last executing test programs: 3.359986044s ago: executing program 1 (id=814): r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x1, 0x40, 0x8, 0x0, 0xfffffffffffffffc, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x8800, 0x1, 0x94, 0x5, 0xce, 0x394, 0x0, 0x0, 0x4e59484a, 0x0, 0x6787}, 0x0, 0xd, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x3ff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0x32, 0x20000064, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) (async) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x49, 0x0, 0x300) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r5}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r5, 0x1, 0xc}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r5, 0x10, 0x18}, 0xc) 3.322766415s ago: executing program 2 (id=815): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8450, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e0000"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000240)='./file0\x00', r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffffe) 3.123991352s ago: executing program 1 (id=818): r0 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000300)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10, &(0x7f0000000840)}, 0x800) close(r3) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8941, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x1, 0x7}], 0x10}, 0x807) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) 2.779711654s ago: executing program 1 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x4c}, {0x6}]}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000006feffff720a00fef8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.631365459s ago: executing program 3 (id=822): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000001000000000000000200000085000000a0000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)={[{0x2b, 'pids'}]}, 0x6) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) (async) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r11, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r12, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) (async) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2d, 'pids'}]}, 0x6) 2.499099664s ago: executing program 1 (id=823): socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0x4, 0x5, 0x9b, 0x7, 0x0, 0x10fc9451, 0x28026, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x6}, 0x18162, 0x2, 0x6, 0x1, 0xd, 0x2, 0x2, 0x0, 0x8, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000900000000000000000000003c0001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x20, 0x1, 0x0, 0xfffff024}, {0x6}]}) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000001240)=r1, 0x46) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000380fc0b09000300", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x11, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)) 2.204533304s ago: executing program 0 (id=824): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r2 = socket$kcm(0x1e, 0x4, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10012, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000, 0xfffffffffffffffe}, 0x0, 0x7fffffff, 0x0, 0x0, 0xf60}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) (async, rerun: 64) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r6) (async) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x10009, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) (rerun: 32) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000dc0)=r5}, 0x20) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0a00000003000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000f10000000000ee4f051c4c7cc0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x1b, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x4, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0xa, 0x7, 0x0, 0x100, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x9b}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe13}]}, &(0x7f0000000f80)='syzkaller\x00', 0x9, 0x3b, &(0x7f0000000fc0)=""/59, 0x21980, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001040)={0x3, 0x2, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001080)=[{0x5, 0x2, 0x4, 0x2}], 0x10, 0x80000000}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x2, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x7, 0x8, 0x0, 0x1}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x2) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x300f000, 0xe, 0x0, &(0x7f0000000e40)="0049c69d2786a4b8d3dce769c270", 0x0, 0xad27, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.972088662s ago: executing program 2 (id=825): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x3, 0xa23}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5d5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000002c0)={r1, r0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x9e) 1.896364714s ago: executing program 3 (id=826): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x40, 0x8, 0x84, 0x13, 0x0, 0x64532fcd, 0x20004, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x6, 0x8}, 0xa004, 0x7, 0x4, 0x3, 0x3, 0x3, 0x1, 0x0, 0x5, 0x0, 0x7}, r1, 0xf, r0, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRES8=r4], 0x12) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r6, 0x0, 0x11000000}, 0x38) 1.761007769s ago: executing program 1 (id=827): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000880)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000200)=""/162, 0xa2}, {&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/70, 0x46}], 0x8, &(0x7f0000000780)=""/198, 0xc6}, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069c391f003dc68c84490aee2b9bd6efb2502eaf60d00", 0x2e}], 0x1}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x4000}) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r5 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x3, 0xfa, 0xa9, 0xf5, 0x0, 0xffff, 0x100000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x400, 0x80000001}, 0x80, 0x1, 0x1, 0x0, 0x80000000, 0x5, 0x8, 0x0, 0x5, 0x0, 0x33}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xfa, 0x7, 0xa, 0xc4, 0x0, 0x0, 0x8ed44, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffc5, 0x2, @perf_bp, 0x300, 0x1, 0x8, 0x7, 0x1000000, 0xfff, 0x4, 0x0, 0x8, 0x0, 0x6}, r0, 0x4, r5, 0x1) socket$kcm(0xf, 0x3, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="d8000000180081054e81f782db4cb904021d080006040c0199f544c90dad24007c09e8fe55a1e134cce7d8b7a3e3067c705137cefe8b0a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f2101e3bb2a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r6], &(0x7f00000008c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r7) r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x5452, &(0x7f0000000140)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) recvmsg$kcm(r8, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) r10 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x19, &(0x7f0000000000)=r13, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 1.676029062s ago: executing program 0 (id=828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x14000, 0x35, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000009f5bd8e204153a4ab0ae9dce38a046000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff7}}], 0x38}, 0x8000) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b", 0x6}], 0x1}, 0x8000) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fe", 0x2}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x808) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000580)) close(r4) sendmsg$inet(r5, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4201, 0x0) ioctl$TUNGETVNETHDRSZ(r8, 0x800454d7, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce220010"], 0xcfa4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x4000000) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r9}, 0x8) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) r12 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r10, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000840)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, 0x0, 0x0, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) 1.546654357s ago: executing program 3 (id=829): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000000000ff, 0x3}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc, 0x4}, 0x80, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000007c0)={r3, &(0x7f00000002c0)="f69f4d4aca5ff73ebd3b41e10fc06a3fcef084682c021163acd9b60ef9e5992729cd31334b706287febb48c3c71b22abc56b499670a9e76ff6b364616fffc5d8f1a5e4479ae2f44e1d4e4daba053e04b5ef9f6388ce4f89440dd66b44a3c289b853d5d95d7bd751b91dc79029eeb517cb8f85d08708a6662b3ffe685a6e28ff8a0ca9b1fe2831e31440709d63f4fd4220dc12b76c04541ac8c1957ce867cc5e7a56f8e7027e161cfcead25ac84990413282e34946e3d0136b3afce872f11f3f9c097611fe361c11f90dc0e03b3444c6fbf0587beaf4f37d589e7438b", &(0x7f00000006c0)=""/210}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @call={0x85, 0x0, 0x0, 0x15}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="1400000028000b6394f90509a16dd8e50000cc577836970686eb8790519b82b4aa31cc3ce90019982fe75ad84b9a26f3b7b6850028993d2c94735347b223162466d4f9ed7b", 0x45}], 0x1}, 0x4000000) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x28, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0xcc0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce2200"], 0xfdef) 1.505797188s ago: executing program 2 (id=830): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x800, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x9e4, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r1, 0xffffffffffffffff, 0x4, r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2100, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)="2703020059feffff7f00002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f00000001c0)="6fe4dd9eeb539c089a19e4e357ff98f6176668159862861716b676d66aa1e3ac82f116ae706d9e47cae3303bc15c722fa5032751cfe7e2855ea321c4f157bf46c898f137ac2ea3bcb896835be907bcc5340eb9832dae839b922582681ec7e6251eca7852baae8b6c031f", 0x6a}], 0x4}, 0x0) 1.376086383s ago: executing program 0 (id=831): r0 = perf_event_open(&(0x7f0000001c40)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x75, &(0x7f0000000000)=r4, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3e3}, 0xffffffffffffff10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2ce, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) 1.296920005s ago: executing program 2 (id=832): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="3ad5", 0x2}], 0x1}, 0x24040801) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2}, 0x0, 0x7, 0x1, 0x2}}, 0x80, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x900}, 0x8a1) 1.079145643s ago: executing program 2 (id=833): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="15000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="10003d39fcffffff0000000000000000000000000000000000000000d2ec87f6e3de160774583cca1ae91c187408b081631a71890cd214f24a8d2aa4911517a7d59d2af0df277f49b42807e845d7a6c4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002e9b72ffd1744eb82dbd2278bc9c6da2395c45258632cc9e1f674e295ce21fe42c82190203af7dab948b1f51661ad54c3b67540d7e210d40afe0894c637ddd99b668505d49d5", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000004a00000000000000020b000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018510000040000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x65b2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r1, r1], &(0x7f00000003c0)=[{0x2, 0x4, 0xb, 0xc}, {0x2, 0x4, 0x8, 0x1}, {0x5, 0x4, 0x8, 0x9}, {0x5, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x2}, {0x5, 0x4, 0xe, 0x4}, {0x5, 0x3, 0x6, 0xa}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2694], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10201, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ab, 0x0, @perf_bp={&(0x7f00000001c0)}, 0xc4c1, 0x10000, 0x0, 0x4, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRESDEC=r3, @ANYBLOB="79b910cb8818b005a6480ae641d949c676cf96d797ec6404f17bc4122ab2fef4a93a0b8912c0f1aaed24"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa}, 0x94) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xfffffffc}, 0x28) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @local, 0xc}}, 0x29, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) r11 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r11, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001200)={r6, 0x58, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1e00000008000000070000000708000010000000", @ANYRES32=r1, @ANYBLOB='O\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001000000000000000e00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x17, &(0x7f0000001280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000011c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r12, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x2, 0x9, 0x100, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001480)=[r1, r6, r9, r10, 0xffffffffffffffff, r13], &(0x7f00000014c0)=[{0x1, 0x2, 0xc, 0x4}, {0x1f3, 0x2, 0x5}, {0x2, 0x1, 0x4, 0xa}], 0x10, 0x6}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15afde5b3403f50018bf3a8", 0xffeb}], 0x1}, 0x20040000) 1.031930824s ago: executing program 0 (id=834): r0 = socket$kcm(0x25, 0x5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%ps \x00'}, 0x20) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000001000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000040)="cfdf855b2342d1be075aab45c93b3cb44b3cbdccacfa87ee154fb36c87cbe99e20ca4d3dabad995624df302041221902028ccfc5f5f11869a8e6dae0e4dc1d6ade8b9e", 0x43}, {&(0x7f00000000c0)="574acadc3405b12b9237dae3fcf0b8e66be6bbf494473caa68abf51ed4c0dbb7302e4daedc7a77e799", 0x29}, {&(0x7f0000000200)="b9d74e80efa2f775033819a5defb65a7e44ee2b508dd60aeef40a1fdc3ed67bf42d725349bc85f1adf0c6625c40b07067239537458d7e58d1b502f35e62262cbef18dcdd01db992454d1c3300ddb85619912500f2945728682dc2e34580a6f15f67c487c434fc40656b99c3b1892bf1745b107", 0x73}, {&(0x7f0000000300)="6fa6e3440b55e4c0a86f9c544a5ec8b87ae401272f6b7e212a1eac1ec64db67d6f8b62fc6bbd006bbcf1f10eb2710bb629132a0611d88d2081d50a288093b7c348882c8878871c0eb9ddd4adbbc75b1e903fe5473faf581e0d424df29828d783a1197ac04e004d10f371a8d0d5036f53256e8ccce7ff02bb2e941e6f72fa4ca13ed0d6e810ed3d20ea6971beaf200503e5922e72", 0x94}, {&(0x7f00000003c0)="ce9489efee5d01d089366efbc456861b9b8abb8f70703356e119bdbb4edc89", 0x1f}, {&(0x7f0000000540)="9fcc2514e1c48d57d296a5d642e8716ba5968f503ae8c193684a8d70a0f27984f79f8797f369063f00d3606903b300e76a6a531c933a5ba5f7dd7106a39e9431e09f52fdcb1cda4104cbdb7ccc12bea5785b9e5c9ab73fd939e11ff8", 0x5c}, {&(0x7f00000006c0)="06e741f29873cc79738b3f146ac74ca6e709104a274cd2a93be2dfce9ad577ad80f80f9d0c860f3ae4104cb8f37df8b19208e8fd48c6428febd965a4e2e6b8510ab46699914c0957abb2dceec82961eafb3108aef56a8668476a8606efb04657deedb321d9de14403f7a2fa3621f2fb8372b8b2035ec5a6a1d374f2b08f792cdb8387572a4ed9f6248e96b2ab558cc8ef6b7fcf9d0885d919e716f6a556087c005e2b80abc2515557cfa86f21ed1f3532b7880b9b3ac3387a60eab8ac3413283912a65ebe204956b0876", 