last executing test programs: 3.107729606s ago: executing program 2 (id=982): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756e6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x200f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x80, 0x1, 0x43a1bd76, 0x2, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e000000040104", 0x31}], 0x1}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) (async) socket$kcm(0x2c, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 3.087645126s ago: executing program 0 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f40, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x3ff) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) close(r4) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/208, 0xd0}], 0x1}, 0x500) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@enum64={0xe, 0x4, 0x0, 0x13, 0x0, 0x9, [{0xe, 0xca21, 0x54}, {0x6, 0xe, 0x3}, {0xf, 0xffffff80, 0xffffa914}, {0x2, 0x1, 0x2}]}, @var={0xb, 0x0, 0x0, 0xe, 0x5, 0x3}, @enum64={0xb, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x6b, 0x2}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x7e, 0x1}, @ptr={0xd, 0x0, 0x0, 0x2, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x55, 0x2}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/91, 0xc3, 0x5b, 0x0, 0x7fff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1e, 0x0, 0x1000, 0x48a7beb5, 0xd45, r2, 0x6, '\x00', r5, r6, 0x4, 0x0, 0x4}, 0x50) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]}) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0xd, 0x0, &(0x7f00000000c0)="c6769e45b7c61302926682c7f9", 0x5dc}, 0x50) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) close(r0) 2.387991661s ago: executing program 2 (id=985): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.307487915s ago: executing program 1 (id=986): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x7, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0x8101000000000006}, 0x205, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 2.230230609s ago: executing program 3 (id=987): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="2539000020000306f107f62aa6172f7881"], 0x33fe0) 2.228363579s ago: executing program 0 (id=988): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=0x0, @ANYRESOCT=r0], 0xfe33) 2.100398236s ago: executing program 1 (id=989): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x641e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x2000, 0x10002, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8, 0x7a7e, 0x4, 0x1, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x3, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0xfff0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socketpair(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_devices(r0, &(0x7f0000000100)={'c', ' *:* ', 'rwm\x00'}, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x100006, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x23, 0x5, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x100000000) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89ed, 0x0) 2.095940006s ago: executing program 0 (id=990): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0xa000, 0xcdd, 0x43a1bd76, 0x3, 0xa, 0x2, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r1, 0x29, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00001000bfa100000000000007010000f8ffffffb702000008000000b7030000210e00008500000006120000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twrr'], 0xa) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8010) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='^+,!z,-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb2, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x3, 0x6}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0xfcd4, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, r0, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x1000, 0x8, 0x0, 0x8, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00n'], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000240000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023000000850000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) 2.089379646s ago: executing program 3 (id=991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000c1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x5}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xa, &(0x7f0000000500), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4000, &(0x7f00000025c0), 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x3a, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r0, 0x31, 0x1, 0x1, &(0x7f0000000700)=[0x0], 0x1, 0x0, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0xa, 0x3, 0x106) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x0, 0x0, 0x0, 0x4, 0x820000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x18, 0x800, 0x3, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r4, 0x29, 0x4c, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB='z\n\x00'], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000760000004600000001"], 0x50) recvmsg(r2, &(0x7f0000000680)={&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/149, 0x95}], 0x1}, 0x40002062) r7 = socket$kcm(0x10, 0x2, 0x2) setsockopt$sock_attach_bpf(r7, 0x10e, 0x2, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x21) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f0000000300), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.038672749s ago: executing program 2 (id=992): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) (async, rerun: 64) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="89000000120081ae08060cdc030000007f19e3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001400604e5ff000400009bbca9066c706cba2c937a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x89}], 0x1}, 0x44) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x1000000000000210}, 0x8004) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r4, &(0x7f0000000400), 0x0}, 0x20) 1.666396597s ago: executing program 1 (id=993): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x80000001, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r0 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(r0, &(0x7f0000002940)={&(0x7f00000009c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff64}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)='%pI4 \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xfffffdbf, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x1f, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0xb, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0x61, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x93}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="9f969dafc6000000000000003c000000f5ca464fa73c0000000500000001000000060000060400000000000000010000000c0000000600000009000000000400000a002b000016000008000000060000000f000000ae06000000006100009d51d00c"], &(0x7f0000000640)=""/152, 0x59, 0x98, 0x0, 0x7, 0x10000}, 0x28) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000060000000d000000000000090400000008000000000000010000000061004600000000000000000300000000030000000300000080000000080000000000000a04000000000000000100000d0000000608000000050000000b00000000000012020000000b0000000000000c02000000005f000f5f00"], &(0x7f0000000880)=""/168, 0x8a, 0xa8, 0x1, 0x1, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r6, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xd886, 0x1000, 0x3, 0x1a400, r4, 0x0, '\x00', r5, r7, 0x5, 0x3, 0x1, 0x5, @value=r8, @void, @value=r9}, 0x50) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x14f8}, 0x90) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r10, r1, 0x0, 0x1, &(0x7f00000005c0)='\x00'}, 0x30) 1.648994018s ago: executing program 0 (id=994): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002182) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000180), 0x4a) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x6, 0x1, 0x2, {0xa, 0x4e23, 0xdce, @mcast1, 0x6}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)="6fe6793717b59fbf76460e6b453ef5230ca4ed05f897d93e6b688b07a4b6eaa4a4374098d60224f7838831714daf4e801ef344518bb18745ab0414f59a3cc7f76b57ed2abb276d8058521232e1097b8e611f39b9cec2fc1f28823d3bdd17350e7ec24220c733a7a580d34bdc05d1c00111d70cf46876cd915dd8610fc37607ffe0bbab3d5589be4e2d4da9c12cd6da1cd1e24095c5a90872cfdb398e8d6b7c0a1fca1642cf48300fe7753f1c5e5b0533b30d74a32b892c3fdba24eed49bddae3ccfdedbf74267328f5d26a7036e828632550c3bf6d3fca6856889e744c37e3b961db2f9fe6aa9af228fa609e6b8d2994c28ae0da4347", 0xf6}, {&(0x7f0000000980)="0a2fde61983c1af5a7909ff7341cfba1927052cc645d30e85e56878e3f92e81d251b6509e2eff2c872f7f1cae6fceb54efeb28f2db59ee9d33f20e723591261de088525d015844a5a9169d590490635c1870024950d91f474026e5976324b9e68ae08332e773b48ff6ac7a1441033c0b2f501e983a09e49c08b6c518461a0032e2ee7e8fc89cd7bfa13adb7eac7ebc0084e16ebf89907ed936b6509681df07c7dcb1b667a887515bf03f7447ce2d64f76afea528f33d523263a839a882ab9e10b75fbb24b9e46c68bfd77e7bbf4d8d5872e70056397164668f00d3ac0dc82972b74c6c86", 0xe4}, {&(0x7f0000000380)="4380ad4f5a3c379a81458567d7ca19c6f706b1fca760dad7501656ee70", 0x1d}, {&(0x7f0000000a80)="d7ae9e1ec11eae7c66cd8700d305d7459c781516336df3b34430975934de4f0d7a92be2bee9e1ccfa9fe806715dd84cb1d2b2414ff91bfadc47e64cbced4c4c1e659a89329648ff79eef3c4842147ecda1789dd4aa6d3252148df77d5401464806c1783d9b36229b00f5f626c1280b80587cfba511ed806ea59737f4d582deae1cdda18cc83c3e9e8964543b2dde49bbcb03f3c58c06f12ac015797cab8781fbd5c760717703013759da0f93c0e237e87194a90d3644ee55e734a5dcbd5e01bb1575846f6d4f272c725c93648ce4baf64475b340f54851aa", 0xd8}], 0x4}, 0x4000000) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000b0400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, 0x0, 0x2020) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40010002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000b87bdba7000004000000080000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8084) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="2a1db31ace623ec50437cc64446b70817cd23d476fa2ff841e935f06faa3bd1134fba561560a2dee83a0dc3eace8cdcf1fc3cf1d8193894c330fa7b4b496e9d18416c0105fa2dd370b26bd8ffc8cbce45d0c8ecade167c16e0c5db7ddf68ea68c220294525bffcbfddc59653f7e89b7f6ce23564753b7ccb6e377598fe685ce4398eb040e10a4c2be17e7464db302be031d4f36ec9d10e0c884550957e008e9c", 0xa0}, {0x0}, {&(0x7f0000000240)="44ee5ed78fe1ef6cb49c583a76a154cf", 0x10}, {0x0}], 0x4}, 0x40000) sendmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) 1.513853684s ago: executing program 2 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891e, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x33, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@union={0xb, 0x4, 0x0, 0x5, 0x1, 0x22, [{0x4, 0x4, 0x401}, {0x6, 0x2}, {0xd, 0x1, 0x9}, {0x6, 0x6, 0x2f}]}, @const={0x4, 0x0, 0x0, 0xa, 0x5}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x2e, 0x5f, 0x30]}}, &(0x7f00000006c0)=""/187, 0x71, 0xbb, 0x0, 0x53}, 0x28) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x3, 0x0}, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000840)=@raw=[@jmp={0x5, 0x1, 0xa, 0x3, 0x2, 0x8000000000000074, 0x4}, @exit, @ldst={0x1, 0x1, 0x6, 0x8, 0xb, 0x10, 0x1}, @alu={0x4, 0x1, 0x2, 0x8, 0x8, 0x18}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000008c0)='syzkaller\x00', 0xca3d, 0xea, &(0x7f0000000900)=""/234, 0x40f00, 0x61, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0xd, 0x3, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000a80)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x5, 0x4, 0x7, 0xa}, {0x1, 0x1, 0x10, 0xa}, {0x2, 0x3, 0xffff, 0xc}], 0x10, 0x9}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x19, 0x2000000, 0xdea0, 0x3, 0x802, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0xffffffffffffffff, 0x2, 0x8}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb5f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xb, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x3f}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x1, 0x9, 0x0, 0x10, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0xd, 0x5, 0x3, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x10000, 0xda, &(0x7f0000000240)=""/218, 0x41000, 0x2c, '\x00', r3, @fallback=0x32, r4, 0x8, &(0x7f00000007c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x8, &(0x7f0000000dc0)=[0x1, r7, r8, r9, r10], &(0x7f0000000e00)=[{0x4, 0x3, 0xe, 0x5}, {0x2, 0x2, 0x2, 0xc}, {0xffff, 0x4, 0xc}, {0x3, 0x4, 0x10, 0x4}, {0x1, 0x3, 0x3, 0x3}, {0x2, 0x1, 0x5, 0x7}, {0x1, 0x3, 0x4, 0x6}, {0x2, 0x3, 0x3, 0x1}]}, 0x94) (async) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9101a04000a740100067402000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 1.511724785s ago: executing program 3 (id=996): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='`\x00\x00\x00N', 0x5}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x36}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x0, 0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.321858714s ago: executing program 1 (id=997): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0xab, 