last executing test programs: 2.72887431s ago: executing program 0 (id=1055): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7, 0x0, 0x0, 0x4000}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.592603113s ago: executing program 0 (id=1059): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xb, 0x422, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0xf}, 0x111371, 0x1, 0x0, 0x7, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 2.376239237s ago: executing program 0 (id=1062): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) r0 = gettid() (rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x6e, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_config_ext={0xffffffffffffffff}, 0xa801, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2019}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x8, 0x253, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0xfffd, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}, 0x10140) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1fc}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x19, 0x0, 0x0) (async) r7 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r7, 0x110, 0x2, 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x73) (async) socketpair(0x18, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600c06fb4dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000005e00000080bbed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a000000000000000000000000000000000000000000dc2b81684d7cbe9d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x44) 2.228381461s ago: executing program 0 (id=1064): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2000) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x18}, 0x10) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) socket$kcm(0x22, 0x3, 0x0) socketpair(0x1, 0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1, 0x0, 0x60}, 0x0) 2.110860263s ago: executing program 3 (id=1067): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x79f, 0x0, 0xffffffffffffffff, 0x647, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x5, 0x5, 0x4, 0xa0, r1, 0x101, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x1}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000708000000feffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f0000000740)=""/4096, 0x41000, 0x44, '\x00', r2, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001740)={0x4, 0x3, 0x200, 0x1b0}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001780)=[0xffffffffffffffff, r6], &(0x7f00000017c0)=[{0x1, 0x1, 0x2, 0x3}, {0x3, 0x3, 0xd, 0x5}], 0x10, 0x1}, 0x94) 1.994686706s ago: executing program 2 (id=1069): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="622037353a2a090aef"], 0xa) 1.912726418s ago: executing program 2 (id=1070): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xb, 0x422, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0xf}, 0x111371, 0x1, 0x0, 0x7, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 1.791729371s ago: executing program 2 (id=1071): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r5) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.624483424s ago: executing program 2 (id=1072): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069104c00000000000400eaffff0700009500006896311100"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 1.544852796s ago: executing program 2 (id=1073): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x200, 0x2}, 0x8000, 0x5, 0x43a1bd72, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x8, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open$cgroup(&(0x7f0000000f00)={0x5, 0x80, 0x1, 0x3, 0xf3, 0x6, 0x0, 0x9f, 0x24485, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x820, 0x9, 0x7ff, 0x2, 0x3, 0x2, 0xfde, 0x0, 0x5e6, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0xb, 0x0) socket$kcm(0x1e, 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000f80)='+,\x00') r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000010c0)="e61b94a7765a", 0x6}, {&(0x7f0000001100)}, {&(0x7f0000001140)="512c283568d67a471471c94e76d4dc823361c063d3a1e070dc01caf16e2025", 0x1f}, {&(0x7f0000001200)="8cafb91d5bcd8287b51e", 0xa}], 0x4}, 0x50) r3 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2000c005) 1.151153745s ago: executing program 0 (id=1074): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=r1, 0x4) 1.137805735s ago: executing program 3 (id=1075): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="622037353a2a090aef"], 0xa) (fail_nth: 3) 936.761959ms ago: executing program 1 (id=1077): r0 = socket$kcm(0x23, 0x5, 0x0) close(0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x5000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1, 0x0, 0x0, 0x2800}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff, r1}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000011800000000000000010000ec16c7", @ANYRES32], 0x38, 0x800}, 0x8841) 770.404743ms ago: executing program 0 (id=1078): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5, 0x1, 0x0, 0xfc, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x200, 0x2}, 0x8000, 0x5, 0x43a1bd72, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open$cgroup(&(0x7f0000000f00)={0x5, 0x80, 0x1, 0x3, 0xf3, 0x6, 0x0, 0x9f, 0x24485, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x820, 0x9, 0x7ff, 0x2, 0x3, 0x2, 0xfde, 0x0, 0x5e6, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="a2e58028c4a3ba39c02843d860db1a55dfff0fc4086bdffdad99c7a48b2822db", @ANYRES8=r1, @ANYRES16=r0, @ANYRESOCT], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0xb, 0x0) socket$kcm(0x1e, 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000f80)='+,\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="208f94f9806eed45f800000002000000ed80410000000000920000000000cf00"], 0x20}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x40}, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000010c0)="e61b94a7765a", 0x6}, {&(0x7f0000001100)}, {&(0x7f0000001140)="512c283568d67a471471c94e76d4dc823361c063d3a1e070dc01caf16e2025", 0x1f}, {&(0x7f0000001200)="8cafb91d5bcd8287b51e", 0xa}], 0x4}, 0x50) r5 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2000c005) 770.233363ms ago: executing program 3 (id=1079): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xb, 0x422, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0xf}, 0x111371, 0x1, 0x0, 0x7, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 741.655224ms ago: executing program 1 (id=1080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0xd2f7}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x400, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x3, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x5, 0x2, 0x3}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x5f]}}, 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 640.664616ms ago: executing program 2 (id=1081): unlink(&(0x7f00000010c0)='./file0\x00') r0 = socket$kcm(0xa, 0x2, 0x73) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x7, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x13, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001100)=')U,+}\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x82, &(0x7f00000001c0), 0x4) recvmsg(r0, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x2000) 539.565008ms ago: executing program 1 (id=1082): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c0000000000000000000000080000fd", @ANYRES64=r0], 0x48}, 0x0) 535.734038ms ago: executing program 3 (id=1083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="3200000000000000000000000300009fa9ccd0fd6c50fac1f25a1298bf7798c50002d3bc298bc35c91d1fa4889979f0e6e3fb876e34a8b7f5a05ba93c159c586f94658442fd16e700896d3af110c168fcf05535bab17a71a3adcf275a83dfb", @ANYRES32, @ANYBLOB="5c7b02466c85b564170b4ed55747a5e46337b849987e3081f2a81e98ff59f0d0a1d11e3874cc6fb054", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'bridge0\x00', 0x2}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="00000000ffffff7f00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r5) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 306.665094ms ago: executing program 1 (id=1084): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000feffffff0000000000000000b7080000000000007b8af8ff00000000b70800f8010000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 238.336265ms ago: executing program 3 (id=1085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x2000007}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xfffe}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10101}, 0x94) 176.729856ms ago: executing program 1 (id=1086): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x4) 76.689799ms ago: executing program 3 (id=1087): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8001500140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffffeffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e41", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 0s ago: executing program 1 (id=1088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000007d00000c18110000", @ANYRES32=r0, @ANYBLOB="00000000eb000000b7080000040000007b8af8ff00000000bfa200000000002007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a80000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x10, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) recvmsg$unix(r10, &(0x7f0000000440)={&(0x7f0000000080), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000240)=""/192, 