsr debugfs directory [ 87.623810][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.644069][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.675727][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.718648][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.766627][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.787021][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.798818][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.817982][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.879438][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.900233][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.920355][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.944898][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.046994][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.058759][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.083137][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.094240][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.235474][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.277915][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.317675][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.348066][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.355474][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.368468][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.388793][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.396025][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.418530][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.425861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.443257][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.464162][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.471322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.517036][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.528237][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.555618][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.562839][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.615329][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.622558][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.676215][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.697279][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.704459][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.747424][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.754675][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.882832][ T5767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.915390][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.935862][ T5774] Bluetooth: hci2: command tx timeout [ 88.941343][ T5774] Bluetooth: hci3: command tx timeout [ 88.947164][ T5769] Bluetooth: hci0: command tx timeout [ 88.947231][ T51] Bluetooth: hci1: command tx timeout [ 89.245665][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.394540][ T5765] veth0_vlan: entered promiscuous mode [ 89.422974][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.458984][ T5765] veth1_vlan: entered promiscuous mode [ 89.471151][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.496108][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.564367][ T5764] veth0_vlan: entered promiscuous mode [ 89.591665][ T5764] veth1_vlan: entered promiscuous mode [ 89.609035][ T5765] veth0_macvtap: entered promiscuous mode [ 89.640351][ T5765] veth1_macvtap: entered promiscuous mode [ 89.670975][ T5767] veth0_vlan: entered promiscuous mode [ 89.697386][ T5766] veth0_vlan: entered promiscuous mode [ 89.717631][ T5767] veth1_vlan: entered promiscuous mode [ 89.736464][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.750096][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.778969][ T5766] veth1_vlan: entered promiscuous mode [ 89.800531][ T5765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.810931][ T5765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.820497][ T5765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.829377][ T5765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.907222][ T5764] veth0_macvtap: entered promiscuous mode [ 89.929309][ T5764] veth1_macvtap: entered promiscuous mode [ 89.952685][ T5767] veth0_macvtap: entered promiscuous mode [ 89.965892][ T5767] veth1_macvtap: entered promiscuous mode [ 90.001436][ T5766] veth0_macvtap: entered promiscuous mode [ 90.030975][ T5766] veth1_macvtap: entered promiscuous mode [ 90.045193][ T3049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.064676][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.072853][ T3049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.076574][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.097437][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.107998][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.119143][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.129573][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.140605][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.152836][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.194998][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.206894][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.220424][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.232577][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.244419][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.254853][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.265352][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.277007][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.288976][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.302402][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.315157][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.326986][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.336179][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.345809][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.365842][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.389930][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.399814][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.410809][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.445325][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.459307][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.470174][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.481076][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.491248][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.502263][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.514756][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.589804][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.610478][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.633664][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.644715][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.655050][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.666128][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.678486][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.740262][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.749830][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.759645][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.768882][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.813979][ T5857] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4'. [ 90.830429][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.849736][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.012115][ T5777] Bluetooth: hci0: command tx timeout [ 91.013567][ T5774] Bluetooth: hci2: command tx timeout [ 91.023264][ T5774] Bluetooth: hci1: command tx timeout [ 91.028780][ T51] Bluetooth: hci3: command tx timeout [ 