0x14, &(0x7f0000000000)="c40b2150c475102b02854e9bafd4de950374985dec6ec7bd146d213fad5d38c994481bc160079a39274d6e2137c24f07b101a36e90c8ed8849f5f6f15f6f6c1fb0aff0b88d40ff76103b27cb5c257e4c282ef52a452005695b87b9d30460b4980e9e0465ab2de9fc48304bd39998d0488b3b787987097e56e13840976e50c8925a52dd140a94e6d799b7c78d4d3bedaf9f6cb0a5d3a74133496e34c539da8ec1da05ffc266b7b4fa94dabd", &(0x7f0000000100)=""/20, 0xfffffff8, 0x0, 0x5b, 0x99, &(0x7f0000000140)="77a2482aaaf9f2b4e716f43ae71c078b8a456f583c990cd02cf26f80c4cdcb3aec6ccf7d95517d53e802df8f6bf680b5d4d359a2c8d778c5981a94d17b4e9938b57d68b87dace9effe3579b46fd5cfe6caf5f74ce6b22ce4a4a1c5", &(0x7f0000000300)="ab407273ab97e879ea6cb0c130587175b3bd7927958427dbf641ed217d80966db9f00d4afa0c35d56934e7f843c949728d4a953554ab828b3708884e288b716da38cbc2d5079bb0fb6d533de27edd99e94cdfdc7ed30b9698fb9fb669c2f13415d75945689edc3219e0a4447b76af89a49da75fb073408d4286e2558e9f8de8550e6b4455bead2ed945088a80042d647b3656954169c5aeb38", 0x2, 0x0, 0x80000001}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e0072", 0x54}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) 1.055168797s ago: executing program 2 (id=998): bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000c0000000806040000ff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x400000000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x7, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a000035000000950000000000104b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="d6a955e489a117f3fc4084224b94bbd61e0c9829d399d481e36735ecedfaf589aee5237e1d8d8c8cf5ce2f43f5de3b8be5227a30a7d81b030029d85d548b93fe3e65efed9bd301eee796fb0c12a6f736e2f19ff011cd54cce3bb7ac348b0dfc0e685ab841ed39b5c23fc4b07715b609532eb81584bdfa4e59eee617f71ea03c773a2ed68433aee6c0ca9ef88df7b88731fab1377271e195bdfa8778838fde30793e0addc12cf2c564b0f1ed71a2f1e0aa7718ee5b8326c7e655929c20f388bbd88f89ebf3a91d304032e90b7ac833c2ca83091ca2c4fdc0a00000000000000718d", 0x18a}, {&(0x7f0000000100)="33686484f083fc01300a485a92818722b7c035d3883a1123c30c9b6cdad727c5b9fb15", 0x29}], 0x2}, 0x9cdc2384056b48b8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r4, &(0x7f0000000f00)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x27) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000780)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x3}}, 0x80, 0x0, 0xfffffffffffffdfa, 0x0, 0xffffffffffffffaf}, 0x2004c840) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair(0x29, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) 821.364019ms ago: executing program 1 (id=999): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x0, 0x0, 0x0, 0x4, 0x820000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x18, 0x800, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='--$*-$[$:\'@\xf4&/\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, r1, 0x0) socketpair(0x23, 0x3, 0x3, &(0x7f00000014c0)={0xffffffffffffffff}) socketpair(0x24, 0x800, 0x774, &(0x7f0000000380)) close(r2) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r0}) 754.428652ms ago: executing program 0 (id=1000): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="2539000020000306f107f62aa6172f7881"], 0x33fe0) 726.553904ms ago: executing program 3 (id=1001): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) close(0xffffffffffffffff) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000010000000000000008000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791048000000000061040000010000009500e67f"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&\x00\x00\x00'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) (async) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 446.558487ms ago: executing program 0 (id=1002): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18570000100000000000000000bc02000000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x4008040) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0020000c000000020000000000000000000006040000000000"], 0x0, 0x26}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x7, 0x0, &(0x7f0000000b00)="0000003a000e3d", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000006000000000000000000850000006c000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) (async) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) (async) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) openat$cgroup_procs(r1, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000"], 0x50) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xac800480, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xac800480, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x1000, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) 333.909843ms ago: executing program 1 (id=1003): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x3, 0x52, 0x4, 0x6, 0x0, 0x1, 0x8220, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x800, 0x0, 0xdf87, 0x2, 0x5, 0x5, 0x2, 0x0, 0x80000000, 0x0, 0x2}, r3, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0xfffffffc}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2c, 0x0, 0x108) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r8}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r10 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f00000001c0)={0x0, 0x80, 0x5, 0x5, 0x4e, 0x66, 0x0, 0x10, 0x220, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x89b, 0x1}, 0x40, 0x80, 0x7, 0x0, 0x7, 0x4, 0x7, 0x0, 0xe3, 0x0, 0xffffffff80000001}) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89b1, &(0x7f0000000700)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\b\x00\x00\x00\x00\x00\x00\x00\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q(n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4\xd4\xef]:~g:C\xc9\xe8\xc5U\x92\xae2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y\xffE8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\x94\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xec$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f7, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 1 [ 81.286405][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.296285][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.307370][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.315289][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.322818][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.387374][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.395601][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.408916][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.416351][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.424166][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.468249][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.476635][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.485200][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.493027][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.501974][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.511068][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.518665][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.527017][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.535533][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.547197][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.576215][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.585822][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.593783][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.911270][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 82.085426][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.094410][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.101880][ T5772] bridge_slave_0: entered allmulticast mode [ 82.109392][ T5772] bridge_slave_0: entered promiscuous mode [ 82.123626][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.131288][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.138606][ T5772] bridge_slave_1: entered allmulticast mode [ 82.146210][ T5772] bridge_slave_1: entered promiscuous mode [ 82.176129][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 82.224984][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.242164][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 82.258746][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.303396][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 82.357506][ T5772] team0: Port device team_slave_0 added [ 82.385850][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.393341][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.400652][ T5778] bridge_slave_0: entered allmulticast mode [ 82.408264][ T5778] bridge_slave_0: entered promiscuous mode [ 82.427789][ T5772] team0: Port device team_slave_1 added [ 82.439209][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.446570][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.453760][ T5778] bridge_slave_1: entered allmulticast mode [ 82.461122][ T5778] bridge_slave_1: entered promiscuous mode [ 82.519115][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.526166][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.552331][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.585492][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.592640][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.618754][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.648719][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.691372][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.723340][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.730699][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.738018][ T5776] bridge_slave_0: entered allmulticast mode [ 82.744799][ T5776] bridge_slave_0: entered promiscuous mode [ 82.762358][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.769558][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.777058][ T5780] bridge_slave_0: entered allmulticast mode [ 82.784408][ T5780] bridge_slave_0: entered promiscuous mode [ 82.803612][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.811210][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.818524][ T5776] bridge_slave_1: entered allmulticast mode [ 82.825510][ T5776] bridge_slave_1: entered promiscuous mode [ 82.854349][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.861683][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.868918][ T5780] bridge_slave_1: entered allmulticast mode [ 82.875888][ T5780] bridge_slave_1: entered promiscuous mode [ 82.905753][ T5772] hsr_slave_0: entered promiscuous mode [ 82.912353][ T5772] hsr_slave_1: entered promiscuous mode [ 82.932561][ T5778] team0: Port device team_slave_0 added [ 82.952062][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.974565][ T5778] team0: Port device team_slave_1 added [ 82.982718][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.994120][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.041793][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.075318][ T5776] team0: Port device team_slave_0 added [ 83.102482][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.109508][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.135536][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.159823][ T5776] team0: Port device team_slave_1 added [ 83.169865][ T5780] team0: Port device team_slave_0 added [ 83.186094][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.193040][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.219408][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.244712][ T5780] team0: Port device team_slave_1 added [ 83.301547][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.308841][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.335064][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.366498][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.367040][ T5085] Bluetooth: hci0: command tx timeout [ 83.373463][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.405982][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.418319][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.425293][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.451711][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.482331][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.489383][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.516039][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.553259][ T5778] hsr_slave_0: entered promiscuous mode [ 83.559887][ T5778] hsr_slave_1: entered promiscuous mode [ 83.566355][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.574140][ T5778] Cannot create hsr debugfs directory [ 83.616458][ T5085] Bluetooth: hci2: command tx timeout [ 83.681274][ T5780] hsr_slave_0: entered promiscuous mode [ 83.687314][ T5085] Bluetooth: hci3: command tx timeout [ 83.687335][ T51] Bluetooth: hci1: command tx timeout [ 83.702337][ T5780] hsr_slave_1: entered promiscuous mode [ 83.708707][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.716333][ T5780] Cannot create hsr debugfs directory [ 83.738228][ T5776] hsr_slave_0: entered promiscuous mode [ 83.746598][ T5776] hsr_slave_1: entered promiscuous mode [ 83.752832][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.760908][ T5776] Cannot create hsr debugfs directory [ 