0xc0}], 0x2}, 0x40010142) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x5, 0x9, 0x40}], 0x0, 0x8d8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 62.125530][ T5760] cgroup: Unknown subsys name 'net' [ 62.258053][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.674623][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.045852][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.054687][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.065233][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.065293][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.073104][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.087916][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.095796][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.102038][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.103605][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.119308][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.127088][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.128589][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.134604][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.142297][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.149794][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.163944][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.164620][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.172430][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.178932][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.185494][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.192934][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.210458][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.219630][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.227222][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.616216][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 65.687054][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 65.756170][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 65.771128][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.779635][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.787100][ T5773] bridge_slave_0: entered allmulticast mode [ 65.794781][ T5773] bridge_slave_0: entered promiscuous mode [ 65.807472][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.814767][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.822094][ T5773] bridge_slave_1: entered allmulticast mode [ 65.828747][ T5773] bridge_slave_1: entered promiscuous mode [ 65.866144][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 65.905292][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.917473][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.934185][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.941331][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.948666][ T5774] bridge_slave_0: entered allmulticast mode [ 65.955511][ T5774] bridge_slave_0: entered promiscuous mode [ 66.000749][ T5773] team0: Port device team_slave_0 added [ 66.007307][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.017276][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.024425][ T5774] bridge_slave_1: entered allmulticast mode [ 66.031032][ T5774] bridge_slave_1: entered promiscuous mode [ 66.067818][ T5773] team0: Port device team_slave_1 added [ 66.108305][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.128815][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.168565][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.175642][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.204091][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.232889][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.240492][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.248389][ T5771] bridge_slave_0: entered allmulticast mode [ 66.255309][ T5771] bridge_slave_0: entered promiscuous mode [ 66.263337][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.270456][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.277647][ T5771] bridge_slave_1: entered allmulticast mode [ 66.284574][ T5771] bridge_slave_1: entered promiscuous mode [ 66.297888][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.304979][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.331170][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.342360][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.349465][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.359607][ T5772] bridge_slave_0: entered allmulticast mode [ 66.366269][ T5772] bridge_slave_0: entered promiscuous mode [ 66.386808][ T5774] team0: Port device team_slave_0 added [ 66.401514][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.410921][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.419342][ T5772] bridge_slave_1: entered allmulticast mode [ 66.426803][ T5772] bridge_slave_1: entered promiscuous mode [ 66.447163][ T5774] team0: Port device team_slave_1 added [ 66.482277][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.503107][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.514899][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.536631][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.568450][ T5773] hsr_slave_0: entered promiscuous mode [ 66.575627][ T5773] hsr_slave_1: entered promiscuous mode [ 66.598929][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.606075][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.632132][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.645160][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.652244][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.678246][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.702367][ T5772] team0: Port device team_slave_0 added [ 66.725067][ T5771] team0: Port device team_slave_0 added [ 66.738764][ T5772] team0: Port device team_slave_1 added [ 66.757041][ T5771] team0: Port device team_slave_1 added [ 66.790660][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.797870][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.824179][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.841952][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.848913][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.874899][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.936141][ T5774] hsr_slave_0: entered promiscuous mode [ 66.942874][ T5774] hsr_slave_1: entered promiscuous mode [ 66.948897][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.956749][ T5774] Cannot create hsr debugfs directory [ 66.982578][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.989538][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.015673][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.036644][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.043701][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.071735][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.143283][ T5772] hsr_slave_0: entered promiscuous mode [ 67.149431][ T5772] hsr_slave_1: entered promiscuous mode [ 67.155531][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.163515][ T5772] Cannot create hsr debugfs directory [ 67.237830][ T5771] hsr_slave_0: entered promiscuous mode [ 67.244488][ T5771] hsr_slave_1: entered promiscuous mode [ 67.250524][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.258417][ T5771] Cannot create hsr debugfs directory [ 67.283118][ T5783] Bluetooth: hci1: command tx timeout [ 67.295842][ T5778] Bluetooth: hci2: command tx timeout [ 67.301583][ T5775] Bluetooth: hci0: command tx timeout [ 67.307684][ T5783] Bluetooth: hci3: command tx timeout [ 67.526750][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.539473][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.549040][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.569455][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.623864][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.634621][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.648154][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.658786][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.719201][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.739729][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.749200][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.760820][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.858545][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.869617][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.880470][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.892863][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.997488][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.037279][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.049406][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.076414][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.083726][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.099307][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.106451][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.142997][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.166083][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.178496][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.185690][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.215016][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.230318][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.237455][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.286086][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.309295][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.340556][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.347750][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.396753][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.403953][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.444439][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.451603][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.477802][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.484993][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.550456][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.651569][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.782958][ T5771] veth0_vlan: entered promiscuous mode [ 68.805849][ T5771] veth1_vlan: entered promiscuous mode [ 68.827446][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.903321][ T5771] veth0_macvtap: entered promiscuous mode [ 68.938144][ T5771] veth1_macvtap: entered promiscuous mode [ 68.974395][ T5773] veth0_vlan: entered promiscuous mode [ 68.994864][ T5773] veth1_vlan: entered promiscuous mode [ 69.046476][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.061297][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.073605][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.083362][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.092579][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.101249][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.130566][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.155692][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.175714][ T5773] veth0_macvtap: entered promiscuous mode [ 69.214039][ T5773] veth1_macvtap: entered promiscuous mode [ 69.308509][ T5774] veth0_vlan: entered promiscuous mode [ 69.326668][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.338298][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.349964][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.360522][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.371541][ T5783] Bluetooth: hci3: command tx timeout [ 69.377018][ T5775] Bluetooth: hci0: command tx timeout [ 69.377055][ T5775] Bluetooth: hci2: command tx timeout [ 69.377085][ T5775] Bluetooth: hci1: command tx timeout [ 69.378451][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.404452][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.414300][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.428765][ T5774] veth1_vlan: entered promiscuous mode [ 69.451503][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.466575][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.478731][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.487494][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.497093][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.522965][ T5772] veth0_vlan: entered promiscuous mode [ 69.552642][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.561996][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.599000][ T5772] veth1_vlan: entered promiscuous mode [ 69.678217][ T5774] veth0_macvtap: entered promiscuous mode [ 69.696428][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.707843][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.744500][ T5774] veth1_macvtap: entered promiscuous mode [ 69.787417][ T5772] veth0_macvtap: entered promiscuous mode [ 69.817621][ T5772] veth1_macvtap: entered promiscuous mode [ 69.835203][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.856971][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.859852][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.874558][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.887121][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.899765][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.913098][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.936309][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.959691][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.969650][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.983112][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.994197][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.005245][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.017583][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.031117][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.042711][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.053991][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.064835][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.080366][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.110474][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.122387][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.132445][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.143871][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.153745][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.165297][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.176335][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.194273][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.219299][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.249198][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.259689][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.272439][ C1] hrtimer: interrupt took 69582 ns [ 70.311010][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.340028][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.351549][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.362816][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.563285][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.579595][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.685536][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.725028][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.827517][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.890615][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.936170][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.961463][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.157880][ T5846] netlink: 'syz.1.8': attribute type 9 has an invalid length. [ 71.183705][ T5846] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8'. [ 71.309830][ T5850] netlink: 'syz.1.8': attribute type 9 has an invalid length. [ 71.377809][ T5850] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8'. [ 71.450201][ T5783] Bluetooth: hci1: command tx timeout [ 71.450224][ T5778] Bluetooth: hci2: command tx timeout [ 71.455889][ T5783] Bluetooth: hci0: command tx timeout [ 71.461083][ T5778] Bluetooth: hci3: command tx timeout [ 71.467753][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.479861][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.680982][ T5861] netlink: 'syz.3.11': attribute type 21 has an invalid length. [ 72.869438][ T5865] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 72.904625][ T5865] netlink: 'syz.2.10': attribute type 4 has an invalid length. [ 72.912903][ T5865] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.10'. [ 72.984267][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.015727][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.039194][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.050467][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.323701][ T5876] Zero length message leads to an empty skb [ 73.521854][ T5778] Bluetooth: hci0: command tx timeout [ 73.522032][ T5783] Bluetooth: hci2: command tx timeout [ 73.527271][ T5778] Bluetooth: hci1: command tx timeout [ 73.527295][ T5778] Bluetooth: hci3: command tx timeout [ 74.051295][ T5866] syz.1.12 (5866) used greatest stack depth: 20392 bytes left [ 74.202856][ T5887] syz.1.18 (5887) used greatest stack depth: 20352 bytes left [ 74.431577][ T5895] netlink: 'syz.2.21': attribute type 33 has an invalid length. [ 74.445869][ T5895] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21'. [ 74.461208][ T5895] `: renamed from ip6tnl0 (while UP) [ 74.510262][ T5895] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 74.531098][ T5892] netlink: 144 bytes leftover after parsing attributes in process `syz.3.19'. [ 75.361721][ T5910] ipvlan1: entered promiscuous mode [ 75.392452][ T5910] ipvlan1: entered allmulticast mode [ 75.398346][ T5910] veth0_vlan: entered allmulticast mode [ 75.449766][ T5914] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.26'. [ 75.793641][ T5917] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 75.824679][ T5917] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 75.842822][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.534375][ T5924] syz.3.29 (5924) used greatest stack depth: 20136 bytes left [ 76.737195][ T5940] netlink: 'syz.0.32': attribute type 21 has an invalid length. [ 77.170332][ T5953] ipvlan1: entered promiscuous mode [ 77.176871][ T5953] ipvlan1: entered allmulticast mode [ 77.182778][ T5953] veth0_vlan: entered