last executing test programs: 4.922333792s ago: executing program 1 (id=1330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x412a00, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x6, 0x1, 0x0, 0xc000000, 0x2921, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100104, 0x0, 0x0, 0x7, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0xe, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc33, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 4.672362247s ago: executing program 2 (id=1333): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$kcm(0xa, 0x5, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (rerun: 32) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYRESDEC=r5], 0x9) syz_clone(0x2802000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.457878683s ago: executing program 1 (id=1336): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90724fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0xe03e, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000480), &(0x7f00000005c0)}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r5, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000000000000007000000890f0463"], 0x20, 0x5}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b0113", 0x4d}], 0x1, 0x0, 0x0, 0x6}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) r7 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="a0a741373a", 0x7fffff}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 4.365389275s ago: executing program 2 (id=1345): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$kcm(0x11, 0x200000000000003, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x4, 0x1, 0xb, 0x3, 0x3, 0x50, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x46fefe35, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x2, 0xb937, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r3], &(0x7f0000000680)=[{0x2, 0x2, 0x8, 0x7}], 0x10, 0xa38}, 0x94) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) 3.911310716s ago: executing program 2 (id=1340): r0 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9694e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x17}, 0x1041, 0x80000000, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x2b}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0), 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 3.873993726s ago: executing program 0 (id=1341): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90724fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0xe03e, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000480), &(0x7f00000005c0)}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b0113", 0x4d}], 0x1, 0x0, 0x0, 0x6}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) r7 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="a0a741373a", 0x7fffff}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) 2.189427937s ago: executing program 1 (id=1342): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x45050080, &(0x7f0000000080)="d52a856f387837d15d7aad485e9702c80fe56dbee820ae98b078d40096", 0x1d, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000008c0)="f1b3ac6f046b9eb2bafe30fa546f5add5cf06d6369febbd9457d8c6dcca8191b9a2fa16e35603faf6ea5ccda45343c23b9ee368e10fff5e976ae451900e4611594e5cc660b578a31027bf9f31a8470031ac1b24d155d741af8e3e6c630dc277cb248e2477cf94b40915e1db83f6705be73c9728fb2e6e05dcba297a6582e9147e97afc8335cc640f44e2f02d4ecabdd5e4dbc87932bcfae5198764698bf81f9bb875cbb7ec531224a94dff530bfa41ec75f377253aa6") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000001500)=""/156, 0x9c}, {0x0}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000640)=""/268, 0x10c}], 0x6}, 0x20) write$cgroup_subtree(r4, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r2, 0x12) r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.112266929s ago: executing program 3 (id=1343): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0xc00, 0x400000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa31086b876c0c0000007ea60264160af3653c001c000d0000008bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000894) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) 2.111175519s ago: executing program 0 (id=1344): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000c7a3f56d0000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xc265, 0x6, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x28, 0x0, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x800000009, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x4, @perf_config_ext={0x9, 0x101}, 0xc58, 0x200, 0x1, 0x1, 0x9, 0xff, 0xfffb, 0x0, 0x0, 0x0, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}, 0x80103, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb00000002000000000000000000000300000000020000000200000002009fe0712daedb9b320001050000000800001cbd63bf0001000005000000000000000001000000000000000000000000000006000000000000000000"], 0x0, 0x5a}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0xea3}, 0x8) socket$kcm(0xa, 0x2, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/mnt\x00') 2.101544469s ago: executing program 2 (id=1346): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000400150004000000120002", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="1100000011008b88040f80ec59acbc0413", 0x11}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x800}, 0x40800) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61ecc5326b11f0f0f93007e", 0xa6}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)="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", 0xff37}], 0x3}, 0x40e4804) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x40010080) write$cgroup_subtree(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000640)='cpu&08\n&\f0\xed') socketpair(0x23, 0x2, 0x2, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) 1.751775448s ago: executing program 0 (id=1347): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x6, &(0x7f0000000740)=r0, 0x4) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x80, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) close(r6) (async) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x4000000) (async) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) (async) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r11) (async) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r13 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) close(r2) 1.701966379s ago: executing program 3 (id=1348): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008110e00f80ecdb4cb9f207c804a018000000880803fb0a000200250ada", 0x23}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.61855856s ago: executing program 3 (id=1349): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x5100, 0x4, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x5) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0xfe33) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001140)='devices.allow\x00', 0x2, 0x0) 1.459185824s ago: executing program 0 (id=1350): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000004000000850000007d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000200850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) close(r2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000003cc4668b7380ffc3577fe51fa300f400000000000095000000b24ad2532b5cc3a312b5c4182e0e9e81e00171c4f1d6a58c806170da40dd704161a3d896fe4790e5eec8feb4a0e1434baefe4693f85fe6c2cc80b9205f1c6ee44cd7706998ac1b6e45f2329d544fabb30e3435d2f947fa1db111a1ea9b7bfcf26099a808ed2a0893aae49a8b7f93b9add8ccd49c23f7c4b265fb0e8187d26beec5bd8a201c266d45d1318d4545c66b697ec1833fb54b458035ed5357e4677a0ab0fb26141dc4525cb1a126b939e89dee3cb08751001f41bd6e4fe5b26905fa00fb16303de8e6628aa7fd5bbac90a7fca83542950c61e814ab35014ff41337fd241275992ce90f8081ef95b1c954d1316d62b8eca179e7192175863eaeaebb26106eaa9e38cd78943ecb086952ecf3f5545d8e9ac28e133e47966f0807746c50ef3ac95513907b82e225c021aef6609cc048df96e0d526543d71077149852a218d12b22aff7387f95de60f08a3e92f6f15e4b35c785a749259cb9e0007c11ee5f6b0703971de171bb8b11dbcd28ce89fe1ef48104828b74e025858fd71c443d297d7c6501760af1e01b161f2ea9cd3147c6cbb55a4f370ee2ecbb2c1cc402e13562a7b4b10b92651f319e3ae20c98465848896c8930114c7add1215a5060c1b2311898199e934f03e3843a2ced87de44c7ee2f41a4873358929a3646be319278f238b4bb9069e109495d778cfd4c19a09a82a698fc7230e2053cee12e2f91e88fb87f40d62dda3a9c8cfdfb032b9ebb2af360b4674886854e2d3edf56f27c54045150eef3"], &(0x7f0000000440)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000040000009500000000008000"], &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af3650400010038001500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af3650400010038001500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x7, 0x4, 0x900, 0x5, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000980)={0x0, 0x0}) close(r7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002a00)={0xffffffffffffffff, 0x0, 0x8}, 0xc) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002a00)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b00)={0x11, 0x1d, &(0x7f0000000a40)=ANY=[@ANYBLOB="857da8811eac4b6554d9a1be1800000020fbff00", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000182b0000", @ANYRES32=r5, @ANYBLOB="00000000030000001800000001000000000000000900000018100000", @ANYRES32, @ANYBLOB="000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000018000008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x6, 0x1009, &(0x7f0000002d40)=""/4105, 0x40f00, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000002980)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000029c0)={0x2, 0xd, 0x10, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002a40)=[r5, r8, r5], &(0x7f0000002a80)=[{0x5, 0x5, 0xe, 0x3}, {0x0, 0x4, 0xf, 0x3}, {0x4, 0x2, 0x1, 0x5}, {0x2, 0x4, 0x1}, {0x3, 0x2, 0xe, 0x5}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000090000000500000004000000c1000000", @ANYRES32, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002f000000000074d22cfd2756bcd9431e4b6c5500"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r9, &(0x7f0000000580)="3539582fb4c6", &(0x7f0000000940)=""/208}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r9, &(0x7f0000000580)="3539582fb4c6", &(0x7f0000000940)=""/208}, 0x20) socket$kcm(0x10, 0x2, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000002c0)={r7, r0}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) (async) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r11, @ANYBLOB="4000000000000000000000230000000000000000520d805a63bd51fe6e7e9d5480a36b862cacfa0fa4eda60a7bd22c7c46369e5ebd9ebc37cf1670fa78", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000000400"/28], 0x50) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES32=r10], 0x9a) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 1.309791978s ago: executing program 2 (id=1351): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90724fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0xe03e, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000480), &(0x7f00000005c0)}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000000000000007000000890f0463"], 0x20, 0x5}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b0113", 0x4d}], 0x1, 0x0, 0x0, 0x6}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) r6 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="a0a741373a", 0x7fffff}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890b, &(0x7f0000000100)) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 1.23236656s ago: executing program 1 (id=1352): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) socketpair(0x1, 0x5, 0xcc, &(0x7f0000000100)) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) 1.171004341s ago: executing program 0 (id=1353): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r4 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000009500000000000100"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000000c0), 0x4) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfdef) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0xa, 0x2028}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 969.788476ms ago: executing program 1 (id=1354): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90724fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0xe03e, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000480), &(0x7f00000005c0)}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b0113", 0x4d}], 0x1, 0x0, 0x0, 0x6}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) r5 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="a0a741373a", 0x7fffff}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) 845.276819ms ago: executing program 3 (id=1355): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000c7a3f56d0000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xc265, 0x6, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x28, 0x0, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x800000009, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x4, @perf_config_ext={0x9, 0x101}, 0xc58, 0x200, 0x1, 0x1, 0x9, 0xff, 0xfffb, 0x0, 0x0, 0x0, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}, 0x80103, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb00000002000000000000000000000300000000020000000200000002009fe0712daedb9b320001050000000800001cbd63bf0001000005000000000000000001000000000000000000000000000006000000000000000000"], 0x0, 0x5a}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0xea3}, 0x8) socket$kcm(0xa, 0x2, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/mnt\x00') 647.629394ms ago: executing program 2 (id=1356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x22, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x80044944, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a8000000040000000d0000000000000a040000000500000001000006040000000c0000000400000010000000040000050400000002000000040000000800000010000000000000000000000010000000010200004f90000004000000010000000300000000000000010000050500000005000000040000000100000002000000000000090500000000001a003505090000000000000902000000100000000000001203000000005f7100"/196], &(0x7f0000000140)=""/100, 0xc4, 0x64, 0x0, 0x6}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac0043f020234000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f0000000300)='ns/time_for_children\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x922000000001, 0x106) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0xc, &(0x7f00000002c0)=r9, 0x4) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000000)={'veth0_vlan\x00', @random="03ff8d00"}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff65}, 0x94) 354.760641ms ago: executing program 3 (id=1357): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008110e00f80ecdb4cb9f207c804a018000000880803fb0a000200250ada1b40d80800c5", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 290.310033ms ago: executing program 1 (id=1358): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4102, 0x1006}], 0x1}, 0x2002) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 270.034133ms ago: executing program 0 (id=1359): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x11, 0x68, &(0x7f00000005c0), 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x4) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x30}}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x6f) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000a700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x46, 0x0, 0xa}, 0x28) socket$kcm(0x29, 0x0, 0x0) 0s ago: executing program 3 (id=1360): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa, 0x2}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x40}, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, r2, 0x8) r4 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0x1000000}}, @ip_tos_u8={{0x14, 0x29, 0x8}}, @ip_pktinfo={{0x9, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe33) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000001380)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32=r7, @ANYBLOB="000000000000002463040000010043d78500003691e9347e604409d362790b5cacaa5a4d7cd4554444ddb27809abef5fdf3e7b68cf4a0dc7435d4605b59f474aa80cb780c5bda458a82fb97e75feffffffffffff752d29d9ca8875937f8e96e1d686f6ad0063ff8576ff2a9975ddfaa0c82aebde8b9d9bb347095faf1fc70e70591499b4af553e8596a9b5bec24fa3ed54467a89f15b0d65d3f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c4e}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1a, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0xa, 0x5, 0x0, &(0x7f0000003740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000001140)=ANY=[@ANYRESDEC], 0x0, 0x26, 0x0, 0x0, 0x8000}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000011c0)}, 0x200, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0xa, 0x300) kernel console output (not intermixed with test programs): 111.465202][ T6292] netlink: 128 bytes leftover after parsing attributes in process `syz.1.136'. [ 111.474417][ T6290] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.137'. [ 111.501690][ T6292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.832510][ T6307] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 111.853846][ T6307] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.141'. [ 111.864817][ T6307] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 111.889165][ T6311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.143'. [ 111.939805][ T6313] netlink: 60 bytes leftover after parsing attributes in process `syz.0.143'. [ 112.037087][ T6316] netlink: 'syz.2.145': attribute type 5 has an invalid length. [ 112.573429][ T6331] netlink: 'syz.2.148': attribute type 27 has an invalid length. [ 112.829053][ T6341] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 113.894941][ T6370] netlink: 'syz.0.160': attribute type 27 has an invalid length. [ 113.903090][ T6370] __nla_validate_parse: 2 callbacks suppressed [ 113.903106][ T6370] netlink: 164 bytes leftover after parsing attributes in process `syz.0.160'. [ 114.120517][ T6378] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.164'. [ 114.171172][ T6378] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.164'. [ 114.410168][ T6391] netlink: 'syz.1.167': attribute type 5 has an invalid length. [ 115.040977][ T6398] netlink: 'syz.3.170': attribute type 27 has an invalid length. [ 115.051316][ T6398] netlink: 164 bytes leftover after parsing attributes in process `syz.3.170'. [ 115.315989][ T6410] netlink: 'syz.0.173': attribute type 27 has an invalid length. [ 115.324166][ T6410] netlink: 164 bytes leftover after parsing attributes in process `syz.0.173'. [ 115.644278][ T6424] netlink: 'syz.2.179': attribute type 3 has an invalid length. [ 115.662477][ T6424] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 115.678381][ T6424] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.179'. [ 116.637263][ T6446] netlink: 'syz.1.186': attribute type 27 has an invalid length. [ 116.645697][ T6446] netlink: 164 bytes leftover after parsing attributes in process `syz.1.186'. [ 116.893495][ T6464] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.188'. [ 116.926848][ T6464] netlink: 'syz.0.188': attribute type 30 has an invalid length. [ 117.098626][ T6468] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 117.206356][ T6468] team0 (unregistering): Port device team_slave_0 removed [ 117.283735][ T6468] team0 (unregistering): Port device team_slave_1 removed [ 117.897635][ T6494] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.196'. [ 117.940640][ T6490] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.196'. [ 118.229528][ T6492] netlink: 'syz.0.198': attribute type 27 has an invalid length. [ 119.226907][ T6528] validate_nla: 1 callbacks suppressed [ 119.226944][ T6528] netlink: 'syz.1.211': attribute type 9 has an invalid length. [ 119.299654][ T6528] __nla_validate_parse: 5 callbacks suppressed [ 119.299690][ T6528] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.211'. [ 119.337353][ T6531] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 119.428243][ T6531] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 119.459325][ T6537] netlink: 10 bytes leftover after parsing attributes in process `syz.0.214'. [ 119.513373][ T6533] netlink: 'syz.3.212': attribute type 27 has an invalid length. [ 119.555719][ T6533] netlink: 164 bytes leftover after parsing attributes in process `syz.3.212'. [ 120.099886][ T6554] syz.2.217 (6554) used greatest stack depth: 19240 bytes left [ 120.206195][ T6545] syzkaller0: entered promiscuous mode [ 120.219087][ T6545] syzkaller0: entered allmulticast mode [ 121.809669][ T6579] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.222'. [ 121.820767][ T6580] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.222'. [ 122.276206][ T6586] netlink: 'syz.2.224': attribute type 27 has an invalid length. [ 122.289800][ T6586] netlink: 164 bytes leftover after parsing attributes in process `syz.2.224'. [ 122.542583][ T6596] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.228'. [ 122.573461][ T6596] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 123.390176][ T6616] netlink: 'syz.3.236': attribute type 27 has an invalid length. [ 123.448298][ T6616] netlink: 164 bytes leftover after parsing attributes in process `syz.3.236'. [ 123.646589][ T6628] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.238'. [ 124.032246][ T6643] netlink: 'syz.0.243': attribute type 4 has an invalid length. [ 124.600846][ T6653] netlink: 'syz.0.248': attribute type 4 has an invalid length. [ 124.620259][ T6653] netlink: 152 bytes leftover after parsing attributes in process `syz.0.248'. [ 124.658407][ T6653] .`: renamed from bond0 (while UP) [ 124.792181][ T6662] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.250'. [ 124.909860][ T6663] netlink: 'syz.1.247': attribute type 27 has an invalid length. [ 124.939065][ T6663] netlink: 164 bytes leftover after parsing attributes in process `syz.1.247'. [ 125.385156][ T6675] netlink: 38831 bytes leftover after parsing attributes in process `syz.2.252'. [ 126.128281][ T6692] netlink: 'syz.1.259': attribute type 4 has an invalid length. [ 126.419088][ T6716] C: renamed from team_slave_0 (while UP) [ 126.458260][ T6716] netlink: 'syz.0.263': attribute type 3 has an invalid length. [ 126.488253][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 126.508063][ T6708] netlink: 'syz.3.260': attribute type 27 has an invalid length. [ 126.520195][ T6716] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 126.560745][ T6708] netlink: 164 bytes leftover after parsing attributes in process `syz.3.260'. [ 127.237759][ T6740] netlink: 'syz.3.270': attribute type 21 has an invalid length. [ 127.734237][ T6744] netlink: 'syz.0.271': attribute type 4 has an invalid length. [ 128.290836][ T6755] netlink: 'syz.0.273': attribute type 27 has an invalid length. [ 128.309530][ T6755] netlink: 164 bytes leftover after parsing attributes in process `syz.0.273'. [ 128.778309][ T6774] netlink: 'syz.0.280': attribute type 27 has an invalid length. [ 128.806208][ T6774] netlink: 152 bytes leftover after parsing attributes in process `syz.0.280'. [ 128.826247][ T6774] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.964715][ T6770] netlink: 'syz.1.279': attribute type 4 has an invalid length. [ 129.000381][ T6770] netlink: 152 bytes leftover after parsing attributes in process `syz.1.279'. [ 129.019142][ T6770] .`: renamed from bond0 (while UP) [ 129.961581][ T6806] syz.0.291 uses obsolete (PF_INET,SOCK_PACKET) [ 130.811087][ T6818] validate_nla: 1 callbacks suppressed [ 130.811240][ T6818] netlink: 'syz.1.294': attribute type 27 has an invalid length. [ 130.902611][ T6824] netlink: 'syz.3.296': attribute type 21 has an invalid length. [ 130.929139][ T6824] netlink: 100 bytes leftover after parsing attributes in process `syz.3.296'. [ 131.666627][ T6838] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 131.690723][ T6838] netlink: 'syz.0.301': attribute type 3 has an invalid length. [ 131.719738][ T6838] netlink: 132 bytes leftover after parsing attributes in process `syz.0.301'. [ 132.417252][ T6861] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 132.431101][ T6861] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.308'. [ 132.461795][ T6861] netlink: 1 bytes leftover after parsing attributes in process `syz.3.308'. [ 132.521819][ T6866] netlink: 208128 bytes leftover after parsing attributes in process `syz.2.309'. [ 132.954628][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.961965][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.255099][ T6882] cgroup: fork rejected by pids controller in /syz1 [ 134.747170][ T6926] netlink: 184 bytes leftover after parsing attributes in process `syz.2.330'. [ 134.943118][ T6929] netlink: 14 bytes leftover after parsing attributes in process `syz.3.331'. [ 134.978393][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.997459][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.013459][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.035257][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.054794][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 135.064208][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.441985][ T6937] syzkaller0: entered promiscuous mode [ 135.447649][ T6937] syzkaller0: entered allmulticast mode [ 135.478524][ T6930] chnl_net:caif_netlink_parms(): no params data found [ 136.865096][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.031941][ T6958] netlink: 'syz.0.337': attribute type 29 has an invalid length. [ 137.079757][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.112514][ T6958] netlink: 'syz.0.337': attribute type 29 has an invalid length. [ 137.143893][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.151566][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.158849][ T6930] bridge_slave_0: entered allmulticast mode [ 137.159115][ T52] Bluetooth: hci2: command tx timeout [ 137.173377][ T6930] bridge_slave_0: entered promiscuous mode [ 137.208731][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.249181][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.266493][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.282923][ T6930] bridge_slave_1: entered allmulticast mode [ 137.291653][ T6930] bridge_slave_1: entered promiscuous mode [ 137.312000][ T48] .`: (slave netdevsim0): Releasing backup interface [ 137.321758][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.385684][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.409836][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.541887][ T6930] team0: Port device team_slave_0 added [ 137.564521][ T6930] team0: Port device team_slave_1 added [ 137.675979][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.696740][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.733555][ T6930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.759202][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.766725][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.795896][ T6930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.865561][ T6930] hsr_slave_0: entered promiscuous mode [ 137.873715][ T6930] hsr_slave_1: entered promiscuous mode [ 137.881078][ T6930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.888767][ T6930] Cannot create hsr debugfs directory [ 139.242996][ T52] Bluetooth: hci2: command tx timeout [ 139.356542][ T7025] raw_sendmsg: syz.2.353 forgot to set AF_INET. Fix it! [ 140.223647][ T7036] syzkaller0: entered promiscuous mode [ 140.246350][ T7036] syzkaller0: entered allmulticast mode [ 141.264167][ T7062] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.359'. [ 141.319079][ T52] Bluetooth: hci2: command tx timeout [ 142.804948][ T7056] netlink: 'syz.3.359': attribute type 33 has an invalid length. [ 142.812856][ T7056] netlink: 152 bytes leftover after parsing attributes in process `syz.3.359'. [ 142.823167][ T7056] `: renamed from ip6tnl0 (while UP) [ 142.830661][ T7056] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 142.847569][ T7057] netlink: 180 bytes leftover after parsing attributes in process `syz.3.359'. [ 143.093880][ T6930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.130936][ T6930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.200063][ T6930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.218697][ T6930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.251404][ T7078] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.363'. [ 143.399067][ T52] Bluetooth: hci2: command tx timeout [ 143.455048][ T7072] netlink: 'syz.0.361': attribute type 27 has an invalid length. [ 143.465029][ T7072] netlink: 164 bytes leftover after parsing attributes in process `syz.0.361'. [ 143.900305][ T48] hsr_slave_0: left promiscuous mode [ 143.940691][ T48] hsr_slave_1: left promiscuous mode [ 143.962220][ T48] bridge_slave_1: left allmulticast mode [ 143.967929][ T48] bridge_slave_1: left promiscuous mode [ 143.984723][ T7071] cgroup: fork rejected by pids controller in /syz2 [ 144.009279][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.074333][ T48] bridge_slave_0: left allmulticast mode [ 144.106666][ T48] bridge_slave_0: left promiscuous mode [ 144.136600][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.803220][ T48] veth1_macvtap: left promiscuous mode [ 144.811857][ T48] veth0_macvtap: left promiscuous mode [ 144.817877][ T48] veth1_vlan: left promiscuous mode [ 144.825921][ T48] veth0_vlan: left promiscuous mode [ 145.446316][ T48] team0 (unregistering): Port device team_slave_1 removed [ 145.485951][ T48] team0 (unregistering): Port device team_slave_0 removed [ 145.518747][ T48] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.559272][ T48] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.809042][ T48] .` (unregistering): Released all slaves [ 146.020618][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.072764][ T6930] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.131090][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.138273][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.167856][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.175129][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.198532][ T7117] FAULT_INJECTION: forcing a failure. [ 146.198532][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 146.229169][ T7117] CPU: 1 PID: 7117 Comm: syz.3.371 Not tainted syzkaller #0 [ 146.236536][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 146.246649][ T7117] Call Trace: [ 146.249963][ T7117] [ 146.252928][ T7117] dump_stack_lvl+0x18c/0x250 [ 146.257660][ T7117] ? show_regs_print_info+0x20/0x20 [ 146.262898][ T7117] ? load_image+0x420/0x420 [ 146.267471][ T7117] ? __might_sleep+0xe0/0xe0 [ 146.272117][ T7117] ? __lock_acquire+0x7d80/0x7d80 [ 146.277190][ T7117] should_fail_ex+0x394/0x4c0 [ 146.281922][ T7117] should_failslab+0x9/0x20 [ 146.286478][ T7117] slab_pre_alloc_hook+0x59/0x300 [ 146.291563][ T7117] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 146.297337][ T7117] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 146.303099][ T7117] __kmem_cache_alloc_node+0x53/0x250 [ 146.308504][ T7117] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 146.314259][ T7117] __kmalloc+0xa7/0x240 [ 146.318448][ T7117] tomoyo_realpath_from_path+0xe6/0x5c0 [ 146.324027][ T7117] ? tomoyo_domain+0xd6/0x120 [ 146.328739][ T7117] tomoyo_path_number_perm+0x248/0x5e0 [ 146.334232][ T7117] ? tomoyo_path_number_perm+0x217/0x5e0 [ 146.339900][ T7117] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 146.345407][ T7117] ? ksys_write+0x1d2/0x260 [ 146.349972][ T7117] ? __fget_files+0x28/0x460 [ 146.354606][ T7117] security_file_ioctl+0x70/0xa0 [ 146.359576][ T7117] __se_sys_ioctl+0x48/0x170 [ 146.364199][ T7117] do_syscall_64+0x55/0xb0 [ 146.368642][ T7117] ? clear_bhb_loop+0x40/0x90 [ 146.373350][ T7117] ? clear_bhb_loop+0x40/0x90 [ 146.378054][ T7117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.383983][ T7117] RIP: 0033:0x7fddc719de99 [ 146.388419][ T7117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.408052][ T7117] RSP: 002b:00007fddc80a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.416492][ T7117] RAX: ffffffffffffffda RBX: 00007fddc7426090 RCX: 00007fddc719de99 [ 146.424485][ T7117] RDX: 00002000000000c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 146.432481][ T7117] RBP: 00007fddc80a9090 R08: 0000000000000000 R09: 0000000000000000 [ 146.440474][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.448467][ T7117] R13: 00007fddc7426128 R14: 00007fddc7426090 R15: 00007ffd364d9498 [ 146.456471][ T7117] [ 146.470809][ T7117] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.980543][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.136666][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.242331][ T6930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.273012][ T7130] netlink: 'syz.0.373': attribute type 27 has an invalid length. [ 147.288989][ T7130] netlink: 164 bytes leftover after parsing attributes in process `syz.0.373'. [ 147.300817][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.325246][ T7134] sctp: [Deprecated]: syz.3.376 (pid 7134) Use of int in maxseg socket option. [ 147.325246][ T7134] Use struct sctp_assoc_value instead [ 147.401733][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.456512][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.466281][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.476053][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.493880][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.506646][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.525312][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.632707][ T6930] veth0_vlan: entered promiscuous mode [ 147.752915][ T7139] netlink: 164 bytes leftover after parsing attributes in process `syz.3.377'. [ 147.791053][ T6930] veth1_vlan: entered promiscuous mode [ 148.295281][ T6930] veth0_macvtap: entered promiscuous mode [ 148.406277][ T6930] veth1_macvtap: entered promiscuous mode [ 148.487480][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.712722][ T7168] FAULT_INJECTION: forcing a failure. [ 148.712722][ T7168] name failslab, interval 1, probability 0, space 0, times 0 [ 148.736114][ T7168] CPU: 0 PID: 7168 Comm: syz.0.383 Not tainted syzkaller #0 [ 148.743486][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 148.753592][ T7168] Call Trace: [ 148.756916][ T7168] [ 148.759887][ T7168] dump_stack_lvl+0x18c/0x250 [ 148.764624][ T7168] ? show_regs_print_info+0x20/0x20 [ 148.769869][ T7168] ? load_image+0x420/0x420 [ 148.772858][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.774412][ T7168] ? __might_sleep+0xe0/0xe0 [ 148.786281][ T7168] ? __lock_acquire+0x7d80/0x7d80 [ 148.791351][ T7168] should_fail_ex+0x394/0x4c0 [ 148.796065][ T7168] should_failslab+0x9/0x20 [ 148.800635][ T7168] slab_pre_alloc_hook+0x59/0x300 [ 148.805700][ T7168] ? prepend_path+0x8a7/0x950 [ 148.810406][ T7168] ? tomoyo_encode+0x2ad/0x570 [ 148.815208][ T7168] ? tomoyo_encode+0x2ad/0x570 [ 148.820012][ T7168] __kmem_cache_alloc_node+0x53/0x250 [ 148.825422][ T7168] ? tomoyo_encode+0x2ad/0x570 [ 148.830229][ T7168] __kmalloc+0xa7/0x240 [ 148.834454][ T7168] tomoyo_encode+0x2ad/0x570 [ 148.839097][ T7168] tomoyo_realpath_from_path+0x57c/0x5c0 [ 148.844784][ T7168] ? tomoyo_domain+0xd6/0x120 [ 148.849508][ T7168] tomoyo_path_number_perm+0x248/0x5e0 [ 148.855031][ T7168] ? tomoyo_path_number_perm+0x217/0x5e0 [ 148.860702][ T7168] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 148.866286][ T7168] ? ksys_write+0x1d2/0x260 [ 148.870854][ T7168] ? __fget_files+0x28/0x460 [ 148.875507][ T7168] security_file_ioctl+0x70/0xa0 [ 148.880509][ T7168] __se_sys_ioctl+0x48/0x170 [ 148.885137][ T7168] do_syscall_64+0x55/0xb0 [ 148.889617][ T7168] ? clear_bhb_loop+0x40/0x90 [ 148.894334][ T7168] ? clear_bhb_loop+0x40/0x90 [ 148.899046][ T7168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.904985][ T7168] RIP: 0033:0x7fccea79de99 [ 148.909439][ T7168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.929095][ T7168] RSP: 002b:00007fcceb6af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.937541][ T7168] RAX: ffffffffffffffda RBX: 00007fcceaa26090 RCX: 00007fccea79de99 [ 148.945536][ T7168] RDX: 00002000000000c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 148.953533][ T7168] RBP: 00007fcceb6af090 R08: 0000000000000000 R09: 0000000000000000 [ 148.961527][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.969520][ T7168] R13: 00007fcceaa26128 R14: 00007fcceaa26090 R15: 00007fff0cbf97e8 [ 148.977524][ T7168] [ 148.999456][ T7168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.313871][ T6930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.329023][ T6930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.345274][ T6930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.354645][ T6930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.372780][ T7169] netlink: 48 bytes leftover after parsing attributes in process `syz.3.384'. [ 149.493823][ T7136] chnl_net:caif_netlink_parms(): no params data found [ 149.641728][ T52] Bluetooth: hci1: command tx timeout [ 149.790210][ T7136] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.797417][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.832225][ T7136] bridge_slave_0: entered allmulticast mode [ 149.842834][ T7136] bridge_slave_0: entered promiscuous mode [ 149.852456][ T7136] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.861477][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.868633][ T7136] bridge_slave_1: entered allmulticast mode [ 149.876248][ T7136] bridge_slave_1: entered promiscuous mode [ 149.986304][ T7136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.001154][ T7136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.099702][ T7187] netlink: 'syz.0.386': attribute type 27 has an invalid length. [ 150.119851][ T7187] netlink: 164 bytes leftover after parsing attributes in process `syz.0.386'. [ 150.158331][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.188271][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.224220][ T7136] team0: Port device team_slave_0 added [ 150.234685][ T7136] team0: Port device team_slave_1 added [ 150.301020][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.331434][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.383415][ T7136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.420729][ T48] hsr_slave_0: left promiscuous mode [ 150.427065][ T48] hsr_slave_1: left promiscuous mode [ 150.433639][ T48] bridge_slave_1: left allmulticast mode [ 150.440029][ T48] bridge_slave_1: left promiscuous mode [ 150.446328][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.457546][ T48] bridge_slave_0: left allmulticast mode [ 150.466363][ T48] bridge_slave_0: left promiscuous mode [ 150.485664][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.566395][ T48] veth1_macvtap: left promiscuous mode [ 150.573202][ T48] veth0_macvtap: left promiscuous mode [ 150.589386][ T48] veth1_vlan: left promiscuous mode [ 150.594811][ T48] veth0_vlan: left promiscuous mode [ 151.719387][ T52] Bluetooth: hci1: command tx timeout [ 151.728286][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.799968][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.063111][ T48] bond0 (unregistering): Released all slaves [ 152.165945][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.173006][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.207666][ T7136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.257089][ T7222] FAULT_INJECTION: forcing a failure. [ 152.257089][ T7222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.270380][ T7222] CPU: 0 PID: 7222 Comm: syz.0.393 Not tainted syzkaller #0 [ 152.277736][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.287818][ T7222] Call Trace: [ 152.291119][ T7222] [ 152.294080][ T7222] dump_stack_lvl+0x18c/0x250 [ 152.298775][ T7222] ? show_regs_print_info+0x20/0x20 [ 152.304015][ T7222] ? load_image+0x420/0x420 [ 152.308555][ T7222] ? __might_fault+0xaa/0x120 [ 152.313256][ T7222] ? __lock_acquire+0x7d80/0x7d80 [ 152.318358][ T7222] should_fail_ex+0x394/0x4c0 [ 152.323108][ T7222] _copy_from_user+0x2f/0xe0 [ 152.327739][ T7222] __tun_chr_ioctl+0x1034/0x2070 [ 152.332744][ T7222] ? tun_flow_create+0x310/0x310 [ 152.337727][ T7222] ? bpf_lsm_file_ioctl+0x9/0x10 [ 152.342694][ T7222] ? security_file_ioctl+0x80/0xa0 [ 152.347927][ T7222] ? tun_chr_poll+0x630/0x630 [ 152.352638][ T7222] __se_sys_ioctl+0xfd/0x170 [ 152.357264][ T7222] do_syscall_64+0x55/0xb0 [ 152.361711][ T7222] ? clear_bhb_loop+0x40/0x90 [ 152.366421][ T7222] ? clear_bhb_loop+0x40/0x90 [ 152.371128][ T7222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.377053][ T7222] RIP: 0033:0x7fccea79de99 [ 152.381499][ T7222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.401153][ T7222] RSP: 002b:00007fcceb6af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.409694][ T7222] RAX: ffffffffffffffda RBX: 00007fcceaa26090 RCX: 00007fccea79de99 [ 152.417695][ T7222] RDX: 00002000000000c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 152.425695][ T7222] RBP: 00007fcceb6af090 R08: 0000000000000000 R09: 0000000000000000 [ 152.433694][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.441696][ T7222] R13: 00007fcceaa26128 R14: 00007fcceaa26090 R15: 00007fff0cbf97e8 [ 152.449706][ T7222] [ 152.522073][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.540002][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.592826][ T7136] hsr_slave_0: entered promiscuous mode [ 152.620076][ T7136] hsr_slave_1: entered promiscuous mode [ 152.638011][ T7136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.651698][ T7136] Cannot create hsr debugfs directory [ 153.621578][ T7236] netlink: 'syz.3.395': attribute type 27 has an invalid length. [ 153.636657][ T7236] netlink: 164 bytes leftover after parsing attributes in process `syz.3.395'. [ 153.799374][ T52] Bluetooth: hci1: command tx timeout [ 153.934235][ T7244] netlink: 'syz.1.396': attribute type 10 has an invalid length. [ 154.124352][ T7244] team0 (unregistering): Port device team_slave_0 removed [ 154.160330][ T7244] team0 (unregistering): Port device team_slave_1 removed [ 154.673553][ T7136] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.691279][ T7261] netlink: 'syz.0.400': attribute type 6 has an invalid length. [ 154.710445][ T7261] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.400'. [ 154.717152][ T7136] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.744887][ T7136] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.765835][ T7136] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 155.019888][ T7271] FAULT_INJECTION: forcing a failure. [ 155.019888][ T7271] name failslab, interval 1, probability 0, space 0, times 0 [ 155.036595][ T7271] CPU: 1 PID: 7271 Comm: syz.3.402 Not tainted syzkaller #0 [ 155.043958][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.054058][ T7271] Call Trace: [ 155.057396][ T7271] [ 155.060370][ T7271] dump_stack_lvl+0x18c/0x250 [ 155.065102][ T7271] ? show_regs_print_info+0x20/0x20 [ 155.070386][ T7271] ? load_image+0x420/0x420 [ 155.074986][ T7271] ? __might_sleep+0xe0/0xe0 [ 155.079627][ T7271] ? __lock_acquire+0x7d80/0x7d80 [ 155.084712][ T7271] should_fail_ex+0x394/0x4c0 [ 155.089450][ T7271] should_failslab+0x9/0x20 [ 155.094015][ T7271] slab_pre_alloc_hook+0x59/0x300 [ 155.099108][ T7271] ? mark_lock+0x94/0x320 [ 155.103495][ T7271] ? __get_vm_area_node+0x125/0x370 [ 155.108759][ T7271] __kmem_cache_alloc_node+0x53/0x250 [ 155.114195][ T7271] ? __lock_acquire+0x1336/0x7d80 [ 155.119321][ T7271] ? __get_vm_area_node+0x125/0x370 [ 155.124617][ T7271] kmalloc_node_trace+0x26/0xe0 [ 155.129528][ T7271] __get_vm_area_node+0x125/0x370 [ 155.134619][ T7271] __vmalloc_node_range+0x36f/0x1320 [ 155.139955][ T7271] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 155.145583][ T7271] ? free_vm_area+0x50/0x50 [ 155.150140][ T7271] ? mark_lock+0x94/0x320 [ 155.154523][ T7271] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 155.160161][ T7271] __vmalloc+0x7a/0x90 [ 155.164320][ T7271] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 155.169917][ T7271] bpf_prog_alloc_no_stats+0x46/0x430 [ 155.175341][ T7271] bpf_prog_alloc+0x3d/0x1a0 [ 155.180008][ T7271] __get_filter+0xf2/0x400 [ 155.184485][ T7271] ? _local_bh_enable+0xa0/0xa0 [ 155.189387][ T7271] sk_attach_filter+0x24/0x140 [ 155.194215][ T7271] tun_attach_filter+0x170/0x270 [ 155.199217][ T7271] __tun_chr_ioctl+0x17ce/0x2070 [ 155.204226][ T7271] ? tun_flow_create+0x310/0x310 [ 155.209254][ T7271] ? bpf_lsm_file_ioctl+0x9/0x10 [ 155.214249][ T7271] ? security_file_ioctl+0x80/0xa0 [ 155.219409][ T7271] ? tun_chr_poll+0x630/0x630 [ 155.224117][ T7271] __se_sys_ioctl+0xfd/0x170 [ 155.228750][ T7271] do_syscall_64+0x55/0xb0 [ 155.233196][ T7271] ? clear_bhb_loop+0x40/0x90 [ 155.237900][ T7271] ? clear_bhb_loop+0x40/0x90 [ 155.242612][ T7271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.248531][ T7271] RIP: 0033:0x7fddc719de99 [ 155.252974][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.272613][ T7271] RSP: 002b:00007fddc80ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.281057][ T7271] RAX: ffffffffffffffda RBX: 00007fddc7425fa0 RCX: 00007fddc719de99 [ 155.289058][ T7271] RDX: 00002000000000c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 155.297065][ T7271] RBP: 00007fddc80ca090 R08: 0000000000000000 R09: 0000000000000000 [ 155.305067][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.313064][ T7271] R13: 00007fddc7426038 R14: 00007fddc7425fa0 R15: 00007ffd364d9498 [ 155.321080][ T7271] [ 155.331433][ T7271] syz.3.402: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 155.356641][ T7271] CPU: 1 PID: 7271 Comm: syz.3.402 Not tainted syzkaller #0 [ 155.364002][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.374105][ T7271] Call Trace: [ 155.377423][ T7271] [ 155.380400][ T7271] dump_stack_lvl+0x18c/0x250 [ 155.385136][ T7271] ? show_regs_print_info+0x20/0x20 [ 155.390378][ T7271] ? load_image+0x420/0x420 [ 155.394919][ T7271] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 155.401365][ T7271] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 155.407898][ T7271] warn_alloc+0x246/0x340 [ 155.412259][ T7271] ? __get_vm_area_node+0x125/0x370 [ 155.417496][ T7271] ? zone_watermark_ok_safe+0x230/0x230 [ 155.423062][ T7271] ? rcu_is_watching+0x15/0xb0 [ 155.427867][ T7271] ? __get_vm_area_node+0x356/0x370 [ 155.433137][ T7271] __vmalloc_node_range+0x394/0x1320 [ 155.438481][ T7271] ? free_vm_area+0x50/0x50 [ 155.443017][ T7271] ? mark_lock+0x94/0x320 [ 155.447377][ T7271] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 155.452950][ T7271] __vmalloc+0x7a/0x90 [ 155.457077][ T7271] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 155.462678][ T7271] bpf_prog_alloc_no_stats+0x46/0x430 [ 155.468082][ T7271] bpf_prog_alloc+0x3d/0x1a0 [ 155.472706][ T7271] __get_filter+0xf2/0x400 [ 155.477159][ T7271] ? _local_bh_enable+0xa0/0xa0 [ 155.482070][ T7271] sk_attach_filter+0x24/0x140 [ 155.486865][ T7271] tun_attach_filter+0x170/0x270 [ 155.491837][ T7271] __tun_chr_ioctl+0x17ce/0x2070 [ 155.496837][ T7271] ? tun_flow_create+0x310/0x310 [ 155.501819][ T7271] ? bpf_lsm_file_ioctl+0x9/0x10 [ 155.506875][ T7271] ? security_file_ioctl+0x80/0xa0 [ 155.512019][ T7271] ? tun_chr_poll+0x630/0x630 [ 155.516730][ T7271] __se_sys_ioctl+0xfd/0x170 [ 155.521352][ T7271] do_syscall_64+0x55/0xb0 [ 155.525795][ T7271] ? clear_bhb_loop+0x40/0x90 [ 155.530499][ T7271] ? clear_bhb_loop+0x40/0x90 [ 155.535200][ T7271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.541149][ T7271] RIP: 0033:0x7fddc719de99 [ 155.545599][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.565236][ T7271] RSP: 002b:00007fddc80ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.573671][ T7271] RAX: ffffffffffffffda RBX: 00007fddc7425fa0 RCX: 00007fddc719de99 [ 155.581672][ T7271] RDX: 00002000000000c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 155.589676][ T7271] RBP: 00007fddc80ca090 R08: 0000000000000000 R09: 0000000000000000 [ 155.597685][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.605678][ T7271] R13: 00007fddc7426038 R14: 00007fddc7425fa0 R15: 00007ffd364d9498 [ 155.613692][ T7271] [ 155.652078][ T7271] Mem-Info: [ 155.655279][ T7271] active_anon:5574 inactive_anon:0 isolated_anon:0 [ 155.655279][ T7271] active_file:12017 inactive_file:39983 isolated_file:0 [ 155.655279][ T7271] unevictable:768 dirty:84 writeback:0 [ 155.655279][ T7271] slab_reclaimable:10134 slab_unreclaimable:89901 [ 155.655279][ T7271] mapped:24673 shmem:1361 pagetables:555 [ 155.655279][ T7271] sec_pagetables:0 bounce:0 [ 155.655279][ T7271] kernel_misc_reclaimable:0 [ 155.655279][ T7271] free:1357197 free_pcp:10152 free_cma:0 [ 155.723352][ T7271] Node 0 active_anon:22296kB inactive_anon:0kB active_file:48068kB inactive_file:159728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100892kB dirty:332kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10596kB pagetables:2320kB sec_pagetables:0kB all_unreclaimable? no [ 155.769050][ T7271] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 155.805360][ T7271] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.837018][ T7271] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 155.847252][ T7271] Node 0 DMA32 free:1515116kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22456kB inactive_anon:0kB active_file:48068kB inactive_file:158904kB unevictable:1536kB writepending:328kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:24560kB local_pcp:12584kB free_cma:0kB [ 155.885487][ T7271] lowmem_reserve[]: 0 0 0 0 0 [ 155.886840][ T52] Bluetooth: hci1: command tx timeout [ 155.900132][ T7271] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.972738][ T7271] lowmem_reserve[]: 0 0 0 0 0 [ 155.984689][ T7271] Node 1 Normal free:3898052kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16736kB local_pcp:7328kB free_cma:0kB [ 156.048736][ T7271] lowmem_reserve[]: 0 0 0 0 0 [ 156.055446][ T7271] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.070804][ T7271] Node 0 DMA32: 1*4kB (E) 1*8kB (M) 372*16kB (M) 359*32kB (M) 243*64kB (M) 145*128kB (UME) 63*256kB (UME) 27*512kB (UME) 14*1024kB (UME) 3*2048kB (UME) 345*4096kB (M) = 1515116kB [ 156.092699][ T7271] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 156.107260][ T7271] Node 1 Normal: 241*4kB (UME) 58*8kB (UME) 31*16kB (UME) 60*32kB (UME) 21*64kB (UME) 7*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3898052kB [ 156.131566][ T7271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.145501][ T7271] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.156646][ T7271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.168016][ T7271] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.180334][ T7271] 53361 total pagecache pages [ 156.185078][ T7271] 0 pages in swap cache [ 156.191016][ T7271] Free swap = 124996kB [ 156.195223][ T7271] Total swap = 124996kB [ 156.202297][ T7271] 2097051 pages RAM [ 156.206158][ T7271] 0 pages HighMem/MovableOnly [ 156.212682][ T7271] 416955 pages reserved [ 156.216975][ T7271] 0 pages cma reserved [ 156.262080][ T7136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.316013][ T7136] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.342344][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.349616][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.363489][ T7294] netlink: 'syz.1.406': attribute type 27 has an invalid length. [ 156.383320][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.390662][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.413317][ T7294] netlink: 164 bytes leftover after parsing attributes in process `syz.1.406'. [ 156.906832][ T7313] : renamed from team_slave_1 [ 158.414057][ T7136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.671339][ T7338] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.411'. [ 158.681773][ T7338] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 158.714163][ T7136] veth0_vlan: entered promiscuous mode [ 158.782667][ T7136] veth1_vlan: entered promiscuous mode [ 158.870515][ T7136] veth0_macvtap: entered promiscuous mode [ 158.941295][ T7136] veth1_macvtap: entered promiscuous mode [ 159.028214][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.043394][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.057912][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.093402][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.127068][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.154859][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.179286][ T7347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.412'. [ 159.233203][ T7136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.279945][ T7136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.303054][ T7136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.320496][ T7136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.610811][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.621752][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.761646][ T7361] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.414'. [ 159.790912][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.843056][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.423482][ T7384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.416'. [ 160.709900][ T7384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.416'. [ 160.790520][ T7380] netlink: 60 bytes leftover after parsing attributes in process `syz.0.416'. [ 160.866926][ T7379] netlink: 'syz.1.417': attribute type 27 has an invalid length. [ 160.879017][ T7379] netlink: 164 bytes leftover after parsing attributes in process `syz.1.417'. [ 160.922646][ T7393] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 161.437421][ T7401] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 161.486693][ T7401] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 161.619827][ T7401] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.421'. [ 162.155101][ T7408] netlink: 'syz.0.422': attribute type 13 has an invalid length. [ 162.179824][ T7408] netlink: 'syz.0.422': attribute type 58 has an invalid length. [ 162.188219][ T7408] netlink: 152 bytes leftover after parsing attributes in process `syz.0.422'. [ 162.610286][ T7423] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.424'. [ 162.795977][ T7407] netlink: 'syz.2.420': attribute type 9 has an invalid length. [ 170.095171][ T7457] syzkaller0: entered promiscuous mode [ 171.817150][ T7460] __nla_validate_parse: 1 callbacks suppressed [ 171.817168][ T7460] netlink: 168 bytes leftover after parsing attributes in process `syz.3.433'. [ 172.083695][ T7492] netlink: 'syz.1.441': attribute type 29 has an invalid length. [ 172.108447][ T7492] netlink: 'syz.1.441': attribute type 29 has an invalid length. [ 172.839821][ T7505] netlink: 'syz.3.445': attribute type 2 has an invalid length. [ 172.956427][ T7505] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.445'. [ 173.795073][ T7514] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.448'. [ 173.887432][ T7500] netlink: 'syz.2.443': attribute type 27 has an invalid length. [ 173.916767][ T7500] netlink: 164 bytes leftover after parsing attributes in process `syz.2.443'. [ 174.422212][ T7537] netlink: 'syz.2.453': attribute type 29 has an invalid length. [ 174.430583][ T7528] netlink: 144 bytes leftover after parsing attributes in process `syz.1.451'. [ 174.439883][ T7528] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 174.484535][ T7537] netlink: 'syz.2.453': attribute type 29 has an invalid length. [ 174.728501][ T7542] netlink: 192 bytes leftover after parsing attributes in process `syz.2.455'. [ 174.848473][ T7547] netlink: 144 bytes leftover after parsing attributes in process `syz.0.454'. [ 174.971589][ T7552] syz.1.456: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 175.018460][ T7552] CPU: 1 PID: 7552 Comm: syz.1.456 Not tainted syzkaller #0 [ 175.025843][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 175.035968][ T7552] Call Trace: [ 175.039301][ T7552] [ 175.042277][ T7552] dump_stack_lvl+0x18c/0x250 [ 175.047021][ T7552] ? show_regs_print_info+0x20/0x20 [ 175.052279][ T7552] ? load_image+0x420/0x420 [ 175.056858][ T7552] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 175.063440][ T7552] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 175.070000][ T7552] warn_alloc+0x246/0x340 [ 175.074403][ T7552] ? stack_trace_save+0xaa/0x100 [ 175.079411][ T7552] ? zone_watermark_ok_safe+0x230/0x230 [ 175.085017][ T7552] ? kasan_set_track+0x5f/0x70 [ 175.089829][ T7552] ? kasan_set_track+0x4e/0x70 [ 175.094648][ T7552] ? __kasan_kmalloc+0x8f/0xa0 [ 175.099469][ T7552] ? xsk_init_queue+0xad/0x100 [ 175.104297][ T7552] ? xsk_setsockopt+0x4c9/0x750 [ 175.109211][ T7552] ? do_sock_setsockopt+0x175/0x1a0 [ 175.114491][ T7552] ? __x64_sys_setsockopt+0x182/0x200 [ 175.119923][ T7552] __vmalloc_node_range+0x129/0x1320 [ 175.125306][ T7552] ? free_vm_area+0x50/0x50 [ 175.129885][ T7552] vmalloc_user+0x74/0x80 [ 175.134255][ T7552] ? xskq_create+0xbf/0x170 [ 175.138800][ T7552] xskq_create+0xbf/0x170 [ 175.143196][ T7552] xsk_init_queue+0xad/0x100 [ 175.147822][ T7552] xsk_setsockopt+0x4c9/0x750 [ 175.152546][ T7552] ? xsk_poll+0x670/0x670 [ 175.156934][ T7552] ? __fget_files+0x28/0x460 [ 175.161607][ T7552] ? aa_sock_opt_perm+0x74/0x100 [ 175.166584][ T7552] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 175.172166][ T7552] ? security_socket_setsockopt+0x7e/0xa0 [ 175.177919][ T7552] ? xsk_poll+0x670/0x670 [ 175.182286][ T7552] do_sock_setsockopt+0x175/0x1a0 [ 175.187343][ T7552] ? __fdget+0x180/0x210 [ 175.191642][ T7552] __x64_sys_setsockopt+0x182/0x200 [ 175.196874][ T7552] do_syscall_64+0x55/0xb0 [ 175.201321][ T7552] ? clear_bhb_loop+0x40/0x90 [ 175.206030][ T7552] ? clear_bhb_loop+0x40/0x90 [ 175.210735][ T7552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.216658][ T7552] RIP: 0033:0x7fce3c99de99 [ 175.221116][ T7552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.240769][ T7552] RSP: 002b:00007fce3d7af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.249247][ T7552] RAX: ffffffffffffffda RBX: 00007fce3cc26090 RCX: 00007fce3c99de99 [ 175.257265][ T7552] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 175.265279][ T7552] RBP: 00007fce3ca33eaf R08: 0000000000000004 R09: 0000000000000000 [ 175.273284][ T7552] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 175.281360][ T7552] R13: 00007fce3cc26128 R14: 00007fce3cc26090 R15: 00007ffe627915d8 [ 175.289378][ T7552] [ 175.348956][ T7552] Mem-Info: [ 175.352144][ T7552] active_anon:5567 inactive_anon:0 isolated_anon:0 [ 175.352144][ T7552] active_file:12017 inactive_file:39992 isolated_file:0 [ 175.352144][ T7552] unevictable:768 dirty:192 writeback:0 [ 175.352144][ T7552] slab_reclaimable:10071 slab_unreclaimable:93038 [ 175.352144][ T7552] mapped:25251 shmem:1361 pagetables:595 [ 175.352144][ T7552] sec_pagetables:0 bounce:0 [ 175.352144][ T7552] kernel_misc_reclaimable:0 [ 175.352144][ T7552] free:1354849 free_pcp:10895 free_cma:0 [ 175.436569][ T7552] Node 0 active_anon:22268kB inactive_anon:0kB active_file:48068kB inactive_file:159764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101004kB dirty:764kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10716kB pagetables:2380kB sec_pagetables:0kB all_unreclaimable? no [ 175.504264][ T7547] team0: Port device C removed [ 175.509255][ T7552] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 175.556918][ T7552] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.575256][ T7547] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 175.609252][ T7552] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 175.615099][ T7552] Node 0 DMA32 free:1505976kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22128kB inactive_anon:0kB active_file:48068kB inactive_file:158940kB unevictable:1536kB writepending:760kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:27076kB local_pcp:10836kB free_cma:0kB [ 175.669549][ T7552] lowmem_reserve[]: 0 0 0 0 0 [ 175.674368][ T7552] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.707323][ T7552] lowmem_reserve[]: 0 0 0 0 0 [ 175.713140][ T7552] Node 1 Normal free:3898052kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16832kB local_pcp:7392kB free_cma:0kB [ 175.756732][ T7552] lowmem_reserve[]: 0 0 0 0 0 [ 175.761974][ T7552] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.783885][ T7552] Node 0 DMA32: 556*4kB (UME) 733*8kB (UME) 550*16kB (UME) 490*32kB (UME) 292*64kB (UME) 61*128kB (UME) 52*256kB (UME) 24*512kB (UM) 12*1024kB (UME) 2*2048kB (UE) 343*4096kB (M) = 1505976kB [ 175.819431][ T7552] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 175.833384][ T7552] Node 1 Normal: 241*4kB (UME) 58*8kB (UME) 31*16kB (UME) 60*32kB (UME) 21*64kB (UME) 7*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3898052kB [ 175.872142][ T7552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.909196][ T7552] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.925258][ T7552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.935741][ T7552] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.945508][ T7552] 53370 total pagecache pages [ 175.950552][ T7552] 0 pages in swap cache [ 175.954752][ T7552] Free swap = 124996kB [ 175.968884][ T7552] Total swap = 124996kB [ 175.989115][ T7552] 2097051 pages RAM [ 175.993042][ T7552] 0 pages HighMem/MovableOnly [ 175.997752][ T7552] 416955 pages reserved [ 176.020057][ T7552] 0 pages cma reserved [ 176.456746][ T7572] netlink: 'syz.0.461': attribute type 27 has an invalid length. [ 176.470326][ T7572] netlink: 164 bytes leftover after parsing attributes in process `syz.0.461'. [ 176.787618][ T7588] netlink: 'syz.0.464': attribute type 29 has an invalid length. [ 176.810423][ T7588] netlink: 'syz.0.464': attribute type 29 has an invalid length. [ 176.824584][ T7594] netlink: 'syz.1.465': attribute type 2 has an invalid length. [ 176.842271][ T7594] netlink: 9 bytes leftover after parsing attributes in process `syz.1.465'. [ 176.965332][ T7591] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.467'. [ 177.317717][ T7600] delete_channel: no stack [ 177.340689][ T7600] delete_channel: no stack [ 180.324250][ T7616] validate_nla: 1 callbacks suppressed [ 180.324271][ T7616] netlink: 'syz.0.477': attribute type 29 has an invalid length. [ 180.411158][ T7616] netlink: 'syz.0.477': attribute type 29 has an invalid length. [ 183.650401][ T7644] netlink: 128 bytes leftover after parsing attributes in process `syz.0.485'. [ 183.677710][ T7644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.991399][ T7660] warn_alloc: 1 callbacks suppressed [ 184.991418][ T7660] syz.0.487: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 185.099530][ T7660] CPU: 1 PID: 7660 Comm: syz.0.487 Not tainted syzkaller #0 [ 185.106941][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 185.117081][ T7660] Call Trace: [ 185.120462][ T7660] [ 185.123468][ T7660] dump_stack_lvl+0x18c/0x250 [ 185.128242][ T7660] ? show_regs_print_info+0x20/0x20 [ 185.133517][ T7660] ? load_image+0x420/0x420 [ 185.138117][ T7660] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 185.144657][ T7660] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 185.151269][ T7660] warn_alloc+0x246/0x340 [ 185.155682][ T7660] ? stack_trace_save+0xaa/0x100 [ 185.160741][ T7660] ? zone_watermark_ok_safe+0x230/0x230 [ 185.166403][ T7660] ? kasan_set_track+0x5f/0x70 [ 185.171242][ T7660] ? kasan_set_track+0x4e/0x70 [ 185.176080][ T7660] ? __kasan_kmalloc+0x8f/0xa0 [ 185.180929][ T7660] ? xsk_init_queue+0xad/0x100 [ 185.185772][ T7660] ? xsk_setsockopt+0x4c9/0x750 [ 185.190711][ T7660] ? do_sock_setsockopt+0x175/0x1a0 [ 185.195989][ T7660] ? __x64_sys_setsockopt+0x182/0x200 [ 185.201455][ T7660] __vmalloc_node_range+0x129/0x1320 [ 185.206947][ T7660] ? free_vm_area+0x50/0x50 [ 185.211588][ T7660] vmalloc_user+0x74/0x80 [ 185.215983][ T7660] ? xskq_create+0xbf/0x170 [ 185.220553][ T7660] xskq_create+0xbf/0x170 [ 185.224981][ T7660] xsk_init_queue+0xad/0x100 [ 185.229633][ T7660] xsk_setsockopt+0x4c9/0x750 [ 185.234371][ T7660] ? xsk_poll+0x670/0x670 [ 185.238770][ T7660] ? __fget_files+0x28/0x460 [ 185.243444][ T7660] ? aa_sock_opt_perm+0x74/0x100 [ 185.248452][ T7660] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 185.254055][ T7660] ? security_socket_setsockopt+0x7e/0xa0 [ 185.259835][ T7660] ? xsk_poll+0x670/0x670 [ 185.264241][ T7660] do_sock_setsockopt+0x175/0x1a0 [ 185.269324][ T7660] ? __fdget+0x180/0x210 [ 185.273636][ T7660] __x64_sys_setsockopt+0x182/0x200 [ 185.278923][ T7660] do_syscall_64+0x55/0xb0 [ 185.283423][ T7660] ? clear_bhb_loop+0x40/0x90 [ 185.288169][ T7660] ? clear_bhb_loop+0x40/0x90 [ 185.292896][ T7660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.298878][ T7660] RIP: 0033:0x7fccea79de99 [ 185.303362][ T7660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.323023][ T7660] RSP: 002b:00007fcceb6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.331502][ T7660] RAX: ffffffffffffffda RBX: 00007fcceaa25fa0 RCX: 00007fccea79de99 [ 185.339524][ T7660] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 185.347539][ T7660] RBP: 00007fccea833eaf R08: 0000000000000004 R09: 0000000000000000 [ 185.355652][ T7660] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 185.363666][ T7660] R13: 00007fcceaa26038 R14: 00007fcceaa25fa0 R15: 00007fff0cbf97e8 [ 185.371724][ T7660] [ 185.439272][ T7660] Mem-Info: [ 185.442492][ T7660] active_anon:19546 inactive_anon:0 isolated_anon:0 [ 185.442492][ T7660] active_file:12017 inactive_file:39994 isolated_file:0 [ 185.442492][ T7660] unevictable:768 dirty:62 writeback:0 [ 185.442492][ T7660] slab_reclaimable:10037 slab_unreclaimable:93497 [ 185.442492][ T7660] mapped:30894 shmem:15351 pagetables:619 [ 185.442492][ T7660] sec_pagetables:0 bounce:0 [ 185.442492][ T7660] kernel_misc_reclaimable:0 [ 185.442492][ T7660] free:1340158 free_pcp:11048 free_cma:0 [ 185.554834][ T7660] Node 0 active_anon:78984kB inactive_anon:0kB active_file:48068kB inactive_file:159772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124176kB dirty:248kB writeback:0kB shmem:60768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10512kB pagetables:2476kB sec_pagetables:0kB all_unreclaimable? no [ 185.758881][ T7660] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 185.885202][ T7660] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.969049][ T7660] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 185.975263][ T7660] Node 0 DMA32 free:1442224kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:82220kB inactive_anon:0kB active_file:48068kB inactive_file:158956kB unevictable:1536kB writepending:268kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:28484kB local_pcp:17924kB free_cma:0kB [ 186.069114][ T7660] lowmem_reserve[]: 0 0 0 0 0 [ 186.089002][ T7660] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 186.143618][ T7670] netlink: 192188 bytes leftover after parsing attributes in process `syz.2.490'. [ 186.150894][ T7660] lowmem_reserve[]: 0 0 0 0 0 [ 186.157805][ T7660] Node 1 Normal free:3898308kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16576kB local_pcp:9184kB free_cma:0kB [ 186.200323][ T7672] netlink: 192188 bytes leftover after parsing attributes in process `syz.2.490'. [ 186.268898][ T7660] lowmem_reserve[]: 0 0 0 0 0 [ 186.273864][ T7660] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 186.278670][ T7670] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 186.300523][ T7672] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 186.319817][ T7660] Node 0 DMA32: 434*4kB (UME) 140*8kB (UE) 69*16kB (UE) 17*32kB (UE) 29*64kB (UE) 4*128kB (UME) 21*256kB (UE) 14*512kB (U) 11*1024kB (UME) 2*2048kB (UE) 343*4096kB (M) = 1439704kB [ 186.369022][ T7660] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 186.429218][ T7660] Node 1 Normal: 241*4kB (UME) 58*8kB (UME) 31*16kB (UME) 66*32kB (UME) 22*64kB (UME) 7*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3898308kB [ 186.468201][ T7660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.499090][ T7660] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.510885][ T7671] cgroup: fork rejected by pids controller in /syz3 [ 186.528628][ T7660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.559159][ T7660] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.568561][ T7660] 69575 total pagecache pages [ 186.605898][ T7660] 0 pages in swap cache [ 186.616079][ T7660] Free swap = 124996kB [ 186.629769][ T7660] Total swap = 124996kB [ 186.649895][ T7660] 2097051 pages RAM [ 186.653816][ T7660] 0 pages HighMem/MovableOnly [ 186.684618][ T7660] 416955 pages reserved [ 186.694986][ T7660] 0 pages cma reserved [ 192.218075][ T1100] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.405506][ T1100] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.572809][ T1100] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.687510][ T7827] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 192.832325][ T1100] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.887951][ T7826] veth0_macvtap: left promiscuous mode [ 192.904800][ T7826] macvtap0: entered allmulticast mode [ 193.136627][ T7833] netlink: 'syz.2.508': attribute type 27 has an invalid length. [ 193.179048][ T7833] netlink: 164 bytes leftover after parsing attributes in process `syz.2.508'. [ 193.542329][ T7845] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.511'. [ 193.597224][ T7845] openvswitch: netlink: Tunnel attr 0 has unexpected len 1868 expected 8 [ 193.983007][ T7860] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.514'. [ 194.109634][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.1.514'. [ 194.364727][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.378147][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.395114][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.409263][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.417261][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.428439][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.438134][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.445880][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.804301][ T7872] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 194.884121][ T7872] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 194.925012][ T7874] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 195.053847][ T7872] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 195.086606][ T7874] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 195.425476][ T7887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.177025][ T7897] netlink: 'syz.1.521': attribute type 27 has an invalid length. [ 196.189698][ T7865] chnl_net:caif_netlink_parms(): no params data found [ 196.217503][ T7897] netlink: 164 bytes leftover after parsing attributes in process `syz.1.521'. [ 196.330105][ T1100] hsr_slave_0: left promiscuous mode [ 196.347646][ T1100] hsr_slave_1: left promiscuous mode [ 196.377331][ T1100] bridge_slave_1: left allmulticast mode [ 196.390619][ T1100] bridge_slave_1: left promiscuous mode [ 196.406409][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.426822][ T1100] bridge_slave_0: left allmulticast mode [ 196.432671][ T1100] bridge_slave_0: left promiscuous mode [ 196.440668][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.508443][ T1100] veth1_macvtap: left promiscuous mode [ 196.519334][ T1100] veth0_macvtap: left promiscuous mode [ 196.520269][ T52] Bluetooth: hci3: command tx timeout [ 196.530405][ T1100] veth1_vlan: left promiscuous mode [ 196.530621][ T1100] veth0_vlan: left promiscuous mode [ 197.373646][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 197.417826][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 197.472750][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.519619][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.807250][ T1100] bond0 (unregistering): Released all slaves [ 198.075270][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.102705][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.112084][ T7865] bridge_slave_0: entered allmulticast mode [ 198.122342][ T7865] bridge_slave_0: entered promiscuous mode [ 198.148590][ T7930] netlink: 'syz.2.530': attribute type 21 has an invalid length. [ 198.168531][ T7930] netlink: 156 bytes leftover after parsing attributes in process `syz.2.530'. [ 198.186984][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.197258][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.206798][ T7865] bridge_slave_1: entered allmulticast mode [ 198.226571][ T7865] bridge_slave_1: entered promiscuous mode [ 198.333928][ T7940] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.529'. [ 198.422925][ T7935] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 198.439620][ T7935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.529'. [ 198.492906][ T7935] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 198.546860][ T7865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.565934][ T7934] veth0_macvtap: left promiscuous mode [ 198.591502][ T7934] macvtap0: entered allmulticast mode [ 198.609535][ T52] Bluetooth: hci3: command tx timeout [ 198.735322][ T7865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.923826][ T7865] team0: Port device team_slave_0 added [ 198.972393][ T7865] team0: Port device team_slave_1 added [ 199.111769][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.150577][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.239597][ T7865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.263849][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.282373][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.324552][ T7865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.358214][ T7962] netlink: 'syz.0.534': attribute type 27 has an invalid length. [ 199.370073][ T7962] netlink: 164 bytes leftover after parsing attributes in process `syz.0.534'. [ 199.455468][ T7865] hsr_slave_0: entered promiscuous mode [ 199.523283][ T7865] hsr_slave_1: entered promiscuous mode [ 199.554756][ T7865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.563620][ T7865] Cannot create hsr debugfs directory [ 200.690567][ T52] Bluetooth: hci3: command tx timeout [ 200.965129][ T7998] netlink: 'syz.2.539': attribute type 10 has an invalid length. [ 201.102825][ T7998] veth0_macvtap: left promiscuous mode [ 202.039795][ T7865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.064836][ T7865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.102550][ T7865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.136981][ T7865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.218673][ T8020] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.547'. [ 202.424499][ T7865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.484127][ T7865] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.553082][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.561040][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.580526][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.587740][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.759642][ T52] Bluetooth: hci3: command tx timeout [ 203.599791][ T8047] netlink: 164 bytes leftover after parsing attributes in process `syz.2.552'. [ 203.618223][ T7865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.302038][ T7865] veth0_vlan: entered promiscuous mode [ 204.455220][ T7865] veth1_vlan: entered promiscuous mode [ 204.628689][ T7865] veth0_macvtap: entered promiscuous mode [ 204.710451][ T7865] veth1_macvtap: entered promiscuous mode [ 205.156807][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.206388][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.230311][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.258432][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.289479][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.325250][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.337527][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.352397][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.363219][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.380240][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.395326][ T7865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.412787][ T7865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.439041][ T7865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.447958][ T7865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.743496][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.785347][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.938135][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.977826][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.150584][ T8104] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.560'. [ 206.348709][ T8111] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 206.384851][ T8111] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 206.411469][ T8114] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 206.442013][ T8111] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 206.513412][ T8111] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 206.680098][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 206.982310][ T8125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.564'. [ 207.496405][ T8142] netlink: 'syz.3.570': attribute type 10 has an invalid length. [ 207.632113][ T8142] veth0_macvtap: left promiscuous mode [ 209.281810][ T8168] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.574'. [ 209.424920][ T8174] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 209.607525][ T8180] netlink: 'syz.1.582': attribute type 27 has an invalid length. [ 209.676406][ T8174] team0: Port device wlan1 added [ 209.688952][ T8180] netlink: 164 bytes leftover after parsing attributes in process `syz.1.582'. [ 209.750932][ T8183] netlink: 160 bytes leftover after parsing attributes in process `syz.3.576'. [ 211.513064][ T8233] netlink: 'syz.1.583': attribute type 10 has an invalid length. [ 211.811142][ T8239] netlink: 'syz.3.587': attribute type 8 has an invalid length. [ 211.830807][ T8239] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.587'. [ 212.520835][ T8249] syzkaller0: entered promiscuous mode [ 212.528733][ T8249] syzkaller0: entered allmulticast mode [ 212.542960][ T8257] netlink: 'syz.0.589': attribute type 27 has an invalid length. [ 212.556702][ T8257] netlink: 164 bytes leftover after parsing attributes in process `syz.0.589'. [ 212.873804][ T8269] netlink: 'syz.0.593': attribute type 5 has an invalid length. [ 214.943028][ T8287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.598'. [ 216.492741][ T8328] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.604'. [ 216.527958][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 216.605831][ T8330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.606'. [ 216.745676][ T8330] netlink: 'syz.0.606': attribute type 4 has an invalid length. [ 216.755543][ T8330] netlink: 156 bytes leftover after parsing attributes in process `syz.0.606'. [ 216.843804][ T8328] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 216.892452][ T8330] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 216.949239][ T8328] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.604'. [ 217.006876][ T8328] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 217.080853][ T8327] netlink: 'syz.2.605': attribute type 10 has an invalid length. [ 217.220407][ T8327] team0: Device ipvlan1 failed to register rx_handler [ 217.549247][ T8343] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 217.556967][ T8343] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.609'. [ 217.792579][ T8336] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.605'. [ 217.803827][ T8340] netlink: 830 bytes leftover after parsing attributes in process `syz.2.605'. [ 217.825603][ T8343] netlink: 763 bytes leftover after parsing attributes in process `syz.3.609'. [ 218.255350][ T8368] netlink: 'syz.2.616': attribute type 39 has an invalid length. [ 218.408618][ T8368] hsr_slave_1 (unregistering): left promiscuous mode [ 218.570284][ T8381] netlink: 'syz.3.620': attribute type 21 has an invalid length. [ 218.578158][ T8381] netlink: 'syz.3.620': attribute type 19 has an invalid length. [ 218.592023][ T8381] netlink: 'syz.3.620': attribute type 21 has an invalid length. [ 218.600071][ T8381] netlink: 'syz.3.620': attribute type 19 has an invalid length. [ 219.006986][ T8390] sit0: entered allmulticast mode [ 219.100286][ T8390] sit0: entered promiscuous mode [ 219.980351][ T8417] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 220.004919][ T8417] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 220.253699][ T8427] __nla_validate_parse: 6 callbacks suppressed [ 220.253712][ T8427] netlink: 6 bytes leftover after parsing attributes in process `syz.2.632'. [ 220.272496][ T8427] netlink: 6 bytes leftover after parsing attributes in process `syz.2.632'. [ 220.446901][ T8432] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.634'. [ 220.462070][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 220.507453][ T8437] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.635'. [ 220.611160][ T8432] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.634'. [ 221.151554][ T8451] netlink: 164 bytes leftover after parsing attributes in process `syz.3.640'. [ 221.790689][ T8474] validate_nla: 7 callbacks suppressed [ 221.790788][ T8474] netlink: 'syz.0.646': attribute type 29 has an invalid length. [ 221.866999][ T8474] netlink: 'syz.0.646': attribute type 29 has an invalid length. [ 221.903461][ T8475] netlink: 'syz.0.646': attribute type 29 has an invalid length. [ 221.923149][ T8476] netlink: 'syz.0.646': attribute type 29 has an invalid length. [ 221.936016][ T8474] netlink: 'syz.0.646': attribute type 29 has an invalid length. [ 222.124927][ T8475] netlink: 'syz.0.646': attribute type 29 has an invalid length. [ 222.750800][ T8495] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.655'. [ 223.398550][ T8495] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.655'. [ 223.430292][ T8496] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.655'. [ 224.281411][ T8511] netlink: 'syz.0.661': attribute type 2 has an invalid length. [ 225.461766][ T8554] __nla_validate_parse: 4 callbacks suppressed [ 225.461784][ T8554] netlink: 14 bytes leftover after parsing attributes in process `syz.2.672'. [ 225.669147][ T8556] can: request_module (can-proto-5) failed. [ 226.405219][ T8576] netlink: 'syz.1.678': attribute type 10 has an invalid length. [ 226.464183][ T8576] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.678'. [ 226.528606][ T8582] syzkaller0: entered promiscuous mode [ 226.536401][ T8582] syzkaller0: entered allmulticast mode [ 226.548627][ T8576] netlink: 830 bytes leftover after parsing attributes in process `syz.1.678'. [ 226.570128][ T8585] netlink: 13822 bytes leftover after parsing attributes in process `syz.2.681'. [ 226.757247][ T8594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 226.782475][ T8594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 226.811316][ T8595] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 229.836226][ T8628] netlink: 'syz.1.695': attribute type 8 has an invalid length. [ 229.844272][ T8628] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.695'. [ 229.960240][ T8634] netlink: 'syz.1.696': attribute type 5 has an invalid length. [ 231.054953][ T8658] syzkaller0: entered promiscuous mode [ 231.073871][ T8658] syzkaller0: entered allmulticast mode [ 232.073005][ T8683] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 232.151568][ T8683] macvlan1: entered allmulticast mode [ 232.262189][ T8686] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 232.287240][ T8686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.710'. [ 232.322468][ T8686] batman_adv: batadv0: Adding interface: virt_wifi0 [ 232.338954][ T8686] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.370341][ T8686] batman_adv: batadv0: Interface activated: virt_wifi0 [ 232.384709][ T8689] netlink: 'syz.2.711': attribute type 10 has an invalid length. [ 232.470248][ T8689] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.490592][ T8689] bond0: (slave team0): Enslaving as an active interface with an up link [ 232.984500][ T8704] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 233.028087][ T8704] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 233.176616][ T8713] netlink: 76 bytes leftover after parsing attributes in process `syz.0.719'. [ 233.232288][ T8713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.719'. [ 233.645550][ T8722] netlink: 'syz.0.722': attribute type 33 has an invalid length. [ 233.685393][ T8722] netlink: 152 bytes leftover after parsing attributes in process `syz.0.722'. [ 233.728932][ T8722] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 233.750256][ T8730] Driver unsupported XDP return value 0 on prog (id 609) dev N/A, expect packet loss! [ 234.779056][ T8762] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.735'. [ 234.793280][ T8762] openvswitch: netlink: Key type 29 is not supported [ 234.793661][ T8763] netlink: 