0xca}, {&(0x7f00000007c0)="92ac3ebf14a41214889cc60e9e5c2f37d368f319b97156f84b8b07c0cbd863473f61156cd16145a3f7d94fa5097e82a387b5462543556d28bc1339cabb0496f1c40e684722f186665dccbd59d4e12dca24f694f7a2d616bed456db96719dc630045326f3e234c8447c5c376e94bc5c7d193fa8d6c82c1c1990507720efb727a617406f16ddee6642475e72d1f9e41826d2a9a2950d3efe4cc11b7a7e37bce3a08c3313818f132d5874c8e6e2d744807b06a4ba063ebaea469584220db24cebe9710815409848f82baa78485af60ed6e9e5441363bfc36dd723180850a616", 0xde}], 0x8, &(0x7f0000000a40)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x70}, 0x14) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="40d704a4e9cfd8d7b10f86754735feed2d6d3541e6139d377923722e5c4d6265e2621be4cb4804f0790a2d406c3a8f5220f95883a678c21c6365b972c3d1ba6467b9669b5d39d66ce96a515d3625c06e33a23fd7", 0x54}], 0x1, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@end, @generic={0x83, 0x11, "e0e6b6f910e949b5eff64d71d9ea77"}, @lsrr={0x83, 0x23, 0x6e, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1]}, @noop, @end, @timestamp_prespec={0x44, 0x44, 0xfd, 0x3, 0xd, [{@remote, 0xe7}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x1}, {@remote, 0xfffffffe}, {@local, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@local, 0x7fffffff}, {@broadcast, 0x4}]}, @timestamp_prespec={0x44, 0x3c, 0xd0, 0x3, 0xf, [{@broadcast, 0x3ff}, {@multicast1, 0x6}, {@broadcast}, {@empty, 0x7}, {@broadcast, 0x7fe000}, {@rand_addr=0x64010101, 0xcec}, {@local, 0x8001}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x100}, 0x40800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r3}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x55, 0x0, 0x4c}]}, {0x0, [0x2e]}}, &(0x7f0000000600)=""/166, 0x2b, 0xa6, 0x0, 0x4}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x100, '\x00', r4, r6, 0x0, 0x4}, 0x50) close(r0) 803.551413ms ago: executing program 0 (id=835): socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0x4, 0x5, 0x9b, 0x7, 0x0, 0x10fc9451, 0x28026, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x6}, 0x18162, 0x2, 0x6, 0x1, 0xd, 0x2, 0x2, 0x0, 0x8, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000900000000000000000000003c0001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x20, 0x1, 0x0, 0xfffff024}, {0x6}]}) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000001240)=r1, 0x46) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000380fc0b09000300", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x11, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)) 733.833295ms ago: executing program 1 (id=836): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe60, 0x68000000}, 0x4040010) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000240)='\n', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r1, 0x84, 0x1f, &(0x7f0000000100), 0x120) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) socket$kcm(0x11, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e68, 0x0, 0x4000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x700, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)}, 0x20) 432.008845ms ago: executing program 3 (id=837): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x4, 0x0, @loopback}, 0x10, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0x1, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000100000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x17}, 0x20) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 144.671945ms ago: executing program 3 (id=838): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f90224fc6028000e000a73e300053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b"}], 0x1}, 0x0) (async) r1 = perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0xf0, 0x2, 0x6, 0x0, 0x10000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x4, 0x5}, 0x3, 0xd87, 0x6, 0x9, 0x0, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000280)={0x3, 0x80, 0xb6, 0x1, 0x8, 0x7, 0x0, 0xa, 0x110200, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240)}, 0x11003, 0x56, 0x80, 0x6, 0x3, 0x5623, 0x7, 0x0, 0x5705, 0x0, 0x80000000}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000ff00000000000000000000000000280000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) (async) socket$kcm(0x10, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r7, 0x10e, 0xb, &(0x7f0000000180), 0x4) (async) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x7f, &(0x7f0000000140)=[{&(0x7f0000000000)="60000000493f9c680048089e", 0x72}, {&(0x7f0000000280)="68cabf2dfb58fc421d75680366f05d4800028088a8ffff0200258f2e44aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e6ed0000004aa400", 0x57}], 0x2}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r4}) 108.979377ms ago: executing program 2 (id=839): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64, @ANYRES32, @ANYBLOB="3600ae9975373e73a646616c00"/29], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="03000000225600000000000004000000200200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200"/19], 0x50) r8 = socket$kcm(0xa, 0x1, 0x106) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x4, &(0x7f0000000200)=r9, 0x11) setsockopt$sock_attach_bpf(r8, 0x1, 0x19, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r4, r7}, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 68.871128ms ago: executing program 0 (id=840): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x80000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xd5a217f00b3a7526}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="b306ac9676b27004d3c8ff6f88ec", 0x0, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x6, 0x9, 0x4, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x200000000004, 0xffffffffffffffff, 0xc) r10 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x1aa0d, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r10, 0x401054d5, &(0x7f00000003c0)=ANY=[]) close(r0) ioctl$PERF_EVENT_IOC_ID(r11, 0x80082407, &(0x7f00000002c0)) r12 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r7, &(0x7f00000001c0)="b17c0e83d97fb1a9932ad6b1d8f579765a7a003873eac69e73d5310f36acee1aa9c8a51286e45b5c67e15a8a02dc0e0248f4918788dd8635017157709ee05420c633e24e00bb8f376debdba8d9945bedb70c4c150f4052824c717b7c18b7dea48c322527bbf65db3"}, 0x20) 0s ago: executing program 3 (id=841): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000043c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000004380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x0, 0x8}, 0xc) socket$kcm(0xf, 0x3, 0x2) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x24000800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0x4b, &(0x7f0000000980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x1d, 0x3b, 0x5, 0xd, 0x2100, r2, 0x10, '\x00', r6, r7, 0x1, 0x1, 0x4}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1300000008000000000000000000000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f10000000000008148ea08c51e0b50001474f851c3"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2ce4}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) setsockopt$sock_attach_bpf(r9, 0x1, 0x14, &(0x7f0000000040)=r11, 0x3b) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000559500000000000000bf91000000000000b7020000020091f8a7b44603e09e52efbbdb5f1600008500000085000000b7006a9a80ba2d363ba9c80cf2fae0cdffe96a84f4ef64dad5e7372a95fae97aeb8238bc23b2e15bf9fe5b256d3732f1d2c71acc097e"], &(0x7f0000000200)='GPL\x00', 0xe6, 0xa0, &(0x7f0000000240)=""/160, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0x1, r2], &(0x7f0000000d40)=[{0x2, 0x2, 0x5, 0x2}, {0x5, 0x3, 0x2, 0xb}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r4, 0x1f, 0x1, 0x1000005, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x8, r1}, 0x18) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 60.483955][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.511156][ T5436] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. syzkaller login: [ 82.409141][ T5762] cgroup: Unknown subsys name 'net' [ 82.546870][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.208810][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.812817][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.821762][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.831602][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.839185][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.847098][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.854741][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.862114][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.867974][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.871111][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.880546][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.888078][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.893365][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.900240][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.907719][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.913328][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.921153][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.925986][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.934914][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.947055][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.955687][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.963659][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.976947][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.985735][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.995588][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.393299][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 86.544743][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.609595][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.633823][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.644221][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.652950][ T5777] bridge_slave_0: entered allmulticast mode [ 86.663021][ T5777] bridge_slave_0: entered promiscuous mode [ 86.702200][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.710206][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.717857][ T5777] bridge_slave_1: entered allmulticast mode [ 86.724883][ T5777] bridge_slave_1: entered promiscuous mode [ 86.767079][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.826947][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.876822][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.898659][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.905854][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.913320][ T5775] bridge_slave_0: entered allmulticast mode [ 86.920723][ T5775] bridge_slave_0: entered promiscuous mode [ 86.929721][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.936878][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.944719][ T5775] bridge_slave_1: entered allmulticast mode [ 86.952178][ T5775] bridge_slave_1: entered promiscuous mode [ 86.959903][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.967047][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.976544][ T5776] bridge_slave_0: entered allmulticast mode [ 86.984292][ T5776] bridge_slave_0: entered promiscuous mode [ 86.993167][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.000466][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.008811][ T5776] bridge_slave_1: entered allmulticast mode [ 87.015780][ T5776] bridge_slave_1: entered promiscuous mode [ 87.090013][ T5777] team0: Port device team_slave_0 added [ 87.128665][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.140489][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.154118][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.165344][ T5777] team0: Port device team_slave_1 added [ 87.195336][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.306281][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.313325][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.341026][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.356680][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.366301][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.378122][ T5774] bridge_slave_0: entered allmulticast mode [ 87.385537][ T5774] bridge_slave_0: entered promiscuous mode [ 87.421688][ T5775] team0: Port device team_slave_0 added [ 87.442467][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.450004][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.476508][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.488523][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.495743][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.512419][ T5774] bridge_slave_1: entered allmulticast mode [ 87.520214][ T5774] bridge_slave_1: entered promiscuous mode [ 87.530961][ T5776] team0: Port device team_slave_0 added [ 87.539800][ T5776] team0: Port device team_slave_1 added [ 87.559729][ T5775] team0: Port device team_slave_1 added [ 87.635575][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.644161][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.671502][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.699583][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.706663][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.733595][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.747911][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.757945][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.764928][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.793158][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.819344][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.830216][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.837194][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.864490][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.886541][ T5777] hsr_slave_0: entered promiscuous mode [ 87.893922][ T5777] hsr_slave_1: entered promiscuous mode [ 87.976352][ T5774] team0: Port device team_slave_0 added [ 87.985300][ T51] Bluetooth: hci0: command tx timeout [ 87.992288][ T5774] team0: Port device team_slave_1 added [ 88.010838][ T5776] hsr_slave_0: entered promiscuous mode [ 88.017918][ T5776] hsr_slave_1: entered promiscuous mode [ 88.024085][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.032233][ T5776] Cannot create hsr debugfs directory [ 88.058941][ T51] Bluetooth: hci3: command tx timeout [ 88.058963][ T5779] Bluetooth: hci1: command tx timeout [ 88.059242][ T5779] Bluetooth: hci2: command tx timeout [ 88.131865][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.142196][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.169013][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.186036][ T5775] hsr_slave_0: entered promiscuous mode [ 88.193983][ T5775] hsr_slave_1: entered promiscuous mode [ 88.200734][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.208766][ T5775] Cannot create hsr debugfs directory [ 88.237679][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.244684][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.271450][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.462390][ T5774] hsr_slave_0: entered promiscuous mode [ 88.469307][ T5774] hsr_slave_1: entered promiscuous mode [ 88.475713][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.483418][ T5774] Cannot create hsr debugfs directory [ 88.731812][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.752573][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.762486][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.786223][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.855812][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.870006][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.881219][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.891484][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.002066][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.020403][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.048424][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.074616][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.099143][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.155035][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.171378][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.182398][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.194941][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.215476][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.255815][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.263305][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.302052][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.309242][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.351394][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.451951][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.506642][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.513870][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.544464][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.551748][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.580359][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.620353][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.704136][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.731258][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.753624][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.760865][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.785021][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.792215][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.842190][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.849428][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.862012][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.869225][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.983542][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.058590][ T5779] Bluetooth: hci0: command tx timeout [ 90.139131][ T5779] Bluetooth: hci2: command tx timeout [ 90.140139][ T5086] Bluetooth: hci3: command tx timeout [ 90.144604][ T5779] Bluetooth: hci1: command tx timeout [ 90.199591][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.210807][ T5777] veth0_vlan: entered promiscuous mode [ 90.279714][ T5777] veth1_vlan: entered promiscuous mode [ 90.351485][ T5777] veth0_macvtap: entered promiscuous mode [ 90.374997][ T5777] veth1_macvtap: entered promiscuous mode [ 90.412634][ T5776] veth0_vlan: entered promiscuous mode [ 90.450826][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.492354][ T5776] veth1_vlan: entered promiscuous mode [ 90.513298][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.554342][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.564508][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.575031][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.583830][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.617086][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.672238][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.696009][ T5776] veth0_macvtap: entered promiscuous mode [ 90.729835][ T5776] veth1_macvtap: entered promiscuous mode [ 90.798770][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.806818][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.823957][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.839929][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.851814][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.883023][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.894968][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.909415][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.935184][ T5775] veth0_vlan: entered promiscuous mode [ 90.982659][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.993176][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.001592][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.005275][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.019898][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.028836][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.057701][ T5775] veth1_vlan: entered promiscuous mode [ 91.082222][ T5774] veth0_vlan: entered promiscuous mode [ 91.133463][ T5774] veth1_vlan: entered promiscuous mode [ 91.201829][ T5775] veth0_macvtap: entered promiscuous mode [ 91.246427][ T5775] veth1_macvtap: entered promiscuous mode [ 91.260182][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.282367][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.361953][ T5774] veth0_macvtap: entered promiscuous mode [ 91.394554][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.402300][ T5774] veth1_macvtap: entered promiscuous mode [ 91.432668][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.448420][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.451169][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.466615][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.479783][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.493095][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.543518][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.555197][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.567195][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.583543][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.610334][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.632573][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.649658][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.659676][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.668501][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.681626][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.693377][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.703325][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.714216][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.724608][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.728506][ C0] hrtimer: interrupt took 127307 ns [ 91.738853][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.773625][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.812014][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.847459][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.867534][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.883414][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.893631][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.906437][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.918421][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.934391][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.947062][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.956242][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.965843][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.139645][ T5779] Bluetooth: hci0: command tx timeout [ 92.217725][ T5779] Bluetooth: hci3: command tx timeout [ 92.219852][ T5086] Bluetooth: hci2: command tx timeout [ 92.223187][ T5779] Bluetooth: hci1: command tx timeout [ 92.254363][ T27] cfg80211: failed to load regulatory.db [ 92.289349][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.313037][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.417794][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.425668][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.539811][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.569559][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.044126][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.079481][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.217847][ T5779] Bluetooth: hci0: command tx timeout [ 94.241204][ T5875] netlink: 'syz.3.14': attribute type 21 has an invalid length. [ 94.258160][ T5875] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.14'. [ 94.298800][ T5779] Bluetooth: hci2: command tx timeout [ 94.304361][ T5086] Bluetooth: hci3: command tx timeout [ 94.304392][ T5086] Bluetooth: hci1: command tx timeout [ 94.688464][ T5881] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.16'. [ 95.725958][ T5909] netlink: 'syz.0.21': attribute type 27 has an invalid length. [ 96.004908][ T5915] netlink: 'syz.3.24': attribute type 19 has an invalid length. [ 96.303789][ T5915] syz.3.24 (5915) used greatest stack depth: 20008 bytes left [ 96.318777][ T5919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.346782][ T5931] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.28'. [ 97.470899][ T5933] netlink: 'syz.1.30': attribute type 21 has an invalid length. [ 97.482781][ T5933] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.30'. [ 99.384244][ T5972] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.43'. [ 99.554736][ T5979] netlink: 'syz.2.47': attribute type 21 has an invalid length. [ 99.573056][ T5979] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.47'. [ 103.236968][ T6053] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.76'. [ 103.343158][ T6058] netlink: 'syz.3.77': attribute type 10 has an invalid length. [ 104.076319][ T6072] netlink: set zone limit has 8 unknown bytes [ 107.394572][ T6058] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 107.894148][ T6077] netlink: 'syz.2.82': attribute type 21 has an invalid length. [ 107.918412][ T6077] netlink: 128 bytes leftover after parsing attributes in process `syz.2.82'. [ 107.938121][ T6077] netlink: 'syz.2.82': attribute type 5 has an invalid length. [ 107.946105][ T6077] netlink: 3 bytes leftover after parsing attributes in process `syz.2.82'. [ 108.975758][ T6118] syz.1.94 uses obsolete (PF_INET,SOCK_PACKET) [ 109.041033][ T6115] syzkaller0: entered promiscuous mode [ 109.053734][ T6115] syzkaller0: entered allmulticast mode [ 109.294725][ T6130] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.99'. [ 110.273103][ T6153] netlink: 'syz.0.104': attribute type 2 has an invalid length. [ 110.285206][ T6153] netlink: 164 bytes leftover after parsing attributes in process `syz.0.104'. [ 111.472542][ T6169] netlink: 'syz.1.108': attribute type 13 has an invalid length. [ 111.511317][ T6169] netlink: 172 bytes leftover after parsing attributes in process `syz.1.108'. [ 111.949935][ T6181] syz.1.111: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 111.983785][ T6181] CPU: 1 PID: 6181 Comm: syz.1.111 Not tainted syzkaller #0 [ 111.991169][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.001297][ T6181] Call Trace: [ 112.004635][ T6181] [ 112.007617][ T6181] dump_stack_lvl+0x18c/0x250 [ 112.012371][ T6181] ? show_regs_print_info+0x20/0x20 [ 112.017626][ T6181] ? load_image+0x420/0x420 [ 112.022192][ T6181] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 112.028663][ T6181] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 112.035228][ T6181] warn_alloc+0x246/0x340 [ 112.039627][ T6181] ? stack_trace_save+0xaa/0x100 [ 112.044640][ T6181] ? zone_watermark_ok_safe+0x230/0x230 [ 112.050270][ T6181] ? kasan_set_track+0x5f/0x70 [ 112.055095][ T6181] ? kasan_set_track+0x4e/0x70 [ 112.059920][ T6181] ? __kasan_kmalloc+0x8f/0xa0 [ 112.064737][ T6181] ? xsk_init_queue+0xad/0x100 [ 112.069553][ T6181] ? xsk_setsockopt+0x4e5/0x760 [ 112.074454][ T6181] ? do_sock_setsockopt+0x175/0x1a0 [ 112.079706][ T6181] ? __x64_sys_setsockopt+0x182/0x200 [ 112.085150][ T6181] __vmalloc_node_range+0x126/0x1330 [ 112.090533][ T6181] ? free_vm_area+0x50/0x50 [ 112.095113][ T6181] vmalloc_user+0x74/0x80 [ 112.099558][ T6181] ? xskq_create+0xbf/0x170 [ 112.104119][ T6181] xskq_create+0xbf/0x170 [ 112.108502][ T6181] xsk_init_queue+0xad/0x100 [ 112.113186][ T6181] xsk_setsockopt+0x4e5/0x760 [ 112.117932][ T6181] ? xsk_poll+0x680/0x680 [ 112.122314][ T6181] ? __fget_files+0x28/0x4b0 [ 112.126961][ T6181] ? __fget_files+0x28/0x4b0 [ 112.131618][ T6181] ? aa_sock_opt_perm+0x74/0x100 [ 112.136646][ T6181] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 112.142248][ T6181] ? security_socket_setsockopt+0x7e/0xa0 [ 112.148018][ T6181] ? xsk_poll+0x680/0x680 [ 112.152403][ T6181] do_sock_setsockopt+0x175/0x1a0 [ 112.157478][ T6181] ? __fdget+0x180/0x210 [ 112.161778][ T6181] __x64_sys_setsockopt+0x182/0x200 [ 112.167036][ T6181] do_syscall_64+0x55/0xb0 [ 112.171513][ T6181] ? clear_bhb_loop+0x40/0x90 [ 112.176226][ T6181] ? clear_bhb_loop+0x40/0x90 [ 112.180950][ T6181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.186908][ T6181] RIP: 0033:0x7f831c19ce59 [ 112.191386][ T6181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.211052][ T6181] RSP: 002b:00007f831cfb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.219541][ T6181] RAX: ffffffffffffffda RBX: 00007f831c415fa0 RCX: 00007f831c19ce59 [ 112.227564][ T6181] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d [ 112.235583][ T6181] RBP: 00007f831c232d6f R08: 0000000000000004 R09: 0000000000000000 [ 112.243609][ T6181] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 112.251637][ T6181] R13: 00007f831c416038 R14: 00007f831c415fa0 R15: 00007ffdf6cb2498 [ 112.259681][ T6181] [ 112.272256][ T6181] Mem-Info: [ 112.275454][ T6181] active_anon:5351 inactive_anon:0 isolated_anon:0 [ 112.275454][ T6181] active_file:11298 inactive_file:39951 isolated_file:0 [ 112.275454][ T6181] unevictable:768 dirty:437 writeback:0 [ 112.275454][ T6181] slab_reclaimable:9985 slab_unreclaimable:91557 [ 112.275454][ T6181] mapped:25152 shmem:1361 pagetables:526 [ 112.275454][ T6181] sec_pagetables:0 bounce:0 [ 112.275454][ T6181] kernel_misc_reclaimable:0 [ 112.275454][ T6181] free:1357046 free_pcp:11287 free_cma:0 [ 112.356108][ T6181] Node 0 active_anon:21404kB inactive_anon:0kB active_file:45192kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96508kB dirty:1736kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10396kB pagetables:2104kB sec_pagetables:0kB all_unreclaimable? no [ 112.475889][ T6181] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 112.510118][ T6181] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.547514][ T6181] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 112.553506][ T6181] Node 0 DMA32 free:1522220kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21368kB inactive_anon:0kB active_file:45192kB inactive_file:158776kB unevictable:1536kB writepending:1724kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:25544kB local_pcp:9592kB free_cma:0kB [ 112.590699][ T6181] lowmem_reserve[]: 0 0 0 0 0 [ 112.595705][ T6181] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:12kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.651977][ T6181] lowmem_reserve[]: 0 0 0 0 0 [ 112.672478][ T6181] Node 1 Normal free:3889896kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20224kB local_pcp:9216kB free_cma:0kB [ 112.677703][ T6187] Zero length message leads to an empty skb [ 112.753989][ T6181] lowmem_reserve[]: 0 0 0 0 0 [ 112.759574][ T6181] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.777468][ T6181] Node 0 DMA32: 403*4kB (UME) 1390*8kB (UME) 809*16kB (UME) 472*32kB (UME) 319*64kB (ME) 21*128kB (UME) 4*256kB (UM) 1*512kB (M) 2*1024kB (M) 2*2048kB (UM) 354*4096kB (M) = 1521548kB [ 112.823932][ T6181] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 112.836917][ T6181] Node 1 Normal: 274*4kB (UME) 62*8kB (UME) 37*16kB (UME) 57*32kB (UME) 27*64kB (UME) 5*128kB (UE) 0*256kB 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3889896kB [ 112.862902][ T6181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.895002][ T6181] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.905647][ T6181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.928948][ T6181] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.956120][ T6181] 52610 total pagecache pages [ 112.965827][ T6181] 0 pages in swap cache [ 112.976147][ T6181] Free swap = 124996kB [ 113.000887][ T6181] Total swap = 124996kB [ 113.019876][ T6181] 2097051 pages RAM [ 113.045886][ T6181] 0 pages HighMem/MovableOnly [ 113.063255][ T6181] 416933 pages reserved [ 113.073415][ T6181] 0 pages cma reserved [ 113.399863][ T6207] netlink: 164 bytes leftover after parsing attributes in process `syz.2.121'. [ 113.532922][ T6211] sit0: entered allmulticast mode [ 114.233090][ T6232] Driver unsupported XDP return value 0 on prog (id 76) dev N/A, expect packet loss! [ 114.252384][ T6238] netlink: 'syz.1.128': attribute type 10 has an invalid length. [ 117.184067][ T6238] team0: Port device geneve1 added [ 117.364027][ T6255] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.135'. [ 117.616311][ T6253] netlink: 60 bytes leftover after parsing attributes in process `syz.3.134'. [ 118.254323][ T6261] netlink: 14 bytes leftover after parsing attributes in process `syz.1.136'. [ 118.288221][ T6261] netlink: get zone limit has 4 unknown bytes [ 120.747264][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 120.991817][ T6278] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.141'. [ 121.083153][ T6278] netlink: 'syz.3.141': attribute type 29 has an invalid length. [ 121.120607][ T6278] netlink: 'syz.3.141': attribute type 29 has an invalid length. [ 121.225436][ T6286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.141'. [ 121.258954][ T6286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.141'. [ 121.412335][ T6275] syzkaller0: entered promiscuous mode [ 121.422699][ T6275] syzkaller0: entered allmulticast mode [ 121.545559][ T6291] FAULT_INJECTION: forcing a failure. [ 121.545559][ T6291] name failslab, interval 1, probability 0, space 0, times 1 [ 121.596883][ T6291] CPU: 1 PID: 6291 Comm: syz.2.143 Not tainted syzkaller #0 [ 121.604261][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.614363][ T6291] Call Trace: [ 121.617683][ T6291] [ 121.620654][ T6291] dump_stack_lvl+0x18c/0x250 [ 121.625404][ T6291] ? show_regs_print_info+0x20/0x20 [ 121.630659][ T6291] ? load_image+0x420/0x420 [ 121.635216][ T6291] ? __might_sleep+0xe0/0xe0 [ 121.639864][ T6291] ? __lock_acquire+0x7d40/0x7d40 [ 121.644940][ T6291] should_fail_ex+0x39d/0x4d0 [ 121.649686][ T6291] should_failslab+0x9/0x20 [ 121.654251][ T6291] slab_pre_alloc_hook+0x59/0x310 [ 121.659333][ T6291] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 121.665105][ T6291] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 121.670873][ T6291] __kmem_cache_alloc_node+0x53/0x250 [ 121.676314][ T6291] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 121.682088][ T6291] __kmalloc+0xa4/0x230 [ 121.686313][ T6291] tomoyo_realpath_from_path+0xe3/0x5d0 [ 121.691937][ T6291] tomoyo_path_number_perm+0x248/0x620 [ 121.697450][ T6291] ? tomoyo_path_number_perm+0x217/0x620 [ 121.703128][ T6291] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 121.708637][ T6291] ? ksys_write+0x1c4/0x260 [ 121.713229][ T6291] ? __fget_files+0x28/0x4b0 [ 121.717871][ T6291] ? __fget_files+0x28/0x4b0 [ 121.722532][ T6291] security_file_ioctl+0x70/0xa0 [ 121.727519][ T6291] __se_sys_ioctl+0x48/0x170 [ 121.732166][ T6291] do_syscall_64+0x55/0xb0 [ 121.736628][ T6291] ? clear_bhb_loop+0x40/0x90 [ 121.741340][ T6291] ? clear_bhb_loop+0x40/0x90 [ 121.746058][ T6291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.752006][ T6291] RIP: 0033:0x7fafba79ce59 [ 121.756473][ T6291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.776113][ T6291] RSP: 002b:00007fafbb6da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.784562][ T6291] RAX: ffffffffffffffda RBX: 00007fafbaa16090 RCX: 00007fafba79ce59 [ 121.792665][ T6291] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000008 [ 121.800681][ T6291] RBP: 00007fafbb6da090 R08: 0000000000000000 R09: 0000000000000000 [ 121.808698][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.816717][ T6291] R13: 00007fafbaa16128 R14: 00007fafbaa16090 R15: 00007fff654f8298 [ 121.824752][ T6291] [ 121.844698][ T6291] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.534673][ T6316] netlink: 'syz.1.150': attribute type 9 has an invalid length. [ 123.615127][ T6316] netlink: 170500 bytes leftover after parsing attributes in process `syz.1.150'. [ 123.752347][ T6314] netlink: 'syz.1.150': attribute type 9 has an invalid length. [ 123.777957][ T6314] netlink: 170500 bytes leftover after parsing attributes in process `syz.1.150'. [ 124.334234][ T6333] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.157'. [ 124.357452][ T6333] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 124.376744][ T6342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.158'. [ 126.166202][ T6382] warning: `syz.0.169' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.326163][ T6386] netlink: 'syz.0.169': attribute type 28 has an invalid length. [ 126.347837][ T6386] netlink: 'syz.0.169': attribute type 29 has an invalid length. [ 126.358277][ T6386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.169'. [ 126.933679][ T6385] netlink: 156 bytes leftover after parsing attributes in process `syz.0.169'. [ 127.779148][ T6426] netlink: 'syz.1.180': attribute type 21 has an invalid length. [ 127.795261][ T6426] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.180'. [ 129.230189][ T6464] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 129.279706][ T6464] netlink: 'syz.3.192': attribute type 4 has an invalid length. [ 129.323387][ T6464] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.192'. [ 129.601735][ T6474] bridge0: port 3(team0) entered blocking state [ 129.627460][ T6474] bridge0: port 3(team0) entered disabled state [ 129.654648][ T6474] team0: entered allmulticast mode [ 129.677317][ T6474] team_slave_0: entered allmulticast mode [ 129.702120][ T6474] team_slave_1: entered allmulticast mode [ 129.716534][ T6474] team0: entered promiscuous mode [ 129.731998][ T6474] team_slave_0: entered promiscuous mode [ 129.753449][ T6474] team_slave_1: entered promiscuous mode [ 129.790818][ T6474] bridge0: port 3(team0) entered blocking state [ 129.797554][ T6474] bridge0: port 3(team0) entered forwarding state [ 130.261450][ T6481] netlink: 'syz.0.197': attribute type 8 has an invalid length. [ 130.289785][ T6481] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.197'. [ 131.031780][ T6489] : renamed from bond_slave_0 (while UP) [ 133.181774][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.198928][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.856452][ T6588] netlink: 2 bytes leftover after parsing attributes in process `syz.0.223'. [ 134.913284][ T6588] netlink: 2 bytes leftover after parsing attributes in process `syz.0.223'. [ 134.970467][ T6592] netlink: 'syz.3.224': attribute type 3 has an invalid length. [ 134.994354][ T6592] netlink: 132 bytes leftover after parsing attributes in process `syz.3.224'. [ 135.323695][ T6610] netlink: 'syz.3.229': attribute type 20 has an invalid length. [ 135.436802][ T6613] netlink: 'syz.2.227': attribute type 17 has an invalid length. [ 135.458447][ T6613] netlink: 152 bytes leftover after parsing attributes in process `syz.2.227'. [ 135.479973][ T6613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.298053][ T6639] netlink: 'syz.2.238': attribute type 7 has an invalid length. [ 136.331901][ T6639] netlink: 'syz.2.238': attribute type 11 has an invalid length. [ 136.339968][ T6639] netlink: 140 bytes leftover after parsing attributes in process `syz.2.238'. [ 137.438893][ T6654] netlink: 118300 bytes leftover after parsing attributes in process `syz.2.241'. [ 137.490953][ T6659] sit0: entered promiscuous mode [ 137.807764][ T6666] netlink: 'syz.2.245': attribute type 23 has an invalid length. [ 138.204678][ T6678] delete_channel: no stack [ 138.230898][ T6680] delete_channel: no stack [ 138.262868][ T6678] delete_channel: no stack [ 138.283133][ T6680] delete_channel: no stack [ 138.420875][ T6685] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.252'. [ 138.502725][ T6687] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.254'. [ 138.529917][ T6687] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 138.976130][ T6697] netlink: 'syz.2.257': attribute type 1 has an invalid length. [ 139.006255][ T6697] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.257'. [ 139.630096][ T6716] netlink: 'syz.1.261': attribute type 39 has an invalid length. [ 141.538547][ T6724] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.264'. [ 141.900199][ T6739] netlink: 'syz.3.269': attribute type 39 has an invalid length. [ 142.046152][ T6739] hsr_slave_1 (unregistering): left promiscuous mode [ 146.444292][ T6785] team0: Port device team_slave_0 removed [ 146.778663][ T6796] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.286'. [ 146.948833][ T6804] FAULT_INJECTION: forcing a failure. [ 146.948833][ T6804] name failslab, interval 1, probability 0, space 0, times 0 [ 146.994399][ T6804] CPU: 1 PID: 6804 Comm: syz.0.289 Not tainted syzkaller #0 [ 147.001781][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.011880][ T6804] Call Trace: [ 147.015203][ T6804] [ 147.018185][ T6804] dump_stack_lvl+0x18c/0x250 [ 147.022925][ T6804] ? show_regs_print_info+0x20/0x20 [ 147.028180][ T6804] ? load_image+0x420/0x420 [ 147.032739][ T6804] ? __might_sleep+0xe0/0xe0 [ 147.037388][ T6804] ? __lock_acquire+0x7d40/0x7d40 [ 147.042476][ T6804] should_fail_ex+0x39d/0x4d0 [ 147.047227][ T6804] should_failslab+0x9/0x20 [ 147.051781][ T6804] slab_pre_alloc_hook+0x59/0x310 [ 147.056865][ T6804] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 147.062636][ T6804] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 147.068492][ T6804] __kmem_cache_alloc_node+0x53/0x250 [ 147.073950][ T6804] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 147.079729][ T6804] __kmalloc+0xa4/0x230 [ 147.083944][ T6804] tomoyo_realpath_from_path+0xe3/0x5d0 [ 147.089556][ T6804] tomoyo_path_number_perm+0x248/0x620 [ 147.095153][ T6804] ? tomoyo_path_number_perm+0x217/0x620 [ 147.100830][ T6804] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 147.106343][ T6804] ? ksys_write+0x1c4/0x260 [ 147.110976][ T6804] ? __fget_files+0x28/0x4b0 [ 147.115624][ T6804] ? __fget_files+0x28/0x4b0 [ 147.120311][ T6804] security_file_ioctl+0x70/0xa0 [ 147.125304][ T6804] __se_sys_ioctl+0x48/0x170 [ 147.129956][ T6804] do_syscall_64+0x55/0xb0 [ 147.134418][ T6804] ? clear_bhb_loop+0x40/0x90 [ 147.139141][ T6804] ? clear_bhb_loop+0x40/0x90 [ 147.143887][ T6804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.149832][ T6804] RIP: 0033:0x7f98c1f9ce59 [ 147.154373][ T6804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.174039][ T6804] RSP: 002b:00007f98c2f31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.182506][ T6804] RAX: ffffffffffffffda RBX: 00007f98c2215fa0 RCX: 00007f98c1f9ce59 [ 147.190517][ T6804] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000009 [ 147.198526][ T6804] RBP: 00007f98c2f31090 R08: 0000000000000000 R09: 0000000000000000 [ 147.206531][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.214537][ T6804] R13: 00007f98c2216038 R14: 00007f98c2215fa0 R15: 00007ffe11baf9d8 [ 147.222567][ T6804] [ 147.258258][ T6804] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.478813][ T6816] netlink: 14 bytes leftover after parsing attributes in process `syz.2.291'. [ 148.345754][ T6825] netlink: 14 bytes leftover after parsing attributes in process `syz.2.295'. [ 148.706077][ T6825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.814455][ T6825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.917624][ T6825] bond0 (unregistering): Released all slaves [ 150.160374][ T6849] FAULT_INJECTION: forcing a failure. [ 150.160374][ T6849] name failslab, interval 1, probability 0, space 0, times 0 [ 150.183176][ T6849] CPU: 0 PID: 6849 Comm: syz.0.302 Not tainted syzkaller #0 [ 150.190538][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.200632][ T6849] Call Trace: [ 150.203962][ T6849] [ 150.206930][ T6849] dump_stack_lvl+0x18c/0x250 [ 150.211661][ T6849] ? show_regs_print_info+0x20/0x20 [ 150.216916][ T6849] ? load_image+0x420/0x420 [ 150.221466][ T6849] ? __might_sleep+0xe0/0xe0 [ 150.226105][ T6849] ? __lock_acquire+0x7d40/0x7d40 [ 150.231187][ T6849] should_fail_ex+0x39d/0x4d0 [ 150.235909][ T6849] should_failslab+0x9/0x20 [ 150.240443][ T6849] slab_pre_alloc_hook+0x59/0x310 [ 150.245499][ T6849] ? tomoyo_encode+0x28b/0x540 [ 150.250288][ T6849] ? tomoyo_encode+0x28b/0x540 [ 150.255077][ T6849] __kmem_cache_alloc_node+0x53/0x250 [ 150.260486][ T6849] ? tomoyo_encode+0x28b/0x540 [ 150.265270][ T6849] __kmalloc+0xa4/0x230 [ 150.269458][ T6849] tomoyo_encode+0x28b/0x540 [ 150.274075][ T6849] tomoyo_realpath_from_path+0x592/0x5d0 [ 150.279743][ T6849] tomoyo_path_number_perm+0x248/0x620 [ 150.285221][ T6849] ? tomoyo_path_number_perm+0x217/0x620 [ 150.290872][ T6849] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 150.296351][ T6849] ? ksys_write+0x1c4/0x260 [ 150.300916][ T6849] ? __fget_files+0x28/0x4b0 [ 150.305539][ T6849] ? __fget_files+0x28/0x4b0 [ 150.310263][ T6849] security_file_ioctl+0x70/0xa0 [ 150.315224][ T6849] __se_sys_ioctl+0x48/0x170 [ 150.319848][ T6849] do_syscall_64+0x55/0xb0 [ 150.324292][ T6849] ? clear_bhb_loop+0x40/0x90 [ 150.328990][ T6849] ? clear_bhb_loop+0x40/0x90 [ 150.333690][ T6849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.339617][ T6849] RIP: 0033:0x7f98c1f9ce59 [ 150.344057][ T6849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.363688][ T6849] RSP: 002b:00007f98c2f31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.372134][ T6849] RAX: ffffffffffffffda RBX: 00007f98c2215fa0 RCX: 00007f98c1f9ce59 [ 150.380136][ T6849] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000009 [ 150.388141][ T6849] RBP: 00007f98c2f31090 R08: 0000000000000000 R09: 0000000000000000 [ 150.396141][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.404145][ T6849] R13: 00007f98c2216038 R14: 00007f98c2215fa0 R15: 00007ffe11baf9d8 [ 150.412162][ T6849] [ 150.490355][ T6849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.732349][ T6856] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.306'. [ 150.775367][ T6856] bridge_slave_1: default FDB implementation only supports local addresses [ 150.949281][ T6856] netlink: 'syz.0.306': attribute type 21 has an invalid length. [ 150.984458][ T6856] netlink: 164 bytes leftover after parsing attributes in process `syz.0.306'. [ 151.313152][ T6871] netlink: 'syz.1.311': attribute type 21 has an invalid length. [ 151.326859][ T6874] netlink: 'syz.1.311': attribute type 21 has an invalid length. [ 151.652157][ T6882] netlink: 'syz.3.313': attribute type 13 has an invalid length. [ 151.664733][ T6883] FAULT_INJECTION: forcing a failure. [ 151.664733][ T6883] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 151.682809][ T6882] netlink: 160 bytes leftover after parsing attributes in process `syz.3.313'. [ 151.726781][ T6883] CPU: 0 PID: 6883 Comm: syz.0.314 Not tainted syzkaller #0 [ 151.734146][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.744242][ T6883] Call Trace: [ 151.747561][ T6883] [ 151.750543][ T6883] dump_stack_lvl+0x18c/0x250 [ 151.755272][ T6883] ? show_regs_print_info+0x20/0x20 [ 151.760510][ T6883] ? load_image+0x420/0x420 [ 151.765069][ T6883] ? __might_fault+0xaa/0x120 [ 151.769788][ T6883] ? __lock_acquire+0x7d40/0x7d40 [ 151.774868][ T6883] should_fail_ex+0x39d/0x4d0 [ 151.779620][ T6883] _copy_from_user+0x2f/0xe0 [ 151.784273][ T6883] addrconf_add_ifaddr+0x106/0x1c0 [ 151.789428][ T6883] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 151.795116][ T6883] ? addrconf_set_dstaddr+0x320/0x320 [ 151.800544][ T6883] ? __lock_acquire+0x7d40/0x7d40 [ 151.805614][ T6883] ? slab_free_freelist_hook+0x130/0x1a0 [ 151.811291][ T6883] inet6_ioctl+0x14f/0x2d0 [ 151.815762][ T6883] ? inet6_getname+0x650/0x650 [ 151.820572][ T6883] ? tomoyo_path_number_perm+0x5b4/0x620 [ 151.826246][ T6883] ? tomoyo_path_number_perm+0x217/0x620 [ 151.831923][ T6883] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 151.837436][ T6883] sock_do_ioctl+0xfc/0x310 [ 151.841999][ T6883] ? sock_show_fdinfo+0xb0/0xb0 [ 151.846956][ T6883] sock_ioctl+0x5ba/0x7e0 [ 151.851354][ T6883] ? sock_poll+0x3e0/0x3e0 [ 151.855831][ T6883] ? bpf_lsm_file_ioctl+0x9/0x10 [ 151.860809][ T6883] ? security_file_ioctl+0x80/0xa0 [ 151.865956][ T6883] ? sock_poll+0x3e0/0x3e0 [ 151.870423][ T6883] __se_sys_ioctl+0xfd/0x170 [ 151.875066][ T6883] do_syscall_64+0x55/0xb0 [ 151.879536][ T6883] ? clear_bhb_loop+0x40/0x90 [ 151.884255][ T6883] ? clear_bhb_loop+0x40/0x90 [ 151.888972][ T6883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.894914][ T6883] RIP: 0033:0x7f98c1f9ce59 [ 151.899369][ T6883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.919024][ T6883] RSP: 002b:00007f98c2f31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.927487][ T6883] RAX: ffffffffffffffda RBX: 00007f98c2215fa0 RCX: 00007f98c1f9ce59 [ 151.935519][ T6883] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000009 [ 151.943541][ T6883] RBP: 00007f98c2f31090 R08: 0000000000000000 R09: 0000000000000000 [ 151.951560][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.959570][ T6883] R13: 00007f98c2216038 R14: 00007f98c2215fa0 R15: 00007ffe11baf9d8 [ 151.967597][ T6883] [ 152.103841][ T6882] erspan0: refused to change device tx_queue_len [ 152.117050][ T6882] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 152.300690][ T6901] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.319'. [ 152.332909][ T6882] syz.3.313 (6882) used greatest stack depth: 19880 bytes left [ 152.425295][ T6907] veth1_macvtap: left promiscuous mode [ 152.433658][ T6907] macsec0: entered allmulticast mode [ 152.477003][ T6907] veth1_macvtap: entered promiscuous mode [ 152.497148][ T6907] veth1_macvtap: entered allmulticast mode [ 152.512998][ T6907] macsec0: entered promiscuous mode [ 152.724521][ T6913] netlink: 'syz.2.324': attribute type 21 has an invalid length. [ 152.736031][ T6913] netlink: 128 bytes leftover after parsing attributes in process `syz.2.324'. [ 152.752667][ T6913] netlink: 'syz.2.324': attribute type 4 has an invalid length. [ 152.760847][ T6913] netlink: 'syz.2.324': attribute type 5 has an invalid length. [ 152.774710][ T6913] netlink: 3 bytes leftover after parsing attributes in process `syz.2.324'. [ 153.062693][ T6921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.326'. [ 153.104977][ T6921] netlink: 'syz.1.326': attribute type 4 has an invalid length. [ 153.128338][ T6921] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.326'. [ 153.413804][ T6927] netlink: 14 bytes leftover after parsing attributes in process `syz.2.327'. [ 153.437146][ T6928] FAULT_INJECTION: forcing a failure. [ 153.437146][ T6928] name failslab, interval 1, probability 0, space 0, times 0 [ 153.468416][ T6928] CPU: 1 PID: 6928 Comm: syz.0.328 Not tainted syzkaller #0 [ 153.475782][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.485880][ T6928] Call Trace: [ 153.489196][ T6928] [ 153.492156][ T6928] dump_stack_lvl+0x18c/0x250 [ 153.496883][ T6928] ? show_regs_print_info+0x20/0x20 [ 153.502128][ T6928] ? load_image+0x420/0x420 [ 153.506670][ T6928] ? __might_sleep+0xe0/0xe0 [ 153.511310][ T6928] ? __lock_acquire+0x7d40/0x7d40 [ 153.516390][ T6928] should_fail_ex+0x39d/0x4d0 [ 153.521123][ T6928] should_failslab+0x9/0x20 [ 153.525678][ T6928] slab_pre_alloc_hook+0x59/0x310 [ 153.530751][ T6928] ? trace_event_raw_event_lock+0x250/0x250 [ 153.536705][ T6928] ? fib6_info_alloc+0x30/0xf0 [ 153.541535][ T6928] ? fib6_info_alloc+0x30/0xf0 [ 153.546357][ T6928] __kmem_cache_alloc_node+0x53/0x250 [ 153.551790][ T6928] ? fib6_get_table+0x39/0x260 [ 153.556626][ T6928] ? fib6_info_alloc+0x30/0xf0 [ 153.561455][ T6928] __kmalloc+0xa4/0x230 [ 153.565670][ T6928] fib6_info_alloc+0x30/0xf0 [ 153.570298][ T6928] ip6_route_info_create+0x44f/0x1240 [ 153.575735][ T6928] ? __lock_acquire+0x7d40/0x7d40 [ 153.580824][ T6928] ip6_route_add+0x28/0x160 [ 153.585379][ T6928] addrconf_add_dev+0x29c/0x3b0 [ 153.590255][ T6928] ? __ipv6_isatap_ifid+0x310/0x310 [ 153.595520][ T6928] ? __mutex_lock+0x4f9/0xcc0 [ 153.600240][ T6928] inet6_addr_add+0x215/0xb60 [ 153.604960][ T6928] ? __might_fault+0xaa/0x120 [ 153.609671][ T6928] addrconf_add_ifaddr+0x15a/0x1c0 [ 153.614813][ T6928] ? addrconf_set_dstaddr+0x320/0x320 [ 153.620210][ T6928] ? __lock_acquire+0x7d40/0x7d40 [ 153.625264][ T6928] ? slab_free_freelist_hook+0x130/0x1a0 [ 153.630939][ T6928] inet6_ioctl+0x14f/0x2d0 [ 153.635401][ T6928] ? inet6_getname+0x650/0x650 [ 153.640233][ T6928] ? tomoyo_path_number_perm+0x5b4/0x620 [ 153.645891][ T6928] ? tomoyo_path_number_perm+0x217/0x620 [ 153.651602][ T6928] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 153.657098][ T6928] sock_do_ioctl+0xfc/0x310 [ 153.661635][ T6928] ? sock_show_fdinfo+0xb0/0xb0 [ 153.666533][ T6928] sock_ioctl+0x5ba/0x7e0 [ 153.670895][ T6928] ? sock_poll+0x3e0/0x3e0 [ 153.675398][ T6928] ? bpf_lsm_file_ioctl+0x9/0x10 [ 153.680380][ T6928] ? security_file_ioctl+0x80/0xa0 [ 153.685523][ T6928] ? sock_poll+0x3e0/0x3e0 [ 153.689977][ T6928] __se_sys_ioctl+0xfd/0x170 [ 153.694623][ T6928] do_syscall_64+0x55/0xb0 [ 153.699071][ T6928] ? clear_bhb_loop+0x40/0x90 [ 153.703766][ T6928] ? clear_bhb_loop+0x40/0x90 [ 153.708465][ T6928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.714388][ T6928] RIP: 0033:0x7f98c1f9ce59 [ 153.718825][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.738455][ T6928] RSP: 002b:00007f98c2f31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.746898][ T6928] RAX: ffffffffffffffda RBX: 00007f98c2215fa0 RCX: 00007f98c1f9ce59 [ 153.754897][ T6928] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000009 [ 153.762916][ T6928] RBP: 00007f98c2f31090 R08: 0000000000000000 R09: 0000000000000000 [ 153.770940][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.778939][ T6928] R13: 00007f98c2216038 R14: 00007f98c2215fa0 R15: 00007ffe11baf9d8 [ 153.786952][ T6928] [ 153.871902][ T6931] netlink: 176 bytes leftover after parsing attributes in process `syz.1.329'. [ 154.107588][ T6940] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 154.601330][ T6962] netlink: 76 bytes leftover after parsing attributes in process `syz.3.339'. [ 154.611749][ T6960] netlink: 'syz.2.340': attribute type 10 has an invalid length. [ 154.645953][ T6960] netlink: 209280 bytes leftover after parsing attributes in process `syz.2.340'. [ 154.677332][ T6960] openvswitch: netlink: Flow key attr not present in new flow. [ 154.701570][ T6964] FAULT_INJECTION: forcing a failure. [ 154.701570][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 154.723925][ T6964] CPU: 1 PID: 6964 Comm: syz.1.341 Not tainted syzkaller #0 [ 154.731281][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.741371][ T6964] Call Trace: [ 154.744671][ T6964] [ 154.747635][ T6964] dump_stack_lvl+0x18c/0x250 [ 154.752360][ T6964] ? show_regs_print_info+0x20/0x20 [ 154.757593][ T6964] ? load_image+0x420/0x420 [ 154.762130][ T6964] ? __might_sleep+0xe0/0xe0 [ 154.766760][ T6964] ? __lock_acquire+0x7d40/0x7d40 [ 154.771821][ T6964] should_fail_ex+0x39d/0x4d0 [ 154.776543][ T6964] should_failslab+0x9/0x20 [ 154.781079][ T6964] slab_pre_alloc_hook+0x59/0x310 [ 154.786127][ T6964] ? up_read+0x20/0x20 [ 154.790219][ T6964] ? ipv6_add_addr+0x566/0x10d0 [ 154.795098][ T6964] __kmem_cache_alloc_node+0x53/0x250 [ 154.800506][ T6964] ? ipv6_add_addr+0x566/0x10d0 [ 154.805382][ T6964] kmalloc_trace+0x2a/0xe0 [ 154.809832][ T6964] ipv6_add_addr+0x566/0x10d0 [ 154.814541][ T6964] ? ipv6_count_addresses+0x190/0x190 [ 154.819950][ T6964] ? __might_fault+0xaa/0x120 [ 154.824648][ T6964] inet6_addr_add+0x57e/0xb60 [ 154.829352][ T6964] addrconf_add_ifaddr+0x15a/0x1c0 [ 154.834489][ T6964] ? addrconf_set_dstaddr+0x320/0x320 [ 154.839884][ T6964] ? __lock_acquire+0x7d40/0x7d40 [ 154.844930][ T6964] ? slab_free_freelist_hook+0x130/0x1a0 [ 154.850590][ T6964] inet6_ioctl+0x14f/0x2d0 [ 154.855041][ T6964] ? inet6_getname+0x650/0x650 [ 154.859844][ T6964] ? tomoyo_path_number_perm+0x5b4/0x620 [ 154.865525][ T6964] ? tomoyo_path_number_perm+0x217/0x620 [ 154.871193][ T6964] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 154.876704][ T6964] sock_do_ioctl+0xfc/0x310 [ 154.881241][ T6964] ? sock_show_fdinfo+0xb0/0xb0 [ 154.886129][ T6964] sock_ioctl+0x5ba/0x7e0 [ 154.890484][ T6964] ? sock_poll+0x3e0/0x3e0 [ 154.894934][ T6964] ? bpf_lsm_file_ioctl+0x9/0x10 [ 154.899903][ T6964] ? security_file_ioctl+0x80/0xa0 [ 154.905065][ T6964] ? sock_poll+0x3e0/0x3e0 [ 154.909512][ T6964] __se_sys_ioctl+0xfd/0x170 [ 154.914138][ T6964] do_syscall_64+0x55/0xb0 [ 154.918589][ T6964] ? clear_bhb_loop+0x40/0x90 [ 154.923285][ T6964] ? clear_bhb_loop+0x40/0x90 [ 154.927989][ T6964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.933926][ T6964] RIP: 0033:0x7f831c19ce59 [ 154.938369][ T6964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.958014][ T6964] RSP: 002b:00007f831cfb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.966482][ T6964] RAX: ffffffffffffffda RBX: 00007f831c415fa0 RCX: 00007f831c19ce59 [ 154.974502][ T6964] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000009 [ 154.982510][ T6964] RBP: 00007f831cfb0090 R08: 0000000000000000 R09: 0000000000000000 [ 154.990523][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.998526][ T6964] R13: 00007f831c416038 R14: 00007f831c415fa0 R15: 00007ffdf6cb2498 [ 155.006548][ T6964] [ 155.344745][ T6975] netlink: 'syz.1.344': attribute type 28 has an invalid length. [ 155.413648][ T6975] netlink: 132 bytes leftover after parsing attributes in process `syz.1.344'. [ 156.756420][ T7002] FAULT_INJECTION: forcing a failure. [ 156.756420][ T7002] name failslab, interval 1, probability 0, space 0, times 0 [ 156.797480][ T7002] CPU: 0 PID: 7002 Comm: syz.1.352 Not tainted syzkaller #0 [ 156.804839][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.814928][ T7002] Call Trace: [ 156.818233][ T7002] [ 156.821191][ T7002] dump_stack_lvl+0x18c/0x250 [ 156.825894][ T7002] ? show_regs_print_info+0x20/0x20 [ 156.832098][ T7002] ? load_image+0x420/0x420 [ 156.836651][ T7002] ? __might_sleep+0xe0/0xe0 [ 156.841271][ T7002] ? __lock_acquire+0x7d40/0x7d40 [ 156.846334][ T7002] should_fail_ex+0x39d/0x4d0 [ 156.851049][ T7002] should_failslab+0x9/0x20 [ 156.855591][ T7002] slab_pre_alloc_hook+0x59/0x310 [ 156.860646][ T7002] ? up_read+0x20/0x20 [ 156.864741][ T7002] ? ipv6_add_addr+0x566/0x10d0 [ 156.869615][ T7002] __kmem_cache_alloc_node+0x53/0x250 [ 156.875031][ T7002] ? ipv6_add_addr+0x566/0x10d0 [ 156.879926][ T7002] kmalloc_trace+0x2a/0xe0 [ 156.884376][ T7002] ipv6_add_addr+0x566/0x10d0 [ 156.889085][ T7002] ? ipv6_count_addresses+0x190/0x190 [ 156.894487][ T7002] ? __might_fault+0xaa/0x120 [ 156.899195][ T7002] inet6_addr_add+0x57e/0xb60 [ 156.903905][ T7002] addrconf_add_ifaddr+0x15a/0x1c0 [ 156.909045][ T7002] ? addrconf_set_dstaddr+0x320/0x320 [ 156.914449][ T7002] ? __lock_acquire+0x7d40/0x7d40 [ 156.919500][ T7002] ? slab_free_freelist_hook+0x130/0x1a0 [ 156.925154][ T7002] inet6_ioctl+0x14f/0x2d0 [ 156.929593][ T7002] ? inet6_getname+0x650/0x650 [ 156.934384][ T7002] ? tomoyo_path_number_perm+0x5b4/0x620 [ 156.940042][ T7002] ? tomoyo_path_number_perm+0x217/0x620 [ 156.945705][ T7002] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 156.951188][ T7002] sock_do_ioctl+0xfc/0x310 [ 156.955720][ T7002] ? sock_show_fdinfo+0xb0/0xb0 [ 156.960611][ T7002] sock_ioctl+0x5ba/0x7e0 [ 156.964967][ T7002] ? sock_poll+0x3e0/0x3e0 [ 156.969421][ T7002] ? bpf_lsm_file_ioctl+0x9/0x10 [ 156.974387][ T7002] ? security_file_ioctl+0x80/0xa0 [ 156.979520][ T7002] ? sock_poll+0x3e0/0x3e0 [ 156.983980][ T7002] __se_sys_ioctl+0xfd/0x170 [ 156.988606][ T7002] do_syscall_64+0x55/0xb0 [ 156.993062][ T7002] ? clear_bhb_loop+0x40/0x90 [ 156.997768][ T7002] ? clear_bhb_loop+0x40/0x90 [ 157.002467][ T7002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.008394][ T7002] RIP: 0033:0x7f831c19ce59 [ 157.012853][ T7002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.032480][ T7002] RSP: 002b:00007f831cfb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.040915][ T7002] RAX: ffffffffffffffda RBX: 00007f831c415fa0 RCX: 00007f831c19ce59 [ 157.048911][ T7002] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000009 [ 157.056897][ T7002] RBP: 00007f831cfb0090 R08: 0000000000000000 R09: 0000000000000000 [ 157.064887][ T7002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.072877][ T7002] R13: 00007f831c416038 R14: 00007f831c415fa0 R15: 00007ffdf6cb2498 [ 157.080878][ T7002] [ 157.433565][ T7017] validate_nla: 1 callbacks suppressed [ 157.433601][ T7017] netlink: 'syz.2.358': attribute type 3 has an invalid length. [ 157.487777][ T7017] netlink: 'syz.2.358': attribute type 8 has an invalid length. [ 157.507424][ T7017] netlink: 