allmulticast mode [ 77.233290][ T5953] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.37'. [ 78.733982][ T5969] netlink: 'syz.3.51': attribute type 2 has an invalid length. [ 78.742953][ T5969] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 78.751095][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.151262][ T5978] netlink: 144 bytes leftover after parsing attributes in process `syz.0.42'. [ 79.788675][ T5991] ipvlan1: entered promiscuous mode [ 79.797291][ T5991] ipvlan1: entered allmulticast mode [ 79.803496][ T5991] veth0_vlan: entered allmulticast mode [ 79.845315][ T5991] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.48'. [ 80.112943][ T5998] netlink: 'syz.2.52': attribute type 19 has an invalid length. [ 80.738318][ T6009] netlink: 'syz.1.55': attribute type 33 has an invalid length. [ 80.750302][ T6009] netlink: 152 bytes leftover after parsing attributes in process `syz.1.55'. [ 80.760897][ T6009] `: renamed from ip6tnl0 (while UP) [ 80.778478][ T6009] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 81.390186][ T6015] netlink: 'syz.0.60': attribute type 21 has an invalid length. [ 81.688350][ T6016] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 81.702163][ T6016] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 81.892241][ T6021] netlink: 'syz.3.62': attribute type 13 has an invalid length. [ 81.942040][ T6019] netlink: 'syz.2.61': attribute type 33 has an invalid length. [ 81.983040][ T6019] netlink: 164 bytes leftover after parsing attributes in process `syz.2.61'. [ 82.732968][ T6039] vcan0: entered allmulticast mode [ 82.827242][ T6039] netlink: 'syz.1.66': attribute type 10 has an invalid length. [ 82.906556][ T6039] veth0_macvtap: left promiscuous mode [ 83.540802][ T6052] netlink: 'syz.1.71': attribute type 2 has an invalid length. [ 83.551147][ T6052] netlink: 'syz.1.71': attribute type 1 has an invalid length. [ 83.560220][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.627831][ T6056] warning: `syz.2.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.205676][ T6079] netlink: 'syz.2.81': attribute type 2 has an invalid length. [ 84.215377][ T6079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.81'. [ 84.232791][ T6079] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.81'. [ 84.703997][ T6090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.85'. [ 85.476483][ T6114] syzkaller0: entered promiscuous mode [ 85.483877][ T6114] syzkaller0: entered allmulticast mode [ 86.630529][ T6119] netlink: 'syz.3.97': attribute type 10 has an invalid length. [ 86.645595][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.653888][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.823521][ T42] cfg80211: failed to load regulatory.db [ 87.196294][ T6140] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.105'. [ 87.546349][ T6159] netlink: 'syz.0.113': attribute type 4 has an invalid length. [ 87.554264][ T6159] netlink: 152 bytes leftover after parsing attributes in process `syz.0.113'. [ 87.594419][ T6159] .`: renamed from bond0 (while UP) [ 88.867934][ T6212] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 88.878138][ T6212] netlink: 'syz.3.132': attribute type 4 has an invalid length. [ 88.887180][ T6212] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.132'. [ 89.167910][ T6222] netlink: 'syz.1.134': attribute type 10 has an invalid length. [ 89.374894][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.385758][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.475800][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.483415][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.492413][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.499823][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.568892][ T6222] team0: Port device bridge0 added [ 89.752959][ T6222] syz.1.134 (6222) used greatest stack depth: 18968 bytes left [ 89.879881][ T6234] netlink: 14 bytes leftover after parsing attributes in process `syz.3.139'. [ 89.904968][ T6230] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 89.919071][ T6230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.138'. [ 89.929906][ T6230] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 93.502209][ T6325] netlink: 'syz.3.170': attribute type 2 has an invalid length. [ 93.530359][ T6325] netlink: 'syz.3.170': attribute type 1 has an invalid length. [ 93.550909][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.854443][ T6342] FAULT_INJECTION: forcing a failure. [ 94.854443][ T6342] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.872211][ T6342] CPU: 0 PID: 6342 Comm: syz.2.179 Not tainted syzkaller #0 [ 94.879544][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.889640][ T6342] Call Trace: [ 94.892946][ T6342] [ 94.895918][ T6342] dump_stack_lvl+0x18c/0x250 [ 94.900637][ T6342] ? show_regs_print_info+0x20/0x20 [ 94.905865][ T6342] ? load_image+0x420/0x420 [ 94.910419][ T6342] ? __might_fault+0xaa/0x120 [ 94.915144][ T6342] ? __lock_acquire+0x7d80/0x7d80 [ 94.920236][ T6342] should_fail_ex+0x394/0x4c0 [ 94.924987][ T6342] _copy_from_iter+0x1cd/0x1290 [ 94.929885][ T6342] ? rcu_is_watching+0x15/0xb0 [ 94.934698][ T6342] ? copyout_mc+0x70/0x70 [ 94.939071][ T6342] ? __virt_addr_valid+0x10c/0x380 [ 94.944222][ T6342] ? __virt_addr_valid+0x10c/0x380 [ 94.949387][ T6342] ? __virt_addr_valid+0x10c/0x380 [ 94.954553][ T6342] ? __check_object_size+0x4fc/0xa40 [ 94.959890][ T6342] netlink_sendmsg+0x76b/0xbf0 [ 94.964733][ T6342] ? netlink_getsockopt+0x590/0x590 [ 94.969989][ T6342] ? apparmor_socket_sendmsg+0x8e/0x330 [ 94.975586][ T6342] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 94.980910][ T6342] ? security_socket_sendmsg+0x80/0xa0 [ 94.986413][ T6342] ? netlink_getsockopt+0x590/0x590 [ 94.991661][ T6342] ____sys_sendmsg+0x61b/0x980 [ 94.996500][ T6342] ? __asan_memset+0x22/0x40 [ 95.001138][ T6342] ? __sys_sendmsg_sock+0x30/0x30 [ 95.006202][ T6342] ? __import_iovec+0x5f2/0x850 [ 95.011130][ T6342] ? import_iovec+0x73/0xa0 [ 95.015691][ T6342] ___sys_sendmsg+0x2a6/0x360 [ 95.020439][ T6342] ? __sys_sendmsg+0x2b0/0x2b0 [ 95.025322][ T6342] ? __lock_acquire+0x7d80/0x7d80 [ 95.030475][ T6342] __se_sys_sendmsg+0x1d0/0x2c0 [ 95.035380][ T6342] ? __x64_sys_sendmsg+0x80/0x80 [ 95.040375][ T6342] ? lockdep_hardirqs_on+0x98/0x150 [ 95.045612][ T6342] do_syscall_64+0x55/0xb0 [ 95.050072][ T6342] ? clear_bhb_loop+0x40/0x90 [ 95.054783][ T6342] ? clear_bhb_loop+0x40/0x90 [ 95.059502][ T6342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.065456][ T6342] RIP: 0033:0x7f425699de59 [ 95.069913][ T6342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.089568][ T6342] RSP: 002b:00007f4257847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.098032][ T6342] RAX: ffffffffffffffda RBX: 00007f4256c25fa0 RCX: 00007f425699de59 [ 95.106040][ T6342] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 95.114049][ T6342] RBP: 00007f4257847090 R08: 0000000000000000 R09: 0000000000000000 [ 95.122059][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.130067][ T6342] R13: 00007f4256c26038 R14: 00007f4256c25fa0 R15: 00007fff36a21f78 [ 95.138128][ T6342] [ 96.502147][ T6353] netlink: 144 bytes leftover after parsing attributes in process `syz.0.182'. [ 97.315849][ T6349] netlink: 'syz.1.180': attribute type 4 has an invalid length. [ 97.354068][ T6349] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.180'. [ 97.457449][ T6357] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 97.504154][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.511594][ T6357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.563385][ T6357] team0: Port device bridge0 added [ 98.538295][ T6361] syzkaller0: entered promiscuous mode [ 98.610532][ T6361] syzkaller0: entered allmulticast mode [ 98.913302][ T6361] netlink: 128 bytes leftover after parsing attributes in process `syz.1.185'. [ 98.950291][ T6361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.307775][ T6385] netlink: 'syz.2.191': attribute type 46 has an invalid length. [ 106.315975][ T6385] netlink: 55 bytes leftover after parsing attributes in process `syz.2.191'. [ 106.341983][ T6393] netlink: 'syz.3.193': attribute type 15 has an invalid length. [ 108.261982][ T6438] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 108.280641][ T6438] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 108.294345][ T6438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.319468][ T6441] syzkaller0: entered promiscuous mode [ 109.325323][ T6441] syzkaller0: entered allmulticast mode [ 110.185486][ T6461] netlink: 'syz.1.215': attribute type 4 has an invalid length. [ 110.206259][ T6461] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.215'. [ 112.267418][ T6476] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.218'. [ 112.473304][ T6484] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.220'. [ 113.275092][ T6496] syzkaller0: entered promiscuous mode [ 113.281963][ T6496] syzkaller0: entered allmulticast mode [ 113.398766][ T6496] netlink: 128 bytes leftover after parsing attributes in process `syz.3.224'. [ 113.425485][ T6496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.488384][ T6502] netlink: 'syz.2.226': attribute type 13 has an invalid length. [ 115.496490][ T6502] netlink: 172 bytes leftover after