'syz.2.734': attribute type 10 has an invalid length. [ 234.852041][ T8763] team0: Device wg1 is of different type [ 235.995818][ T8785] netlink: 10 bytes leftover after parsing attributes in process `syz.1.741'. [ 236.038242][ T8788] netlink: 10 bytes leftover after parsing attributes in process `syz.2.742'. [ 236.314127][ T8791] netlink: 'syz.0.743': attribute type 12 has an invalid length. [ 236.341176][ T8791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.743'. [ 238.052607][ T8814] sock: sock_set_timeout: `syz.1.749' (pid 8814) tries to set negative timeout [ 238.645101][ T8830] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.754'. [ 238.709335][ T8830] netlink: 132 bytes leftover after parsing attributes in process `syz.1.754'. [ 239.993297][ T8871] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.764'. [ 240.449417][ T8883] netlink: 14 bytes leftover after parsing attributes in process `syz.2.767'. [ 240.469427][ T8883] netlink: get zone limit has 4 unknown bytes [ 240.700958][ T8886] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.768'. [ 240.870177][ T8885] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.768'. [ 241.057883][ T8885] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 241.092903][ T8885] CPU: 1 PID: 8885 Comm: syz.0.768 Not tainted syzkaller #0 [ 241.100282][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 241.110411][ T8885] Call Trace: [ 241.113827][ T8885] [ 241.116800][ T8885] dump_stack_lvl+0x18c/0x250 [ 241.121517][ T8885] ? show_regs_print_info+0x20/0x20 [ 241.126778][ T8885] ? load_image+0x420/0x420 [ 241.131325][ T8885] sysfs_warn_dup+0x8e/0xa0 [ 241.135861][ T8885] sysfs_do_create_link_sd+0xc0/0x110 [ 241.141290][ T8885] device_add_class_symlinks+0x1cf/0x240 [ 241.146954][ T8885] device_add+0x4f9/0xc40 [ 241.151319][ T8885] wiphy_register+0x1d99/0x2ac0 [ 241.156234][ T8885] ? cfg80211_event_work+0x40/0x40 [ 241.161376][ T8885] ? minstrel_ht_alloc+0x88a/0x990 [ 241.166547][ T8885] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 241.172651][ T8885] ieee80211_register_hw+0x2dd8/0x3b30 [ 241.178148][ T8885] ? ieee80211_register_hw+0xf51/0x3b30 [ 241.183724][ T8885] ? ieee80211_tasklet_handler+0x20/0x20 [ 241.189389][ T8885] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 241.195344][ T8885] ? __debug_object_init+0xec/0x450 [ 241.200585][ T8885] ? __asan_memset+0x22/0x40 [ 241.205220][ T8885] ? __hrtimer_init+0x189/0x270 [ 241.210118][ T8885] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 241.215888][ T8885] ? mac80211_hwsim_free+0x220/0x220 [ 241.221204][ T8885] ? rcu_is_watching+0x15/0xb0 [ 241.225997][ T8885] ? kstrndup+0xbd/0x140 [ 241.230278][ T8885] hwsim_new_radio_nl+0xdad/0x1a70 [ 241.235422][ T8885] ? __nla_validate+0x50/0x50 [ 241.240139][ T8885] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 241.246499][ T8885] ? __nla_parse+0x40/0x50 [ 241.250956][ T8885] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 241.257434][ T8885] genl_family_rcv_msg_doit+0x21a/0x310 [ 241.263018][ T8885] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 241.268947][ T8885] ? bpf_lsm_capable+0x9/0x10 [ 241.273654][ T8885] ? security_capable+0x89/0xb0 [ 241.278539][ T8885] genl_rcv_msg+0x611/0x7a0 [ 241.283071][ T8885] ? genl_bind+0x360/0x360 [ 241.287515][ T8885] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 241.293881][ T8885] netlink_rcv_skb+0x235/0x4c0 [ 241.298680][ T8885] ? genl_bind+0x360/0x360 [ 241.303126][ T8885] ? netlink_ack+0x1160/0x1160 [ 241.307935][ T8885] ? __lock_acquire+0x7d80/0x7d80 [ 241.312992][ T8885] ? down_read+0x1ac/0x2e0 [ 241.317437][ T8885] genl_rcv+0x28/0x40 [ 241.321477][ T8885] netlink_unicast+0x7b1/0x930 [ 241.326327][ T8885] netlink_sendmsg+0x8d0/0xbf0 [ 241.331124][ T8885] ? netlink_getsockopt+0x590/0x590 [ 241.336351][ T8885] ? apparmor_socket_sendmsg+0x8e/0x330 [ 241.341925][ T8885] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 241.347237][ T8885] ? security_socket_sendmsg+0x80/0xa0 [ 241.352715][ T8885] ? netlink_getsockopt+0x590/0x590 [ 241.357943][ T8885] ____sys_sendmsg+0x61b/0x980 [ 241.362742][ T8885] ? __asan_memset+0x22/0x40 [ 241.367388][ T8885] ? __sys_sendmsg_sock+0x30/0x30 [ 241.372437][ T8885] ? __import_iovec+0x5f2/0x850 [ 241.377358][ T8885] ? import_iovec+0x73/0xa0 [ 241.381896][ T8885] ___sys_sendmsg+0x2a6/0x360 [ 241.386635][ T8885] ? __sys_sendmsg+0x2b0/0x2b0 [ 241.391446][ T8885] ? trace_call_bpf+0xc3/0x6c0 [ 241.396283][ T8885] __se_sys_sendmsg+0x1d0/0x2c0 [ 241.401165][ T8885] ? perf_trace_preemptirq_template+0x269/0x330 [ 241.407529][ T8885] ? __x64_sys_sendmsg+0x80/0x80 [ 241.412520][ T8885] ? lockdep_hardirqs_on+0x98/0x150 [ 241.417761][ T8885] do_syscall_64+0x55/0xb0 [ 241.422207][ T8885] ? clear_bhb_loop+0x40/0x90 [ 241.426908][ T8885] ? clear_bhb_loop+0x40/0x90 [ 241.431610][ T8885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.437529][ T8885] RIP: 0033:0x7fccea79de99 [ 241.442080][ T8885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.461714][ T8885] RSP: 002b:00007fcceb6d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.470154][ T8885] RAX: ffffffffffffffda RBX: 00007fcceaa25fa0 RCX: 00007fccea79de99 [ 241.478147][ T8885] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 241.486135][ T8885] RBP: 00007fccea833eaf R08: 0000000000000000 R09: 0000000000000000 [ 241.494219][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.502223][ T8885] R13: 00007fcceaa26038 R14: 00007fcceaa25fa0 R15: 00007fff0cbf97e8 [ 241.510233][ T8885] [ 241.669080][ T8903] netlink: 'syz.2.772': attribute type 5 has an invalid length. [ 243.460014][ T8942] netlink: 'syz.1.783': attribute type 1 has an invalid length. [ 243.467982][ T8942] netlink: 152 bytes leftover after parsing attributes in process `syz.1.783'. [ 243.756652][ T8950] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.784'. [ 243.985696][ T8950] netlink: 'syz.2.784': attribute type 39 has an invalid length. [ 244.033456][ T8950] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.784'. [ 244.064450][ T8950] netlink: zone id is out of range [ 244.074485][ T8950] netlink: zone id is out of range [ 244.093218][ T8950] netlink: zone id is out of range [ 244.105488][ T8950] netlink: zone id is out of range [ 244.114775][ T8950] netlink: del zone limit has 8 unknown bytes [ 244.165944][ T8955] netlink: 'syz.0.786': attribute type 9 has an invalid length. [ 244.177353][ T8955] netlink: 399 bytes leftover after parsing attributes in process `syz.0.786'. [ 244.729199][ T8963] netlink: 156 bytes leftover after parsing attributes in process `syz.1.788'. [ 244.876484][ T8963] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.788'. [ 245.256166][ T8975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.792'. [ 245.364626][ T8975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.792'. [ 245.665149][ T8968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.792'. [ 245.689579][ T8974] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 245.706264][ T8974] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 245.732896][ T8973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.792'. [ 246.833438][ T9008] netlink: 'syz.2.798': attribute type 10 has an invalid length. [ 246.867583][ T9008] netlink: 55 bytes leftover after parsing attributes in process `syz.2.798'. [ 247.345607][ T9013] syzkaller0: entered promiscuous mode [ 247.359046][ T9013] syzkaller0: entered allmulticast mode [ 247.655084][ T9023] netlink: 'syz.1.803': attribute type 27 has an invalid length. [ 247.921415][ T9029] netlink: 'syz.2.804': attribute type 27 has an invalid length. [ 249.795618][ T9038] __nla_validate_parse: 2 callbacks suppressed [ 249.795644][ T9038] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.806'. [ 251.117124][ T9052] netlink: 'syz.3.811': attribute type 12 has an invalid length. [ 251.189486][ T9052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.811'. [ 251.680363][ T9061] netlink: 'syz.2.813': attribute type 10 has an invalid length. [ 251.790156][ T9061] netlink: 2 bytes leftover after parsing attributes in process `syz.2.813'. [ 251.839462][ T9061] hsr0: entered promiscuous mode [ 251.847026][ T9061] bridge0: port 3(hsr0) entered blocking state [ 251.922466][ T9061] bridge0: port 3(hsr0) entered disabled state [ 252.033518][ T9061] hsr0: entered allmulticast mode [ 252.053317][ T9061] hsr_slave_0: entered allmulticast mode [ 252.085508][ T9061] bridge0: port 3(hsr0) entered blocking state [ 252.092260][ T9061] bridge0: port 3(hsr0) entered forwarding state [ 252.362426][ T9065] netlink: 'syz.0.814': attribute type 27 has an invalid length. [ 252.384738][ T9065] netlink: 164 bytes leftover after parsing attributes in process `syz.0.814'. [ 253.235870][ T9082] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.819'. [ 253.364021][ T9080] netlink: 'syz.3.827': attribute type 27 has an invalid length. [ 253.379304][ T9080] netlink: 164 bytes leftover after parsing attributes in process `syz.3.827'. [ 254.181129][ T9103] netlink: 'syz.0.825': attribute type 10 has an invalid length. [ 254.252173][ T9115] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.825'. [ 254.291909][ T9115] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 255.062611][ T9134] netlink: 'syz.3.833': attribute type 21 has an invalid length. [ 255.127375][ T9134] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.188118][ T9134] IPv6: Can't replace route, no match found [ 255.391993][ T9138] netlink: 'syz.0.834': attribute type 21 has an invalid length. [ 255.438385][ T9138] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.461797][ T9138] IPv6: Can't replace route, no match found [ 255.495840][ T9131] netlink: 'syz.1.831': attribute type 27 has an invalid length. [ 255.531225][ T9131] netlink: 164 bytes leftover after parsing attributes in process `syz.1.831'. [ 255.553021][ T9138] netlink: 'syz.0.834': attribute type 10 has an invalid length. [ 255.779163][ T9138] team0: Device wg1 is of different type [ 255.806181][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.814241][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.905582][ T9152] netlink: 'syz.1.839': attribute type 39 has an invalid length. [ 255.919632][ T9150] netlink: 'syz.2.838': attribute type 27 has an invalid length. [ 255.928060][ T9150] netlink: 164 bytes leftover after parsing attributes in process `syz.2.838'. [ 256.148005][ T9159] netlink: 'syz.0.840': attribute type 10 has an invalid length. [ 256.170623][ T9159] 8021q: adding VLAN 0 to HW filter on device .` [ 256.184605][ T9159] team0: Port device .` added [ 256.295591][ T9164] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.839'. [ 256.327877][ T9164] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.839'. [ 256.451781][ T9156] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.839'. [ 256.548142][ T9152] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.839'. [ 257.522691][ T9187] validate_nla: 2 callbacks suppressed [ 257.522744][ T9187] netlink: 'syz.0.847': attribute type 27 has an invalid length. [ 257.565571][ T9187] netlink: 164 bytes leftover after parsing attributes in process `syz.0.847'. [ 257.687693][ T9204] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.852'. [ 257.891371][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 258.416099][ T9214] netlink: 'syz.0.855': attribute type 6 has an invalid length. [ 258.427290][ T9214] netlink: 164 bytes leftover after parsing attributes in process `syz.0.855'. [ 258.498474][ T9217] netlink: 164960 bytes leftover after parsing attributes in process `syz.0.855'. [ 258.956884][ T9220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.983194][ T9223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.661048][ T9236] netlink: 'syz.2.862': attribute type 27 has an invalid length. [ 260.689504][ T9236] __nla_validate_parse: 3 callbacks suppressed [ 260.689540][ T9236] netlink: 164 bytes leftover after parsing attributes in process `syz.2.862'. [ 260.778285][ T9244] netlink: 'syz.3.865': attribute type 10 has an invalid length. [ 260.861928][ T9244] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.865'. [ 260.872796][ T9244] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 261.271103][ T9268] netlink: 168 bytes leftover after parsing attributes in process `syz.0.870'. [ 261.384454][ T9272] netlink: 'syz.2.871': attribute type 29 has an invalid length. [ 261.396060][ T9272] netlink: 'syz.2.871': attribute type 29 has an invalid length. [ 261.683210][ T9285] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.876'. [ 261.826775][ T9279] netlink: 'syz.3.875': attribute type 27 has an invalid length. [ 261.851803][ T9279] netlink: 164 bytes leftover after parsing attributes in process `syz.3.875'. [ 262.073407][ T9289] netlink: 'syz.1.877': attribute type 10 has an invalid length. [ 262.114120][ T9292] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.877'. [ 262.209004][ T9292] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 263.069137][ T9298] netlink: 'syz.0.879': attribute type 153 has an invalid length. [ 263.142156][ T9298] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.879'. [ 264.325629][ T9310] netlink: 'syz.1.881': attribute type 29 has an invalid length. [ 264.338683][ T9310] netlink: 'syz.1.881': attribute type 29 has an invalid length. [ 264.399716][ T9310] netlink: 'syz.1.881': attribute type 10 has an invalid length. [ 265.176125][ T9324] netlink: 'syz.0.886': attribute type 27 has an invalid length. [ 265.197854][ T9324] netlink: 164 bytes leftover after parsing attributes in process `syz.0.886'. [ 266.033790][ T9354] netlink: 'syz.0.894': attribute type 29 has an invalid length. [ 266.348656][ T9354] netlink: 'syz.0.894': attribute type 29 has an invalid length. [ 266.455176][ T9354] netlink: 'syz.0.894': attribute type 10 has an invalid length. [ 266.500766][ T9354] team0: Port device geneve1 added [ 266.634906][ T9364] netlink: 'syz.0.898': attribute type 28 has an invalid length. [ 266.658387][ T9364] netlink: 'syz.0.898': attribute type 29 has an invalid length. [ 266.697048][ T9364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.898'. [ 267.491324][ T9369] netlink: 164 bytes leftover after parsing attributes in process `syz.2.899'. [ 268.645664][ T9412] syzkaller0: entered promiscuous mode [ 268.672866][ T9412] syzkaller0: entered allmulticast mode [ 268.702874][ T9407] validate_nla: 2 callbacks suppressed [ 268.702913][ T9407] netlink: 'syz.3.913': attribute type 27 has an invalid length. [ 268.742743][ T9407] netlink: 164 bytes leftover after parsing attributes in process `syz.3.913'. [ 268.989786][ T9424] delete_channel: no stack [ 269.002752][ T9424] delete_channel: no stack [ 269.106417][ T9427] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.919'. [ 269.343217][ T9434] netlink: 'syz.3.921': attribute type 39 has an invalid length. [ 269.698798][ T9443] netlink: 'syz.2.923': attribute type 9 has an invalid length. [ 269.715385][ T9443] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.923'. [ 270.015379][ T9453] netlink: 830 bytes leftover after parsing attributes in process `syz.0.925'. [ 270.437342][ T9455] netlink: 'syz.1.926': attribute type 27 has an invalid length. [ 270.446345][ T9455] netlink: 164 bytes leftover after parsing attributes in process `syz.1.926'. [ 271.647812][ T9485] netlink: 'syz.2.932': attribute type 2 has an invalid length. [ 272.125931][ T9499] netlink: 'syz.1.935': attribute type 39 has an invalid length. [ 273.239047][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 275.013642][ T9504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.936'. [ 275.123451][ T9504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.936'. [ 275.228304][ T9510] netlink: 'syz.0.937': attribute type 9 has an invalid length. [ 275.257252][ T9510] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.937'. [ 275.284813][ T9508] netlink: 'syz.3.938': attribute type 27 has an invalid length. [ 275.308961][ T9508] netlink: 164 bytes leftover after parsing attributes in process `syz.3.938'. [ 275.795935][ T9521] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.942'. [ 276.065171][ T9524] netlink: 830 bytes leftover after parsing attributes in process `syz.1.940'. [ 276.255078][ T9536] netlink: 'syz.3.946': attribute type 11 has an invalid length. [ 276.263987][ T9536] netlink: 176 bytes leftover after parsing attributes in process `syz.3.946'. [ 276.677029][ T9541] netlink: 'syz.2.947': attribute type 3 has an invalid length. [ 276.693946][ T9541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.947'. [ 277.004433][ T9555] netlink: 'syz.1.951': attribute type 9 has an invalid length. [ 277.029550][ T9555] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.951'. [ 277.178085][ T9553] netlink: 'syz.2.950': attribute type 27 has an invalid length. [ 277.186772][ T9553] netlink: 164 bytes leftover after parsing attributes in process `syz.2.950'. [ 277.357702][ T9562] netlink: 'syz.1.952': attribute type 9 has an invalid length. [ 279.242006][ T9591] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 279.275565][ T9591] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 279.342662][ T9592] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 279.350470][ T9592] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 280.474686][ T9619] netlink: 'syz.2.966': attribute type 153 has an invalid length. [ 280.491816][ T9619] __nla_validate_parse: 4 callbacks suppressed [ 280.491878][ T9619] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.966'. [ 281.838719][ T9657] netlink: 14 bytes leftover after parsing attributes in process `syz.0.978'. [ 281.911177][ T9663] netlink: 'syz.3.980': attribute type 8 has an invalid length. [ 281.923268][ T9663] netlink: 'syz.3.980': attribute type 3 has an invalid length. [ 281.931463][ T9663] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.980'. [ 281.977810][ T9657] team0: Port device .