83.969344][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.004011][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.039102][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.052070][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.168195][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.179313][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.189880][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.200872][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.302930][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.313161][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.326259][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.345557][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.408547][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.423457][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.439178][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.450375][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.491464][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.533834][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.590724][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.598035][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.623718][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.634635][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.641820][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.728126][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.739151][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.766987][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.774138][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.788631][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.808380][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.815515][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.874438][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.883781][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.898679][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.905870][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.933832][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.941043][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.970127][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.977319][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.007427][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.014604][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.175375][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.338977][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.413860][ T5772] veth0_vlan: entered promiscuous mode [ 85.446241][ T5085] Bluetooth: hci0: command tx timeout [ 85.472597][ T5772] veth1_vlan: entered promiscuous mode [ 85.511097][ T5772] veth0_macvtap: entered promiscuous mode [ 85.556089][ T5772] veth1_macvtap: entered promiscuous mode [ 85.600050][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.644532][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.679009][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.693272][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.703871][ T5085] Bluetooth: hci2: command tx timeout [ 85.710315][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.720418][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.729858][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.762250][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.769453][ T5085] Bluetooth: hci1: command tx timeout [ 85.774168][ T51] Bluetooth: hci3: command tx timeout [ 85.836766][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.917863][ T5780] veth0_vlan: entered promiscuous mode [ 85.950311][ T5778] veth0_vlan: entered promiscuous mode [ 85.964291][ T5778] veth1_vlan: entered promiscuous mode [ 86.012701][ T5776] veth0_vlan: entered promiscuous mode [ 86.022775][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.037890][ T5780] veth1_vlan: entered promiscuous mode [ 86.043574][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.090532][ T5776] veth1_vlan: entered promiscuous mode [ 86.119133][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.127331][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.163741][ T5778] veth0_macvtap: entered promiscuous mode [ 86.185740][ T5780] veth0_macvtap: entered promiscuous mode [ 86.200983][ T5780] veth1_macvtap: entered promiscuous mode [ 86.213614][ T5778] veth1_macvtap: entered promiscuous mode [ 86.275558][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.308230][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.338198][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.358110][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.370819][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.373802][ C1] hrtimer: interrupt took 111212 ns [ 86.383973][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.397524][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.409947][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.418484][ T5776] veth0_macvtap: entered promiscuous mode [ 86.435123][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.445732][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.458361][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.471967][ T5776] veth1_macvtap: entered promiscuous mode [ 86.481318][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.492854][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.503624][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.514240][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.526915][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.539580][ T5839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.550245][ T5839] team_slave_0: entered allmulticast mode [ 86.557580][ T5839] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 86.579208][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.594623][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.604100][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.612881][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.629921][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.652863][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.662266][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.671398][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.707979][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.733851][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.752343][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.764695][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.777393][ T5843] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.783911][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.804490][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.847869][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.910190][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.941210][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.960593][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.976446][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.986560][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.998936][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.011837][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.105645][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.124939][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.134363][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.143680][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.261274][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.280320][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.351526][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.368973][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.433698][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.462477][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.504938][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.528154][ T51] Bluetooth: hci0: command tx timeout [ 87.550738][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.553377][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.599005][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.710311][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.731231][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.766904][ T51] Bluetooth: hci2: command tx timeout [ 87.851835][ T51] Bluetooth: hci3: command tx timeout [ 87.856292][ T5085] Bluetooth: hci1: command tx timeout [ 88.538843][ T5861] netlink: 'syz.1.6': attribute type 8 has an invalid length. [ 88.646820][ T5861] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.6'. [ 89.608777][ T5085] Bluetooth: hci0: command tx timeout [ 89.732205][ T5871] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 89.754261][ T5871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'. [ 89.832138][ T5871] bridge0: port 3(ipvlan1) entered blocking state [ 89.845259][ T5871] bridge0: port 3(ipvlan1) entered disabled state [ 89.852275][ T5085] Bluetooth: hci2: command tx timeout [ 89.857989][ T5871] ipvlan1: entered allmulticast mode [ 89.863367][ T5871] veth0_vlan: entered allmulticast mode [ 89.892003][ T5871] ipvlan1: left allmulticast mode [ 89.897531][ T5871] veth0_vlan: left allmulticast mode [ 89.903497][ T5871] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 89.926298][ T5085] Bluetooth: hci3: command tx timeout [ 89.937226][ T5085] Bluetooth: hci1: command tx timeout [ 89.949198][ T5873] netlink: 'syz.3.9': attribute type 33 has an invalid length. [ 89.981544][ T5873] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9'. [ 90.602474][ T5871] syz.1.8 (5871) used greatest stack depth: 19624 bytes left [ 90.802747][ T5881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.822848][ T5881] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.954089][ T23] cfg80211: failed to load regulatory.db [ 94.132443][ T5887] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14'. [ 94.141450][ T5887] team_slave_0: entered allmulticast mode [ 94.160448][ T5887] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 94.438870][ T5892] netlink: 162792 bytes leftover after parsing attributes in process `syz.3.16'. [ 94.481489][ T5892] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 94.666979][ T5900] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 95.558446][ T5925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.747038][ T5932] netlink: 'syz.1.29': attribute type 33 has an invalid length. [ 96.766568][ T5932] netlink: 152 bytes leftover after parsing attributes in process `syz.1.29'. [ 96.957842][ T5938] netlink: 'syz.0.30': attribute type 10 has an invalid length. [ 96.980211][ T5938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.30'. [ 97.011629][ T5938] bridge0: port 3(ipvlan1) entered blocking state [ 97.043078][ T5938] bridge0: port 3(ipvlan1) entered disabled state [ 97.067994][ T5938] ipvlan1: entered allmulticast mode [ 97.085574][ T5938] veth0_vlan: entered allmulticast mode [ 97.114183][ T5938] ipvlan1: left allmulticast mode [ 97.131673][ T5938] veth0_vlan: left allmulticast mode [ 97.158628][ T5938] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 97.668606][ T5943] netlink: 'syz.2.32': attribute type 8 has an invalid length. [ 97.729662][ T5943] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.32'. [ 98.682033][ T5957] netlink: 52 bytes leftover after parsing attributes in process `syz.2.35'. [ 98.756205][ T5957] team_slave_0: entered allmulticast mode [ 98.763089][ T5957] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 100.194684][ T5969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.025988][ T5987] netlink: 'syz.3.43': attribute type 10 has an invalid length. [ 101.052528][ T5987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.43'. [ 101.104990][ T5987] bridge0: port 3(ipvlan1) entered blocking state [ 101.115617][ T5987] bridge0: port 3(ipvlan1) entered disabled state [ 101.124690][ T5987] ipvlan1: entered allmulticast mode [ 101.147658][ T5987] veth0_vlan: entered allmulticast mode [ 101.155759][ T5987] ipvlan1: left allmulticast mode [ 101.164650][ T5987] veth0_vlan: left allmulticast mode [ 101.171988][ T5987] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 101.205497][ T5983] netlink: 'syz.2.42': attribute type 33 has an invalid length. [ 101.233029][ T5983] netlink: 152 bytes leftover after parsing attributes in process `syz.2.42'. [ 101.707876][ T5996] netlink: 'syz.0.44': attribute type 8 has an invalid length. [ 101.814923][ T5996] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.44'. [ 102.331664][ T6002] netlink: 52 bytes leftover after parsing attributes in process `syz.3.48'. [ 102.346148][ T6002] team_slave_0: entered allmulticast mode [ 102.357493][ T6002] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 102.623794][ T6015] Zero length message leads to an empty skb [ 102.655561][ T6010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.350656][ T6031] syz.2.57 uses obsolete (PF_INET,SOCK_PACKET) [ 103.807838][ T6046] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 103.826258][ T6046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.64'. [ 103.897812][ T6046] batman_adv: batadv0: Adding interface: veth0_vlan [ 103.940918][ T6046] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.981640][ T6046] batman_adv: batadv0: Interface activated: veth0_vlan [ 104.524607][ T6063] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.68'. [ 104.544714][ T6063] openvswitch: netlink: Flow key attribute not present in set flow. [ 104.720363][ T6067] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.69'. [ 104.742848][ T6067] bridge_slave_1: default FDB implementation only supports local addresses [ 104.810122][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.852863][ T6062] netlink: 'syz.0.69': attribute type 33 has an invalid length. [ 104.864288][ T6062] netlink: 152 bytes leftover after parsing attributes in process `syz.0.69'. [ 105.182115][ T6071] netlink: 'syz.3.71': attribute type 3 has an invalid length. [ 105.207500][ T6071] netlink: 132 bytes leftover after parsing attributes in process `syz.3.71'. [ 105.496174][ T6081] netlink: 'syz.0.74': attribute type 5 has an invalid length. [ 106.055375][ T6098] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.78'. [ 106.090135][ T6098] bridge_slave_1: default FDB implementation only supports local addresses [ 106.456709][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.497431][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.547769][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.555321][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.884667][ T6116] netlink: 'syz.0.85': attribute type 3 has an invalid length. [ 106.914052][ T6119] netlink: 'syz.0.85': attribute type 10 has an invalid length. [ 106.939937][ T6119] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 107.276844][ T6134] netlink: 'syz.1.88': attribute type 10 has an invalid length. [ 107.303599][ T6134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.88'. [ 107.330600][ T6134] batman_adv: batadv0: Adding interface: virt_wifi0 [ 107.374938][ T6134] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.492875][ T6134] batman_adv: batadv0: Interface activated: virt_wifi0 [ 107.622304][ T6144] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.631773][ T6144] netlink: 1 bytes leftover after parsing attributes in process `syz.0.91'. [ 108.386147][ T6162] netlink: 668 bytes leftover after parsing attributes in process `syz.3.96'. [ 108.446255][ T6162] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 108.472978][ T6162] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 108.727586][ T6175] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.100'. [ 108.870678][ T6179] netlink: 'syz.2.102': attribute type 33 has an invalid length. [ 108.896148][ T6179] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.102'. [ 108.950759][ T6181] netlink: 'syz.2.102': attribute type 33 has an invalid length. [ 109.001416][ T5085] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 109.026275][ T6181] netlink: 189348 bytes leftover after parsing attributes in process `syz.2.102'. [ 109.371005][ T6206] netlink: 'syz.2.108': attribute type 21 has an invalid length. [ 109.393899][ T6206] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.108'. [ 109.464020][ T6202] netlink: 'syz.1.106': attribute type 39 has an invalid length. [ 109.541626][ T6206] netlink: 'syz.2.108': attribute type 21 has an invalid length. [ 109.562776][ T6206] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.108'. [ 109.633053][ T6216] netlink: 'syz.0.110': attribute type 1 has an invalid length. [ 109.866885][ T6221] Illegal XDP return value 4294967294 on prog (id 91) dev N/A, expect packet loss! [ 110.016121][ T6226] netlink: 14 bytes leftover after parsing attributes in process `syz.3.113'. [ 110.411676][ T6226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.441430][ T6226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.528229][ T6226] bond0 (unregistering): Released all slaves [ 110.569391][ T6229] netlink: 14 bytes leftover after parsing attributes in process `syz.3.113'. [ 110.647958][ T6238] team0: Port device team_slave_0 removed [ 110.655316][ T6238] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 111.056325][ T51] Bluetooth: hci1: command tx timeout [ 113.014699][ T6295] __nla_validate_parse: 1 callbacks suppressed [ 113.014714][ T6295] netlink: 168 bytes leftover after parsing attributes in process `syz.2.131'. [ 113.042742][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 113.158699][ T6297] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.130'. [ 114.169108][ T6309] netlink: set zone limit has 8 unknown bytes [ 114.545544][ T6318] netlink: 'syz.1.137': attribute type 21 has an invalid length. [ 114.554961][ T6318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.137'. [ 114.579017][ T6321] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.139'. [ 114.665796][ T6318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.137'. [ 114.753838][ T6325] syzkaller0: entered promiscuous mode [ 114.759895][ T6325] syzkaller0: entered allmulticast mode [ 115.384823][ T6354] netlink: 'syz.0.147': attribute type 3 has an invalid length. [ 115.396932][ T6354] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.147'. [ 115.541672][ T6359] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.148'. [ 118.582840][ T6387] netlink: 44 bytes leftover after parsing attributes in process `syz.0.154'. [ 118.642033][ T6387] netlink: 'syz.0.154': attribute type 3 has an invalid length. [ 119.523917][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.3.162'. [ 119.565242][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.3.162'. [ 119.610808][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.3.162'. [ 119.656121][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.3.162'. [ 120.111202][ T6419] netlink: 60 bytes leftover after parsing attributes in process `syz.2.164'. [ 120.133705][ T6420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.164'. [ 120.368756][ T6426] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.166'. [ 120.584257][ T6432] pim6reg1: entered promiscuous mode [ 120.618749][ T6432] pim6reg1: entered allmulticast mode [ 120.664538][ T6434] netlink: 'syz.3.167': attribute type 12 has an invalid length. [ 121.384844][ T6456] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.173'. [ 122.698181][ T6480] C: renamed from team_slave_0 (while UP) [ 122.711943][ T6480] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 122.730242][ T6480] netlink: 116 bytes leftover after parsing attributes in process `syz.1.182'. [ 122.755695][ T6480] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 126.256644][ T6495] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.186'. [ 127.432419][ T6528] netlink: 64 bytes leftover after parsing attributes in process `syz.1.196'. [ 127.522472][ T6531] netlink: 192440 bytes leftover after parsing attributes in process `syz.1.197'. [ 127.532448][ T6531] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 127.717101][ T6539] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 127.724914][ T6539] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.199'. [ 128.364050][ T6554] bridge0: port 3(erspan0) entered blocking state [ 128.371002][ T6554] bridge0: port 3(erspan0) entered disabled state [ 128.378572][ T6554] erspan0: entered allmulticast mode [ 128.385555][ T6554] erspan0: entered promiscuous mode [ 128.392188][ T6554] bridge0: port 3(erspan0) entered blocking state [ 128.398836][ T6554] bridge0: port 3(erspan0) entered forwarding state [ 128.478730][ T6559] netlink: 'syz.1.205': attribute type 10 has an invalid length. [ 128.538501][ T6562] netlink: 'syz.1.205': attribute type 29 has an invalid length. [ 128.557218][ T6562] netlink: 'syz.1.205': attribute type 29 has an invalid length. [ 128.565424][ T6559] netlink: 'syz.1.205': attribute type 29 has an invalid length. [ 128.574864][ T6559] netlink: 'syz.1.205': attribute type 29 has an invalid length. [ 128.586815][ T6563] netlink: 'syz.2.206': attribute type 25 has an invalid length. [ 128.594592][ T6563] netlink: 'syz.2.206': attribute type 28 has an invalid length. [ 128.603939][ T6559] netlink: 'syz.1.205': attribute type 29 has an invalid length. [ 128.630157][ T6563] netlink: 'syz.2.206': attribute type 10 has an invalid length. [ 128.639660][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.692019][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.699371][ T6563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.721315][ T6563] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 128.834222][ T6566] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.207'. [ 129.486918][ T6580] netlink: 152 bytes leftover after parsing attributes in process `syz.2.212'. [ 129.632551][ T6580] .`: renamed from bond0 (while UP) [ 129.690212][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 132.892216][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.899016][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.108764][ T6615] tap0: tun_chr_ioctl cmd 1074025677 [ 133.116503][ T6615] tap0: linktype set to 6 [ 135.135363][ T6650] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.234'. [ 135.249668][ T6650] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.234'. [ 135.288747][ T6656] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.234'. [ 135.346469][ T6658] validate_nla: 4 callbacks suppressed [ 135.346486][ T6658] netlink: 'syz.2.236': attribute type 51 has an invalid length. [ 135.399383][ T6661] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.234'. [ 135.609213][ T6671] netlink: 'syz.1.239': attribute type 2 has an invalid length. [ 135.619330][ T6671] netlink: 'syz.1.239': attribute type 4 has an invalid length. [ 135.622930][ T6669] syz.3.238[6669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.628529][ T6671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.239'. [ 135.646781][ T6669] syz.3.238[6669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.936661][ T6678] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.241'. [ 136.117867][ T6691] C: renamed from team_slave_0 (while UP) [ 136.135721][ T6691] netlink: 'syz.3.245': attribute type 3 has an invalid length. [ 136.151468][ T6691] netlink: 'syz.3.245': attribute type 1 has an invalid length. [ 136.160753][ T6691] netlink: 128 bytes leftover after parsing attributes in process `syz.3.245'. [ 136.176520][ T6691] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 136.207358][ T6693] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.246'. [ 136.413802][ T6700] netlink: 'syz.3.245': attribute type 10 has an invalid length. [ 136.423615][ T6700] netlink: 2 bytes leftover after parsing attributes in process `syz.3.245'. [ 141.143934][ T6777] netlink: 196816 bytes leftover after parsing attributes in process `syz.3.270'. [ 143.008972][ T6810] netlink: 'syz.1.276': attribute type 2 has an invalid length. [ 143.064294][ T6810] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.276'. [ 143.146503][ T6812] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.278'. [ 143.784412][ T6824] netlink: 142528 bytes leftover after parsing attributes in process `syz.1.281'. [ 143.798675][ T6824] netlink: 'syz.1.281': attribute type 1 has an invalid length. [ 143.898852][ T6826] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 144.072082][ T6826] team0 (unregistering): Port device team_slave_1 removed [ 144.687246][ T6847] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.287'. [ 144.719347][ T6847] bridge_slave_1: default FDB implementation only supports local addresses [ 145.219785][ T6862] netlink: 'syz.3.291': attribute type 58 has an invalid length. [ 145.246391][ T6862] netlink: 152 bytes leftover after parsing attributes in process `syz.3.291'. [ 146.368455][ T6892] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.300'. [ 146.436056][ T6892] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 147.353685][ T6916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.307'. [ 147.373446][ T6918] netlink: 60 bytes leftover after parsing attributes in process `syz.2.307'. [ 148.490577][ T6940] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 148.558460][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.313'. [ 148.659431][ T6940] caif0: entered promiscuous mode [ 148.676884][ T6940] caif0: entered allmulticast mode [ 148.682999][ T6940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.801420][ T6943] netlink: 168 bytes leftover after parsing attributes in process `syz.3.314'. [ 149.412978][ T6963] netlink: 'syz.2.320': attribute type 29 has an invalid length. [ 149.510045][ T6963] netlink: 'syz.2.320': attribute type 29 has an invalid length. [ 149.533035][ T6967] netlink: 'syz.2.320': attribute type 29 has an invalid length. [ 149.587662][ T6968] netlink: 'syz.2.320': attribute type 29 has an invalid length. [ 149.636756][ T6963] netlink: 'syz.2.320': attribute type 29 has an invalid length. [ 150.443223][ T6981] netlink: 'syz.1.324': attribute type 1 has an invalid length. [ 150.458694][ T6981] netlink: 116 bytes leftover after parsing attributes in process `syz.1.324'. [ 150.662652][ T6984] netlink: 'syz.2.325': attribute type 22 has an invalid length. [ 150.788868][ T6986] netlink: 'syz.3.327': attribute type 29 has an invalid length. [ 150.816411][ T6986] netlink: 'syz.3.327': attribute type 29 has an invalid length. [ 151.082305][ T6999] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.330'. [ 151.300523][ T7006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.332'. [ 151.710174][ T7021] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.335'. [ 151.776305][ T7020] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.335'. [ 151.817056][ T7021] hsr0: entered promiscuous mode [ 151.825938][ T7021] hsr0: entered allmulticast mode [ 151.831041][ T7021] hsr_slave_0: entered allmulticast mode [ 151.856649][ T7021] hsr_slave_1: entered allmulticast mode [ 152.077802][ T7037] netlink: 763 bytes leftover after parsing attributes in process `syz.2.340'. [ 152.417462][ T7034] delete_channel: no stack [ 152.523138][ T7053] syzkaller0: entered allmulticast mode [ 152.974724][ T7067] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.350'. [ 153.059999][ T7070] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.351'. [ 153.112641][ T7072] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.352'. [ 153.122076][ T7072] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.352'. [ 153.143030][ T7072] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.352'. [ 153.159838][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'. [ 153.820738][ T7094] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.359'. [ 153.856668][ T7096] validate_nla: 5 callbacks suppressed [ 153.856683][ T7096] netlink: 'syz.1.360': attribute type 2 has an invalid length. [ 153.989202][ T7100] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 154.089875][ T7100] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.102379][ T7100] bond0: (slave team0): Enslaving as an active interface with an up link [ 154.530604][ T7116] netlink: 'syz.1.367': attribute type 6 has an invalid length. [ 156.098265][ T7169] netlink: 'syz.1.380': attribute type 3 has an invalid length. [ 159.549552][ T7203] __nla_validate_parse: 6 callbacks suppressed [ 159.549565][ T7203] netlink: 188 bytes leftover after parsing attributes in process `syz.2.389'. [ 159.730505][ T7211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.393'. [ 159.755010][ T7211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.393'. [ 159.827946][ T7212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.393'. [ 160.058201][ T7236] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 160.073159][ T7236] netlink: 'syz.1.399': attribute type 3 has an invalid length. [ 160.084106][ T7236] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.399'. [ 160.201733][ T7242] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.401'. [ 160.257330][ T7244] netlink: 'syz.3.402': attribute type 10 has an invalid length. [ 160.272052][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.402'. [ 160.281894][ T7244] team0: entered promiscuous mode [ 160.287921][ T7244] C: entered promiscuous mode [ 160.293132][ T7244] team_slave_1: entered promiscuous mode [ 160.309852][ T7244] bridge0: port 3(team0) entered blocking state [ 160.327248][ T7244] bridge0: port 3(team0) entered disabled state [ 160.341600][ T7244] team0: entered allmulticast mode [ 160.352865][ T7244] team_slave_1: entered allmulticast mode [ 160.390149][ T7244] bridge0: port 3(team0) entered blocking state [ 160.396658][ T7244] bridge0: port 3(team0) entered forwarding state [ 160.720840][ T7260] netlink: 'syz.0.406': attribute type 33 has an invalid length. [ 160.744126][ T7260] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'. [ 160.828321][ T7262] syzkaller0: entered promiscuous mode [ 160.848692][ T7262] syzkaller0: entered allmulticast mode [ 161.764718][ T7305] netlink: 'syz.3.415': attribute type 27 has an invalid length. [ 161.786236][ T7305] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 162.294724][ T7333] netlink: 'syz.1.420': attribute type 2 has an invalid length. [ 162.317862][ T7333] netlink: 132 bytes leftover after parsing attributes in process `syz.1.420'. [ 162.590148][ T7343] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.422'. [ 162.662132][ T7345] sock: sock_set_timeout: `syz.3.423' (pid 7345) tries to set negative timeout [ 162.754092][ T7345] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 163.011343][ T7358] netlink: 'syz.1.426': attribute type 1 has an invalid length. [ 163.591175][ T7348] delete_channel: no stack [ 163.890374][ T7393] netlink: 'syz.3.436': attribute type 3 has an invalid length. [ 166.245044][ T7440] validate_nla: 3 callbacks suppressed [ 166.245062][ T7440] netlink: 'syz.0.451': attribute type 33 has an invalid length. [ 166.259831][ T7440] __nla_validate_parse: 4 callbacks suppressed [ 166.259844][ T7440] netlink: 36 bytes leftover after parsing attributes in process `syz.0.451'. [ 166.404288][ T7454] netlink: 'syz.1.454': attribute type 13 has an invalid length. [ 166.412603][ T7454] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.454'. [ 167.508172][ T7486] netlink: 'syz.3.463': attribute type 29 has an invalid length. [ 167.987733][ T7485] netlink: 14 bytes leftover after parsing attributes in process `syz.3.463'. [ 168.013234][ T7486] netlink: 'syz.3.463': attribute type 29 has an invalid length. [ 168.023924][ T7487] netlink: 'syz.3.463': attribute type 29 has an invalid length. [ 168.046154][ T7489] netlink: 'syz.3.463': attribute type 29 has an invalid length. [ 168.208994][ T7496] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.465'. [ 168.248373][ T7496] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 168.653035][ T7503] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 168.804893][ T7507] netlink: 'syz.0.469': attribute type 29 has an invalid length. [ 169.269774][ T7510] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 169.284719][ T7510] netlink: 'syz.1.470': attribute type 4 has an invalid length. [ 169.309897][ T7510] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.470'. [ 169.376559][ T7503] syz.3.468 (7503) used greatest stack depth: 19432 bytes left [ 169.483127][ T7535] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.476'. [ 169.565443][ T1093] tipc: Subscription rejected, illegal request [ 169.631242][ T7539] netlink: 156 bytes leftover after parsing attributes in process `syz.0.477'. [ 169.744386][ T7543] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.478'. [ 169.889936][ T7549] netlink: 168 bytes leftover after parsing attributes in process `syz.3.480'. [ 170.013754][ T7557] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.483'. [ 170.441772][ T7569] mac80211_hwsim hwsim8 : renamed from wlan0 [ 171.492445][ T7610] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 171.506839][ T7610] pim6reg0: persist enabled [ 172.399699][ T7636] syz.1.505[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.399829][ T7636] syz.1.505[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.009897][ T7675] validate_nla: 10 callbacks suppressed [ 176.009937][ T7675] netlink: 'syz.0.516': attribute type 28 has an invalid length. [ 176.041642][ T7675] netlink: 'syz.0.516': attribute type 29 has an invalid length. [ 176.051182][ T7675] netlink: 132 bytes leftover after parsing attributes in process `syz.0.516'. [ 176.252935][ T7681] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.519'. [ 176.270680][ T7681] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 176.279617][ T7681] CPU: 1 PID: 7681 Comm: syz.3.519 Not tainted syzkaller #0 [ 176.286967][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.297078][ T7681] Call Trace: [ 176.300430][ T7681] [ 176.303401][ T7681] dump_stack_lvl+0x18c/0x250 [ 176.308164][ T7681] ? show_regs_print_info+0x20/0x20 [ 176.313428][ T7681] ? load_image+0x400/0x400 [ 176.318001][ T7681] sysfs_warn_dup+0x8e/0xa0 [ 176.322547][ T7681] sysfs_do_create_link_sd+0xc0/0x110 [ 176.327974][ T7681] device_add_class_symlinks+0x1cf/0x240 [ 176.333661][ T7681] device_add+0x507/0xc20 [ 176.338035][ T7681] wiphy_register+0x1dad/0x2ae0 [ 176.342955][ T7681] ? cfg80211_event_work+0x40/0x40 [ 176.348095][ T7681] ? minstrel_ht_alloc+0x88a/0x990 [ 176.353277][ T7681] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 176.359400][ T7681] ieee80211_register_hw+0x3464/0x4250 [ 176.364956][ T7681] ? ieee80211_tasklet_handler+0x20/0x20 [ 176.370633][ T7681] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 176.376569][ T7681] ? __debug_object_init+0xec/0x450 [ 176.381817][ T7681] ? __asan_memset+0x22/0x40 [ 176.386454][ T7681] ? __hrtimer_init+0x186/0x270 [ 176.391355][ T7681] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 176.397178][ T7681] ? mac80211_hwsim_free+0x220/0x220 [ 176.402547][ T7681] ? rcu_is_watching+0x15/0xb0 [ 176.407358][ T7681] ? kstrndup+0xbd/0x140 [ 176.411652][ T7681] hwsim_new_radio_nl+0xdc9/0x1a90 [ 176.416808][ T7681] ? __nla_validate+0x50/0x50 [ 176.421548][ T7681] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 176.427955][ T7681] ? __nla_parse+0x40/0x50 [ 176.432405][ T7681] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 176.438804][ T7681] genl_family_rcv_msg_doit+0x211/0x310 [ 176.444375][ T7681] ? end_current_label_crit_section+0x170/0x170 [ 176.450648][ T7681] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 176.456583][ T7681] ? bpf_lsm_capable+0x9/0x10 [ 176.461290][ T7681] ? security_capable+0x89/0xb0 [ 176.466188][ T7681] genl_rcv_msg+0x619/0x7a0 [ 176.470729][ T7681] ? genl_bind+0x360/0x360 [ 176.475166][ T7681] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 176.481534][ T7681] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 176.488164][ T7681] ? ref_tracker_free+0x690/0x840 [ 176.493253][ T7681] netlink_rcv_skb+0x241/0x4d0 [ 176.498056][ T7681] ? genl_bind+0x360/0x360 [ 176.502506][ T7681] ? netlink_ack+0x1180/0x1180 [ 176.507324][ T7681] ? __lock_acquire+0x7d40/0x7d40 [ 176.512389][ T7681] ? down_read+0x1ac/0x2e0 [ 176.516836][ T7681] genl_rcv+0x28/0x40 [ 176.520840][ T7681] netlink_unicast+0x751/0x8d0 [ 176.525653][ T7681] netlink_sendmsg+0x8d0/0xbf0 [ 176.530474][ T7681] ? netlink_getsockopt+0x590/0x590 [ 176.535709][ T7681] ? aa_sock_msg_perm+0x94/0x150 [ 176.540695][ T7681] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 176.546035][ T7681] ? security_socket_sendmsg+0x80/0xa0 [ 176.551532][ T7681] ? netlink_getsockopt+0x590/0x590 [ 176.556795][ T7681] ____sys_sendmsg+0x5ba/0x960 [ 176.561597][ T7681] ? __asan_memset+0x22/0x40 [ 176.566238][ T7681] ? __sys_sendmsg_sock+0x30/0x30 [ 176.571302][ T7681] ? __import_iovec+0x5f2/0x850 [ 176.576219][ T7681] ? import_iovec+0x73/0xa0 [ 176.580757][ T7681] ___sys_sendmsg+0x2a6/0x360 [ 176.585477][ T7681] ? __sys_sendmsg+0x2a0/0x2a0 [ 176.590312][ T7681] ? debug_mutex_init+0x38/0x70 [ 176.595254][ T7681] __se_sys_sendmsg+0x1c2/0x2b0 [ 176.600146][ T7681] ? __x64_sys_sendmsg+0x80/0x80 [ 176.605151][ T7681] ? lockdep_hardirqs_on+0x98/0x150 [ 176.610400][ T7681] do_syscall_64+0x55/0xa0 [ 176.614865][ T7681] ? clear_bhb_loop+0x40/0x90 [ 176.619577][ T7681] ? clear_bhb_loop+0x40/0x90 [ 176.624293][ T7681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.630219][ T7681] RIP: 0033:0x7f52c3f9c799 [ 176.634675][ T7681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.654307][ T7681] RSP: 002b:00007f52c4ee8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.662758][ T7681] RAX: ffffffffffffffda RBX: 00007f52c4215fa0 RCX: 00007f52c3f9c799 [ 176.670763][ T7681] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 176.678764][ T7681] RBP: 00007f52c4032c99 R08: 0000000000000000 R09: 0000000000000000 [ 176.686774][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.694762][ T7681] R13: 00007f52c4216038 R14: 00007f52c4215fa0 R15: 00007fff3774c558 [ 176.702812][ T7681] [ 176.975187][ T7686] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.520'. [ 177.022587][ T7686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.208122][ T7691] netlink: 'syz.3.521': attribute type 10 has an invalid length. [ 177.220567][ T7691] hsr0: entered promiscuous mode [ 177.369276][ T7700] netlink: 830 bytes leftover after parsing attributes in process `syz.2.524'. [ 177.440484][ T7705] netlink: 'syz.3.526': attribute type 10 has an invalid length. [ 177.448951][ T7705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.526'. [ 177.461621][ T7705] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 178.113075][ T7734] netlink: 'syz.2.532': attribute type 9 has an invalid length. [ 178.356548][ T7744] Dead loop on virtual device ip6_vti0, fix it urgently! [ 178.371258][ T7744] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.535'. [ 178.531296][ T7749] delete_channel: no stack [ 178.540059][ T7749] delete_channel: no stack [ 178.749523][ T7760] netlink: 'syz.1.541': attribute type 2 has an invalid length. [ 178.764807][ T7760] netlink: 14 bytes leftover after parsing attributes in process `syz.1.541'. [ 179.250645][ T7774] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.544'. [ 179.287048][ T7774] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.544'. [ 179.341078][ T7770] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.544'. [ 179.380927][ T7777] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 179.392877][ T7777] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 182.469930][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 185.746454][ T7808] sit0: entered allmulticast mode [ 186.158160][ T7827] IPv6: Can't replace route, no match found [ 186.209404][ T7830] netlink: 'syz.3.558': attribute type 10 has an invalid length. [ 186.239023][ T7830] vxcan1: entered promiscuous mode [ 186.269972][ T7830] vxcan1: entered allmulticast mode [ 186.275241][ T7830] team0: Device vxcan1 is of different type [ 187.162618][ T7845] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.562'. [ 187.961859][ T7874] netlink: 539 bytes leftover after parsing attributes in process `syz.2.571'. [ 187.982311][ T7876] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.572'. [ 188.333506][ T7889] netlink: 68 bytes leftover after parsing attributes in process `syz.3.577'. [ 188.524788][ T7894] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 188.544059][ T7894] netlink: 116 bytes leftover after parsing attributes in process `syz.1.576'. [ 188.593271][ T7896] netlink: 'syz.1.576': attribute type 12 has an invalid length. [ 188.615012][ T7896] netlink: 120 bytes leftover after parsing attributes in process `syz.1.576'. [ 188.799026][ T7887] syz.1.576 (7887) used greatest stack depth: 19048 bytes left [ 188.886322][ T7901] netlink: 'syz.2.580': attribute type 2 has an invalid length. [ 188.916456][ T7901] netlink: 'syz.2.580': attribute type 8 has an invalid length. [ 188.948146][ T7901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.580'. [ 189.011579][ T7906] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.582'. [ 189.044891][ T7906] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 189.121099][ T7910] netlink: 'syz.0.583': attribute type 21 has an invalid length. [ 189.136347][ T7910] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.277096][ T7912] netlink: 14 bytes leftover after parsing attributes in process `syz.0.583'. [ 189.360926][ T7912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.390455][ T7912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.438282][ T7912] bond0 (unregistering): Released all slaves [ 189.959454][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 189.969472][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 190.162396][ T7939] mac80211_hwsim hwsim2 : renamed from wlan0 [ 190.615269][ T7953] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 190.624328][ T7953] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 190.686071][ T7959] netlink: 'syz.0.597': attribute type 2 has an invalid length. [ 190.736389][ T7959] netlink: 'syz.0.597': attribute type 21 has an invalid length. [ 190.775134][ T7959] netlink: 'syz.0.597': attribute type 4 has an invalid length. [ 191.010577][ T7964] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 191.017368][ T7964] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.343484][ T7984] syzkaller0: entered promiscuous mode [ 192.349278][ T7984] syzkaller0: entered allmulticast mode [ 194.332483][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.342535][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.502838][ T7996] netlink: 'syz.1.606': attribute type 39 has an invalid length. [ 195.384112][ T8030] __nla_validate_parse: 11 callbacks suppressed [ 195.384151][ T8030] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.610'. [ 195.440870][ T8020] netlink: 132 bytes leftover after parsing attributes in process `syz.1.613'. [ 195.492377][ T8030] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.610'. [ 195.524907][ T8034] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.610'. [ 195.576720][ T8037] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.610'. [ 196.628142][ T8066] delete_channel: no stack [ 196.960399][ T8079] netlink: 'syz.1.627': attribute type 10 has an invalid length. [ 196.968996][ T8079] netlink: 55 bytes leftover after parsing attributes in process `syz.1.627'. [ 197.072617][ T8079] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 197.160599][ T8079] batman_adv: batadv0: Removing interface: virt_wifi0 [ 198.047058][ T8116] sock: sock_set_timeout: `syz.3.641' (pid 8116) tries to set negative timeout [ 198.354264][ T8124] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.644'. [ 198.366589][ T8124] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.644'. [ 198.477109][ T8124] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.644'. [ 199.016276][ T8140] netlink: 830 bytes leftover after parsing attributes in process `syz.0.647'. [ 199.056024][ T8140] veth0_to_bond: entered promiscuous mode [ 199.292718][ T8152] netlink: 'syz.0.651': attribute type 1 has an invalid length. [ 199.699808][ T8168] netlink: 'syz.0.654': attribute type 9 has an invalid length. [ 200.495589][ T8165] syzkaller0: entered promiscuous mode [ 200.511971][ T8165] syzkaller0: entered allmulticast mode [ 202.403145][ T8172] IPv6: Can't replace route, no match found [ 202.411645][ T8173] __nla_validate_parse: 2 callbacks suppressed [ 202.411659][ T8173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.657'. [ 203.087586][ T51] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 203.626903][ T8224] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.671'. [ 203.653007][ T8224] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 203.889639][ T8236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.675'. [ 204.527718][ T8257] netlink: 176 bytes leftover after parsing attributes in process `syz.1.683'. [ 204.551097][ T8259] netlink: 'syz.0.685': attribute type 9 has an invalid length. [ 204.571962][ T8259] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.685'. [ 204.629586][ T8257] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.683'. [ 204.685202][ T8257] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.683'. [ 205.185089][ T8276] netlink: 'syz.1.689': attribute type 58 has an invalid length. [ 205.203696][ T8276] netlink: 152 bytes leftover after parsing attributes in process `syz.1.689'. [ 205.264272][ T8276] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.689'. [ 205.291342][ T8276] openvswitch: netlink: Key type 4112 is out of range max 32 [ 205.442700][ T8284] netlink: 188 bytes leftover after parsing attributes in process `syz.0.692'. [ 205.979255][ T8305] delete_channel: no stack [ 206.062900][ T8310] netlink: 'syz.0.702': attribute type 3 has an invalid length. [ 206.097266][ T8310] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 206.256466][ T8320] : renamed from pim6reg1 [ 206.766919][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 206.767776][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 206.773307][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 206.785201][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 206.984554][ T8341] tc_dump_action: action bad kind [ 209.552338][ T8392] can: request_module (can-proto-0) failed. [ 209.624210][ T8395] __nla_validate_parse: 3 callbacks suppressed [ 209.624233][ T8395] netlink: 60 bytes leftover after parsing attributes in process `syz.0.726'. [ 209.825566][ T8401] netlink: 'syz.1.727': attribute type 41 has an invalid length. [ 209.854443][ T8401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.727'. [ 209.934981][ T8404] netlink: 'syz.2.728': attribute type 21 has an invalid length. [ 209.953258][ T8404] netlink: 'syz.2.728': attribute type 6 has an invalid length. [ 210.006426][ T8404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.728'. [ 210.051783][ T8408] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.729'. [ 210.200827][ T8413] netlink: 'syz.0.730': attribute type 10 has an invalid length. [ 210.226242][ T8413] netlink: 2 bytes leftover after parsing attributes in process `syz.0.730'. [ 210.916630][ T8435] veth1_vlan: entered allmulticast mode [ 210.983846][ T8432] C: renamed from team_slave_0 [ 211.034354][ T8432] netlink: 116 bytes leftover after parsing attributes in process `syz.0.734'. [ 211.171758][ T8451] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.738'. [ 211.241676][ T8454] netlink: 'syz.2.739': attribute type 1 has an invalid length. [ 211.276094][ T8454] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.739'. [ 211.841614][ T8473] IPv6: pim6reg1: Disabled Multicast RS [ 212.741136][ T8502] syzkaller0: entered promiscuous mode [ 212.746832][ T8502] syzkaller0: entered allmulticast mode [ 212.772789][ T8518] Q6`Ҙ: renamed from lo (while UP) [ 215.215496][ T8531] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 215.223482][ T8531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.757'. [ 215.544283][ T8547] pimreg0: tun_chr_ioctl cmd 1074025681 [ 216.849850][ T8563] netlink: 'syz.1.767': attribute type 10 has an invalid length. [ 216.947109][ T8563] team0: Port device wlan1 added [ 217.463834][ T8588] IPv6: Can't replace route, no match found [ 217.878114][ T8614] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.779'. [ 217.969656][ T8624] netlink: 'syz.3.783': attribute type 10 has an invalid length. [ 218.154650][ T8629] netlink: 'syz.2.785': attribute type 10 has an invalid length. [ 218.208420][ T8629] .`: (slave bond_slave_0): Releasing backup interface [ 218.262154][ T8631] IPv6: Can't replace route, no match found [ 219.252777][ T8654] hsr0: entered promiscuous mode [ 219.268771][ T8654] hsr0: entered allmulticast mode [ 219.288749][ T8654] hsr_slave_0: entered allmulticast mode [ 219.294717][ T8654] hsr_slave_1: entered allmulticast mode [ 219.412098][ T8656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.430346][ T8656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.460625][ T8656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.480803][ T8656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.511149][ T8656] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 219.519384][ T8656] batman_adv: batadv0: Removing interface: veth0_vlan [ 219.755729][ T8665] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.792'. [ 220.023370][ T8672] netlink: 'syz.0.796': attribute type 3 has an invalid length. [ 220.037953][ T8672] netlink: 'syz.0.796': attribute type 6 has an invalid length. [ 220.045796][ T8672] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.796'. [ 220.732555][ T8692] netlink: 132 bytes leftover after parsing attributes in process `syz.2.803'. [ 221.350152][ T8723] netlink: 'syz.1.813': attribute type 10 has an invalid length. [ 221.383469][ T8723] veth0_macvtap: left promiscuous mode [ 221.729447][ T8737] netlink: 'syz.2.817': attribute type 14 has an invalid length. [ 221.739554][ T8737] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.817'. [ 223.489846][ T8774] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 223.510765][ T8774] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.830'. [ 223.560837][ T8774] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 223.592186][ T8774] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.830'. [ 223.789105][ T8783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.831'. [ 223.881822][ T8789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.833'. [ 224.250897][ T8801] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 224.263572][ T8800] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.837'. [ 224.284250][ T8801] netlink: 2 bytes leftover after parsing attributes in process `syz.2.834'. [ 224.349374][ T8801] batadv_slave_1: entered promiscuous mode [ 224.395362][ T8801] bridge0: port 3(batadv_slave_1) entered blocking state [ 224.442192][ T8801] bridge0: port 3(batadv_slave_1) entered disabled state [ 224.498679][ T8801] batadv_slave_1: entered allmulticast mode [ 224.510755][ T8801] bridge0: port 3(batadv_slave_1) entered blocking state [ 224.517966][ T8801] bridge0: port 3(batadv_slave_1) entered forwarding state [ 224.557170][ T8800] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 224.566123][ T8800] CPU: 0 PID: 8800 Comm: syz.3.837 Not tainted syzkaller #0 [ 224.573452][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.583536][ T8800] Call Trace: [ 224.586846][ T8800] [ 224.589811][ T8800] dump_stack_lvl+0x18c/0x250 [ 224.594559][ T8800] ? show_regs_print_info+0x20/0x20 [ 224.599800][ T8800] ? load_image+0x400/0x400 [ 224.604368][ T8800] sysfs_warn_dup+0x8e/0xa0 [ 224.608897][ T8800] sysfs_do_create_link_sd+0xc0/0x110 [ 224.614299][ T8800] device_add_class_symlinks+0x1cf/0x240 [ 224.619966][ T8800] device_add+0x507/0xc20 [ 224.624316][ T8800] wiphy_register+0x1dad/0x2ae0 [ 224.629214][ T8800] ? cfg80211_event_work+0x40/0x40 [ 224.634339][ T8800] ? minstrel_ht_alloc+0x88a/0x990 [ 224.639479][ T8800] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 224.645587][ T8800] ieee80211_register_hw+0x3464/0x4250 [ 224.651115][ T8800] ? ieee80211_tasklet_handler+0x20/0x20 [ 224.656783][ T8800] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 224.662698][ T8800] ? __debug_object_init+0xec/0x450 [ 224.667919][ T8800] ? __asan_memset+0x22/0x40 [ 224.672530][ T8800] ? __hrtimer_init+0x186/0x270 [ 224.677397][ T8800] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 224.683165][ T8800] ? mac80211_hwsim_free+0x220/0x220 [ 224.688485][ T8800] ? rcu_is_watching+0x15/0xb0 [ 224.693287][ T8800] ? kstrndup+0xbd/0x140 [ 224.697596][ T8800] hwsim_new_radio_nl+0xdc9/0x1a90 [ 224.702756][ T8800] ? __nla_validate+0x50/0x50 [ 224.707478][ T8800] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 