parsing attributes in process `syz.2.226'. [ 115.510881][ T6502] erspan0: refused to change device tx_queue_len [ 115.571746][ T6507] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.227'. [ 116.042161][ T6520] netlink: 15179 bytes leftover after parsing attributes in process `syz.2.228'. [ 120.007678][ T6542] syzkaller0: entered promiscuous mode [ 120.017518][ T6542] syzkaller0: entered allmulticast mode [ 125.482247][ T6553] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 127.444056][ T6584] bridge_slave_1: left allmulticast mode [ 127.476496][ T6584] bridge_slave_1: left promiscuous mode [ 127.489053][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.570483][ T6584] bridge_slave_0: left allmulticast mode [ 127.581982][ T6584] bridge_slave_0: left promiscuous mode [ 127.587785][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.681113][ T6584] team0: Port device bridge0 removed [ 127.772040][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 127.934105][ T6600] netlink: 3890 bytes leftover after parsing attributes in process `syz.1.252'. [ 128.105047][ T6599] syzkaller0: entered promiscuous mode [ 128.110777][ T6599] syzkaller0: entered allmulticast mode [ 132.898866][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905281][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.915917][ T6622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.257'. [ 132.932312][ T6620] netlink: 'syz.2.255': attribute type 10 has an invalid length. [ 133.128333][ T6630] netlink: 'syz.3.260': attribute type 10 has an invalid length. [ 133.918395][ T6630] team0: Port device geneve1 added [ 134.836364][ T6648] netlink: 'syz.3.266': attribute type 2 has an invalid length. [ 134.892220][ T6648] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.266'. [ 136.528377][ T6662] syzkaller0: entered promiscuous mode [ 136.547638][ T6662] syzkaller0: entered allmulticast mode [ 141.645158][ T6692] netlink: 'syz.2.277': attribute type 4 has an invalid length. [ 141.653342][ T6692] netlink: 152 bytes leftover after parsing attributes in process `syz.2.277'. [ 141.694688][ T6692] .`: renamed from bond0 [ 141.722258][ T6694] netlink: 'syz.3.272': attribute type 10 has an invalid length. [ 143.224163][ T6722] netlink: 'syz.0.287': attribute type 4 has an invalid length. [ 143.232172][ T6722] netlink: 152 bytes leftover after parsing attributes in process `syz.0.287'. [ 143.531861][ T6730] netlink: 'syz.2.291': attribute type 32 has an invalid length. [ 145.151537][ T6757] netlink: 'syz.1.298': attribute type 4 has an invalid length. [ 145.164045][ T6757] netlink: 152 bytes leftover after parsing attributes in process `syz.1.298'. [ 145.195957][ T6757] .`: renamed from bond0 (while UP) [ 145.375724][ T6761] syz.2.299 uses obsolete (PF_INET,SOCK_PACKET) [ 148.270595][ T6776] netlink: 'syz.3.304': attribute type 16 has an invalid length. [ 148.290492][ T6776] netlink: 48 bytes leftover after parsing attributes in process `syz.3.304'. [ 148.362390][ T6776] veth1_macvtap: entered allmulticast mode [ 148.968741][ T6787] netlink: 144 bytes leftover after parsing attributes in process `syz.2.308'. [ 149.920392][ T6809] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.112699][ T6821] netlink: 'syz.0.316': attribute type 2 has an invalid length. [ 152.120426][ T6821] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 152.165579][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.207997][ T6794] netlink: 'syz.1.311': attribute type 10 has an invalid length. [ 153.651867][ T6829] netlink: 'syz.2.321': attribute type 33 has an invalid length. [ 153.661759][ T6829] netlink: 152 bytes leftover after parsing attributes in process `syz.2.321'. [ 153.671268][ T6829] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 153.967591][ T6831] vcan0: entered allmulticast mode [ 154.307182][ T6846] netlink: 'syz.0.324': attribute type 3 has an invalid length. [ 154.319897][ T6846] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.324'. [ 155.407491][ T6861] syzkaller0: entered promiscuous mode [ 155.413625][ T6861] syzkaller0: entered allmulticast mode [ 156.659573][ T6864] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 156.668493][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.676269][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.706132][ T6866] netlink: 'syz.3.332': attribute type 39 has an invalid length. [ 156.809354][ T6868] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.332'. [ 157.397980][ T6893] syzkaller0: entered promiscuous mode [ 157.406077][ T6893] syzkaller0: entered allmulticast mode [ 158.917113][ T6914] netlink: 'syz.3.350': attribute type 13 has an invalid length. [ 158.926676][ T6915] delete_channel: no stack [ 159.105320][ T6924] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.356'. [ 159.134012][ T6926] netlink: 'syz.3.356': attribute type 3 has an invalid length. [ 159.142313][ T6926] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.356'. [ 159.550698][ T6942] syzkaller0: entered promiscuous mode [ 159.556419][ T6942] syzkaller0: entered allmulticast mode [ 161.033790][ T6967] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.374'. [ 162.288429][ T6978] Illegal XDP return value 794238464 on prog (id 269) dev N/A, expect packet loss! [ 163.057084][ T6982] netlink: 'syz.2.379': attribute type 33 has an invalid length. [ 163.066146][ T6984] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 163.080433][ T6984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.380'. [ 163.090108][ T6984] dummy0: entered promiscuous mode [ 163.099620][ T6984] dummy0: entered allmulticast mode [ 163.112729][ T6984] bridge0: port 3(dummy0) entered blocking state [ 163.131836][ T6984] bridge0: port 3(dummy0) entered disabled state [ 164.465876][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 48 [ 164.567759][ T7011] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.393'. [ 164.706120][ T7012] syzkaller0: entered promiscuous mode [ 164.720074][ T7012] syzkaller0: entered allmulticast mode [ 167.369501][ T7049] netlink: 'syz.3.403': attribute type 14 has an invalid length. [ 167.377809][ T7049] netlink: 164 bytes leftover after parsing attributes in process `syz.3.403'. [ 167.648855][ T7062] netlink: 14 bytes leftover after parsing attributes in process `syz.1.406'. [ 168.612081][ T7062] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.662566][ T7062] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.685011][ T7062] .` (unregistering): Released all slaves [ 168.972186][ T7079] syzkaller0: entered promiscuous mode [ 168.979870][ T7079] syzkaller0: entered allmulticast mode [ 172.224519][ T7108] netlink: 14 bytes leftover after parsing attributes in process `syz.3.422'. [ 172.315319][ T7108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.354129][ T7108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.371118][ T7108] bond0 (unregistering): Released all slaves [ 172.414672][ T7121] netlink: 'syz.1.428': attribute type 12 has an invalid length. [ 172.430989][ T7121] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.428'. [ 172.489339][ T7125] netlink: 76 bytes leftover after parsing attributes in process `syz.0.429'. [ 172.505079][ T7128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.429'. [ 173.097754][ T7150] syzkaller0: entered promiscuous mode [ 173.105668][ T7150] syzkaller0: entered allmulticast mode [ 173.489145][ T7164] netlink: 14 bytes leftover after parsing attributes in process `syz.0.441'. [ 173.684922][ T7164] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.719714][ T7164] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.737595][ T7164] .` (unregistering): Released all slaves [ 175.404479][ T7198] netlink: 'syz.1.455': attribute type 10 has an invalid length. [ 175.421524][ T7198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.455'. [ 175.440897][ T7198] dummy0: entered promiscuous mode [ 175.446431][ T7198] dummy0: entered allmulticast mode [ 175.456416][ T7198] bridge0: port 3(dummy0) entered blocking state [ 175.463312][ T7198] bridge0: port 3(dummy0) entered disabled state [ 175.476213][ T7198] bridge0: port 3(dummy0) entered blocking state [ 175.482737][ T7198] bridge0: port 3(dummy0) entered forwarding state [ 176.065270][ T7220] netlink: 'syz.1.464': attribute type 2 has an invalid length. [ 176.075600][ T7220] netlink: 'syz.1.464': attribute type 8 has an invalid length. [ 176.085022][ T7220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.464'. [ 176.410375][ T7226] netlink: 144 bytes leftover after parsing attributes in process `syz.3.467'. [ 177.169249][ T7255] netlink: 'syz.0.480': attribute type 1 has an invalid length. [ 177.177740][ T7255] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.480'. [ 177.208141][ T7253] bridge_slave_1: left allmulticast mode [ 177.214615][ T7253] bridge_slave_1: left promiscuous mode [ 177.229513][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.257994][ T7253] bridge_slave_0: left allmulticast mode [ 177.286336][ T7253] bridge_slave_0: left promiscuous mode [ 177.293317][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.604932][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'. [ 177.679739][ T7262] syzkaller0: entered promiscuous mode [ 177.685688][ T7262] syzkaller0: entered allmulticast mode [ 179.761923][ T7293] netlink: 'syz.3.494': attribute type 33 has an invalid length. [ 179.769741][ T7293] netlink: 'syz.3.494': attribute type 46 has an invalid length. [ 179.988207][ T7302] netlink: 'syz.3.496': attribute type 29 has an invalid length. [ 179.996357][ T7302] netlink: 'syz.3.496': attribute type 29 has an invalid length. [ 180.007621][ T7301] netlink: 'syz.3.496': attribute type 29 has an invalid length. [ 180.024096][ T7302] netlink: 'syz.3.496': attribute type 12 has an invalid length. [ 180.035716][ T7302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.496'. [ 180.048713][ T7301] netlink: 'syz.3.496': attribute type 8 has an invalid length. [ 180.057002][ T7301] netlink: 156 bytes leftover after parsing attributes in process `syz.3.496'. [ 181.446235][ T7341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.512'. [ 181.642880][ T7347] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 181.919386][ T7360] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.520'. [ 182.096932][ T7360] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.520'. [ 182.112003][ T7361] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.520'. [ 182.295595][ T7369] netlink: 'syz.2.523': attribute type 21 has an invalid length. [ 182.355962][ T7369] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 182.369698][ T7369] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 183.174008][ T7386] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 183.424321][ T7403] netlink: 'syz.0.534': attribute type 32 has an invalid length. [ 183.470211][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 185.041494][ T7470] validate_nla: 2 callbacks suppressed [ 185.041508][ T7470] netlink: 'syz.0.559': attribute type 21 has an invalid length. [ 185.055832][ T7470] netlink: 168 bytes leftover after parsing attributes in process `syz.0.559'. [ 185.606592][ T7486] syzkaller0: entered promiscuous mode [ 185.651217][ T7486] syzkaller0: entered allmulticast mode [ 185.686543][ T7485] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.562'. [ 185.698774][ T7485] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.562'. [ 185.718236][ T7482] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.562'. [ 185.746724][ T7485] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.562'. [ 187.269391][ T7507] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.572'. [ 187.279493][ T7508] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.572'. [ 187.568842][ T7526] netlink: 'syz.2.580': attribute type 35 has an invalid length. [ 188.263873][ T7560] netlink: 144 bytes leftover after parsing attributes in process `syz.0.591'. [ 189.022234][ T7574] bridge0: port 3(dummy0) entered disabled state [ 189.438601][ T7574] bridge_slave_1: left allmulticast mode [ 189.444924][ T7574] bridge_slave_1: left promiscuous mode [ 189.457141][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.633895][ T7574] bridge_slave_0: left allmulticast mode [ 189.664194][ T7574] bridge_slave_0: left promiscuous mode [ 189.670063][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.776202][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 189.856975][ T7593] vcan0: entered allmulticast mode [ 189.903673][ T7596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.161201][ T7610] netlink: 'syz.3.607': attribute type 3 has an invalid length. [ 190.169813][ T7610] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 190.178281][ T7610] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.607'. [ 191.291716][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 191.443600][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 191.444269][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 191.449891][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 191.585864][ T7633] netlink: 'syz.0.615': attribute type 33 has an invalid length. [ 191.883483][ T7643] netlink: 132 bytes leftover after parsing attributes in process `syz.1.619'. [ 192.320851][ T7640] syzkaller0: entered promiscuous mode [ 192.339605][ T7640] syzkaller0: entered allmulticast mode [ 192.490619][ T7652] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 194.347055][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.353438][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.923168][ T7709] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 196.393575][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.751104][ T7740] netlink: 'syz.2.657': attribute type 11 has an invalid length. [ 197.096910][ T7758] netlink: 'syz.2.663': attribute type 21 has an invalid length. [ 197.106281][ T7758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.663'. [ 199.132476][ T7777] netlink: 'syz.2.670': attribute type 28 has an invalid length. [ 199.140265][ T7777] netlink: 'syz.2.670': attribute type 29 has an invalid length. [ 199.167796][ T7777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.670'. [ 199.325711][ T7781] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.672'. [ 199.516502][ T7795] netlink: 180 bytes leftover after parsing attributes in process `syz.2.676'. [ 199.539700][ T7797] netlink: 'syz.3.677': attribute type 7 has an invalid length. [ 200.739295][ T7818] netlink: 'syz.3.688': attribute type 3 has an invalid length. [ 200.757430][ T7818] netlink: 132 bytes leftover after parsing attributes in process `syz.3.688'. [ 203.307119][ T7829] netlink: 'syz.0.693': attribute type 3 has an invalid length. [ 203.326311][ T7829] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.693'. [ 203.408089][ T7833] netlink: 'syz.1.695': attribute type 27 has an invalid length. [ 203.615847][ T7846] netlink: 'syz.0.700': attribute type 2 has an invalid length. [ 203.624197][ T7846] netlink: 'syz.0.700': attribute type 8 has an invalid length. [ 203.632514][ T7846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.700'. [ 203.858768][ T7851] netlink: 'syz.0.701': attribute type 11 has an invalid length. [ 205.095963][ T7904] netlink: 'syz.2.720': attribute type 33 has an invalid length. [ 205.105375][ T7904] netlink: 'syz.2.720': attribute type 46 has an invalid length. [ 206.020919][ T7914] netlink: 'syz.0.724': attribute type 7 has an invalid length. [ 206.328800][ T7924] netlink: 132 bytes leftover after parsing attributes in process `syz.3.729'. [ 206.392461][ T7928] netlink: 'syz.3.731': attribute type 10 has an invalid length. [ 206.929558][ T7937] syzkaller0: entered promiscuous mode [ 206.936404][ T7937] syzkaller0: entered allmulticast mode [ 207.603678][ T7963] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.743'. [ 210.490364][ T7998] netlink: 'syz.2.759': attribute type 32 has an invalid length. [ 213.744005][ T8078] netlink: 'syz.3.785': attribute type 29 has an invalid length. [ 214.666341][ T8078] netlink: 'syz.3.785': attribute type 29 has an invalid length. [ 214.863478][ T8082] syzkaller0: entered promiscuous mode [ 214.884982][ T8082] syzkaller0: entered allmulticast mode [ 216.934101][ T8140] netlink: 'syz.2.813': attribute type 32 has an invalid length. [ 217.166016][ T8143] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.815'. [ 217.418815][ T8154] netlink: 144 bytes leftover after parsing attributes in process `syz.2.818'. [ 217.587207][ T8160] bridge0: port 3(dummy0) entered disabled state [ 217.669868][ T8160] bridge_slave_1: left allmulticast mode [ 217.686881][ T8160] bridge_slave_1: left promiscuous mode [ 217.724389][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.837540][ T8160] bridge_slave_0: left allmulticast mode [ 217.850160][ T8160] bridge_slave_0: left promiscuous mode [ 217.886649][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.033609][ T8160] team0: Port device bridge0 removed [ 218.204607][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'. [ 218.323931][ T8182] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 218.342128][ T8177] syzkaller0: entered promiscuous mode [ 218.353290][ T8177] syzkaller0: entered allmulticast mode [ 218.438343][ T8176] syzkaller0: entered promiscuous mode [ 218.444178][ T8176] syzkaller0: entered allmulticast mode [ 220.032126][ T8220] netlink: 'syz.0.838': attribute type 29 has an invalid length. [ 220.535130][ T8200] netlink: 'syz.3.831': attribute type 2 has an invalid length. [ 220.543088][ T8200] netlink: 'syz.3.831': attribute type 8 has an invalid length. [ 220.550782][ T8200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.831'. [ 220.561880][ T8220] netlink: 'syz.0.838': attribute type 29 has an invalid length. [ 220.587549][ T8221] netlink: 'syz.0.838': attribute type 29 has an invalid length. [ 220.615211][ T8222] netlink: 'syz.0.838': attribute type 29 has an invalid length. [ 221.734256][ T8244] team0: entered promiscuous mode [ 221.739354][ T8244] team_slave_0: entered promiscuous mode [ 221.767452][ T8244] team_slave_1: entered promiscuous mode [ 221.774199][ T8244] team0: entered allmulticast mode [ 221.779490][ T8244] team_slave_0: entered allmulticast mode [ 221.792024][ T8244] team_slave_1: entered allmulticast mode [ 224.144766][ T8255] netlink: 140 bytes leftover after parsing attributes in process `syz.3.852'. [ 224.877701][ T8277] syzkaller0: entered promiscuous mode [ 224.884415][ T8277] syzkaller0: entered allmulticast mode [ 226.390018][ T8293] netlink: 'syz.0.864': attribute type 10 has an invalid length. [ 226.407461][ T8293] team0: Device nlmon0 is of different type [ 226.773591][ T8328] netlink: 'syz.3.877': attribute type 19 has an invalid length. [ 227.193614][ T8346] team0: entered promiscuous mode [ 227.207561][ T8346] team_slave_0: entered promiscuous mode [ 227.217835][ T8346] team_slave_1: entered promiscuous mode [ 227.228190][ T8346] team0: entered allmulticast mode [ 227.238061][ T8346] team_slave_0: entered allmulticast mode [ 227.249642][ T8346] team_slave_1: entered allmulticast mode [ 227.384625][ T8345] syzkaller0: entered promiscuous mode [ 227.400344][ T8345] syzkaller0: entered allmulticast mode [ 229.631794][ T8412] netlink: 'syz.0.910': attribute type 33 has an invalid length. [ 230.240864][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 230.429198][ T8442] syzkaller0: entered promiscuous mode [ 230.435048][ T8442] syzkaller0: entered allmulticast mode [ 232.351527][ T8493] netlink: 'syz.1.940': attribute type 10 has an invalid length. [ 232.359947][ T8493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.940'. [ 232.374975][ T8493] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 232.447506][ T8499] netlink: 'syz.1.941': attribute type 2 has an invalid length. [ 232.456940][ T8499] netlink: 'syz.1.941': attribute type 8 has an invalid length. [ 232.465879][ T8499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.941'. [ 232.588609][ T8502] netlink: 'syz.2.943': attribute type 33 has an invalid length. [ 232.616592][ T8502] netlink: 152 bytes leftover after parsing attributes in process `syz.2.943'. [ 232.634288][ T8502] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 232.676637][ T8512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.945'. [ 233.909136][ T8544] netlink: 'syz.3.956': attribute type 10 has an invalid length. [ 234.035239][ T8548] hsr0: VLAN not yet supported [ 234.319258][ T8559] FAULT_INJECTION: forcing a failure. [ 234.319258][ T8559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.342048][ T8559] CPU: 1 PID: 8559 Comm: syz.2.963 Not tainted syzkaller #0 [ 234.349367][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.359451][ T8559] Call Trace: [ 234.362743][ T8559] [ 234.365771][ T8559] dump_stack_lvl+0x18c/0x250 [ 234.370482][ T8559] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.376659][ T8559] ? show_regs_print_info+0x20/0x20 [ 234.381885][ T8559] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.388083][ T8559] should_fail_ex+0x394/0x4c0 [ 234.392792][ T8559] _copy_from_iter+0x1cd/0x1290 [ 234.397658][ T8559] ? __virt_addr_valid+0x10c/0x380 [ 234.402792][ T8559] ? __lock_acquire+0x7d80/0x7d80 [ 234.407843][ T8559] ? copyout_mc+0x70/0x70 [ 234.412200][ T8559] ? __virt_addr_valid+0x10c/0x380 [ 234.417342][ T8559] ? __virt_addr_valid+0x10c/0x380 [ 234.422475][ T8559] ? __virt_addr_valid+0x10c/0x380 [ 234.427612][ T8559] ? __check_object_size+0x4fc/0xa40 [ 234.432919][ T8559] kernfs_fop_write_iter+0x19e/0x520 [ 234.438233][ T8559] vfs_write+0x474/0x9a0 [ 234.442508][ T8559] ? file_end_write+0x250/0x250 [ 234.447384][ T8559] ? __fget_files+0x3fc/0x460 [ 234.452091][ T8559] ? __fdget_pos+0x2a3/0x330 [ 234.456703][ T8559] ? ksys_write+0x74/0x260 [ 234.461144][ T8559] ksys_write+0x151/0x260 [ 234.465502][ T8559] ? __ia32_sys_read+0x90/0x90 [ 234.470294][ T8559] ? lockdep_hardirqs_on+0x98/0x150 [ 234.475514][ T8559] do_syscall_64+0x55/0xb0 [ 234.479953][ T8559] ? clear_bhb_loop+0x40/0x90 [ 234.484646][ T8559] ? clear_bhb_loop+0x40/0x90 [ 234.489342][ T8559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.495255][ T8559] RIP: 0033:0x7f425699de59 [ 234.499704][ T8559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.519329][ T8559] RSP: 002b:00007f4257847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.527767][ T8559] RAX: ffffffffffffffda RBX: 00007f4256c25fa0 RCX: 00007f425699de59 [ 234.535758][ T8559] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000007 [ 234.543745][ T8559] RBP: 00007f4257847090 R08: 0000000000000000 R09: 0000000000000000 [ 234.551731][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.559719][ T8559] R13: 00007f4256c26038 R14: 00007f4256c25fa0 R15: 00007fff36a21f78 [ 234.567725][ T8559] [ 235.470422][ T8604] sctp: [Deprecated]: syz.2.980 (pid 8604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.470422][ T8604] Use struct sctp_sack_info instead [ 236.826687][ T8629] syzkaller0: entered promiscuous mode [ 236.842039][ T8629] syzkaller0: entered allmulticast mode [ 236.980332][ T8634] netlink: 'syz.2.992': attribute type 10 has an invalid length. [ 236.989496][ T8634] hsr0: entered promiscuous mode [ 237.005442][ T8634] .`: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 237.955562][ T8668] netlink: 'syz.0.1003': attribute type 9 has an invalid length. [ 237.964715][ T8668] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1003'. [ 238.046139][ T8671] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1006'. [ 238.755031][ T8643] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.995'. [ 238.768925][ T8663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.776530][ T8663] IPv6: NLM_F_CREATE should be set when creating new route [ 238.783876][ T8663] IPv6: NLM_F_CREATE should be set when creating new route [ 238.791097][ T8663] IPv6: NLM_F_CREATE should be set when creating new route [ 238.921795][ T8678] netlink: 'syz.0.1003': attribute type 9 has an invalid length. [ 238.940290][ T8678] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1003'. [ 239.683164][ T8708] syzkaller0: entered promiscuous mode [ 239.702072][ T8708] syzkaller0: entered allmulticast mode [ 240.045377][ T8718] netlink: 'syz.1.1021': attribute type 33 has an invalid length. [ 240.053996][ T8718] netlink: 'syz.1.1021': attribute type 3 has an invalid length. [ 240.064655][ T8718] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1021'. [ 241.294323][ T8730] tun0: tun_chr_ioctl cmd 1074025673 [ 241.300102][ T8733] tun0: tun_chr_ioctl cmd 1074025675 [ 241.311275][ T8733] tun0: persist enabled [ 241.319259][ T8731] tun0: tun_chr_ioctl cmd 1074025675 [ 241.331422][ T8731] tun0: persist enabled [ 241.335948][ T8730] tun0: tun_chr_ioctl cmd 1074025675 [ 241.349363][ T8730] tun0: persist disabled [ 241.360688][ T8731] netlink: 'syz.2.1025': attribute type 21 has an invalid length. [ 241.386610][ T8731] netlink: 'syz.2.1025': attribute type 7 has an invalid length. [ 241.721454][ T8746] netlink: 'syz.0.1033': attribute type 4 has an invalid length. [ 241.942480][ T8756] netlink: 'syz.0.1038': attribute type 10 has an invalid length. [ 241.950420][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1038'. [ 241.987263][ T8756] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 242.552245][ T8787] netlink: 'syz.1.1047': attribute type 4 has an invalid length. [ 242.888685][ T8803] netlink: 'syz.1.1057': attribute type 10 has an invalid length. [ 243.400807][ T8825] netlink: 'syz.2.1063': attribute type 4 has an invalid length. [ 243.428360][ T8830] vcan0: entered allmulticast mode [ 243.964396][ T8849] FAULT_INJECTION: forcing a failure. [ 243.964396][ T8849] name failslab, interval 1, probability 0, space 0, times 1 [ 243.977672][ T8849] CPU: 1 PID: 8849 Comm: syz.2.1073 Not tainted syzkaller #0 [ 243.985057][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.995107][ T8849] Call Trace: [ 243.998386][ T8849] [ 244.001320][ T8849] dump_stack_lvl+0x18c/0x250 [ 244.006092][ T8849] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.012246][ T8849] ? show_regs_print_info+0x20/0x20 [ 244.017442][ T8849] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.023603][ T8849] should_fail_ex+0x394/0x4c0 [ 244.028281][ T8849] should_failslab+0x9/0x20 [ 244.032782][ T8849] slab_pre_alloc_hook+0x59/0x300 [ 244.037806][ T8849] ? __lock_acquire+0x7d80/0x7d80 [ 244.042838][ T8849] kmem_cache_alloc_node+0x5e/0x310 [ 244.048035][ T8849] ? __alloc_skb+0x103/0x2c0 [ 244.052639][ T8849] __alloc_skb+0x103/0x2c0 [ 244.057053][ T8849] netlink_sendmsg+0x66a/0xbf0 [ 244.061820][ T8849] ? netlink_getsockopt+0x590/0x590 [ 244.067015][ T8849] ? apparmor_socket_sendmsg+0x8e/0x330 [ 244.072554][ T8849] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 244.077832][ T8849] ? security_socket_sendmsg+0x80/0xa0 [ 244.083286][ T8849] ? netlink_getsockopt+0x590/0x590 [ 244.088481][ T8849] ____sys_sendmsg+0x61b/0x980 [ 244.093250][ T8849] ? __asan_memset+0x22/0x40 [ 244.097836][ T8849] ? __sys_sendmsg_sock+0x30/0x30 [ 244.102855][ T8849] ? __import_iovec+0x5f2/0x850 [ 244.107704][ T8849] ? import_iovec+0x73/0xa0 [ 244.112202][ T8849] ___sys_sendmsg+0x2a6/0x360 [ 244.116874][ T8849] ? get_pid_task+0x20/0x1e0 [ 244.121462][ T8849] ? __sys_sendmsg+0x2b0/0x2b0 [ 244.126234][ T8849] ? __lock_acquire+0x7d80/0x7d80 [ 244.131269][ T8849] __se_sys_sendmsg+0x1d0/0x2c0 [ 244.136117][ T8849] ? perf_trace_preemptirq_template+0x269/0x330 [ 244.142356][ T8849] ? __x64_sys_sendmsg+0x80/0x80 [ 244.147298][ T8849] ? lockdep_hardirqs_on+0x98/0x150 [ 244.152497][ T8849] do_syscall_64+0x55/0xb0 [ 244.156907][ T8849] ? clear_bhb_loop+0x40/0x90 [ 244.161575][ T8849] ? clear_bhb_loop+0x40/0x90 [ 244.166251][ T8849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.172139][ T8849] RIP: 