` removed [ 282.005314][ T9657] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.043986][ T9657] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.072722][ T9657] .` (unregistering): Released all slaves [ 282.576957][ T9680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.983'. [ 284.755546][ T9684] netlink: 'syz.1.985': attribute type 21 has an invalid length. [ 284.790814][ T9684] netlink: 164 bytes leftover after parsing attributes in process `syz.1.985'. [ 285.294524][ T9701] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.991'. [ 285.820375][ T9713] netlink: 'syz.1.993': attribute type 2 has an invalid length. [ 286.299155][ T9722] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.995'. [ 286.344656][ T9722] netlink: 63355 bytes leftover after parsing attributes in process `syz.3.995'. [ 286.745015][ T9728] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.997'. [ 286.945905][ T9728] netlink: 'syz.3.997': attribute type 1 has an invalid length. [ 286.989049][ T9728] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.997'. [ 287.860361][ T9753] syzkaller0: entered promiscuous mode [ 287.881504][ T9753] syzkaller0: entered allmulticast mode [ 287.929384][ T9751] netlink: set zone limit has 8 unknown bytes [ 290.021356][ T9763] netlink: 'syz.2.1005': attribute type 2 has an invalid length. [ 290.779209][ T9791] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 290.800744][ T9791] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 291.450363][ T9796] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 291.489597][ T9796] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 292.818221][ T9817] netlink: 'syz.0.1017': attribute type 2 has an invalid length. [ 293.268129][ T9842] netlink: 'syz.3.1023': attribute type 3 has an invalid length. [ 293.286581][ T9842] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1023'. [ 293.381925][ T9851] sock: sock_set_timeout: `syz.0.1025' (pid 9851) tries to set negative timeout [ 293.392676][ T9852] sock: sock_set_timeout: `syz.0.1025' (pid 9852) tries to set negative timeout [ 294.605391][ T9874] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.1030'. [ 295.983293][ T9940] netlink: 'syz.3.1031': attribute type 2 has an invalid length. [ 296.224284][ T9931] syzkaller0: entered promiscuous mode [ 296.245857][ T9931] syzkaller0: entered allmulticast mode [ 298.910825][ T9970] syzkaller0: entered promiscuous mode [ 298.916339][ T9970] syzkaller0: entered allmulticast mode [ 299.010325][ T9977] syzkaller0: entered promiscuous mode [ 299.016005][ T9977] syzkaller0: entered allmulticast mode [ 300.785900][ T9987] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1045'. [ 300.796400][ T9988] netlink: 'syz.3.1045': attribute type 4 has an invalid length. [ 300.804531][ T9988] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1045'. [ 302.688176][T10001] netlink: 'syz.2.1049': attribute type 10 has an invalid length. [ 302.702258][T10001] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1049'. [ 302.713913][T10006] netlink: 64783 bytes leftover after parsing attributes in process `syz.3.1051'. [ 303.217523][T10022] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1056'. [ 303.404675][T10026] netlink: 'syz.1.1055': attribute type 27 has an invalid length. [ 303.431346][T10026] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1055'. [ 304.945618][T10055] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1064'. [ 305.404300][T10058] netlink: 'syz.3.1066': attribute type 27 has an invalid length. [ 305.413187][T10058] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1066'. [ 306.452378][T10081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1073'. [ 306.461816][T10081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1073'. [ 306.472732][T10081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1073'. [ 306.512520][T10081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1073'. [ 307.310769][T10111] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1079'. [ 307.486225][T10113] netlink: 'syz.0.1081': attribute type 10 has an invalid length. [ 307.547019][T10113] team0: Device ipvlan1 failed to register rx_handler [ 307.714723][T10116] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1082'. [ 307.784013][T10119] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1083'. [ 308.322121][ T5784] Bluetooth: hci2: ISO packet for unknown connection handle 8 [ 309.099852][T10129] netlink: 171476 bytes leftover after parsing attributes in process `syz.3.1086'. [ 309.218449][T10129] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 309.274055][T10129] ieee80211 !!: Failed to add default virtual iface [ 309.412955][T10149] netlink: 'syz.3.1093': attribute type 4 has an invalid length. [ 309.431188][T10149] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1093'. [ 309.444598][T10149] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 309.460937][T10147] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1092'. [ 310.002818][T10163] syzkaller0: entered promiscuous mode [ 310.031217][T10163] syzkaller0: entered allmulticast mode [ 312.357918][T10189] netlink: 'syz.1.1105': attribute type 10 has an invalid length. [ 312.383016][T10189] __nla_validate_parse: 2 callbacks suppressed [ 312.383036][T10189] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1105'. [ 312.538705][T10187] netlink: 'syz.0.1103': attribute type 27 has an invalid length. [ 312.553172][T10187] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1103'. [ 312.823736][T10197] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1107'. [ 312.861169][T10200] netlink: 'syz.2.1108': attribute type 10 has an invalid length. [ 312.872478][T10200] hsr0: left allmulticast mode [ 312.877386][T10200] hsr_slave_0: left allmulticast mode [ 312.884607][T10200] bridge0: port 3(hsr0) entered disabled state [ 312.954672][T10200] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 316.223629][T10243] netlink: 'syz.0.1117': attribute type 27 has an invalid length. [ 316.233950][T10243] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1117'. [ 317.133298][T10245] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1119'. [ 317.259212][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.269153][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.293645][T10252] netlink: 'syz.1.1118': attribute type 17 has an invalid length. [ 317.304252][T10252] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1118'. [ 317.426797][T10256] netlink: 171996 bytes leftover after parsing attributes in process `syz.3.1120'. [ 319.329421][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 320.426149][T10256] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 320.460372][T10256] CPU: 0 PID: 10256 Comm: syz.3.1120 Not tainted syzkaller #0 [ 320.467930][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 320.478061][T10256] Call Trace: [ 320.481431][T10256] [ 320.484415][T10256] dump_stack_lvl+0x18c/0x250 [ 320.489165][T10256] ? show_regs_print_info+0x20/0x20 [ 320.494467][T10256] ? load_image+0x420/0x420 [ 320.499051][T10256] sysfs_warn_dup+0x8e/0xa0 [ 320.503615][T10256] sysfs_do_create_link_sd+0xc0/0x110 [ 320.509044][T10256] device_add_class_symlinks+0x1cf/0x240 [ 320.514750][T10256] device_add+0x4f9/0xc40 [ 320.519147][T10256] wiphy_register+0x1d99/0x2ac0 [ 320.524080][T10256] ? cfg80211_event_work+0x40/0x40 [ 320.529266][T10256] ? minstrel_ht_alloc+0x88a/0x990 [ 320.534452][T10256] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 320.540583][T10256] ieee80211_register_hw+0x2dd8/0x3b30 [ 320.546149][T10256] ? ieee80211_register_hw+0xf51/0x3b30 [ 320.551780][T10256] ? ieee80211_tasklet_handler+0x20/0x20 [ 320.557478][T10256] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 320.563437][T10256] ? __debug_object_init+0xec/0x450 [ 320.568656][T10256] ? __asan_memset+0x22/0x40 [ 320.573275][T10256] ? __hrtimer_init+0x189/0x270 [ 320.578147][T10256] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 320.583930][T10256] ? mac80211_hwsim_free+0x220/0x220 [ 320.589282][T10256] ? rcu_is_watching+0x15/0xb0 [ 320.594116][T10256] ? kstrndup+0xbd/0x140 [ 320.598436][T10256] hwsim_new_radio_nl+0xdad/0x1a70 [ 320.603711][T10256] ? __nla_validate+0x50/0x50 [ 320.608477][T10256] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 320.614884][T10256] ? __nla_parse+0x40/0x50 [ 320.619393][T10256] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 320.625761][T10256] genl_family_rcv_msg_doit+0x21a/0x310 [ 320.631341][T10256] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 320.637255][T10256] ? bpf_lsm_capable+0x9/0x10 [ 320.641974][T10256] ? security_capable+0x89/0xb0 [ 320.646850][T10256] genl_rcv_msg+0x611/0x7a0 [ 320.651398][T10256] ? genl_bind+0x360/0x360 [ 320.655863][T10256] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 320.662217][T10256] ? perf_trace_lock+0x303/0x3b0 [ 320.667196][T10256] ? __kasan_kmalloc_large+0x8b/0xa0 [ 320.672569][T10256] netlink_rcv_skb+0x235/0x4c0 [ 320.677406][T10256] ? genl_bind+0x360/0x360 [ 320.681879][T10256] ? netlink_ack+0x1160/0x1160 [ 320.686734][T10256] ? __lock_acquire+0x7d80/0x7d80 [ 320.691823][T10256] ? down_read+0x1ac/0x2e0 [ 320.696286][T10256] genl_rcv+0x28/0x40 [ 320.700289][T10256] netlink_unicast+0x7b1/0x930 [ 320.705103][T10256] netlink_sendmsg+0x8d0/0xbf0 [ 320.709910][T10256] ? netlink_getsockopt+0x590/0x590 [ 320.715172][T10256] ? apparmor_socket_sendmsg+0x8e/0x330 [ 320.720794][T10256] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 320.726131][T10256] ? security_socket_sendmsg+0x80/0xa0 [ 320.731633][T10256] ? netlink_getsockopt+0x590/0x590 [ 320.736858][T10256] ____sys_sendmsg+0x61b/0x980 [ 320.741679][T10256] ? __asan_memset+0x22/0x40 [ 320.746308][T10256] ? __sys_sendmsg_sock+0x30/0x30 [ 320.751387][T10256] ? __import_iovec+0x5f2/0x850 [ 320.756316][T10256] ? import_iovec+0x73/0xa0 [ 320.760888][T10256] ___sys_sendmsg+0x2a6/0x360 [ 320.765624][T10256] ? __sys_sendmsg+0x2b0/0x2b0 [ 320.770503][T10256] __se_sys_sendmsg+0x1d0/0x2c0 [ 320.775423][T10256] ? __x64_sys_sendmsg+0x80/0x80 [ 320.777024][T10274] netlink: 'syz.0.1124': attribute type 29 has an invalid length. [ 320.780414][T10256] ? lockdep_hardirqs_on+0x98/0x150 [ 320.780509][T10256] do_syscall_64+0x55/0xb0 [ 320.780533][T10256] ? clear_bhb_loop+0x40/0x90 [ 320.802767][T10256] ? clear_bhb_loop+0x40/0x90 [ 320.807492][T10256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.813434][T10256] RIP: 0033:0x7fbaa699de99 [ 320.817903][T10256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.837571][T10256] RSP: 002b:00007fbaa77ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.846046][T10256] RAX: ffffffffffffffda RBX: 00007fbaa6c26090 RCX: 00007fbaa699de99 [ 320.854067][T10256] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 320.862081][T10256] RBP: 00007fbaa6a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 320.870075][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.878064][T10256] R13: 00007fbaa6c26128 R14: 00007fbaa6c26090 R15: 00007ffd275590b8 [ 320.886069][T10256] [ 320.892735][T10260] netlink: 'syz.2.1121': attribute type 10 has an invalid length. [ 320.962958][T10260] veth0_vlan: left promiscuous mode [ 320.984379][T10260] veth0_vlan: entered promiscuous mode [ 321.011976][T10260] team0: Device veth0_vlan failed to register rx_handler [ 321.088057][T10274] netlink: 'syz.0.1124': attribute type 29 has an invalid length. [ 321.108428][T10275] netlink: 'syz.0.1124': attribute type 29 has an invalid length. [ 321.160369][T10271] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1124'. [ 321.229949][T10284] netlink: 'syz.2.1126': attribute type 10 has an invalid length. [ 321.406794][T10284] team0: Port device geneve1 added [ 321.516982][T10284] syz.2.1126 (10284) used greatest stack depth: 18664 bytes left [ 322.172816][T10308] : port 1(syz_tun) entered blocking state [ 322.211348][T10308] : port 1(syz_tun) entered disabled state [ 322.233245][T10308] syz_tun: entered allmulticast mode [ 322.648503][T10308] syz_tun: entered promiscuous mode [ 322.829981][T10319] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1138'. [ 323.652074][T10325] netlink: 'syz.0.1140': attribute type 27 has an invalid length. [ 323.688393][T10325] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1140'. [ 324.292643][T10355] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1148'. [ 324.664187][T10361] syzkaller0: entered promiscuous mode [ 324.669898][T10361] syzkaller0: entered allmulticast mode [ 325.190623][T10370] netlink: 'syz.3.1152': attribute type 27 has an invalid length. [ 325.210432][T10370] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1152'. [ 327.059224][T10372] netlink: 'syz.2.1153': attribute type 4 has an invalid length. [ 327.067025][T10372] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1153'. [ 327.099423][T10373] netlink: 'syz.2.1153': attribute type 4 has an invalid length. [ 327.107543][T10373] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1153'. [ 327.137816][T10365] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1151'. [ 327.152258][T10365] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.1151'. [ 327.575306][T10396] netlink: 'syz.3.1159': attribute type 21 has an invalid length. [ 327.829673][T10407] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1162'. [ 327.949168][T10409] netlink: 'syz.1.1163': attribute type 27 has an invalid length. [ 327.957684][T10409] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1163'. [ 328.051440][T10417] netlink: 'syz.1.1165': attribute type 9 has an invalid length. [ 328.062375][T10417] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1165'. [ 328.086300][T10417] netlink: 'syz.1.1165': attribute type 3 has an invalid length. [ 328.108055][T10417] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.1165'. [ 328.521500][T10433] netlink: 'syz.3.1171': attribute type 2 has an invalid length. [ 328.529944][T10433] netlink: 'syz.3.1171': attribute type 1 has an invalid length. [ 328.539397][T10433] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1171'. [ 328.808076][T10436] netlink: 'syz.3.1171': attribute type 21 has an invalid length. [ 328.842319][T10433] netlink: 'syz.3.1171': attribute type 4 has an invalid length. [ 328.872463][T10436] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1171'. [ 328.886331][T10433] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1171'. [ 329.353692][T10443] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1174'. [ 330.384620][T10449] : port 1(syz_tun) entered blocking state [ 330.459619][T10449] : port 1(syz_tun) entered disabled state [ 330.489153][T10449] syz_tun: entered allmulticast mode [ 330.497089][T10449] syz_tun: entered promiscuous mode [ 331.059367][T10440] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1173'. [ 331.528636][T10472] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.1181'. [ 331.750603][T10481] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1184'. [ 333.549687][T10497] : port 1(syz_tun) entered blocking state [ 333.556947][T10497] : port 1(syz_tun) entered disabled state [ 333.563857][T10497] syz_tun: entered allmulticast mode [ 333.571290][T10497] syz_tun: entered promiscuous mode [ 333.629418][T10504] validate_nla: 13 callbacks suppressed [ 333.629439][T10504] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 333.793156][T10506] __nla_validate_parse: 1 callbacks suppressed [ 333.793175][T10506] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1192'. [ 333.836353][T10509] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1193'. [ 333.856719][T10509] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.1193'. [ 334.093720][T10518] netlink: 'syz.1.1195': attribute type 9 has an invalid length. [ 334.102509][T10518] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1195'. [ 336.571783][T10538] netlink: 3055 bytes leftover after parsing attributes in process `syz.2.1202'. [ 336.706281][T10538] netlink: 3055 bytes leftover after parsing attributes in process `syz.2.1202'. [ 337.365120][T10555] netlink: 'syz.1.1206': attribute type 1 has an invalid length. [ 337.611974][T10565] netlink: 'syz.2.1209': attribute type 39 has an invalid length. [ 337.620383][T10565] macvlan0: entered promiscuous mode [ 337.625955][T10565] macvlan0: entered allmulticast mode [ 337.632265][T10565] veth1_vlan: entered allmulticast mode [ 337.755656][T10569] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1211'. [ 338.638205][T10598] netlink: 'syz.2.1219': attribute type 5 has an invalid length. [ 338.659952][T10598] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1219'. [ 339.074778][T10603] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1221'. [ 341.470974][T10642] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1232'. [ 341.566627][T10642] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1232'. [ 341.670212][T10642] bond0: (slave bond_slave_0): Releasing backup interface [ 341.746663][T10642] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 342.924473][T10662] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 342.937226][T10662] pim6reg0: ignored: set checksum disabled [ 342.956777][T10667] netlink: 'syz.2.1239': attribute type 9 has an invalid length. [ 342.964943][T10667] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1239'. [ 343.867047][T10680] netlink: 'syz.2.1242': attribute type 10 has an invalid length. [ 343.876641][T10680] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1242'. [ 343.892967][T10680] bridge0: port 3(hsr0) entered blocking state [ 343.906034][T10680] bridge0: port 3(hsr0) entered disabled state [ 343.923196][T10680] hsr0: entered allmulticast mode [ 343.929139][T10680] hsr_slave_0: entered allmulticast mode [ 344.020064][T10680] bridge0: port 3(hsr0) entered blocking state [ 344.028038][T10680] bridge0: port 3(hsr0) entered forwarding state [ 344.052225][T10689] netlink: 'syz.3.1245': attribute type 16 has an invalid length. [ 344.068597][T10689] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1245'. [ 345.649121][T10723] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1257'. [ 346.179059][T10743] netlink: 'syz.0.1264': attribute type 21 has an invalid length. [ 346.187179][T10743] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1264'. [ 346.214684][T10743] netlink: 'syz.0.1264': attribute type 5 has an invalid length. [ 346.245180][T10743] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1264'. [ 348.225733][T10768] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1269'. [ 348.560625][T10768] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1269'. [ 348.717400][T10772] netlink: 'syz.2.1269': attribute type 10 has an invalid length. [ 348.737781][T10772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1269'. [ 348.750516][T10772] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 348.757614][T10772] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 348.793512][T10764] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1269'. [ 349.653284][T10798] netlink: 'syz.2.1278': attribute type 21 has an invalid length. [ 349.680125][T10798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1278'. [ 349.702856][T10798] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 350.070124][T10813] Q6`Ҙ: renamed from lo (while UP) [ 350.118377][T10815] netlink: 'syz.3.1282': attribute type 2 has an invalid length. [ 350.166992][T10815] netlink: 155796 bytes leftover after parsing attributes in process `syz.3.1282'. [ 350.874369][T10838] netlink: 'syz.2.1290': attribute type 21 has an invalid length. [ 350.900004][T10838] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1290'. [ 350.910073][T10838] netlink: 'syz.2.1290': attribute type 5 has an invalid length. [ 350.917858][T10838] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1290'. [ 351.027200][T10847] netlink: 'syz.0.1293': attribute type 21 has an invalid length. [ 351.045925][T10843] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 351.071716][T10847] IPv6: NLM_F_CREATE should be specified when creating new route [ 351.090626][T10843] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1292'. [ 351.274502][T10848] netlink: 'syz.0.1293': attribute type 21 has an invalid length. [ 352.022952][T10873] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1299'. [ 352.496465][T10897] netlink: 'syz.2.1306': attribute type 15 has an invalid length. [ 352.864998][T10903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.013162][T10929] syzkaller0: entered promiscuous mode [ 354.024116][T10929] syzkaller0: entered allmulticast mode [ 354.042579][T10931] IPv6: NLM_F_CREATE should be specified when creating new route [ 354.058726][T10931] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1314'. [ 354.073677][T10929] validate_nla: 1 callbacks suppressed [ 354.073694][T10929] netlink: 'syz.2.1313': attribute type 29 has an invalid length. [ 354.091203][T10931] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1314'. [ 354.124421][T10929] netlink: 'syz.2.1313': attribute type 29 has an invalid length. [ 354.137031][T10932] netlink: 'syz.2.1313': attribute type 29 has an invalid length. [ 356.517325][T10935] netlink: 'syz.1.1315': attribute type 21 has an invalid length. [ 356.528921][T10935] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1315'. [ 356.538490][T10935] netlink: 'syz.1.1315': attribute type 5 has an invalid length. [ 356.546647][T10935] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1315'. [ 357.231478][T10971] netlink: 'syz.0.1325': attribute type 22 has an invalid length. [ 357.239834][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'. [ 357.250054][T10959] netlink: 'syz.2.1321': attribute type 10 has an invalid length. [ 357.269771][T10959] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1321'. [ 357.767405][T10986] syzkaller0: entered promiscuous mode [ 357.787355][T10986] syzkaller0: entered allmulticast mode [ 360.266976][T11009] netlink: 'syz.3.1337': attribute type 10 has an invalid length. [ 360.276369][T11009] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1337'. [ 360.286682][T11009] hsr0: entered promiscuous mode [ 360.292637][T11009] bridge0: port 3(hsr0) entered blocking state [ 360.299685][T11009] bridge0: port 3(hsr0) entered disabled state [ 360.306081][T11009] hsr0: entered allmulticast mode [ 360.311756][T11009] hsr_slave_0: entered allmulticast mode [ 360.317498][T11009] hsr_slave_1: entered allmulticast mode [ 360.331046][T11009] bridge0: port 3(hsr0) entered blocking state [ 360.337430][T11009] bridge0: port 3(hsr0) entered forwarding state [ 360.466690][T11031] netlink: 'syz.3.1343': attribute type 28 has an invalid length. [ 360.719554][T11034] netlink: 'syz.2.1346': attribute type 6 has an invalid length. [ 360.744446][T11034] netlink: 206624 bytes leftover after parsing attributes in process `syz.2.1346'. [ 360.875419][T11040] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1342'. [ 360.913500][T11040] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1342'. [ 361.039238][T11029] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1342'. [ 361.058635][T11040] netlink: 'syz.1.1342': attribute type 10 has an invalid length. [ 361.081672][T11040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1342'. [ 361.096753][T11040] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 361.123855][T11040] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.188906][T11040] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 361.268674][ T5784] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 361.800227][T11061] netlink: 'syz.0.1353': attribute type 10 has an invalid length. [ 361.812328][T11061] __nla_validate_parse: 2 callbacks suppressed [ 361.816649][T11061] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1353'. [ 361.845552][T11061] hsr0: entered promiscuous mode [ 361.858820][T11061] bridge0: port 3(hsr0) entered blocking state [ 361.867270][T11061] bridge0: port 3(hsr0) entered disabled state [ 361.899769][T11061] hsr0: entered allmulticast mode [ 361.908457][T11061] hsr_slave_0: entered allmulticast mode [ 361.925847][T11061] hsr_slave_1: entered allmulticast mode [ 362.003463][T11061] bridge0: port 3(hsr0) entered blocking state [ 362.014091][T11061] bridge0: port 3(hsr0) entered forwarding state [ 362.195867][T11073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.447539][T11077] netlink: 'syz.1.1358': attribute type 1 has an invalid length. [ 362.469612][T11077] netlink: 'syz.1.1358': attribute type 2 has an invalid length. [ 362.477490][T11077] netlink: 'syz.1.1358': attribute type 2 has an invalid length. [ 362.485730][T11077] netlink: 'syz.1.1358': attribute type 3 has an invalid length. [ 362.495494][T11077] netlink: 'syz.1.1358': attribute type 4 has an invalid length. [ 362.519359][T11077] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.1358'. [ 362.605165][ C0] [ 362.605176][ C0] ================================ [ 362.605181][ C0] WARNING: inconsistent lock state [ 362.605196][ C0] syzkaller #0 Not tainted [ 362.605206][ C0] -------------------------------- [ 362.605211][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 362.605220][ C0] syz.0.1359/11080 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 362.605242][ C0] ffffffff8d297918 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0 [ 362.605305][ C0] {INITIAL USE} state was registered at: [ 362.605312][ C0] lock_acquire+0x19e/0x420 [ 362.605334][ C0] _raw_write_lock_irq+0xaf/0xf0 [ 362.605363][ C0] kernfs_rename_ns+0x5e4/0x830 [ 362.605390][ C0] sysfs_rename_link_ns+0x175/0x1b0 [ 362.605409][ C0] device_rename+0x110/0x1e0 [ 362.605431][ C0] dev_change_name+0x308/0x8e0 [ 362.605451][ C0] do_setlink+0x925/0x3f40 [ 362.605470][ C0] rtnl_newlink+0x1848/0x2170 [ 362.605487][ C0] rtnetlink_rcv_msg+0x843/0xf90 [ 362.605507][ C0] netlink_rcv_skb+0x235/0x4c0 [ 362.605535][ C0] netlink_unicast+0x7b1/0x930 [ 362.605561][ C0] netlink_sendmsg+0x8d0/0xbf0 [ 362.605577][ C0] __sys_sendto+0x4a9/0x6b0 [ 362.605593][ C0] __x64_sys_sendto+0xde/0xf0 [ 362.605610][ C0] do_syscall_64+0x55/0xb0 [ 362.605628][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.605653][ C0] irq event stamp: 7058 [ 362.605659][ C0] hardirqs last enabled at (7057): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.605688][ C0] hardirqs last disabled at (7058): [] noist_exc_debug+0x4d/0x120 [ 362.605714][ C0] softirqs last enabled at (6668): [] __irq_exit_rcu+0xd3/0x190 [ 362.605739][ C0] softirqs last disabled at (6617): [] __irq_exit_rcu+0xd3/0x190 [ 362.605763][ C0] [ 362.605763][ C0] other info that might help us debug this: [ 362.605768][ C0] Possible unsafe locking scenario: [ 362.605768][ C0] [ 362.605773][ C0] CPU0 [ 362.605776][ C0] ---- [ 362.605780][ C0] lock(kernfs_rename_lock); [ 362.605793][ C0] [ 362.605796][ C0] lock(kernfs_rename_lock); [ 362.605808][ C0] [ 362.605808][ C0] *** DEADLOCK *** [ 362.605808][ C0] [ 362.605812][ C0] 2 locks held by syz.0.1359/11080: [ 362.605823][ C0] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x26/0x180 [ 362.605874][ C0] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xb9/0x3e0 [ 362.605929][ C0] [ 362.605929][ C0] stack backtrace: [ 362.605935][ C0] CPU: 0 PID: 11080 Comm: syz.0.1359 Not tainted syzkaller #0 [ 362.605954][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 362.605966][ C0] Call Trace: [ 362.605973][ C0] <#DB> [ 362.605980][ C0] dump_stack_lvl+0x18c/0x250 [ 362.606005][ C0] ? show_regs_print_info+0x20/0x20 [ 362.606031][ C0] ? print_usage_bug+0x43d/0x6a0 [ 362.606055][ C0] ? verify_lock_unused+0x15/0x140 [ 362.606080][ C0] lock_acquire+0x2c2/0x420 [ 362.606106][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 362.606134][ C0] ? read_lock_is_recursive+0x20/0x20 [ 362.606158][ C0] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 362.606176][ C0] ? cmp_ex_search+0x1e/0x80 [ 362.606200][ C0] ? bsearch+0x8a/0xb0 [ 362.606227][ C0] ? look_up_lock_class+0x75/0x140 [ 362.606255][ C0] _raw_read_lock_irqsave+0xbc/0x100 [ 362.606285][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 362.606312][ C0] ? _raw_read_lock+0x50/0x50 [ 362.606339][ C0] ? rcu_is_watching+0x15/0xb0 [ 362.606366][ C0] ? lock_release+0xb5/0x8c0 [ 362.606405][ C0] ? percpu_ref_tryget+0x15/0x180 [ 362.606431][ C0] kernfs_path_from_node+0x88/0xbd0 [ 362.606460][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 362.606481][ C0] ? perf_trace_lock_acquire+0x105/0x400 [ 362.606503][ C0] ? kernfs_name+0x140/0x140 [ 362.606530][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 362.606552][ C0] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 362.606575][ C0] get_mm_memcg_path+0xb9/0x360 [ 362.606606][ C0] __mmap_lock_do_trace_acquire_returned+0xea/0x300 [ 362.606640][ C0] ? get_mm_memcg_path+0x360/0x360 [ 362.606685][ C0] ? __init_rwsem+0x160/0x160 [ 362.606707][ C0] ? _raw_spin_unlock+0x28/0x40 [ 362.606738][ C0] stack_map_get_build_id_offset+0x5fe/0x720 [ 362.606769][ C0] ? pcpu_freelist_pop+0x12a/0x190 [ 362.606799][ C0] ? __bpf_get_stackid+0x900/0x900 [ 362.606822][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 362.606851][ C0] __bpf_get_stackid+0x564/0x900 [ 362.606884][ C0] bpf_prog_12712c88fd19bd5b+0x29/0x2d [ 362.606911][ C0] bpf_overflow_handler+0x1fc/0x510 [ 362.606939][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 362.606965][ C0] ? bpf_overflow_handler+0xde/0x510 [ 362.606993][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 362.607027][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 362.607053][ C0] __perf_event_overflow+0x461/0x660 [ 362.607081][ C0] perf_swevent_event+0x319/0x570 [ 362.607107][ C0] ? perf_tp_event+0x1550/0x1550 [ 362.607130][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 362.607162][ C0] perf_bp_event+0x319/0x430 [ 362.607190][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 362.607236][ C0] ? lock_acquire+0x2c2/0x420 [ 362.607263][ C0] hw_breakpoint_exceptions_notify+0x2fb/0x670 [ 362.607293][ C0] notifier_call_chain+0x18f/0x380 [ 362.607321][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 362.607348][ C0] atomic_notifier_call_chain+0xda/0x180 [ 362.607375][ C0] notify_die+0x145/0x1a0 [ 362.607403][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 362.607438][ C0] notify_debug+0x2e/0x50 [ 362.607457][ C0] exc_debug+0xde/0x140 [ 362.607481][ C0] asm_exc_debug+0x1e/0x40 [ 362.607501][ C0] RIP: 0010:__get_user_nocheck_8+0xd/0x20 [ 362.607526][ C0] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca [ 362.607544][ C0] RSP: 0000:ffffc9000429f560 EFLAGS: 00040802 [ 362.607560][ C0] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff92000853eca [ 362.607575][ C0] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 0000000000000000 [ 362.607589][ C0] RBP: 0000200000000300 R08: 000000000000007f R09: 0000000000000000 [ 362.607601][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 0000000000000001 [ 362.607615][ C0] R13: 1ffff92000853ec8 R14: 000000000000007f R15: dffffc0000000000 [ 362.607641][ C0] [ 362.607646][ C0] [ 362.607652][ C0] perf_callchain_user+0xbdd/0x15d0 [ 362.607689][ C0] ? get_callchain_entry+0x185/0x3c0 [ 362.607713][ C0] get_perf_callchain+0x394/0x510 [ 362.607737][ C0] ? put_callchain_entry+0xb0/0xb0 [ 362.607763][ C0] ? __perf_event_header__init_id+0x3b0/0x470 [ 362.607788][ C0] perf_prepare_sample+0x3c7/0x1db0 [ 362.607815][ C0] ? read_lock_is_recursive+0x20/0x20 [ 362.607838][ C0] ? perf_callchain+0x220/0x220 [ 362.607860][ C0] ? mark_lock+0x94/0x320 [ 362.607887][ C0] perf_event_output_forward+0x187/0x3e0 [ 362.607917][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 362.607940][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 362.607971][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 362.607998][ C0] __perf_event_overflow+0x461/0x660 [ 362.608026][ C0] perf_swevent_overflow+0x274/0x340 [ 362.608057][ C0] ? perf_event_switch_output+0x790/0x790 [ 362.608093][ C0] perf_swevent_event+0x45c/0x570 [ 362.608118][ C0] ? perf_tp_event+0x1550/0x1550 [ 362.608150][ C0] perf_bp_event+0x319/0x430 [ 362.608178][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 362.608202][ C0] ? verify_lock_unused+0x140/0x140 [ 362.608246][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 362.608268][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 362.608297][ C0] notifier_call_chain+0x18f/0x380 [ 362.608324][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 362.608351][ C0] atomic_notifier_call_chain+0xda/0x180 [ 362.608379][ C0] notify_die+0x145/0x1a0 [ 362.608406][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 362.608441][ C0] notify_debug+0x2e/0x50 [ 362.608459][ C0] noist_exc_debug+0x77/0x120 [ 362.608484][ C0] asm_exc_debug+0x33/0x40 [ 362.608503][ C0] RIP: 0033:0x7fccea77cc3d [ 362.608518][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 362.608534][ C0] RSP: 002b:00007fcceb6cf8a8 EFLAGS: 00000283 [ 362.608549][ C0] RAX: 0000000000000300 RBX: 00007fcceb6cfde0 RCX: 2f666c65732f636f [ 362.608563][ C0] RDX: 0000200000000300 RSI: 00007fccea85e5c0 RDI: 0000200000000300 [ 362.608576][ C0] RBP: 0000200000000300 R08: 00007fcceb6d0010 R09: 00000000ffffffff [ 362.608589][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 362.608600][ C0] R13: 0000000000000073 R14: 00007fccea83321d R15: 00007fcceb6cfea0 [ 362.608624][ C0]