91.128864][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.133595][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.139294][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.169552][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.185192][ T5858] netlink: 'syz.2.4': attribute type 10 has an invalid length. [ 91.261811][ C1] hrtimer: interrupt took 68654 ns [ 91.277397][ T5858] team0: Port device wlan1 added [ 91.324433][ T5856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.353954][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.377429][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.385834][ T5858] syz.2.4 (5858) used greatest stack depth: 19120 bytes left [ 91.493088][ T3049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.500986][ T3049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.572861][ T3049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.589016][ T3049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.900881][ T5867] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.142723][ T966] cfg80211: failed to load regulatory.db [ 92.275094][ T5874] Ÿë: port 1(ip6gretap0) entered blocking state [ 92.361455][ T5874] Ÿë: port 1(ip6gretap0) entered disabled state [ 92.369212][ T5874] ip6gretap0: entered allmulticast mode [ 92.380319][ T5874] ip6gretap0: entered promiscuous mode [ 92.409594][ T5877] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8'. [ 92.833852][ T5878] netlink: 'syz.2.8': attribute type 10 has an invalid length. [ 93.091999][ T5774] Bluetooth: hci1: command tx timeout [ 93.092900][ T5777] Bluetooth: hci2: command tx timeout [ 93.097549][ T5769] Bluetooth: hci0: command tx timeout [ 93.108476][ T51] Bluetooth: hci3: command tx timeout [ 93.223263][ T5876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.547330][ T5888] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 96.068150][ T5888] team0: Device hsr_slave_0 failed to register rx_handler [ 96.347201][ T5891] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12'. [ 96.359579][ T5897] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14'. [ 96.379809][ T5898] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 96.390135][ T5900] netlink: 'syz.3.12': attribute type 10 has an invalid length. [ 96.404033][ T5895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.497355][ T5900] team0: Port device wlan1 added [ 96.511682][ T5890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.534626][ T5888] syz.1.10 (5888) used greatest stack depth: 18224 bytes left [ 96.626947][ T5907] netlink: 'syz.2.15': attribute type 10 has an invalid length. [ 96.823361][ T5907] team0: Device hsr_slave_0 failed to register rx_handler [ 96.996872][ T5919] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 97.127563][ T5919] team0: Device hsr_slave_0 failed to register rx_handler [ 97.411710][ T5909] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 97.419561][ T5908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.471129][ T5909] team0: Port device wlan1 added [ 97.505675][ T5912] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 97.530069][ T5910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.590361][ T5912] team0: Port device wlan1 added [ 97.627700][ T5927] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 97.649610][ T5927] team0: Device hsr_slave_0 failed to register rx_handler [ 97.694851][ T5929] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 97.924443][ T5929] team0: Device hsr_slave_0 failed to register rx_handler [ 98.049058][ T5934] netlink: 'syz.1.23': attribute type 10 has an invalid length. [ 98.142311][ T5932] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 98.150579][ T5933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.215122][ T5931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.229932][ T5941] team0: Device hsr_slave_0 failed to register rx_handler [ 98.592484][ T5943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.676136][ T5950] team0: Device hsr_slave_0 failed to register rx_handler [ 99.297732][ T5946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.691554][ T5953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.397717][ T5948] validate_nla: 3 callbacks suppressed [ 101.397736][ T5948] netlink: 'syz.3.27': attribute type 10 has an invalid length. [ 101.412920][ T5955] netlink: 'syz.1.29': attribute type 10 has an invalid length. [ 101.660575][ T5958] netlink: 'syz.0.30': attribute type 10 has an invalid length. [ 101.718290][ T5966] netlink: 'syz.0.30': attribute type 3 has an invalid length. [ 101.736777][ T5966] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.30'. [ 101.840315][ T5971] netlink: 'syz.2.33': attribute type 3 has an invalid length. [ 101.848433][ T5971] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.33'. [ 101.983166][ T5958] team0: Device veth1_macvtap failed to register rx_handler [ 102.020914][ T5970] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 102.031257][ T5970] team0: Device hsr_slave_0 failed to register rx_handler [ 102.059873][ T5969] netlink: 'syz.2.33': attribute type 10 has an invalid length. [ 102.097319][ T5969] team0: Device veth1_macvtap failed to register rx_handler [ 102.395577][ T5959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.609616][ T5960] netlink: 'syz.1.31': attribute type 10 has an invalid length. [ 102.646069][ T5978] netlink: 'syz.3.35': attribute type 10 has an invalid length. [ 102.666192][ T5978] team0: Device hsr_slave_0 failed to register rx_handler [ 102.730474][ T5979] netlink: 'syz.0.34': attribute type 10 has an invalid length. [ 102.789857][ T5974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.009806][ T5992] team0: Device hsr_slave_0 failed to register rx_handler [ 103.505455][ T5997] team0: Device hsr_slave_0 failed to register rx_handler [ 103.541484][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.552220][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.772875][ T6006] netlink: 156 bytes leftover after parsing attributes in process `syz.0.44'. [ 104.477460][ T6005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.546719][ T6003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.848007][ T6026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.882457][ T6034] netlink: 156 bytes leftover after parsing attributes in process `syz.1.48'. [ 105.045769][ T6040] netlink: 156 bytes leftover after parsing attributes in process `syz.0.49'. [ 105.635327][ T6025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.665193][ T6033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.917580][ T6039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.910504][ T6047] validate_nla: 10 callbacks suppressed [ 107.910524][ T6047] netlink: 'syz.0.50': attribute type 10 has an invalid length. [ 108.011117][ T6047] team0: Device hsr_slave_0 failed to register rx_handler [ 108.042892][ T6050] netlink: 156 bytes leftover after parsing attributes in process `syz.3.52'. [ 108.136324][ T6052] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 108.171996][ T6052] netlink: 40 bytes leftover after parsing attributes in process `syz.2.53'. [ 108.197394][ T6052] bridge0: port 3(ipvlan1) entered blocking state [ 108.225481][ T6052] bridge0: port 3(ipvlan1) entered disabled state [ 108.246955][ T6052] ipvlan1: entered allmulticast mode [ 108.262130][ T6052] veth0_vlan: entered allmulticast mode [ 108.313008][ T6052] ipvlan1: left allmulticast mode [ 108.325360][ T6052] veth0_vlan: left allmulticast mode [ 108.364034][ T6052] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 108.497543][ T6050] netlink: 'syz.3.52': attribute type 10 has an invalid length. [ 108.530266][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.558105][ T6059] netlink: 'syz.1.57': attribute type 10 has an invalid length. [ 108.569595][ T6059] team0: Device hsr_slave_0 failed to register rx_handler [ 108.837211][ T6062] netlink: 'syz.3.58': attribute type 10 has an invalid length. [ 108.870293][ T6062] team0: Device hsr_slave_0 failed to register rx_handler [ 109.143044][ T6065] netlink: 'syz.2.59': attribute type 10 has an invalid length. [ 109.162297][ T6073] netlink: 'syz.0.60': attribute type 10 has an invalid length. [ 109.165767][ T6064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.194453][ T6073] team0: Device hsr_slave_0 failed to register rx_handler [ 109.208785][ T6077] netlink: 'syz.1.61': attribute type 10 has an invalid length. [ 109.355303][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.555999][ T6085] netlink: 'syz.2.63': attribute type 10 has an invalid length. [ 109.603145][ T6082] netlink: 'syz.3.62': attribute type 10 has an invalid length. [ 109.843967][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.858569][ T6078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.994951][ T6091] netlink: 156 bytes leftover after parsing attributes in process `syz.1.67'. [ 110.056156][ T6093] team0: Device hsr_slave_0 failed to register rx_handler [ 110.167313][ T6097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.69'. [ 110.276229][ T6097] bridge0: port 3(ipvlan1) entered blocking state [ 110.330692][ T6097] bridge0: port 3(ipvlan1) entered disabled state [ 110.338405][ T6097] ipvlan1: entered allmulticast mode [ 110.372558][ T6097] veth0_vlan: entered allmulticast mode [ 110.434384][ T6097] ipvlan1: left allmulticast mode [ 110.439612][ T6097] veth0_vlan: left allmulticast mode [ 110.513168][ T6097] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 110.594880][ T6089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.607875][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.934039][ T6114] team0: Device hsr_slave_0 failed to register rx_handler [ 111.124687][ T6115] team0: Device hsr_slave_0 failed to register rx_handler [ 111.162547][ T6110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.227165][ T6103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.826687][ T6137] team0: Device hsr_slave_0 failed to register rx_handler [ 112.071718][ T6120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.097257][ T6122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.154691][ T6128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.400851][ T6140] team0: Device veth1_macvtap failed to register rx_handler [ 112.457352][ T6146] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.81'. [ 112.636349][ T6145] team0: Device hsr_slave_0 failed to register rx_handler [ 112.734557][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.83'. [ 112.805622][ T6144] bridge0: port 3(ipvlan1) entered blocking state [ 112.832610][ T6144] bridge0: port 3(ipvlan1) entered disabled state [ 112.842388][ T6144] ipvlan1: entered allmulticast mode [ 112.847802][ T6144] veth0_vlan: entered allmulticast mode [ 112.896480][ T6144] ipvlan1: left allmulticast mode [ 112.901654][ T6144] veth0_vlan: left allmulticast mode [ 112.930422][ T6144] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 113.192620][ T6151] validate_nla: 15 callbacks suppressed [ 113.192663][ T6151] netlink: 'syz.0.85': attribute type 10 has an invalid length. [ 113.233715][ T6150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.388537][ T6161] netlink: 'syz.3.87': attribute type 10 has an invalid length. [ 113.457943][ T6163] netlink: 'syz.3.87': attribute type 3 has an invalid length. [ 113.467937][ T6163] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.87'. [ 113.485549][ T6166] Zero length message leads to an empty skb [ 113.721379][ T6161] team0: Device veth1_macvtap failed to register rx_handler [ 113.785047][ T6164] netlink: 'syz.2.86': attribute type 10 has an invalid length. [ 113.806395][ T6155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.821887][ T6169] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 113.842311][ T6169] team0: Device hsr_slave_0 failed to register rx_handler [ 114.229844][ T6182] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 114.283676][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.383087][ T6178] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 114.402674][ T6177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.524405][ T6189] netlink: 'syz.1.93': attribute type 10 has an invalid length. [ 114.600441][ T6189] team0: Device hsr_slave_0 failed to register rx_handler [ 114.625598][ T6192] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 114.656782][ T6192] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.95'. [ 114.757080][ T6188] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 114.816283][ T6188] team0: Device veth1_macvtap failed to register rx_handler [ 114.866252][ T6194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.97'. [ 114.890111][ T6194] bridge0: port 3(ipvlan1) entered blocking state [ 114.972664][ T6194] bridge0: port 3(ipvlan1) entered disabled state [ 114.987070][ T6194] ipvlan1: entered allmulticast mode [ 115.002533][ T6194] veth0_vlan: entered allmulticast mode [ 115.027115][ T6194] ipvlan1: left allmulticast mode [ 115.050277][ T6194] veth0_vlan: left allmulticast mode [ 115.061247][ T6194] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 115.115754][ T6196] team0: Device hsr_slave_0 failed to register rx_handler [ 115.415400][ T6201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.589803][ T6208] team0: Device veth1_macvtap failed to register rx_handler [ 115.636405][ T6212] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.103'. [ 115.842507][ T6217] team0: Device hsr_slave_0 failed to register rx_handler [ 115.872757][ T6205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.311178][ T6219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.393382][ T6234] team0: Device hsr_slave_0 failed to register rx_handler [ 117.077019][ T6226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.117316][ T6230] validate_nla: 9 callbacks suppressed [ 119.117337][ T6230] netlink: 'syz.2.110': attribute type 10 has an invalid length. [ 119.160597][ T6241] netlink: 'syz.0.112': attribute type 10 has an invalid length. [ 119.191063][ T6241] netlink: 40 bytes leftover after parsing attributes in process `syz.0.112'. [ 119.210028][ T6241] bridge0: port 3(ipvlan1) entered blocking state [ 119.219569][ T6241] bridge0: port 3(ipvlan1) entered disabled state [ 119.240358][ T6241] ipvlan1: entered allmulticast mode [ 119.252208][ T6241] veth0_vlan: entered allmulticast mode [ 119.261722][ T6241] ipvlan1: left allmulticast mode [ 119.271436][ T6241] veth0_vlan: left allmulticast mode [ 119.283614][ T6241] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 119.589379][ T6248] netlink: 'syz.1.114': attribute type 10 has an invalid length. [ 119.635444][ T6259] netlink: 'syz.2.113': attribute type 10 has an invalid length. [ 119.695313][ T6260] netlink: 'syz.0.116': attribute type 10 has an invalid length. [ 119.776804][ T6247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.792031][ T6256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.887067][ T6245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.077480][ T6262] netlink: 'syz.1.117': attribute type 10 has an invalid length. [ 120.170382][ T6268] netlink: 'syz.1.117': attribute type 3 has an invalid length. [ 120.204258][ T6268] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.117'. [ 120.403330][ T6262] team0: Device veth1_macvtap failed to register rx_handler [ 120.459460][ T6270] netlink: 'syz.0.120': attribute type 10 has an invalid length. [ 120.475177][ T6265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.668294][ T6275] netlink: 'syz.0.123': attribute type 10 has an invalid length. [ 120.698398][ T6275] team0: Device hsr_slave_0 failed to register rx_handler [ 121.030304][ T6285] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 121.092168][ T6285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.125'. [ 121.118772][ T6285] bridge0: port 3(ipvlan1) entered blocking state [ 121.164479][ T6285] bridge0: port 3(ipvlan1) entered disabled state [ 121.206229][ T6285] ipvlan1: entered allmulticast mode [ 121.211673][ T6285] veth0_vlan: entered allmulticast mode [ 121.264044][ T6285] ipvlan1: left allmulticast mode [ 121.275459][ T6285] veth0_vlan: left allmulticast mode [ 121.294168][ T6285] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 121.336849][ T6282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.647626][ T6290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.970057][ T6306] team0: Device hsr_slave_0 failed to register rx_handler [ 125.248250][ T6322] validate_nla: 3 callbacks suppressed [ 125.248287][ T6322] netlink: 'syz.2.141': attribute type 10 has an invalid length. [ 125.300491][ T6321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.524852][ T6330] netlink: 'syz.1.144': attribute type 10 has an invalid length. [ 125.604753][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.619272][ T6333] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 125.633606][ T6333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.145'. [ 125.659156][ T6333] bridge0: port 3(ipvlan1) entered blocking state [ 125.684145][ T6333] bridge0: port 3(ipvlan1) entered disabled state [ 125.705791][ T6333] ipvlan1: entered allmulticast mode [ 125.711417][ T6333] veth0_vlan: entered allmulticast mode [ 125.765477][ T6333] ipvlan1: left allmulticast mode [ 125.777582][ T6333] veth0_vlan: left allmulticast mode [ 125.795752][ T6333] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 126.206638][ T6343] netlink: 'syz.1.149': attribute type 10 has an invalid length. [ 126.242623][ T6343] team0: Device hsr_slave_0 failed to register rx_handler [ 126.375791][ T6350] netlink: 'syz.0.152': attribute type 10 has an invalid length. [ 126.396385][ T6350] team0: Device hsr_slave_0 failed to register rx_handler [ 126.534224][ T6347] netlink: 'syz.2.151': attribute type 10 has an invalid length. [ 126.579028][ T6346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.653916][ T6356] netlink: 'syz.3.153': attribute type 10 has an invalid length. [ 126.683397][ T6355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.721409][ T6354] netlink: 'syz.1.154': attribute type 10 has an invalid length. [ 126.745209][ T6353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.247055][ T6365] netlink: 'syz.2.158': attribute type 10 has an invalid length. [ 127.304076][ T6363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.509797][ T6379] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 127.522215][ T6379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'. [ 127.578866][ T6379] bridge0: port 3(ipvlan1) entered blocking state [ 127.611726][ T6379] bridge0: port 3(ipvlan1) entered disabled state [ 127.633784][ T6379] ipvlan1: entered allmulticast mode [ 127.639567][ T6379] veth0_vlan: entered allmulticast mode [ 127.697600][ T6379] ipvlan1: left allmulticast mode [ 127.711109][ T6379] veth0_vlan: left allmulticast mode [ 127.721254][ T6379] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 127.938871][ T6388] team0: Device hsr_slave_0 failed to register rx_handler [ 128.100611][ T6385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.988399][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.291126][ T6427] team0: Device hsr_slave_0 failed to register rx_handler [ 129.463275][ T6419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.944478][ T6445] team0: Device hsr_slave_0 failed to register rx_handler [ 130.404876][ T6455] validate_nla: 6 callbacks suppressed [ 130.404910][ T6455] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 130.440613][ T6453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.462805][ T6461] netlink: 'syz.3.198': attribute type 10 has an invalid length. [ 130.556288][ T6461] team0: Device hsr_slave_0 failed to register rx_handler [ 130.776048][ T6470] Ÿë: port 1(ip6gretap0) entered blocking state [ 130.792555][ T6470] Ÿë: port 1(ip6gretap0) entered disabled state [ 130.800140][ T6470] ip6gretap0: entered allmulticast mode [ 130.855855][ T6470] ip6gretap0: entered promiscuous mode [ 131.005339][ T6474] netlink: 'syz.2.204': attribute type 10 has an invalid length. [ 131.036659][ T6474] team0: Device hsr_slave_0 failed to register rx_handler [ 131.125050][ T6480] FAULT_INJECTION: forcing a failure. [ 131.125050][ T6480] name failslab, interval 1, probability 0, space 0, times 1 [ 131.185052][ T6480] CPU: 1 PID: 6480 Comm: syz.1.207 Not tainted syzkaller #0 [ 131.192437][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.202572][ T6480] Call Trace: [ 131.205912][ T6480] [ 131.208887][ T6480] dump_stack_lvl+0x18c/0x250 [ 131.213620][ T6480] ? show_regs_print_info+0x20/0x20 [ 131.218865][ T6480] ? load_image+0x400/0x400 [ 131.223407][ T6480] ? __might_sleep+0xe0/0xe0 [ 131.228033][ T6480] ? __lock_acquire+0x7d40/0x7d40 [ 131.233100][ T6480] should_fail_ex+0x39d/0x4d0 [ 131.237831][ T6480] should_failslab+0x9/0x20 [ 131.242371][ T6480] slab_pre_alloc_hook+0x59/0x310 [ 131.247435][ T6480] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 131.253186][ T6480] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 131.258933][ T6480] __kmem_cache_alloc_node+0x53/0x250 [ 131.264359][ T6480] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 131.270116][ T6480] __kmalloc+0xa4/0x230 [ 131.274322][ T6480] tomoyo_realpath_from_path+0xe3/0x5d0 [ 131.279947][ T6480] tomoyo_path_number_perm+0x248/0x620 [ 131.285459][ T6480] ? tomoyo_path_number_perm+0x217/0x620 [ 131.291138][ T6480] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 131.296648][ T6480] ? ksys_write+0x1c4/0x260 [ 131.301265][ T6480] ? __fget_files+0x28/0x4b0 [ 131.305891][ T6480] ? __fget_files+0x28/0x4b0 [ 131.310550][ T6480] security_file_ioctl+0x70/0xa0 [ 131.315542][ T6480] __se_sys_ioctl+0x48/0x170 [ 131.320177][ T6480] do_syscall_64+0x55/0xa0 [ 131.324638][ T6480] ? clear_bhb_loop+0x40/0x90 [ 131.329532][ T6480] ? clear_bhb_loop+0x40/0x90 [ 131.334247][ T6480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.340264][ T6480] RIP: 0033:0x7feb37d9aeb9 [ 131.344734][ T6480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.364381][ T6480] RSP: 002b:00007feb38c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.372836][ T6480] RAX: ffffffffffffffda RBX: 00007feb38015fa0 RCX: 00007feb37d9aeb9 [ 131.380838][ T6480] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 131.388836][ T6480] RBP: 00007feb38c58090 R08: 0000000000000000 R09: 0000000000000000 [ 131.396836][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.404838][ T6480] R13: 00007feb38016038 R14: 00007feb38015fa0 R15: 00007ffed2e95018 [ 131.412866][ T6480] [ 131.524561][ T6480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.539114][ T6483] netlink: 'syz.3.208': attribute type 8 has an invalid length. [ 131.547290][ T6483] netlink: 'syz.3.208': attribute type 9 has an invalid length. [ 131.555229][ T6483] netlink: 'syz.3.208': attribute type 10 has an invalid length. [ 131.564122][ T6483] netlink: 'syz.3.208': attribute type 11 has an invalid length. [ 131.572241][ T6483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.208'. [ 131.785800][ T6489] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.210'. [ 131.886552][ T6489] netlink: 'syz.2.210': attribute type 29 has an invalid length. [ 131.908519][ T6489] netlink: 'syz.2.210': attribute type 29 has an invalid length. [ 131.956981][ T6489] netlink: 'syz.2.210': attribute type 29 has an invalid length. [ 132.094616][ T6497] team0: Device hsr_slave_0 failed to register rx_handler [ 132.297056][ T6506] Ÿë: port 1(ip6gretap0) entered blocking state [ 132.352655][ T6506] Ÿë: port 1(ip6gretap0) entered disabled state [ 132.359672][ T6506] ip6gretap0: entered allmulticast mode [ 132.370766][ T6506] ip6gretap0: entered promiscuous