0033:0x7f425699de59 [ 244.176546][ T8849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.196141][ T8849] RSP: 002b:00007f4257826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.204544][ T8849] RAX: ffffffffffffffda RBX: 00007f4256c26090 RCX: 00007f425699de59 [ 244.212508][ T8849] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 244.220470][ T8849] RBP: 00007f4257826090 R08: 0000000000000000 R09: 0000000000000000 [ 244.228435][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.236401][ T8849] R13: 00007f4256c26128 R14: 00007f4256c26090 R15: 00007fff36a21f78 [ 244.244406][ T8849] [ 244.418200][ T8852] FAULT_INJECTION: forcing a failure. [ 244.418200][ T8852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.436777][ T8852] CPU: 0 PID: 8852 Comm: syz.3.1075 Not tainted syzkaller #0 [ 244.444196][ T8852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.454278][ T8852] Call Trace: [ 244.457581][ T8852] [ 244.460528][ T8852] dump_stack_lvl+0x18c/0x250 [ 244.465237][ T8852] ? show_regs_print_info+0x20/0x20 [ 244.470466][ T8852] ? load_image+0x420/0x420 [ 244.474997][ T8852] ? __lock_acquire+0x7d80/0x7d80 [ 244.480061][ T8852] ? snprintf+0xe9/0x140 [ 244.484316][ T8852] should_fail_ex+0x394/0x4c0 [ 244.489022][ T8852] _copy_to_user+0x2f/0xa0 [ 244.493462][ T8852] simple_read_from_buffer+0xe7/0x150 [ 244.498864][ T8852] proc_fail_nth_read+0x1e8/0x260 [ 244.503914][ T8852] ? proc_fault_inject_write+0x360/0x360 [ 244.509576][ T8852] ? fsnotify_perm+0x271/0x5e0 [ 244.514375][ T8852] ? proc_fault_inject_write+0x360/0x360 [ 244.520023][ T8852] vfs_read+0x298/0x990 [ 244.524202][ T8852] ? kernel_read+0x1e0/0x1e0 [ 244.528788][ T8852] ? __fget_files+0x28/0x460 [ 244.533372][ T8852] ? __fget_files+0x3fc/0x460 [ 244.538048][ T8852] ? __fdget_pos+0x2a3/0x330 [ 244.542646][ T8852] ? ksys_read+0x74/0x260 [ 244.546986][ T8852] ksys_read+0x151/0x260 [ 244.551221][ T8852] ? vfs_write+0x9a0/0x9a0 [ 244.555639][ T8852] do_syscall_64+0x55/0xb0 [ 244.560048][ T8852] ? clear_bhb_loop+0x40/0x90 [ 244.564722][ T8852] ? clear_bhb_loop+0x40/0x90 [ 244.569398][ T8852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.575307][ T8852] RIP: 0033:0x7f037c95e68e [ 244.579713][ T8852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.599313][ T8852] RSP: 002b:00007f037d8f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.607713][ T8852] RAX: ffffffffffffffda RBX: 00007f037d8f26c0 RCX: 00007f037c95e68e [ 244.615676][ T8852] RDX: 000000000000000f RSI: 00007f037d8f20a0 RDI: 0000000000000008 [ 244.623649][ T8852] RBP: 00007f037d8f2090 R08: 0000000000000000 R09: 0000000000000000 [ 244.631635][ T8852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.639612][ T8852] R13: 00007f037cc26038 R14: 00007f037cc25fa0 R15: 00007ffc9d42cd48 [ 244.647602][ T8852] [ 245.058154][ T8878] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 245.086546][ T8878] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 245.112233][ T8878] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 245.146503][ T8878] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 245.662517][ C0] [ 245.662525][ C0] ================================ [ 245.662530][ C0] WARNING: inconsistent lock state [ 245.662548][ C0] syzkaller #0 Not tainted [ 245.662555][ C0] -------------------------------- [ 245.662559][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 245.662566][ C0] syz.1.1088/8891 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 245.662582][ C0] ffff888030a0fa38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x95/0x680 [ 245.662629][ C0] {INITIAL USE} state was registered at: [ 245.662635][ C0] lock_acquire+0x19e/0x420 [ 245.662653][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 245.662670][ C0] trie_update_elem+0xcd/0xdf0 [ 245.662686][ C0] bpf_map_update_value+0x64b/0x710 [ 245.662700][ C0] generic_map_update_batch+0x5de/0x800 [ 245.662720][ C0] bpf_map_do_batch+0x3f2/0x600 [ 245.662735][ C0] __sys_bpf+0x381/0x890 [ 245.662748][ C0] __x64_sys_bpf+0x7c/0x90 [ 245.662761][ C0] do_syscall_64+0x55/0xb0 [ 245.662780][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.662805][ C0] irq event stamp: 4212 [ 245.662810][ C0] hardirqs last enabled at (4211): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 245.662837][ C0] hardirqs last disabled at (4212): [] exc_debug+0x73/0x140 [ 245.662854][ C0] softirqs last enabled at (3908): [] bpf_prog_load+0x1204/0x1610 [ 245.662872][ C0] softirqs last disabled at (3904): [] bpf_ksym_add+0x2c/0x330 [ 245.662892][ C0] [ 245.662892][ C0] other info that might help us debug this: [ 245.662896][ C0] Possible unsafe locking scenario: [ 245.662896][ C0] [ 245.662899][ C0] CPU0 [ 245.662901][ C0] ---- [ 245.662904][ C0] lock(&trie->lock); [ 245.662914][ C0] [ 245.662917][ C0] lock(&trie->lock); [ 245.662925][ C0] [ 245.662925][ C0] *** DEADLOCK *** [ 245.662925][ C0] [ 245.662928][ C0] no locks held by syz.1.1088/8891. [ 245.662935][ C0] [ 245.662935][ C0] stack backtrace: [ 245.662939][ C0] CPU: 0 PID: 8891 Comm: syz.1.1088 Not tainted syzkaller #0 [ 245.662954][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 245.662962][ C0] Call Trace: [ 245.662969][ C0] <#DB> [ 245.662975][ C0] dump_stack_lvl+0x18c/0x250 [ 245.662998][ C0] ? show_regs_print_info+0x20/0x20 [ 245.663021][ C0] ? print_usage_bug+0x43d/0x6a0 [ 245.663038][ C0] ? verify_lock_unused+0x15/0x140 [ 245.663056][ C0] lock_acquire+0x2c2/0x420 [ 245.663073][ C0] ? trie_delete_elem+0x95/0x680 [ 245.663094][ C0] ? read_lock_is_recursive+0x20/0x20 [ 245.663110][ C0] ? get_user_pages_fast_only+0xa0/0xa0 [ 245.663131][ C0] ? look_up_lock_class+0x75/0x140 [ 245.663149][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 245.663167][ C0] ? trie_delete_elem+0x95/0x680 [ 245.663186][ C0] ? _raw_spin_lock+0x40/0x40 [ 245.663203][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 245.663222][ C0] trie_delete_elem+0x95/0x680 [ 245.663241][ C0] ? perf_callchain+0x220/0x220 [ 245.663258][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 245.663274][ C0] bpf_overflow_handler+0x1fc/0x510 [ 245.663294][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 245.663307][ C0] ? bpf_overflow_handler+0xde/0x510 [ 245.663325][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 245.663348][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 245.663366][ C0] __perf_event_overflow+0x461/0x660 [ 245.663386][ C0] perf_swevent_event+0x319/0x570 [ 245.663404][ C0] ? perf_tp_event+0x1550/0x1550 [ 245.663421][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 245.663444][ C0] perf_bp_event+0x319/0x430 [ 245.663463][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 245.663494][ C0] ? lock_acquire+0x2c2/0x420 [ 245.663514][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 245.663535][ C0] notifier_call_chain+0x18f/0x380 [ 245.663555][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 245.663574][ C0] atomic_notifier_call_chain+0xda/0x180 [ 245.663594][ C0] notify_die+0x145/0x1a0 [ 245.663613][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 245.663635][ C0] ? rcu_is_watching+0x15/0xb0 [ 245.663655][ C0] notify_debug+0x2e/0x50 [ 245.663670][ C0] exc_debug+0xde/0x140 [ 245.663686][ C0] asm_exc_debug+0x1e/0x40 [ 245.663713][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 245.663730][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 245.663742][ C0] RSP: 0018:ffffc9000523fb48 EFLAGS: 00050206 [ 245.663755][ C0] RAX: ffffffff84312701 RBX: 0000000000000b68 RCX: 0000000000000848 [ 245.663766][ C0] RDX: 0000000000000001 RSI: 0000200000000320 RDI: ffff888025d8c490 [ 245.663777][ C0] RBP: 0000000000000170 R08: ffff888025d8ccd7 R09: 1ffff11004bb199a [ 245.663788][ C0] R10: dffffc0000000000 R11: ffffed1004bb199b R12: 0000200000000b68 [ 245.663799][ C0] R13: 0000000000000d80 R14: ffff888025d8c170 R15: 0000200000000000 [ 245.663812][ C0] ? _copy_from_user+0x51/0xe0 [ 245.663831][ C0] [ 245.663836][ C0] [ 245.663840][ C0] _copy_from_user+0x8b/0xe0 [ 245.663856][ C0] bpf_test_init+0xde/0x140 [ 245.663874][ C0] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 245.663891][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 245.663913][ C0] ? dev_put+0x80/0x80 [ 245.663933][ C0] ? dev_put+0x80/0x80 [ 245.663948][ C0] bpf_prog_test_run+0x31f/0x390 [ 245.663966][ C0] __sys_bpf+0x49d/0x890 [ 245.663982][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 245.664004][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 245.664031][ C0] __x64_sys_bpf+0x7c/0x90 [ 245.664047][ C0] do_syscall_64+0x55/0xb0 [ 245.664067][ C0] ? clear_bhb_loop+0x40/0x90 [ 245.664080][ C0] ? clear_bhb_loop+0x40/0x90 [ 245.664095][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.664116][ C0] RIP: 0033:0x7f8f7599de59 [ 245.664128][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.664139][ C0] RSP: 002b:00007f8f76794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.664154][ C0] RAX: ffffffffffffffda RBX: 00007f8f75c25fa0 RCX: 00007f8f7599de59 [ 245.664165][ C0] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 245.664175][ C0] RBP: 00007f8f75a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 245.664184][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.664193][ C0] R13: 00007f8f75c26038 R14: 00007f8f75c25fa0 R15: 00007ffe08729bf8 [ 245.664209][ C0]