224.713852][ T8800] ? __nla_parse+0x40/0x50 [ 224.718297][ T8800] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 224.724657][ T8800] genl_family_rcv_msg_doit+0x211/0x310 [ 224.730290][ T8800] ? end_current_label_crit_section+0x170/0x170 [ 224.736566][ T8800] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 224.742478][ T8800] ? bpf_lsm_capable+0x9/0x10 [ 224.747181][ T8800] ? security_capable+0x89/0xb0 [ 224.752060][ T8800] genl_rcv_msg+0x619/0x7a0 [ 224.756594][ T8800] ? genl_bind+0x360/0x360 [ 224.761074][ T8800] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 224.767427][ T8800] ? ref_tracker_free+0x690/0x840 [ 224.772475][ T8800] netlink_rcv_skb+0x241/0x4d0 [ 224.777258][ T8800] ? genl_bind+0x360/0x360 [ 224.781692][ T8800] ? netlink_ack+0x1180/0x1180 [ 224.786490][ T8800] ? __lock_acquire+0x7d40/0x7d40 [ 224.791545][ T8800] ? down_read+0x1ac/0x2e0 [ 224.795994][ T8800] genl_rcv+0x28/0x40 [ 224.800001][ T8800] netlink_unicast+0x751/0x8d0 [ 224.804807][ T8800] netlink_sendmsg+0x8d0/0xbf0 [ 224.809663][ T8800] ? netlink_getsockopt+0x590/0x590 [ 224.814896][ T8800] ? aa_sock_msg_perm+0x94/0x150 [ 224.819930][ T8800] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 224.825257][ T8800] ? security_socket_sendmsg+0x80/0xa0 [ 224.830758][ T8800] ? netlink_getsockopt+0x590/0x590 [ 224.835998][ T8800] ____sys_sendmsg+0x5ba/0x960 [ 224.840786][ T8800] ? __asan_memset+0x22/0x40 [ 224.845402][ T8800] ? __sys_sendmsg_sock+0x30/0x30 [ 224.850445][ T8800] ? __import_iovec+0x5f2/0x850 [ 224.855341][ T8800] ? import_iovec+0x73/0xa0 [ 224.859878][ T8800] ___sys_sendmsg+0x2a6/0x360 [ 224.864588][ T8800] ? __sys_sendmsg+0x2a0/0x2a0 [ 224.869425][ T8800] __se_sys_sendmsg+0x1c2/0x2b0 [ 224.874310][ T8800] ? __x64_sys_sendmsg+0x80/0x80 [ 224.879279][ T8800] ? lockdep_hardirqs_on+0x98/0x150 [ 224.884498][ T8800] do_syscall_64+0x55/0xa0 [ 224.888963][ T8800] ? clear_bhb_loop+0x40/0x90 [ 224.893676][ T8800] ? clear_bhb_loop+0x40/0x90 [ 224.898388][ T8800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.904306][ T8800] RIP: 0033:0x7f52c3f9c799 [ 224.908739][ T8800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.928360][ T8800] RSP: 002b:00007f52c4ee8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.936800][ T8800] RAX: ffffffffffffffda RBX: 00007f52c4215fa0 RCX: 00007f52c3f9c799 [ 224.944808][ T8800] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 224.952804][ T8800] RBP: 00007f52c4032c99 R08: 0000000000000000 R09: 0000000000000000 [ 224.960787][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.968783][ T8800] R13: 00007f52c4216038 R14: 00007f52c4215fa0 R15: 00007fff3774c558 [ 224.976791][ T8800] [ 225.297235][ T8809] tap0: tun_chr_ioctl cmd 1074025677 [ 225.302774][ T8809] tap0: linktype set to 6 [ 225.417426][ T8796] netlink: 'syz.2.834': attribute type 9 has an invalid length. [ 225.425146][ T8796] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.834'. [ 226.922055][ T8851] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.850'. [ 229.513918][ T8846] netlink: 'syz.0.849': attribute type 21 has an invalid length. [ 229.532077][ T8846] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.976688][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 230.934765][ T8903] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.866'. [ 230.947677][ T8903] netlink: 'syz.0.866': attribute type 1 has an invalid length. [ 231.341492][ T8919] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.872'. [ 231.452570][ T8916] netlink: 'syz.3.871': attribute type 29 has an invalid length. [ 231.474768][ T8916] netlink: 'syz.3.871': attribute type 29 has an invalid length. [ 231.488422][ T8916] netlink: 'syz.3.871': attribute type 29 has an invalid length. [ 231.523897][ T8916] netlink: 'syz.3.871': attribute type 21 has an invalid length. [ 231.532046][ T8916] netlink: 128 bytes leftover after parsing attributes in process `syz.3.871'. [ 231.541591][ T8916] netlink: 'syz.3.871': attribute type 4 has an invalid length. [ 231.549518][ T8916] netlink: 'syz.3.871': attribute type 3 has an invalid length. [ 231.557436][ T8916] netlink: 3 bytes leftover after parsing attributes in process `syz.3.871'. [ 232.208692][ T8948] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.880'. [ 232.243460][ T8948] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 232.457656][ T8960] netlink: 'syz.0.884': attribute type 33 has an invalid length. [ 232.499386][ T8960] netlink: 152 bytes leftover after parsing attributes in process `syz.0.884'. [ 232.518945][ T8960] `: renamed from ip6tnl0 (while UP) [ 232.535115][ T8960] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 232.886667][ T8969] netlink: 6 bytes leftover after parsing attributes in process `syz.0.886'. [ 232.920827][ T8969] openvswitch: netlink: Flow key attr not present in new flow. [ 233.108552][ T8969] netlink: 'syz.0.886': attribute type 4 has an invalid length. [ 233.120359][ T8969] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.886'. [ 235.323052][ T9003] validate_nla: 1 callbacks suppressed [ 235.323070][ T9003] netlink: 'syz.1.895': attribute type 9 has an invalid length. [ 235.400403][ T9003] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.895'. [ 235.649472][ T9010] bridge0: port 3(team0) entered disabled state [ 235.669169][ T9010] bridge_slave_1: left allmulticast mode [ 235.684201][ T9010] bridge_slave_1: left promiscuous mode [ 235.690281][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.718591][ T9010] bridge_slave_0: left allmulticast mode [ 235.726225][ T9010] bridge_slave_0: left promiscuous mode [ 235.737986][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.493727][ T9023] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 236.607378][ T9033] netlink: 'syz.3.905': attribute type 15 has an invalid length. [ 236.630747][ T9033] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.905'. [ 236.652691][ T9034] netlink: 'syz.3.905': attribute type 6 has an invalid length. [ 236.680915][ T9034] netlink: 'syz.3.905': attribute type 7 has an invalid length. [ 236.701134][ T9034] netlink: 'syz.3.905': attribute type 11 has an invalid length. [ 236.718696][ T9034] netlink: 'syz.3.905': attribute type 15 has an invalid length. [ 236.729456][ T9034] netlink: 'syz.3.905': attribute type 16 has an invalid length. [ 236.741177][ T9034] netlink: 'syz.3.905': attribute type 21 has an invalid length. [ 236.786462][ T9034] netlink: 'syz.3.905': attribute type 25 has an invalid length. [ 237.381313][ T9061] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.916'. [ 237.412266][ T9061] hsr0: entered allmulticast mode [ 237.426453][ T9061] hsr_slave_0: entered allmulticast mode [ 237.436361][ T9061] hsr_slave_1: entered allmulticast mode [ 237.483314][ T9063] netlink: 44 bytes leftover after parsing attributes in process `syz.1.915'. [ 237.684310][ T9066] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.917'. [ 238.407430][ T9073] netlink: 14 bytes leftover after parsing attributes in process `syz.1.919'. [ 238.532882][ T9077] netlink: 152 bytes leftover after parsing attributes in process `syz.0.920'. [ 238.555995][ T9077] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 238.670156][ T9082] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.921'. [ 238.746138][ T9088] netlink: 71 bytes leftover after parsing attributes in process `syz.0.923'. [ 239.439696][ T9101] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.926'. [ 240.420632][ T9125] validate_nla: 9 callbacks suppressed [ 240.420646][ T9125] netlink: 'syz.3.931': attribute type 21 has an invalid length. [ 240.890879][ T9136] netlink: 'syz.2.935': attribute type 10 has an invalid length. [ 240.900272][ T9136] netlink: 40 bytes leftover after parsing attributes in process `syz.2.935'. [ 240.938805][ T9136] team0: Device Q6`Ҙ is loopback device. Loopback devices can't be added as a team port [ 240.965742][ T9136] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 241.867885][ T9167] netlink: 'syz.2.945': attribute type 29 has an invalid length. [ 241.880979][ T9166] netlink: 'syz.2.945': attribute type 29 has an invalid length. [ 242.440224][ T9167] netlink: 'syz.2.945': attribute type 29 has an invalid length. [ 242.614678][ T9179] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 242.628770][ T9179] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.949'. [ 242.646267][ T9177] netlink: 'syz.1.947': attribute type 21 has an invalid length. [ 242.664648][ T9177] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.947'. [ 242.845954][ T9188] sock: sock_set_timeout: `syz.1.952' (pid 9188) tries to set negative timeout [ 242.869530][ T9188] sock: sock_set_timeout: `syz.1.952' (pid 9188) tries to set negative timeout [ 243.309409][ T9214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.959'. [ 243.445608][ T9219] can: request_module (can-proto-0) failed. [ 243.659704][ T9233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.965'. [ 243.680538][ T9233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.965'. [ 243.699098][ T9233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.965'. [ 244.028010][ T9250] netlink: 'syz.1.969': attribute type 9 has an invalid length. [ 244.043647][ T9250] netlink: 399 bytes leftover after parsing attributes in process `syz.1.969'. [ 244.088297][ T9252] netlink: 144 bytes leftover after parsing attributes in process `syz.2.970'. [ 244.350461][ T9266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.357822][ T9266] IPv6: NLM_F_CREATE should be set when creating new route [ 244.365295][ T9266] IPv6: NLM_F_CREATE should be set when creating new route [ 244.372663][ T9266] IPv6: NLM_F_CREATE should be set when creating new route [ 244.705774][ T9271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.976'. [ 244.762917][ T9275] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.977'. [ 244.772831][ T9275] openvswitch: netlink: Flow key attribute not present in set flow. [ 244.909277][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.052239][ T9271] bridge_slave_0 (unregistering): left promiscuous mode [ 245.062805][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.600283][ T9291] netlink: 'syz.2.982': attribute type 21 has an invalid length. [ 245.635545][ T9291] netlink: 'syz.2.982': attribute type 4 has an invalid length. [ 245.842438][ T9298] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 246.611858][ T9314] netlink: 'syz.2.992': attribute type 10 has an invalid length. [ 246.656203][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.704704][ T9314] bridge_slave_1: left allmulticast mode [ 246.712493][ T9314] bridge_slave_1: left promiscuous mode [ 246.718416][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.752862][ T9314] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 246.778762][ T9316] netlink: 'syz.1.989': attribute type 5 has an invalid length. [ 247.146376][ T9337] netlink: 'syz.2.995': attribute type 2 has an invalid length. [ 247.714986][ T9349] netlink: 'syz.2.998': attribute type 10 has an invalid length. [ 247.735997][ T9349] __nla_validate_parse: 6 callbacks suppressed [ 247.736011][ T9349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.998'. [ 247.771428][ T9349] team0: entered promiscuous mode [ 247.791728][ T9349] team_slave_0: entered promiscuous mode [ 247.810511][ T9349] team_slave_1: entered promiscuous mode [ 247.832157][ T9349] bridge0: port 2(team0) entered blocking state [ 247.876995][ T9349] bridge0: port 2(team0) entered disabled state [ 247.909986][ T9349] team0: entered allmulticast mode [ 247.915181][ T9349] team_slave_1: entered allmulticast mode [ 247.982764][ T9349] bridge0: port 2(team0) entered blocking state [ 247.989949][ T9349] bridge0: port 2(team0) entered forwarding state [ 248.047226][ T9358] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1000'. [ 248.305551][ T9374] netlink: 'syz.3.1005': attribute type 29 has an invalid length. [ 248.328689][ T9374] netlink: 'syz.3.1005': attribute type 29 has an invalid length. [ 248.398350][ T9368] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.408042][ T9368] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.640845][ C1] ================================================================== [ 248.649153][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 248.657034][ C1] Write of size 104 at addr ffff888059eac890 by task syz.1.1003/9379 [ 248.665143][ C1] [ 248.667518][ C1] CPU: 1 PID: 9379 Comm: syz.1.1003 Not tainted syzkaller #0 [ 248.674930][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.685042][ C1] Call Trace: [ 248.688364][ C1] [ 248.691242][ C1] dump_stack_lvl+0x18c/0x250 [ 248.695993][ C1] ? read_lock_is_recursive+0x20/0x20 [ 248.701416][ C1] ? show_regs_print_info+0x20/0x20 [ 248.706659][ C1] ? load_image+0x400/0x400 [ 248.711198][ C1] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 248.716698][ C1] ? __virt_addr_valid+0x18c/0x540 [ 248.721851][ C1] ? __virt_addr_valid+0x469/0x540 [ 248.726984][ C1] print_report+0xa8/0x210 [ 248.731430][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 248.736624][ C1] kasan_report+0x117/0x150 [ 248.741196][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 