mode [ 132.489193][ T6511] team0: Device hsr_slave_0 failed to register rx_handler [ 133.106640][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.113582][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.256956][ T6548] validate_nla: 2 callbacks suppressed [ 137.256976][ T6548] netlink: 'syz.0.229': attribute type 10 has an invalid length. [ 137.271438][ T6548] team0: Device hsr_slave_0 failed to register rx_handler [ 137.568085][ T6552] netlink: 'syz.1.231': attribute type 10 has an invalid length. [ 137.593185][ T6552] team0: Device hsr_slave_0 failed to register rx_handler [ 141.333191][ T6582] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 141.341309][ T6582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.243'. [ 141.367844][ T6582] bridge0: port 3(ipvlan1) entered blocking state [ 141.386311][ T6582] bridge0: port 3(ipvlan1) entered disabled state [ 141.405085][ T6582] ipvlan1: entered allmulticast mode [ 141.417684][ T6582] veth0_vlan: entered allmulticast mode [ 141.429162][ T6582] ipvlan1: left allmulticast mode [ 141.447089][ T6582] veth0_vlan: left allmulticast mode [ 141.492986][ T6582] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 142.274237][ T6592] netlink: 'syz.2.245': attribute type 10 has an invalid length. [ 142.464566][ T6586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.646239][ T6597] netlink: 'syz.3.248': attribute type 10 has an invalid length. [ 142.682772][ T6596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.686960][ T6609] Ÿë: port 1(ip6gretap0) entered blocking state [ 142.700407][ T6609] Ÿë: port 1(ip6gretap0) entered disabled state [ 142.715779][ T6609] ip6gretap0: entered allmulticast mode [ 142.730255][ T6609] ip6gretap0: entered promiscuous mode [ 145.889584][ T6619] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 145.909128][ T6619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.254'. [ 145.930097][ T6619] bridge0: port 3(ipvlan1) entered blocking state [ 145.972389][ T6619] bridge0: port 3(ipvlan1) entered disabled state [ 145.979368][ T6619] ipvlan1: entered allmulticast mode [ 146.031952][ T6619] veth0_vlan: entered allmulticast mode [ 146.096897][ T6619] ipvlan1: left allmulticast mode [ 146.145166][ T6619] veth0_vlan: left allmulticast mode [ 146.151324][ T6619] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 146.491087][ T6632] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 146.573462][ T6627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.962858][ T6647] netlink: 'syz.0.262': attribute type 10 has an invalid length. [ 146.983173][ T6647] team0: Device hsr_slave_0 failed to register rx_handler [ 148.030626][ T6656] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 148.044011][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.144165][ T6671] netlink: 'syz.3.271': attribute type 10 has an invalid length. [ 148.203669][ T6671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.271'. [ 148.292885][ T6671] bridge0: port 3(ipvlan1) entered blocking state [ 148.314512][ T6671] bridge0: port 3(ipvlan1) entered disabled state [ 148.341419][ T6671] ipvlan1: entered allmulticast mode [ 148.361107][ T6671] veth0_vlan: entered allmulticast mode [ 148.375877][ T6671] ipvlan1: left allmulticast mode [ 148.381537][ T6671] veth0_vlan: left allmulticast mode [ 148.402690][ T6671] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 148.636162][ T6682] netlink: 'syz.1.275': attribute type 10 has an invalid length. [ 148.667467][ T6682] team0: Device hsr_slave_0 failed to register rx_handler [ 152.000654][ T6729] netlink: 'syz.1.289': attribute type 10 has an invalid length. [ 152.009868][ T6729] team0: Device hsr_slave_0 failed to register rx_handler [ 152.032631][ T6737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.050352][ T6737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.088659][ T6737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.102558][ T6737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.062570][ T6767] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 153.078722][ T6767] team0: Device hsr_slave_0 failed to register rx_handler [ 153.428068][ T6778] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 153.730321][ T6786] netlink: 'syz.0.307': attribute type 10 has an invalid length. [ 153.783838][ T6773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.907731][ T6781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.566988][ T6807] netlink: 'syz.3.315': attribute type 10 has an invalid length. [ 154.575606][ T6807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.315'. [ 154.595855][ T6807] bridge0: port 3(ipvlan1) entered blocking state [ 154.616271][ T6807] bridge0: port 3(ipvlan1) entered disabled state [ 154.632820][ T6807] ipvlan1: entered allmulticast mode [ 154.641692][ T6807] veth0_vlan: entered allmulticast mode [ 154.667979][ T6807] ipvlan1: left allmulticast mode [ 154.682203][ T6807] veth0_vlan: left allmulticast mode [ 154.691550][ T6807] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 155.015496][ T6814] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.318'. [ 155.101400][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 155.119150][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 155.128983][ T6814] netlink: 2 bytes leftover after parsing attributes in process `syz.0.318'. [ 155.145723][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 155.155486][ T6814] netlink: 2 bytes leftover after parsing attributes in process `syz.0.318'. [ 155.320348][ T6827] netlink: 'syz.1.321': attribute type 10 has an invalid length. [ 155.395231][ T6828] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 155.596855][ T6816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.629718][ T6821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.423499][ T6849] netlink: 'syz.1.328': attribute type 10 has an invalid length. [ 156.446082][ T6849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.328'. [ 156.472430][ T6849] bridge0: port 3(ipvlan1) entered blocking state [ 156.492584][ T6849] bridge0: port 3(ipvlan1) entered disabled state [ 156.503052][ T6849] ipvlan1: entered allmulticast mode [ 156.521982][ T6849] veth0_vlan: entered allmulticast mode [ 156.544333][ T6849] ipvlan1: left allmulticast mode [ 156.550094][ T6849] veth0_vlan: left allmulticast mode [ 156.570520][ T6849] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 157.126441][ T6862] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 157.228540][ T6866] netlink: 'syz.0.334': attribute type 10 has an invalid length. [ 157.364798][ T6872] netlink: 'syz.2.335': attribute type 10 has an invalid length. [ 157.478347][ T6856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.722038][ T6868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.746917][ T6863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.934930][ T6883] netlink: 152 bytes leftover after parsing attributes in process `syz.0.342'. [ 157.962668][ T6883] netlink: 6 bytes leftover after parsing attributes in process `syz.0.342'. [ 158.258425][ T6892] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 158.282195][ T6892] bridge0: port 3(ipvlan1) entered blocking state [ 158.304361][ T6892] bridge0: port 3(ipvlan1) entered disabled state [ 158.335007][ T6892] ipvlan1: entered allmulticast mode [ 158.361993][ T6892] veth0_vlan: entered allmulticast mode [ 158.380253][ T6892] ipvlan1: left allmulticast mode [ 158.392579][ T6892] veth0_vlan: left allmulticast mode [ 158.404715][ T6892] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 161.130877][ T6898] netlink: 'syz.1.345': attribute type 10 has an invalid length. [ 161.160860][ T6898] team0: Device hsr_slave_0 failed to register rx_handler [ 161.622857][ T6910] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 162.249930][ T6907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.824432][ T6925] netlink: 'syz.3.350': attribute type 10 has an invalid length. [ 165.448408][ T6916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.759691][ T6944] netlink: 'syz.2.354': attribute type 10 has an invalid length. [ 165.785999][ T6947] netlink: 'syz.0.358': attribute type 10 has an invalid length. [ 165.801988][ T6947] __nla_validate_parse: 1 callbacks suppressed [ 165.802004][ T6947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.358'. [ 165.839829][ T6947] bridge0: port 3(ipvlan1) entered blocking state [ 165.852849][ T6947] bridge0: port 3(ipvlan1) entered disabled state [ 165.864632][ T6929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.875333][ T6947] ipvlan1: entered allmulticast mode [ 165.893509][ T6947] veth0_vlan: entered allmulticast mode [ 165.913177][ T6947] ipvlan1: left allmulticast mode [ 165.918402][ T6947] veth0_vlan: left allmulticast mode [ 165.925203][ T6947] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 166.739904][ T6969] FAULT_INJECTION: forcing a failure. [ 166.739904][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 166.775859][ T6969] CPU: 1 PID: 6969 Comm: syz.2.364 Not tainted syzkaller #0 [ 166.783224][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.793363][ T6969] Call Trace: [ 166.796689][ T6969] [ 166.799664][ T6969] dump_stack_lvl+0x18c/0x250 [ 166.804398][ T6969] ? show_regs_print_info+0x20/0x20 [ 166.809655][ T6969] ? load_image+0x400/0x400 [ 166.814214][ T6969] ? __might_fault+0xaa/0x120 [ 166.818938][ T6969] ? __lock_acquire+0x7d40/0x7d40 [ 166.824015][ T6969] should_fail_ex+0x39d/0x4d0 [ 166.828758][ T6969] _copy_from_user+0x2f/0xe0 [ 166.833397][ T6969] get_user_ifreq+0x6b/0x180 [ 166.838071][ T6969] br_ioctl_stub+0x173/0xd50 [ 166.842715][ T6969] ? rcu_is_watching+0x15/0xb0 [ 166.847538][ T6969] ? rcu_read_unlock+0xa0/0xa0 [ 166.852374][ T6969] ? trace_contention_end+0x39/0xe0 [ 166.857651][ T6969] ? __mutex_lock+0x315/0xcc0 [ 166.862419][ T6969] ? mutex_lock_nested+0x20/0x20 [ 166.867420][ T6969] ? rcu_read_unlock+0xa0/0xa0 [ 166.872234][ T6969] sock_ioctl+0x517/0x7e0 [ 166.876632][ T6969] ? sock_poll+0x3e0/0x3e0 [ 166.881110][ T6969] ? bpf_lsm_file_ioctl+0x9/0x10 [ 166.886088][ T6969] ? security_file_ioctl+0x80/0xa0 [ 166.891253][ T6969] ? sock_poll+0x3e0/0x3e0 [ 166.895711][ T6969] __se_sys_ioctl+0xfd/0x170 [ 166.900350][ T6969] do_syscall_64+0x55/0xa0 [ 166.904814][ T6969] ? clear_bhb_loop+0x40/0x90 [ 166.909536][ T6969] ? clear_bhb_loop+0x40/0x90 [ 166.914262][ T6969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.920287][ T6969] RIP: 0033:0x7f5fcfb9aeb9 [ 166.924743][ T6969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.944404][ T6969] RSP: 002b:00007f5fd0977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.952875][ T6969] RAX: ffffffffffffffda RBX: 00007f5fcfe15fa0 RCX: 00007f5fcfb9aeb9 [ 166.960888][ T6969] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 0000000000000004 [ 166.968896][ T6969] RBP: 00007f5fd0977090 R08: 0000000000000000 R09: 0000000000000000 [ 166.976907][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.984938][ T6969] R13: 00007f5fcfe16038 R14: 00007f5fcfe15fa0 R15: 00007ffe50129318 [ 166.993023][ T6969] [ 167.207476][ T6974] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.365'. [ 170.151005][ T7026] netlink: 'syz.2.368': attribute type 10 has an invalid length. [ 170.483882][ T7022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.016419][ T7049] syz.1.374 uses obsolete (PF_INET,SOCK_PACKET) [ 171.157156][ T7047] netlink: 'syz.1.374': attribute type 3 has an invalid length. [ 171.192377][ T7047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.374'. [ 172.889960][ T7066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.937475][ T7069] netlink: 'syz.3.381': attribute type 10 has an invalid length. [ 172.993346][ T7078] netlink: 'syz.0.384': attribute type 4 has an invalid length. [ 173.041895][ T7078] netlink: 152 bytes leftover after parsing attributes in process `syz.0.384'. [ 173.082882][ T7078] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 173.436339][ T7094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.389'. [ 173.480662][ T7094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.389'. [ 173.511278][ T7094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.389'. [ 173.528382][ T7094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.389'. [ 173.674428][ T7096] netlink: 'syz.3.390': attribute type 5 has an invalid length. [ 173.711921][ T7096] netlink: 176 bytes leftover after parsing attributes in process `syz.3.390'. [ 173.738940][ T7099] lo: entered promiscuous mode [ 174.298073][ T7114] netlink: 'syz.0.394': attribute type 10 has an invalid length. [ 174.391680][ T7108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.080888][ T7133] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 175.113464][ T7133] team0: Device hsr_slave_0 failed to register rx_handler [ 175.508600][ T7144] netlink: 'syz.3.406': attribute type 10 has an invalid length. [ 175.522779][ T7143] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 175.534009][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.574531][ T7141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.174557][ T7169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.413'. [ 176.416926][ T7178] : renamed from bond0 (while UP) [ 176.426748][ T7181] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 176.707539][ T7194] netlink: 'syz.2.418': attribute type 10 has an invalid length. [ 176.746978][ T7194] team0: Device hsr_slave_0 failed to register rx_handler [ 177.039048][ T7184] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 177.067569][ T7177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.487087][ T7202] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 177.634274][ T7200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.980311][ T7221] netlink: 'syz.2.429': attribute type 10 has an invalid length. [ 178.013506][ T7221] team0: Device hsr_slave_0 failed to register rx_handler [ 178.293337][ T7224] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 178.306914][ T7222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.576768][ T7238] netlink: 'syz.1.441': attribute type 10 has an invalid length. [ 178.593179][ T7238] team0: Device hsr_slave_0 failed to register rx_handler [ 178.732717][ T7241] : renamed from bond0 (while UP) [ 178.763413][ T7235] netlink: 'syz.0.439': attribute type 10 has an invalid length. [ 178.792057][ T7227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.638324][ T7267] netlink: 'syz.1.438': attribute type 10 has an invalid length. [ 179.740977][ T7257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.084437][ T7271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.167919][ T7278] team0: Device hsr_slave_0 failed to register rx_handler [ 183.778377][ T7315] : renamed from bond0 (while UP) [ 183.958173][ T7318] validate_nla: 2 callbacks suppressed [ 183.958191][ T7318] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 184.095927][ T7318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.459'. [ 184.166489][ T7318] bridge0: port 3(ipvlan1) entered blocking state [ 184.192230][ T7318] bridge0: port 3(ipvlan1) entered disabled state [ 184.214309][ T7318] ipvlan1: entered allmulticast mode [ 184.233516][ T7318] veth0_vlan: entered allmulticast mode [ 184.272108][ T7318] ipvlan1: left allmulticast mode [ 184.292076][ T7318] veth0_vlan: left allmulticast mode [ 184.307509][ T7318] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 184.511356][ T7327] netlink: 'syz.3.462': attribute type 10 has an invalid length. [ 184.537200][ T7327] team0: Device hsr_slave_0 failed to register rx_handler [ 185.237787][ T7340] netlink: 'syz.2.466': attribute type 10 has an invalid length. [ 185.663222][ T7335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.537482][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.543911][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.609619][ T5769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.618875][ T5769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.626866][ T5769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.639701][ T5769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.647592][ T5769] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.655470][ T5769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.933008][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.942669][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.954021][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.976280][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.985039][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 204.993193][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.150152][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.161874][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.170427][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.179821][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.188149][ T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 205.196514][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 206.088607][ T7374] chnl_net:caif_netlink_parms(): no params data found [ 206.163302][ T7379] chnl_net:caif_netlink_parms(): no params data found [ 206.209674][ T7381] chnl_net:caif_netlink_parms(): no params data found [ 206.239286][ T5769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 206.253646][ T5769] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 206.261534][ T5769] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 206.273252][ T5769] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 206.281097][ T5769] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 206.289066][ T5769] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 206.681440][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.692162][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.699448][ T7374] bridge_slave_0: entered allmulticast mode [ 206.716628][ T7374] bridge_slave_0: entered promiscuous mode [ 206.772213][ T5769] Bluetooth: hci4: command tx timeout [ 206.788895][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.807342][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.815196][ T7374] bridge_slave_1: entered allmulticast mode [ 206.826587][ T7374] bridge_slave_1: entered promiscuous mode [ 206.863142][ T7381] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.870448][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.886107][ T7381] bridge_slave_0: entered allmulticast mode [ 206.899061][ T7381] bridge_slave_0: entered promiscuous mode [ 206.913865][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.921045][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.937728][ T7379] bridge_slave_0: entered allmulticast mode [ 206.948359][ T7379] bridge_slave_0: entered promiscuous mode [ 206.968184][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.983282][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.990600][ T7379] bridge_slave_1: entered allmulticast mode [ 207.005439][ T7379] bridge_slave_1: entered promiscuous mode [ 207.041411][ T7381] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.049864][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.062124][ T7381] bridge_slave_1: entered allmulticast mode [ 207.076099][ T7381] bridge_slave_1: entered promiscuous mode [ 207.111864][ T5769] Bluetooth: hci5: command tx timeout [ 207.205767][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.230136][ T7374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.262165][ T5769] Bluetooth: hci6: command tx timeout [ 207.290125][ T7379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.307008][ T7374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.325889][ T7381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.401055][ T7381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.530954][ T7379] team0: Port device team_slave_0 added [ 207.543601][ T7374] team0: Port device team_slave_0 added [ 207.556729][ T7381] team0: Port device team_slave_0 added [ 207.597468][ T7379] team0: Port device team_slave_1 added [ 207.626476][ T7374] team0: Port device team_slave_1 added [ 207.657035][ T7381] team0: Port device team_slave_1 added [ 207.786904][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.800860][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.828106][ T7379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.851033][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.860862][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.894340][ T7374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.927726][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.937949][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.975077][ T7374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.993987][ T7381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.000989][ T7381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.037073][ T7381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.371945][ T5769] Bluetooth: hci7: command tx timeout [ 208.862106][ T5769] Bluetooth: hci4: command tx timeout [ 209.190075][ T5769] Bluetooth: hci5: command tx timeout [ 209.332161][ T5769] Bluetooth: hci6: command tx timeout [ 210.452066][ T51] Bluetooth: hci7: command tx timeout [ 210.932085][ T51] Bluetooth: hci4: command tx timeout [ 211.259761][ T51] Bluetooth: hci5: command tx timeout [ 211.422082][ T51] Bluetooth: hci6: command tx timeout [ 211.975489][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.542120][ T51] Bluetooth: hci7: command tx timeout [ 213.018803][ T51] Bluetooth: hci4: command tx timeout [ 213.349876][ T51] Bluetooth: hci5: command tx timeout [ 213.502126][ T51] Bluetooth: hci6: command tx timeout [ 214.622100][ T51] Bluetooth: hci7: command tx timeout [ 255.744603][ T5080] Bluetooth: hci3: command 0x0406 tx timeout [ 255.751026][ T5080] Bluetooth: hci2: command 0x0406 tx timeout [ 255.757522][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 255.982335][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.988710][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.303055][ T5080] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 265.315214][ T5080] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 265.324551][ T5080] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 265.334910][ T5080] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 265.350900][ T5080] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 265.358426][ T5080] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 265.494765][ T5772] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 265.504430][ T5772] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 265.513252][ T5772] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 265.521472][ T5772] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 265.530242][ T5772] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 265.537708][ T5772] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 265.623210][ T5775] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 265.632891][ T5775] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 265.641995][ T5775] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 265.650278][ T5775] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 265.658282][ T5775] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 265.665970][ T5775] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 266.074660][ T7425] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 266.084050][ T7425] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 266.092568][ T7425] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 266.101273][ T7425] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 266.110719][ T7425] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 266.118693][ T7425] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 293.721732][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 293.728469][ C0] rcu: 0-....: (10456 ticks this GP) idle=834c/1/0x4000000000000000 softirq=16818/16823 fqs=4316 [ 293.739809][ C0] rcu: hardirqs softirqs csw/system [ 293.746242][ C0] rcu: number: 1351566 0 0 [ 293.752656][ C0] rcu: cputime: 17132 35357 66 ==> 52490(ms) [ 293.760490][ C0] rcu: (t=10500 jiffies g=18365 q=2836 ncpus=2) [ 293.766876][ C0] CPU: 0 PID: 7351 Comm: syz.3.470 Not tainted syzkaller #0 [ 293.774210][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.784338][ C0] RIP: 0010:debug_check_no_obj_freed+0x51f/0x540 [ 293.790823][ C0] Code: 00 00 00 00 00 fc ff df e9 53 fe ff ff 4c 8b 74 24 28 4c 8b 7c 24 20 eb 02 31 db 48 8b 7c 24 10 48 8b 74 24 08 e8 b1 59 5d 06 <3b> 1d e3 89 5a 0a 0f 8e bd fb ff ff 89 1d d7 89 5a 0a e9 b2 fb ff [ 293.810494][ C0] RSP: 0018:ffffc90000006948 EFLAGS: 00000246 [ 293.816569][ C0] RAX: 48ac7c6009bbf800 RBX: 0000000000000003 RCX: 0000000000000500 [ 293.824542][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: 00000000ffffffff [ 293.832519][ C0] RBP: 0000000000000000 R08: ffffffff911bf5f7 R09: 1ffffffff2237ebe [ 293.840495][ C0] R10: dffffc0000000000 R11: fffffbfff2237ebf R12: ffff88802e479c00 [ 293.848474][ C0] R13: ffff88802e479800 R14: ffff88802e479000 R15: 0000000000000001 [ 293.856448][ C0] FS: 00007f3dbb1e56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 293.865380][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.871963][ C0] CR2: 0000561543242cd0 CR3: 0000000076d06000 CR4: 00000000003506f0 [ 293.879943][ C0] Call Trace: [ 293.883228][ C0] [ 293.886087][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 293.891469][ C0] ? skb_release_data+0x634/0x800 [ 293.896505][ C0] __kmem_cache_free+0xba/0x1e0 [ 293.901365][ C0] skb_release_data+0x634/0x800 [ 293.906233][ C0] kfree_skb_reason+0x10e/0x170 [ 293.911093][ C0] sit_tunnel_xmit+0xdaa/0x2010 [ 293.915979][ C0] ? ipip6_tunnel_uninit+0x180/0x180 [ 293.921279][ C0] ? validate_xmit_skb+0x92f/0xf60 [ 293.926408][ C0] dev_hard_start_xmit+0x246/0x740 [ 293.931538][ C0] __dev_queue_xmit+0x1ac2/0x36b0 [ 293.936575][ C0] ? __dev_queue_xmit+0x26b/0x36b0 [ 293.941699][ C0] ? read_seqbegin+0x19a/0x270 [ 293.946467][ C0] ? read_seqbegin+0x1c8/0x270 [ 293.951243][ C0] ? neigh_event_send+0x110/0x110 [ 293.956294][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 293.961597][ C0] ? neigh_connected_output+0x3b0/0x450 [ 293.967169][ C0] ip6_finish_output2+0xe3d/0x1630 [ 293.972292][ C0] ? ip6_finish_output2+0x645/0x1630 [ 293.977589][ C0] ? ip6_mtu+0x7d/0x3f0 [ 293.981752][ C0] ? nf_hook+0x390/0x390 [ 293.986188][ C0] ? ip6_finish_output+0x57b/0x820 [ 293.991310][ C0] udp_tunnel6_xmit_skb+0x53e/0x970 [ 293.996523][ C0] geneve_xmit+0x232d/0x3430 [ 294.001136][ C0] ? geneve_xmit+0x157/0x3430 [ 294.005825][ C0] ? geneve_stop+0x1b0/0x1b0 [ 294.010418][ C0] ? validate_xmit_xfrm+0xbc/0x12c0 [ 294.015653][ C0] ? xfrm_init_replay+0x2a0/0x2a0 [ 294.020692][ C0] dev_hard_start_xmit+0x246/0x740 [ 294.025818][ C0] __dev_queue_xmit+0x1ac2/0x36b0 [ 294.030845][ C0] ? __dev_queue_xmit+0x26b/0x36b0 [ 294.035963][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.042123][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.048280][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 294.053583][ C0] ? __asan_memcpy+0x40/0x70 [ 294.058306][ C0] ? eth_header+0x11b/0x200 [ 294.062819][ C0] ? llc_sysctl_exit+0x70/0x70 [ 294.067942][ C0] ? neigh_resolve_output+0x618/0x730 [ 294.073334][ C0] ip6_finish_output2+0xe3d/0x1630 [ 294.078462][ C0] ? ip6_finish_output2+0x645/0x1630 [ 294.083755][ C0] ? nf_hook+0x390/0x390 [ 294.088002][ C0] ? ip6_finish_output+0x4b6/0x820 [ 294.093128][ C0] ? ip6_finish_output+0x57b/0x820 [ 294.098265][ C0] ndisc_send_skb+0xc26/0x14f0 [ 294.103036][ C0] ? ndisc_send_skb+0x1f5/0x14f0 [ 294.107979][ C0] ? ndisc_mc_map+0x680/0x680 [ 294.112679][ C0] ? skb_dst+0xd0/0xd0 [ 294.116748][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.122941][ C0] addrconf_rs_timer+0x2d5/0x630 [ 294.127915][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 294.133995][ C0] ? call_timer_fn+0x171/0x540 [ 294.138785][ C0] call_timer_fn+0x189/0x540 [ 294.143386][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 294.149472][ C0] ? call_timer_fn+0xd2/0x540 [ 294.154162][ C0] ? __run_timers+0x800/0x800 [ 294.158859][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 294.164994][ C0] __run_timers+0x542/0x800 [ 294.169516][ C0] ? detach_timer+0x2b0/0x2b0 [ 294.174205][ C0] ? lock_chain_count+0x20/0x20 [ 294.179093][ C0] run_timer_softirq+0x67/0xf0 [ 294.183878][ C0] handle_softirqs+0x280/0x820 [ 294.188653][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 294.193428][ C0] ? do_softirq+0x1a0/0x1a0 [ 294.197967][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 294.203198][ C0] __irq_exit_rcu+0xd3/0x190 [ 294.207793][ C0] ? irq_exit_rcu+0x20/0x20 [ 294.212338][ C0] irq_exit_rcu+0x9/0x20 [ 294.216588][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 294.222257][ C0] [ 294.225204][ C0] [ 294.228143][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.234159][ C0] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 294.240076][ C0] Code: 75 11 e8 02 02 0b 00 48 85 db 75 16 e8 f8 01 0b 00 eb 15 e8 f1 01 0b 00 e8 0c 29 08 09 48 85 db 74 ea e8 e2 01 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 294.259777][ C0] RSP: 0018:ffffc900102afa00 EFLAGS: 00000246 [ 294.265857][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 294.273833][ C0] RDX: ffffc9000cefa000 RSI: 0000000000002c2c RDI: 0000000000002c2d [ 294.281826][ C0] RBP: ffffc900102afad0 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 294.289805][ C0] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: 1ffff92002055f44 [ 294.297784][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92002055f65 [ 294.305781][ C0] ? event_function+0x300/0x300 [ 294.310639][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 294.316369][ C0] ? smp_call_function_single+0x123/0x5a0 [ 294.322100][ C0] smp_call_function_single+0x36d/0x5a0 [ 294.327656][ C0] ? event_function+0x300/0x300 [ 294.332517][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 294.338684][ C0] ? event_function+0x300/0x300 [ 294.343576][ C0] perf_install_in_context+0x5be/0x920 [ 294.349049][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 294.355036][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 294.360269][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 294.365494][ C0] ? perf_event__header_size+0x165/0x220 [ 294.371134][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 294.376869][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 294.382516][ C0] ? lock_chain_count+0x20/0x20 [ 294.387377][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 294.392587][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 294.398230][ C0] do_syscall_64+0x55/0xa0 [ 294.402652][ C0] ? clear_bhb_loop+0x40/0x90 [ 294.407350][ C0] ? clear_bhb_loop+0x40/0x90 [ 294.412051][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.417949][ C0] RIP: 0033:0x7f3dba39aeb9 [ 294.422376][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.441986][ C0] RSP: 002b:00007f3dbb1e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 294.450403][ C0] RAX: ffffffffffffffda RBX: 00007f3dba615fa0 RCX: 00007f3dba39aeb9 [ 294.458375][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 294.466351][ C0] RBP: 00007f3dba408c1f R08: 0000000000000002 R09: 0000000000000000 [ 294.474330][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 294.482305][ C0] R13: 00007f3dba616038 R14: 00007f3dba615fa0 R15: 00007ffe0f3b2868 [ 294.490294][ C0]