248.746346][ C1] kasan_check_range+0x241/0x290 [ 248.751317][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 248.756456][ C1] __asan_memcpy+0x40/0x70 [ 248.760904][ C1] __bpf_get_stackid+0x6bf/0x900 [ 248.765887][ C1] bpf_get_stackid_pe+0x343/0x410 [ 248.770952][ C1] bpf_prog_2dda95fb29c238c3+0x29/0x39 [ 248.776426][ C1] bpf_overflow_handler+0x1fc/0x510 [ 248.781660][ C1] ? verify_lock_unused+0x140/0x140 [ 248.786891][ C1] ? bpf_overflow_handler+0xde/0x510 [ 248.792200][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 248.797509][ C1] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 248.803336][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 248.809595][ C1] __perf_event_overflow+0x447/0x630 [ 248.814939][ C1] perf_swevent_hrtimer+0x4aa/0x570 [ 248.820170][ C1] ? cpu_clock_event_read+0x40/0x40 [ 248.825418][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 248.831336][ C1] ? _raw_spin_unlock+0x40/0x40 [ 248.836211][ C1] __hrtimer_run_queues+0x4e1/0xc40 [ 248.841424][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 248.847437][ C1] ? cpu_clock_event_read+0x40/0x40 [ 248.852651][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 248.857777][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 248.863878][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 248.868853][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 248.874777][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 248.880561][ C1] [ 248.883517][ C1] [ 248.886479][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.892499][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 248.898329][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 54 31 09 e8 9b 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 248.917957][ C1] RSP: 0018:ffffc9000b6e77d8 EFLAGS: 00000286 [ 248.924068][ C1] RAX: 88988ef2c6425d00 RBX: 0000000000000000 RCX: 88988ef2c6425d00 [ 248.932081][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 248.940080][ C1] RBP: ffffc9000b6e7830 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 248.948079][ C1] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff88802a7ada00 [ 248.956078][ C1] R13: dffffc0000000000 R14: ffff888028603c00 R15: ffff8880b8f3cac8 [ 248.964080][ C1] ? finish_task_switch+0x265/0x8f0 [ 248.969319][ C1] __schedule+0x155b/0x45a0 [ 248.973855][ C1] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 248.979707][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 248.985659][ C1] ? asan.module_dtor+0x20/0x20 [ 248.990567][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 248.996589][ C1] ? preempt_schedule+0xc0/0xd0 [ 249.001494][ C1] preempt_schedule_common+0x82/0xc0 [ 249.006805][ C1] preempt_schedule+0xc0/0xd0 [ 249.011503][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 249.017174][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 249.023088][ C1] ? _raw_spin_unlock+0x40/0x40 [ 249.027959][ C1] preempt_schedule_thunk+0x1a/0x30 [ 249.033188][ C1] try_to_wake_up+0x781/0x1190 [ 249.037980][ C1] wake_up_q+0xb6/0x100 [ 249.042163][ C1] futex_wake+0x42a/0x4f0 [ 249.046511][ C1] ? futex_wake_mark+0x150/0x150 [ 249.051465][ C1] ? perf_poll+0x1b0/0x1b0 [ 249.055934][ C1] do_futex+0x35d/0x3e0 [ 249.060118][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 249.066054][ C1] __se_sys_futex+0x3a9/0x440 [ 249.070749][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 249.075638][ C1] ? __x64_sys_futex+0x21/0xf0 [ 249.080439][ C1] do_syscall_64+0x55/0xa0 [ 249.084931][ C1] ? clear_bhb_loop+0x40/0x90 [ 249.089646][ C1] ? clear_bhb_loop+0x40/0x90 [ 249.094342][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.100254][ C1] RIP: 0033:0x7f9635d9c799 [ 249.104684][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.124311][ C1] RSP: 002b:00007f9636c3b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 249.132740][ C1] RAX: ffffffffffffffda RBX: 00007f9636016098 RCX: 00007f9635d9c799 [ 249.140734][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f963601609c [ 249.148726][ C1] RBP: 00007f9636016090 R08: 0000000000745d1e R09: 0000000000000000 [ 249.156722][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.164705][ C1] R13: 00007f9636016128 R14: 00007ffeb8ef3a30 R15: 00007ffeb8ef3b18 [ 249.172700][ C1] [ 249.175755][ C1] [ 249.178100][ C1] Allocated by task 9373: [ 249.182443][ C1] kasan_set_track+0x4e/0x70 [ 249.187050][ C1] __kasan_kmalloc+0x8f/0xa0 [ 249.191662][ C1] __kmalloc_node+0xb4/0x230 [ 249.196272][ C1] bpf_map_area_alloc+0x5e/0x110 [ 249.201229][ C1] prealloc_elems_and_freelist+0x86/0x1c0 [ 249.207052][ C1] stack_map_alloc+0x33a/0x4c0 [ 249.211827][ C1] map_create+0x877/0x12f0 [ 249.216253][ C1] __sys_bpf+0x651/0x890 [ 249.220505][ C1] __x64_sys_bpf+0x7c/0x90 [ 249.224933][ C1] do_syscall_64+0x55/0xa0 [ 249.229377][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.235285][ C1] [ 249.237647][ C1] The buggy address belongs to the object at ffff888059eac880 [ 249.237647][ C1] which belongs to the cache kmalloc-cg-64 of size 64 [ 249.251854][ C1] The buggy address is located 16 bytes inside of [ 249.251854][ C1] allocated 40-byte region [ffff888059eac880, ffff888059eac8a8) [ 249.265854][ C1] [ 249.268202][ C1] The buggy address belongs to the physical page: [ 249.274638][ C1] page:ffffea000167ab00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888059eac280 pfn:0x59eac [ 249.286132][ C1] memcg:ffff88802e650401 [ 249.290398][ C1] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 249.297961][ C1] page_type: 0xffffffff() [ 249.302329][ C1] raw: 00fff00000000800 ffff888017c4da00 ffffea0001fadbc0 0000000000000002 [ 249.310976][ C1] raw: ffff888059eac280 000000008020001e 00000001ffffffff ffff88802e650401 [ 249.319593][ C1] page dumped because: kasan: bad access detected [ 249.326071][ C1] page_owner tracks the page as allocated [ 249.331806][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5772, tgid 5772 (syz-executor), ts 155920047099, free_ts 155919593261 [ 249.350242][ C1] post_alloc_hook+0x1c1/0x200 [ 249.355036][ C1] get_page_from_freelist+0x1951/0x19e0 [ 249.360606][ C1] __alloc_pages+0x1f0/0x460 [ 249.365238][ C1] alloc_slab_page+0x5d/0x160 [ 249.369940][ C1] new_slab+0x87/0x2d0 [ 249.374038][ C1] ___slab_alloc+0xc5d/0x12f0 [ 249.378738][ C1] __kmem_cache_alloc_node+0x19e/0x250 [ 249.384251][ C1] kmalloc_trace+0x2a/0xe0 [ 249.388686][ C1] alloc_fdtable+0xca/0x2c0 [ 249.393209][ C1] dup_fd+0x786/0xa50 [ 249.397239][ C1] copy_files+0xc3/0x120 [ 249.401501][ C1] copy_process+0x15ab/0x3d80 [ 249.406206][ C1] kernel_clone+0x24b/0x8a0 [ 249.410733][ C1] __x64_sys_clone+0x1b7/0x230 [ 249.415512][ C1] do_syscall_64+0x55/0xa0 [ 249.419962][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.425891][ C1] page last free stack trace: [ 249.430622][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 249.436109][ C1] free_unref_page+0x32/0x2e0 [ 249.440812][ C1] vfree+0x1a6/0x320 [ 249.444735][ C1] do_ip6t_get_ctl+0xf21/0x1210 [ 249.449608][ C1] nf_getsockopt+0x262/0x280 [ 249.454227][ C1] ipv6_getsockopt+0x226/0x2e0 [ 249.459017][ C1] do_sock_getsockopt+0x379/0x450 [ 249.464049][ C1] __x64_sys_getsockopt+0x1d6/0x280 [ 249.469255][ C1] do_syscall_64+0x55/0xa0 [ 249.473692][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.479605][ C1] [ 249.481940][ C1] Memory state around the buggy address: [ 249.487582][ C1] ffff888059eac780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 249.495664][ C1] ffff888059eac800: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 249.503739][ C1] >ffff888059eac880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 249.511811][ C1] ^ [ 249.517192][ C1] ffff888059eac900: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 249.525267][ C1] ffff888059eac980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 249.533344][ C1] ================================================================== [ 249.541431][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 249.548636][ C1] CPU: 1 PID: 9379 Comm: syz.1.1003 Not tainted syzkaller #0 [ 249.556030][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.566097][ C1] Call Trace: [ 249.569390][ C1] [ 249.572254][ C1] dump_stack_lvl+0x18c/0x250 [ 249.576969][ C1] ? show_regs_print_info+0x20/0x20 [ 249.582197][ C1] ? load_image+0x400/0x400 [ 249.586746][ C1] panic+0x2dc/0x730 [ 249.590670][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 249.595719][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 249.600249][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 249.606186][ C1] ? _raw_spin_unlock+0x40/0x40 [ 249.611072][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 249.616194][ C1] check_panic_on_warn+0x84/0xa0 [ 249.621150][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 249.626295][ C1] end_report+0x6f/0x130 [ 249.630566][ C1] kasan_report+0x128/0x150 [ 249.635097][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 249.640234][ C1] kasan_check_range+0x241/0x290 [ 249.645190][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 249.650322][ C1] __asan_memcpy+0x40/0x70 [ 249.654760][ C1] __bpf_get_stackid+0x6bf/0x900 [ 249.659734][ C1] bpf_get_stackid_pe+0x343/0x410 [ 249.664802][ C1] bpf_prog_2dda95fb29c238c3+0x29/0x39 [ 249.670286][ C1] bpf_overflow_handler+0x1fc/0x510 [ 249.675515][ C1] ? verify_lock_unused+0x140/0x140 [ 249.680831][ C1] ? bpf_overflow_handler+0xde/0x510 [ 249.686152][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 249.691470][ C1] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 249.697295][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 249.703558][ C1] __perf_event_overflow+0x447/0x630 [ 249.708862][ C1] perf_swevent_hrtimer+0x4aa/0x570 [ 249.714078][ C1] ? cpu_clock_event_read+0x40/0x40 [ 249.719319][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 249.725233][ C1] ? _raw_spin_unlock+0x40/0x40 [ 249.730115][ C1] __hrtimer_run_queues+0x4e1/0xc40 [ 249.735333][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 249.741349][ C1] ? cpu_clock_event_read+0x40/0x40 [ 249.746575][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 249.751706][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 249.757801][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 249.762798][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 249.768715][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 249.774363][ C1] [ 249.777310][ C1] [ 249.780274][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.786276][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 249.792102][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 54 31 09 e8 9b 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 249.811733][ C1] RSP: 0018:ffffc9000b6e77d8 EFLAGS: 00000286 [ 249.817824][ C1] RAX: 88988ef2c6425d00 RBX: 0000000000000000 RCX: 88988ef2c6425d00 [ 249.825822][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 249.833824][ C1] RBP: ffffc9000b6e7830 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 249.841828][ C1] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff88802a7ada00 [ 249.849831][ C1] R13: dffffc0000000000 R14: ffff888028603c00 R15: ffff8880b8f3cac8 [ 249.857848][ C1] ? finish_task_switch+0x265/0x8f0 [ 249.863087][ C1] __schedule+0x155b/0x45a0 [ 249.867657][ C1] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 249.873518][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 249.879479][ C1] ? asan.module_dtor+0x20/0x20 [ 249.884375][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 249.890380][ C1] ? preempt_schedule+0xc0/0xd0 [ 249.895256][ C1] preempt_schedule_common+0x82/0xc0 [ 249.900576][ C1] preempt_schedule+0xc0/0xd0 [ 249.905285][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 249.911046][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 249.916964][ C1] ? _raw_spin_unlock+0x40/0x40 [ 249.921841][ C1] preempt_schedule_thunk+0x1a/0x30 [ 249.927079][ C1] try_to_wake_up+0x781/0x1190 [ 249.931878][ C1] wake_up_q+0xb6/0x100 [ 249.936075][ C1] futex_wake+0x42a/0x4f0 [ 249.940459][ C1] ? futex_wake_mark+0x150/0x150 [ 249.945456][ C1] ? perf_poll+0x1b0/0x1b0 [ 249.949911][ C1] do_futex+0x35d/0x3e0 [ 249.954089][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 249.960012][ C1] __se_sys_futex+0x3a9/0x440 [ 249.964715][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 249.969509][ C1] ? __x64_sys_futex+0x21/0xf0 [ 249.974292][ C1] do_syscall_64+0x55/0xa0 [ 249.978734][ C1] ? clear_bhb_loop+0x40/0x90 [ 249.983429][ C1] ? clear_bhb_loop+0x40/0x90 [ 249.988127][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.994039][ C1] RIP: 0033:0x7f9635d9c799 [ 249.998480][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.018146][ C1] RSP: 002b:00007f9636c3b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 250.026579][ C1] RAX: ffffffffffffffda RBX: 00007f9636016098 RCX: 00007f9635d9c799 [ 250.034575][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f963601609c [ 250.042572][ C1] RBP: 00007f9636016090 R08: 0000000000745d1e R09: 0000000000000000 [ 250.050586][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.058575][ C1] R13: 00007f9636016128 R14: 00007ffeb8ef3a30 R15: 00007ffeb8ef3b18 [ 250.066584][ C1] [ 250.070164][ C1] Kernel Offset: disabled [ 250.074504][ C1] Rebooting in 86400 seconds..