'syz.2.358': attribute type 6 has an invalid length. [ 157.515588][ T7017] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.358'. [ 157.540046][ T7016] netlink: 'syz.2.358': attribute type 3 has an invalid length. [ 157.556489][ T7016] netlink: 'syz.2.358': attribute type 8 has an invalid length. [ 157.575288][ T7016] netlink: 'syz.2.358': attribute type 6 has an invalid length. [ 157.584844][ T7016] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.358'. [ 158.214338][ T7038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.239058][ T7038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.249410][ T7038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.256890][ T7038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.363934][ T7042] FAULT_INJECTION: forcing a failure. [ 158.363934][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 158.395947][ T7042] CPU: 0 PID: 7042 Comm: syz.2.365 Not tainted syzkaller #0 [ 158.403339][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.413449][ T7042] Call Trace: [ 158.416764][ T7042] [ 158.419767][ T7042] dump_stack_lvl+0x18c/0x250 [ 158.424498][ T7042] ? show_regs_print_info+0x20/0x20 [ 158.429733][ T7042] ? load_image+0x420/0x420 [ 158.434276][ T7042] ? __might_sleep+0xe0/0xe0 [ 158.438905][ T7042] ? __lock_acquire+0x7d40/0x7d40 [ 158.444010][ T7042] should_fail_ex+0x39d/0x4d0 [ 158.448730][ T7042] should_failslab+0x9/0x20 [ 158.453268][ T7042] slab_pre_alloc_hook+0x59/0x310 [ 158.458328][ T7042] ? fib6_info_alloc+0x30/0xf0 [ 158.463115][ T7042] ? fib6_info_alloc+0x30/0xf0 [ 158.467901][ T7042] __kmem_cache_alloc_node+0x53/0x250 [ 158.473313][ T7042] ? fib6_get_table+0x39/0x260 [ 158.478136][ T7042] ? fib6_info_alloc+0x30/0xf0 [ 158.482929][ T7042] __kmalloc+0xa4/0x230 [ 158.487131][ T7042] fib6_info_alloc+0x30/0xf0 [ 158.491753][ T7042] ip6_route_info_create+0x44f/0x1240 [ 158.497185][ T7042] ? __kasan_kmalloc+0x8f/0xa0 [ 158.501988][ T7042] ? inet6_addr_add+0x57e/0xb60 [ 158.506865][ T7042] ? l3mdev_fib_table+0x18/0x160 [ 158.511838][ T7042] addrconf_f6i_alloc+0x1fa/0x440 [ 158.516901][ T7042] ? ip6_route_del+0x14f0/0x14f0 [ 158.521902][ T7042] ipv6_add_addr+0x5a4/0x10d0 [ 158.526611][ T7042] ? ipv6_count_addresses+0x190/0x190 [ 158.532014][ T7042] inet6_addr_add+0x57e/0xb60 [ 158.536749][ T7042] addrconf_add_ifaddr+0x15a/0x1c0 [ 158.541890][ T7042] ? addrconf_set_dstaddr+0x320/0x320 [ 158.547291][ T7042] ? __lock_acquire+0x7d40/0x7d40 [ 158.552341][ T7042] ? slab_free_freelist_hook+0x130/0x1a0 [ 158.558008][ T7042] inet6_ioctl+0x14f/0x2d0 [ 158.562456][ T7042] ? inet6_getname+0x650/0x650 [ 158.567269][ T7042] ? tomoyo_path_number_perm+0x5b4/0x620 [ 158.572979][ T7042] ? tomoyo_path_number_perm+0x217/0x620 [ 158.578663][ T7042] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 158.584173][ T7042] sock_do_ioctl+0xfc/0x310 [ 158.588720][ T7042] ? sock_show_fdinfo+0xb0/0xb0 [ 158.593622][ T7042] sock_ioctl+0x5ba/0x7e0 [ 158.598017][ T7042] ? sock_poll+0x3e0/0x3e0 [ 158.602481][ T7042] ? bpf_lsm_file_ioctl+0x9/0x10 [ 158.607457][ T7042] ? security_file_ioctl+0x80/0xa0 [ 158.612591][ T7042] ? sock_poll+0x3e0/0x3e0 [ 158.617034][ T7042] __se_sys_ioctl+0xfd/0x170 [ 158.621661][ T7042] do_syscall_64+0x55/0xb0 [ 158.626102][ T7042] ? clear_bhb_loop+0x40/0x90 [ 158.630800][ T7042] ? clear_bhb_loop+0x40/0x90 [ 158.635516][ T7042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.641456][ T7042] RIP: 0033:0x7fafba79ce59 [ 158.645892][ T7042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.665518][ T7042] RSP: 002b:00007fafbb6fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.674048][ T7042] RAX: ffffffffffffffda RBX: 00007fafbaa15fa0 RCX: 00007fafba79ce59 [ 158.682041][ T7042] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000009 [ 158.690036][ T7042] RBP: 00007fafbb6fb090 R08: 0000000000000000 R09: 0000000000000000 [ 158.698033][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.706024][ T7042] R13: 00007fafbaa16038 R14: 00007fafbaa15fa0 R15: 00007fff654f8298 [ 158.714058][ T7042] [ 159.198398][ T7056] netlink: 132 bytes leftover after parsing attributes in process `syz.1.368'. [ 160.216751][ T7073] FAULT_INJECTION: forcing a failure. [ 160.216751][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 160.230396][ T7073] CPU: 0 PID: 7073 Comm: syz.2.374 Not tainted syzkaller #0 [ 160.237730][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.247828][ T7073] Call Trace: [ 160.251152][ T7073] [ 160.254121][ T7073] dump_stack_lvl+0x18c/0x250 [ 160.258853][ T7073] ? show_regs_print_info+0x20/0x20 [ 160.264109][ T7073] ? load_image+0x420/0x420 [ 160.268671][ T7073] ? kasan_set_track+0x5f/0x70 [ 160.273482][ T7073] ? __kasan_kmalloc+0x8f/0xa0 [ 160.278302][ T7073] ? sctp_inet6addr_event+0x37f/0x730 [ 160.283738][ T7073] ? notifier_call_chain+0x197/0x380 [ 160.289078][ T7073] should_fail_ex+0x39d/0x4d0 [ 160.293824][ T7073] should_failslab+0x9/0x20 [ 160.298374][ T7073] slab_pre_alloc_hook+0x59/0x310 [ 160.303447][ T7073] ? sctp_addr_wq_mgmt+0x2db/0x6d0 [ 160.308606][ T7073] ? sctp_addr_wq_mgmt+0x2db/0x6d0 [ 160.313785][ T7073] __kmem_cache_alloc_node+0x53/0x250 [ 160.319230][ T7073] ? sctp_addr_wq_mgmt+0x2db/0x6d0 [ 160.324388][ T7073] __kmalloc_node_track_caller+0xa2/0x230 [ 160.330170][ T7073] kmemdup+0x2b/0x70 [ 160.334138][ T7073] sctp_addr_wq_mgmt+0x2db/0x6d0 [ 160.339131][ T7073] ? sctp_inet6addr_event+0x46c/0x730 [ 160.344554][ T7073] sctp_inet6addr_event+0x56c/0x730 [ 160.349816][ T7073] notifier_call_chain+0x197/0x380 [ 160.354985][ T7073] ? atomic_notifier_call_chain+0x26/0x180 [ 160.360878][ T7073] atomic_notifier_call_chain+0xda/0x180 [ 160.366570][ T7073] ipv6_add_addr+0xdde/0x10d0 [ 160.371304][ T7073] ? ipv6_count_addresses+0x190/0x190 [ 160.376738][ T7073] ? __might_fault+0xaa/0x120 [ 160.381480][ T7073] inet6_addr_add+0x57e/0xb60 [ 160.386216][ T7073] addrconf_add_ifaddr+0x15a/0x1c0 [ 160.391381][ T7073] ? addrconf_set_dstaddr+0x320/0x320 [ 160.396811][ T7073] ? __lock_acquire+0x7d40/0x7d40 [ 160.401882][ T7073] ? slab_free_freelist_hook+0x130/0x1a0 [ 160.407575][ T7073] inet6_ioctl+0x14f/0x2d0 [ 160.412046][ T7073] ? inet6_getname+0x650/0x650 [ 160.416863][ T7073] ? tomoyo_path_number_perm+0x5b4/0x620 [ 160.422542][ T7073] ? tomoyo_path_number_perm+0x217/0x620 [ 160.428215][ T7073] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 160.433746][ T7073] sock_do_ioctl+0xfc/0x310 [ 160.438317][ T7073] ? sock_show_fdinfo+0xb0/0xb0 [ 160.443244][ T7073] sock_ioctl+0x5ba/0x7e0 [ 160.447642][ T7073] ? sock_poll+0x3e0/0x3e0 [ 160.452136][ T7073] ? bpf_lsm_file_ioctl+0x9/0x10 [ 160.457119][ T7073] ? security_file_ioctl+0x80/0xa0 [ 160.462286][ T7073] ? sock_poll+0x3e0/0x3e0 [ 160.466776][ T7073] __se_sys_ioctl+0xfd/0x170 [ 160.471423][ T7073] do_syscall_64+0x55/0xb0 [ 160.476005][ T7073] ? clear_bhb_loop+0x40/0x90 [ 160.480725][ T7073] ? clear_bhb_loop+0x40/0x90 [ 160.485456][ T7073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.491399][ T7073] RIP: 0033:0x7fafba79ce59 [ 160.495851][ T7073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.515519][ T7073] RSP: 002b:00007fafbb6fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.523976][ T7073] RAX: ffffffffffffffda RBX: 00007fafbaa15fa0 RCX: 00007fafba79ce59 [ 160.531991][ T7073] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000009 [ 160.540010][ T7073] RBP: 00007fafbb6fb090 R08: 0000000000000000 R09: 0000000000000000 [ 160.548022][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.556043][ T7073] R13: 00007fafbaa16038 R14: 00007fafbaa15fa0 R15: 00007fff654f8298 [ 160.564078][ T7073] [ 161.255378][ T7096] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.380'. [ 161.270443][ T7096] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.380'. [ 161.309260][ T7096] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 161.319806][ T7096] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.380'. [ 161.669672][ T7113] FAULT_INJECTION: forcing a failure. [ 161.669672][ T7113] name failslab, interval 1, probability 0, space 0, times 0 [ 161.705188][ T7113] CPU: 1 PID: 7113 Comm: syz.1.385 Not tainted syzkaller #0 [ 161.712573][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.722670][ T7113] Call Trace: [ 161.725987][ T7113] [ 161.728961][ T7113] dump_stack_lvl+0x18c/0x250 [ 161.733691][ T7113] ? show_regs_print_info+0x20/0x20 [ 161.738937][ T7113] ? load_image+0x420/0x420 [ 161.743500][ T7113] ? __might_sleep+0xe0/0xe0 [ 161.748150][ T7113] ? __lock_acquire+0x7d40/0x7d40 [ 161.753236][ T7113] should_fail_ex+0x39d/0x4d0 [ 161.757977][ T7113] should_failslab+0x9/0x20 [ 161.762532][ T7113] slab_pre_alloc_hook+0x59/0x310 [ 161.767611][ T7113] ? trace_event_raw_event_lock+0x250/0x250 [ 161.773566][ T7113] ? fib6_info_alloc+0x30/0xf0 [ 161.778381][ T7113] ? fib6_info_alloc+0x30/0xf0 [ 161.783225][ T7113] __kmem_cache_alloc_node+0x53/0x250 [ 161.788654][ T7113] ? fib6_get_table+0x39/0x260 [ 161.793469][ T7113] ? fib6_info_alloc+0x30/0xf0 [ 161.798279][ T7113] __kmalloc+0xa4/0x230 [ 161.802491][ T7113] fib6_info_alloc+0x30/0xf0 [ 161.807139][ T7113] ip6_route_info_create+0x44f/0x1240 [ 161.812570][ T7113] ? __lock_acquire+0x7d40/0x7d40 [ 161.817650][ T7113] ? atomic_notifier_call_chain+0x26/0x180 [ 161.823507][ T7113] ip6_route_add+0x28/0x160 [ 161.828069][ T7113] addrconf_prefix_route+0x24d/0x330 [ 161.833401][ T7113] ? fib6_may_remove_gc_list+0x290/0x290 [ 161.839248][ T7113] ? atomic_notifier_call_chain+0x26/0x180 [ 161.845121][ T7113] ? ipv6_count_addresses+0x190/0x190 [ 161.850546][ T7113] ? inet6_addr_add+0x502/0xb60 [ 161.855446][ T7113] inet6_addr_add+0x64a/0xb60 [ 161.860190][ T7113] addrconf_add_ifaddr+0x15a/0x1c0 [ 161.865358][ T7113] ? addrconf_set_dstaddr+0x320/0x320 [ 161.870778][ T7113] ? __lock_acquire+0x7d40/0x7d40 [ 161.875844][ T7113] ? slab_free_freelist_hook+0x130/0x1a0 [ 161.881533][ T7113] inet6_ioctl+0x14f/0x2d0 [ 161.886008][ T7113] ? inet6_getname+0x650/0x650 [ 161.890835][ T7113] ? tomoyo_path_number_perm+0x5b4/0x620 [ 161.896535][ T7113] ? tomoyo_path_number_perm+0x217/0x620 [ 161.902214][ T7113] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 161.907729][ T7113] sock_do_ioctl+0xfc/0x310 [ 161.912290][ T7113] ? sock_show_fdinfo+0xb0/0xb0 [ 161.917215][ T7113] sock_ioctl+0x5ba/0x7e0 [ 161.921600][ T7113] ? sock_poll+0x3e0/0x3e0 [ 161.926082][ T7113] ? bpf_lsm_file_ioctl+0x9/0x10 [ 161.931069][ T7113] ? security_file_ioctl+0x80/0xa0 [ 161.936226][ T7113] ? sock_poll+0x3e0/0x3e0 [ 161.940721][ T7113] __se_sys_ioctl+0xfd/0x170 [ 161.945380][ T7113] do_syscall_64+0x55/0xb0 [ 161.949844][ T7113] ? clear_bhb_loop+0x40/0x90 [ 161.954558][ T7113] ? clear_bhb_loop+0x40/0x90 [ 161.959279][ T7113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.965223][ T7113] RIP: 0033:0x7f831c19ce59 [ 161.969683][ T7113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.989339][ T7113] RSP: 002b:00007f831cfb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.997799][ T7113] RAX: ffffffffffffffda RBX: 00007f831c415fa0 RCX: 00007f831c19ce59 [ 162.005815][ T7113] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000009 [ 162.013825][ T7113] RBP: 00007f831cfb0090 R08: 0000000000000000 R09: 0000000000000000 [ 162.021837][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.029852][ T7113] R13: 00007f831c416038 R14: 00007f831c415fa0 R15: 00007ffdf6cb2498 [ 162.037889][ T7113] [ 162.103215][ T7108] netlink: 'syz.0.383': attribute type 3 has an invalid length. [ 162.117641][ T7108] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.383'. [ 162.196826][ T7107] netlink: 'syz.0.383': attribute type 3 has an invalid length. [ 162.210581][ T7107] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.383'. [ 162.456026][ T7129] netlink: 'syz.2.393': attribute type 29 has an invalid length. [ 162.464609][ T7129] netlink: 'syz.2.393': attribute type 29 has an invalid length. [ 162.479406][ T7129] netlink: 'syz.2.393': attribute type 29 has an invalid length. [ 162.522688][ T7129] netlink: 'syz.2.393': attribute type 29 has an invalid length. [ 162.543386][ T7133] netlink: 'syz.1.390': attribute type 27 has an invalid length. [ 162.599673][ T7133] netlink: 164 bytes leftover after parsing attributes in process `syz.1.390'. [ 162.615205][ T7132] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.391'. [ 162.630867][ T7132] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 162.652552][ T7132] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 162.764382][ T7139] netlink: 128 bytes leftover after parsing attributes in process `syz.2.395'. [ 162.794296][ T7139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.910192][ T7135] netlink: 'syz.3.394': attribute type 4 has an invalid length. [ 163.250578][ T7149] FAULT_INJECTION: forcing a failure. [ 163.250578][ T7149] name failslab, interval 1, probability 0, space 0, times 0 [ 163.263967][ T7149] CPU: 0 PID: 7149 Comm: syz.0.398 Not tainted syzkaller #0 [ 163.271322][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 163.281458][ T7149] Call Trace: [ 163.284776][ T7149] [ 163.287740][ T7149] dump_stack_lvl+0x18c/0x250 [ 163.292473][ T7149] ? show_regs_print_info+0x20/0x20 [ 163.297762][ T7149] ? load_image+0x420/0x420 [ 163.302306][ T7149] ? rt6_nlmsg_size+0xd0/0x490 [ 163.307139][ T7149] ? __lock_acquire+0x7d40/0x7d40 [ 163.312228][ T7149] should_fail_ex+0x39d/0x4d0 [ 163.316979][ T7149] should_failslab+0x9/0x20 [ 163.321536][ T7149] slab_pre_alloc_hook+0x59/0x310 [ 163.326634][ T7149] ? rt6_nlmsg_size+0x404/0x490 [ 163.331544][ T7149] kmem_cache_alloc_node+0x60/0x320 [ 163.336811][ T7149] ? __alloc_skb+0x103/0x2c0 [ 163.341451][ T7149] __alloc_skb+0x103/0x2c0 [ 163.345905][ T7149] inet6_rt_notify+0xb4/0x240 [ 163.350628][ T7149] fib6_add+0x1dc3/0x49c0 [ 163.355012][ T7149] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 163.360698][ T7149] ? do_raw_spin_lock+0x11f/0x2c0 [ 163.365792][ T7149] ? __rwlock_init+0x150/0x150 [ 163.370597][ T7149] ? ip6_route_add+0x75/0x160 [ 163.375324][ T7149] ip6_route_add+0x8a/0x160 [ 163.379874][ T7149] addrconf_prefix_route+0x24d/0x330 [ 163.385197][ T7149] ? fib6_may_remove_gc_list+0x290/0x290 [ 163.390946][ T7149] ? atomic_notifier_call_chain+0x26/0x180 [ 163.396816][ T7149] ? ipv6_count_addresses+0x190/0x190 [ 163.402221][ T7149] ? __might_fault+0xaa/0x120 [ 163.406934][ T7149] inet6_addr_add+0x64a/0xb60 [ 163.411656][ T7149] addrconf_add_ifaddr+0x15a/0x1c0 [ 163.416800][ T7149] ? addrconf_set_dstaddr+0x320/0x320 [ 163.422208][ T7149] ? __lock_acquire+0x7d40/0x7d40 [ 163.427277][ T7149] ? slab_free_freelist_hook+0x130/0x1a0 [ 163.432949][ T7149] inet6_ioctl+0x14f/0x2d0 [ 163.437406][ T7149] ? inet6_getname+0x650/0x650 [ 163.442204][ T7149] ? tomoyo_path_number_perm+0x5b4/0x620 [ 163.447870][ T7149] ? tomoyo_path_number_perm+0x217/0x620 [ 163.453534][ T7149] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 163.459129][ T7149] sock_do_ioctl+0xfc/0x310 [ 163.463669][ T7149] ? sock_show_fdinfo+0xb0/0xb0 [ 163.468569][ T7149] sock_ioctl+0x5ba/0x7e0 [ 163.472939][ T7149] ? sock_poll+0x3e0/0x3e0 [ 163.477392][ T7149] ? bpf_lsm_file_ioctl+0x9/0x10 [ 163.482352][ T7149] ? security_file_ioctl+0x80/0xa0 [ 163.487481][ T7149] ? sock_poll+0x3e0/0x3e0 [ 163.491922][ T7149] __se_sys_ioctl+0xfd/0x170 [ 163.496542][ T7149] do_syscall_64+0x55/0xb0 [ 163.500985][ T7149] ? clear_bhb_loop+0x40/0x90 [ 163.505688][ T7149] ? clear_bhb_loop+0x40/0x90 [ 163.510389][ T7149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.516316][ T7149] RIP: 0033:0x7f98c1f9ce59 [ 163.520754][ T7149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.540770][ T7149] RSP: 002b:00007f98c2f31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.549226][ T7149] RAX: ffffffffffffffda RBX: 00007f98c2215fa0 RCX: 00007f98c1f9ce59 [ 163.557227][ T7149] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000009 [ 163.565234][ T7149] RBP: 00007f98c2f31090 R08: 0000000000000000 R09: 0000000000000000 [ 163.573438][ T7149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.581442][ T7149] R13: 00007f98c2216038 R14: 00007f98c2215fa0 R15: 00007ffe11baf9d8 [ 163.589459][ T7149] [ 163.647076][ T7155] netlink: 'syz.2.400': attribute type 46 has an invalid length. [ 163.672326][ T7154] netlink: 'syz.2.400': attribute type 46 has an invalid length. [ 163.765668][ T7154] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.400'. [ 165.071718][ T7180] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.081214][ T7180] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.090414][ T7180] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.099594][ T7180] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.108838][ T7180] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.118008][ T7180] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.127274][ T7180] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 167.746748][ T7210] netlink: 'syz.2.415': attribute type 2 has an invalid length. [ 167.776290][ T7210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.415'. [ 168.050241][ T7219] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 168.073364][ T7219] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.418'. [ 168.495200][ T7228] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.422'. [ 168.542089][ T7228] net_ratelimit: 3322 callbacks suppressed [ 168.542105][ T7228] openvswitch: netlink: Key type 4112 is out of range max 32 [ 168.890510][ T7243] netlink: 'syz.2.426': attribute type 2 has an invalid length. [ 168.917345][ T7243] netlink: 'syz.2.426': attribute type 1 has an invalid length. [ 168.925077][ T7243] netlink: 9 bytes leftover after parsing attributes in process `syz.2.426'. [ 170.454954][ T7265] netlink: 'syz.1.434': attribute type 21 has an invalid length. [ 170.464108][ T7265] netlink: 128 bytes leftover after parsing attributes in process `syz.1.434'. [ 170.473678][ T7265] netlink: 'syz.1.434': attribute type 4 has an invalid length. [ 170.516353][ T7265] netlink: 'syz.1.434': attribute type 5 has an invalid length. [ 170.548284][ T7265] netlink: 3 bytes leftover after parsing attributes in process `syz.1.434'. [ 170.781099][ T7277] netlink: 'syz.3.438': attribute type 2 has an invalid length. [ 170.809864][ T7277] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 170.833832][ T7277] netlink: 'syz.3.438': attribute type 8 has an invalid length. [ 170.929330][ T7277] netlink: 44 bytes leftover after parsing attributes in process `syz.3.438'. [ 171.296646][ T7289] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.442'. [ 171.463032][ T7297] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.443'. [ 171.629456][ T7297] netlink: 132 bytes leftover after parsing attributes in process `syz.2.443'. [ 176.241347][ T7369] .@ÿ: renamed from bond_slave_0 (while UP) [ 177.260643][ T7402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.332809][ T7400] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.472'. [ 177.640897][ T7424] validate_nla: 4 callbacks suppressed [ 177.640921][ T7424] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 180.630917][ T7424] geneve0: entered promiscuous mode [ 180.650951][ T7418] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 181.359264][ T7456] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.488'. [ 181.380778][ T7455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.487'. [ 181.390497][ T7456] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 181.403404][ T7456] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 183.029685][ T7485] ªªªªªª: renamed from vlan0 (while UP) [ 183.088810][ T7494] netlink: 'syz.3.502': attribute type 29 has an invalid length. [ 183.105514][ T7494] netlink: 'syz.3.502': attribute type 29 has an invalid length. [ 183.152092][ T7497] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.503'. [ 183.167990][ T7497] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 183.176456][ T7497] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 184.905976][ T7538] netlink: 'syz.0.517': attribute type 17 has an invalid length. [ 184.956115][ T7538] netlink: 'syz.0.517': attribute type 16 has an invalid length. [ 184.993828][ T7538] netlink: 152 bytes leftover after parsing attributes in process `syz.0.517'. [ 185.994682][ T7547] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.519'. [ 186.042450][ T7547] openvswitch: netlink: Duplicate key (type 0). [ 186.375478][ T7557] netlink: 'syz.2.524': attribute type 21 has an invalid length. [ 186.468824][ T7563] netlink: 'syz.3.526': attribute type 1 has an invalid length. [ 186.481278][ T7563] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.526'. [ 186.857548][ T7572] netlink: 'syz.1.531': attribute type 17 has an invalid length. [ 186.874556][ T7572] netlink: 'syz.1.531': attribute type 16 has an invalid length. [ 186.882636][ T7572] netlink: 152 bytes leftover after parsing attributes in process `syz.1.531'. [ 187.116006][ T7583] netlink: 'syz.1.533': attribute type 3 has an invalid length. [ 187.128841][ T7583] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.533'. [ 187.697817][ T7605] netlink: 'syz.1.542': attribute type 4 has an invalid length. [ 188.424458][ T7618] syzkaller0: entered promiscuous mode [ 188.430815][ T7618] syzkaller0: entered allmulticast mode [ 189.314297][ T7641] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.551'. [ 189.655529][ T7644] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.552'. [ 190.485593][ T7644] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.552'. [ 190.622351][ T7650] netlink: 'syz.3.554': attribute type 39 has an invalid length. [ 190.680231][ T7654] netlink: 'syz.0.555': attribute type 29 has an invalid length. [ 190.732474][ T7654] netlink: 'syz.0.555': attribute type 29 has an invalid length. [ 190.749645][ T7657] netlink: 'syz.0.555': attribute type 29 has an invalid length. [ 190.759187][ T7648] syzkaller0: entered promiscuous mode [ 190.775068][ T7648] syzkaller0: entered allmulticast mode [ 190.793821][ T7654] netlink: 'syz.0.555': attribute type 29 has an invalid length. [ 190.823363][ T7657] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.555'. [ 191.032085][ T7665] netlink: 'syz.0.559': attribute type 10 has an invalid length. [ 191.042008][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.050779][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.144587][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.151919][ T7665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.159779][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.167062][ T7665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.206960][ T7665] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 191.286328][ T7668] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.561'. [ 191.307466][ T7668] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 191.340763][ T7668] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 191.471697][ T7675] netlink: 'syz.0.564': attribute type 4 has an invalid length. [ 191.508079][ T7675] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.564'. [ 192.130369][ T7703] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.572'. [ 192.209673][ T7703] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 192.247352][ T7703] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.572'. [ 192.585790][ T7710] syzkaller0: entered promiscuous mode [ 192.593598][ T7710] syzkaller0: entered allmulticast mode [ 192.724297][ T7723] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.577'. [ 192.741656][ T7723] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 192.772914][ T7723] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 192.793937][ T7726] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.579'. [ 192.807499][ T7726] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 194.623020][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.633092][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.748508][ T7748] C: renamed from team_slave_0 [ 194.771469][ T7748] netlink: 152 bytes leftover after parsing attributes in process `syz.0.584'. [ 194.871531][ T7747] netlink: 'syz.1.583': attribute type 10 has an invalid length. [ 194.890955][ T7747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.583'. [ 195.001804][ T7747] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 195.111686][ T7752] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 195.679936][ T7747] syz.1.583 (7747) used greatest stack depth: 19560 bytes left [ 195.936356][ T7770] @0Ù: renamed from bond_slave_1 (while UP) [ 196.169860][ T7773] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.592'. [ 196.605631][ T7777] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.593'. [ 196.635707][ T7777] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 196.669091][ T7777] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 197.713747][ T7806] netlink: 'syz.0.600': attribute type 8 has an invalid length. [ 197.742028][ T7806] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.600'. [ 197.980027][ T7807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.603'. [ 198.230729][ T7815] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.605'. [ 198.245284][ T7815] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 198.269275][ T7815] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 198.620483][ T7819] netlink: 'syz.2.607': attribute type 29 has an invalid length. [ 198.666005][ T7819] netlink: 'syz.2.607': attribute type 29 has an invalid length. [ 198.690931][ T7820] netlink: 'syz.2.607': attribute type 29 has an invalid length. [ 199.607441][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 199.627372][ T7843] netlink: 152 bytes leftover after parsing attributes in process `syz.0.614'. [ 200.024262][ T7852] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.618'. [ 200.046592][ T7852] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 200.063148][ T7852] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 202.180044][ T7875] sit0: entered allmulticast mode [ 202.185674][ T7877] sctp: [Deprecated]: syz.0.626 (pid 7877) Use of int in max_burst socket option deprecated. [ 202.185674][ T7877] Use struct sctp_assoc_value instead [ 202.281895][ T7878] sit0: entered promiscuous mode [ 202.417703][ T7883] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.627'. [ 202.584037][ T7891] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.629'. [ 202.825435][ T7897] netlink: 10 bytes leftover after parsing attributes in process `syz.3.630'. [ 203.034773][ T7901] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.632'. [ 203.117503][ T7901] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 203.142014][ T7901] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 203.814523][ T7923] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 203.834391][ T7923] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 204.140943][ T7933] netlink: 'syz.0.641': attribute type 29 has an invalid length. [ 204.149510][ T7933] netlink: 'syz.0.641': attribute type 29 has an invalid length. [ 204.545933][ T7941] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.646'. [ 204.622616][ T7941] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 204.693506][ T7941] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 205.292020][ T7959] netlink: 10 bytes leftover after parsing attributes in process `syz.1.657'. [ 206.897027][ T7988] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.659'. [ 206.966399][ T7988] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 207.004904][ T7988] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 207.042447][ T7996] netlink: 'syz.2.660': attribute type 10 has an invalid length. [ 207.073320][ T7996] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.660'. [ 207.101041][ T5779] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 207.551617][ T8010] syzkaller0: entered promiscuous mode [ 207.567875][ T8010] syzkaller0: entered allmulticast mode [ 209.907253][ T8025] netlink: 'syz.3.667': attribute type 2 has an invalid length. [ 209.915088][ T8025] netlink: 'syz.3.667': attribute type 4 has an invalid length. [ 209.923522][ T8025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.667'. [ 209.935127][ T8026] netlink: 'syz.3.667': attribute type 2 has an invalid length. [ 209.963711][ T8026] netlink: 'syz.3.667': attribute type 4 has an invalid length. [ 210.011116][ T8026] netlink: 132 bytes leftover after parsing attributes in process `syz.3.667'. [ 210.254082][ T8040] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.671'. [ 210.283019][ T8040] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 210.293192][ T8040] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 211.038312][ T8052] netlink: 'syz.2.676': attribute type 2 has an invalid length. [ 212.073779][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 212.079941][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 212.085983][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 212.092521][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 212.580046][ T8079] syzkaller0: entered promiscuous mode [ 212.585631][ T8079] syzkaller0: entered allmulticast mode [ 212.642767][ T8093] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.683'. [ 212.661407][ T8093] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 212.687054][ T8093] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 215.618282][ T8129] netlink: 'syz.0.697': attribute type 11 has an invalid length. [ 215.659367][ T8129] netlink: 168 bytes leftover after parsing attributes in process `syz.0.697'. [ 215.737639][ T8134] netlink: 'syz.1.698': attribute type 10 has an invalid length. [ 215.843129][ T8136] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.700'. [ 215.860651][ T8136] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 215.871636][ T8136] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 216.047327][ T8144] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 216.186558][ T8144] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 216.464804][ T8150] delete_channel: no stack [ 216.766581][ T8176] netlink: 'syz.1.711': attribute type 10 has an invalid length. [ 216.788733][ T8176] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.807404][ T8176] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.831094][ T8176] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.848812][ T8176] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.135174][ T8188] @0Ù: renamed from bond_slave_1 (while UP) [ 217.409607][ T8192] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.716'. [ 217.430161][ T8192] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 217.458974][ T8192] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 218.003781][ T8206] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.721'. [ 218.004174][ T8208] netlink: 830 bytes leftover after parsing attributes in process `syz.0.722'. [ 218.335127][ T8214] netlink: 'syz.3.723': attribute type 11 has an invalid length. [ 218.929725][ T8232] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.731'. [ 218.959656][ T8232] netlink: 'syz.1.731': attribute type 29 has an invalid length. [ 218.969411][ T8232] netlink: 'syz.1.731': attribute type 29 has an invalid length. [ 219.021593][ T8236] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.733'. [ 219.036411][ T8230] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.730'. [ 219.072259][ T8236] netlink: zone id is out of range [ 219.081403][ T8230] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 219.131237][ T8230] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 220.105852][ T8267] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.138211][ T8267] netlink: 1 bytes leftover after parsing attributes in process `syz.2.742'. [ 220.208509][ T8271] netlink: 'syz.0.744': attribute type 10 has an invalid length. [ 220.275963][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.284239][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.361881][ T8271] bond0: (slave bridge0): Releasing backup interface [ 220.474301][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.483227][ T8271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.493223][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.501240][ T8271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.704601][ T8271] team0: Port device bridge0 added [ 220.812063][ T8271] syz.0.744 (8271) used greatest stack depth: 17896 bytes left [ 220.990793][ T8283] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.747'. [ 221.050566][ T8283] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 221.147845][ T8283] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 221.405490][ T8297] netlink: 'syz.0.752': attribute type 21 has an invalid length. [ 221.427139][ T8297] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.449183][ T8297] IPv6: Can't replace route, no match found [ 221.475847][ T8301] netlink: 'syz.2.754': attribute type 25 has an invalid length. [ 221.495970][ T8301] netlink: 'syz.2.754': attribute type 28 has an invalid length. [ 222.207196][ T8320] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.759'. [ 222.217470][ T8320] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 222.226397][ T8320] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 222.653497][ T8326] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.761'. [ 222.676836][ T8326] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.761'. [ 222.874288][ T8330] €Â0: renamed from batadv_slave_1 (while UP) [ 223.064390][ T8340] netlink: 'syz.2.766': attribute type 9 has an invalid length. [ 223.095901][ T8340] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.766'. [ 223.303509][ T8343] netlink: 'syz.1.767': attribute type 4 has an invalid length. [ 223.317412][ T8343] netlink: 152 bytes leftover after parsing attributes in process `syz.1.767'. [ 223.845729][ T8355] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.771'. [ 223.869266][ T8355] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 223.899045][ T8361] netlink: 'syz.3.772': attribute type 10 has an invalid length. [ 223.927409][ T8361] netdevsim netdevsim3 ÿÿÿÿÿÿ: entered promiscuous mode [ 223.941721][ T8355] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 224.169778][ T8359] netlink: 'syz.3.772': attribute type 39 has an invalid length. [ 224.370174][ T8372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.392880][ T8372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.431439][ T8372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.443110][ T8372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.114168][ T8387] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.779'. [ 226.076688][ T8402] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.784'. [ 226.109626][ T8402] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 226.141237][ T8402] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 226.174631][ T8410] netlink: 'syz.3.787': attribute type 29 has an invalid length. [ 226.337314][ T8410] netlink: 'syz.3.787': attribute type 29 has an invalid length. [ 226.423719][ T8415] netlink: 'syz.3.787': attribute type 29 has an invalid length. [ 226.463585][ T8419] netlink: 'syz.3.787': attribute type 29 has an invalid length. [ 226.501394][ T8418] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.789'. [ 226.556690][ T8423] netlink: 'syz.0.791': attribute type 33 has an invalid length. [ 226.584904][ T8423] netlink: 152 bytes leftover after parsing attributes in process `syz.0.791'. [ 227.600735][ T8450] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.799'. [ 227.618327][ T8450] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 227.627081][ T8450] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 228.787467][ T8488] raw_sendmsg: syz.1.807 forgot to set AF_INET. Fix it! [ 231.549065][ T8497] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 231.557377][ T8497] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.810'. [ 231.616696][ T8501] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.811'. [ 231.642678][ T8502] netlink: 'syz.1.812': attribute type 9 has an invalid length. [ 231.654005][ T8501] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 231.677783][ T8502] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.812'. [ 231.689325][ T8501] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 231.709245][ T8497] netlink: 128 bytes leftover after parsing attributes in process `syz.0.810'. [ 231.747495][ T8497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.820910][ T8497] netlink: 'syz.0.810': attribute type 3 has an invalid length. [ 231.835366][ T8497] netlink: 132 bytes leftover after parsing attributes in process `syz.0.810'. [ 232.190691][ T8521] netlink: 'syz.3.817': attribute type 10 has an invalid length. [ 232.228132][ T8521] netdevsim netdevsim3 ÿÿÿÿÿÿ: left promiscuous mode [ 232.384479][ T8526] netlink: set zone limit has 8 unknown bytes [ 233.055365][ T8541] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.823'. [ 233.077701][ T8541] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 233.098733][ T8541] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 233.694047][ T8556] netlink: 763 bytes leftover after parsing attributes in process `syz.0.828'. [ 233.718658][ T8559] netlink: 14 bytes leftover after parsing attributes in process `syz.1.827'. [ 233.748788][ T8559] netlink: 188 bytes leftover after parsing attributes in process `syz.1.827'. [ 234.543844][ T8573] C: renamed from team_slave_0 (while UP) [ 234.675444][ T8573] netlink: 'syz.2.833': attribute type 4 has an invalid length. [ 234.699982][ T8573] netlink: 116 bytes leftover after parsing attributes in process `syz.2.833'. [ 234.752934][ T8573] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 234.847869][ T8580] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 234.898454][ T8580] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 235.016640][ T8584] netlink: 'syz.3.837': attribute type 21 has an invalid length. [ 235.341715][ T8597] netlink: 'syz.2.839': attribute type 28 has an invalid length. [ 235.351682][ T8597] netlink: 'syz.2.839': attribute type 29 has an invalid length. [ 235.360262][ C0] [ 235.360269][ C0] ================================ [ 235.360274][ C0] WARNING: inconsistent lock state [ 235.360292][ C0] syzkaller #0 Not tainted [ 235.360300][ C0] -------------------------------- [ 235.360305][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 235.360312][ C0] syz.0.840/8599 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 235.360330][ C0] ffffffff8d297c78 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x89/0xbb0 [ 235.360395][ C0] {INITIAL USE} state was registered at: [ 235.360401][ C0] lock_acquire+0x19e/0x420 [ 235.360421][ C0] _raw_write_lock_irq+0xaf/0xf0 [ 235.360445][ C0] kernfs_rename_ns+0x5d0/0x810 [ 235.360467][ C0] sysfs_rename_link_ns+0x175/0x1b0 [ 235.360482][ C0] device_rename+0x110/0x1e0 [ 235.360503][ C0] dev_change_name+0x307/0x8c0 [ 235.360522][ C0] do_setlink+0x9fc/0x4130 [ 235.360540][ C0] rtnl_newlink+0x17da/0x20a0 [ 235.360556][ C0] rtnetlink_rcv_msg+0x869/0xfa0 [ 235.360574][ C0] netlink_rcv_skb+0x241/0x4d0 [ 235.360590][ C0] netlink_unicast+0x751/0x8d0 [ 235.360603][ C0] netlink_sendmsg+0x8d0/0xbf0 [ 235.360618][ C0] __sys_sendto+0x4a9/0x6b0 [ 235.360634][ C0] __x64_sys_sendto+0xde/0xf0 [ 235.360650][ C0] do_syscall_64+0x55/0xb0 [ 235.360666][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.360689][ C0] irq event stamp: 204 [ 235.360694][ C0] hardirqs last enabled at (203): [] do_syscall_64+0x61/0xb0 [ 235.360718][ C0] hardirqs last disabled at (204): [] noist_exc_debug+0x4d/0x120 [ 235.360742][ C0] softirqs last enabled at (0): [] copy_process+0x96e/0x3dc0 [ 235.360763][ C0] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 235.360776][ C0] [ 235.360776][ C0] other info that might help us debug this: [ 235.360785][ C0] Possible unsafe locking scenario: [ 235.360785][ C0] [ 235.360789][ C0] CPU0 [ 235.360791][ C0] ---- [ 235.360794][ C0] lock(kernfs_rename_lock); [ 235.360805][ C0] [ 235.360808][ C0] lock(kernfs_rename_lock); [ 235.360818][ C0] [ 235.360818][ C0] *** DEADLOCK *** [ 235.360818][ C0] [ 235.360821][ C0] 2 locks held by syz.0.840/8599: [ 235.360830][ C0] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x26/0x180 [ 235.360874][ C0] #1: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xb9/0x3e0 [ 235.360915][ C0] [ 235.360915][ C0] stack backtrace: [ 235.360920][ C0] CPU: 0 PID: 8599 Comm: syz.0.840 Not tainted syzkaller #0 [ 235.360936][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 235.360946][ C0] Call Trace: [ 235.360952][ C0] <#DB> [ 235.360958][ C0] dump_stack_lvl+0x18c/0x250 [ 235.360981][ C0] ? show_regs_print_info+0x20/0x20 [ 235.361006][ C0] ? print_usage_bug+0x475/0x690 [ 235.361026][ C0] ? verify_lock_unused+0x18/0x140 [ 235.361048][ C0] lock_acquire+0x2c2/0x420 [ 235.361070][ C0] ? kernfs_path_from_node+0x89/0xbb0 [ 235.361113][ C0] ? read_lock_is_recursive+0x20/0x20 [ 235.361137][ C0] ? trace_event_raw_event_lock+0x250/0x250 [ 235.361165][ C0] ? bsearch+0x8e/0xb0 [ 235.361188][ C0] _raw_read_lock_irqsave+0xbc/0x100 [ 235.361214][ C0] ? kernfs_path_from_node+0x89/0xbb0 [ 235.361239][ C0] ? _raw_read_lock+0x50/0x50 [ 235.361263][ C0] ? rcu_is_watching+0x15/0xb0 [ 235.361287][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 235.361306][ C0] ? lock_release+0xb5/0x8c0 [ 235.361327][ C0] ? percpu_ref_tryget+0x15/0x180 [ 235.361357][ C0] kernfs_path_from_node+0x89/0xbb0 [ 235.361383][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 235.361424][ C0] ? internal_get_user_pages_fast+0x142d/0x2760 [ 235.361450][ C0] ? lock_release+0xb5/0x8c0 [ 235.361471][ C0] ? kernfs_name+0x140/0x140 [ 235.361497][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 235.361518][ C0] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 235.361539][ C0] get_mm_memcg_path+0xb9/0x360 [ 235.361569][ C0] __mmap_lock_do_trace_start_locking+0xe6/0x2f0 [ 235.361600][ C0] ? __bpf_trace_mmap_lock_acquire_returned+0x230/0x230 [ 235.361648][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 235.361676][ C0] ? _raw_spin_unlock+0x28/0x40 [ 235.361706][ C0] stack_map_get_build_id_offset+0x5cd/0x720 [ 235.361735][ C0] ? pcpu_freelist_pop+0x12a/0x190 [ 235.361763][ C0] ? __bpf_get_stackid+0x900/0x900 [ 235.361786][ C0] ? perf_prepare_sample+0x156d/0x1df0 [ 235.361824][ C0] __bpf_get_stackid+0x55c/0x900 [ 235.361855][ C0] bpf_prog_12712c88fd19bd5b+0x29/0x2d [ 235.361874][ C0] bpf_overflow_handler+0x1fc/0x510 [ 235.361903][ C0] ? __perf_event_overflow+0x4f8/0x630 [ 235.361923][ C0] ? bpf_overflow_handler+0xde/0x510 [ 235.361949][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 235.361980][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 235.362004][ C0] __perf_event_overflow+0x447/0x630 [ 235.362035][ C0] perf_swevent_event+0x319/0x570 [ 235.362077][ C0] ? perf_tp_event+0x1520/0x1520 [ 235.362098][ C0] ? trace_call_bpf+0x5e9/0x6c0 [ 235.362126][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 235.362162][ C0] perf_bp_event+0x319/0x430 [ 235.362188][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 235.362210][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 235.362254][ C0] ? lock_acquire+0x2c2/0x420 [ 235.362281][ C0] hw_breakpoint_exceptions_notify+0x2fb/0x670 [ 235.362309][ C0] notifier_call_chain+0x197/0x380 [ 235.362341][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 235.362367][ C0] atomic_notifier_call_chain+0xda/0x180 [ 235.362394][ C0] notify_die+0x145/0x1a0 [ 235.362420][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 235.362455][ C0] notify_debug+0x2e/0x50 [ 235.362472][ C0] exc_debug+0xde/0x140 [ 235.362497][ C0] asm_exc_debug+0x1e/0x40 [ 235.362524][ C0] RIP: 0010:__get_user_nocheck_8+0xd/0x20 [ 235.362550][ C0] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca [ 235.362566][ C0] RSP: 0000:ffffc9000c51f558 EFLAGS: 00040802 [ 235.362582][ C0] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff920018a3eca [ 235.362596][ C0] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 0000000000000000 [ 235.362608][ C0] RBP: 0000200000000300 R08: 000000000000007f R09: 0000000000000000 [ 235.362619][ C0] R10: dffffc0000000000 R11: fffffbfff2239aa1 R12: 0000000000000001 [ 235.362632][ C0] R13: 1ffff920018a3ec8 R14: 000000000000007f R15: dffffc0000000000 [ 235.362657][ C0] [ 235.362662][ C0] [ 235.362667][ C0] perf_callchain_user+0xbe4/0x15c0 [ 235.362708][ C0] get_perf_callchain+0x394/0x510 [ 235.362730][ C0] ? put_callchain_entry+0xb0/0xb0 [ 235.362749][ C0] ? perf_trace_lock+0xfc/0x3b0 [ 235.362781][ C0] ? __perf_event_header__init_id+0x3be/0x480 [ 235.362805][ C0] perf_prepare_sample+0x3c7/0x1df0 [ 235.362831][ C0] ? read_lock_is_recursive+0x20/0x20 [ 235.362854][ C0] ? perf_callchain+0x220/0x220 [ 235.362881][ C0] perf_event_output_forward+0x187/0x3e0 [ 235.362903][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 235.362923][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 235.362944][ C0] ? finish_task_switch+0x265/0x8f0 [ 235.362966][ C0] ? finish_task_switch+0x326/0x8f0 [ 235.362987][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 235.363012][ C0] __perf_event_overflow+0x447/0x630 [ 235.363040][ C0] perf_swevent_overflow+0x268/0x340 [ 235.363069][ C0] ? perf_event_switch_output+0x790/0x790 [ 235.363104][ C0] perf_swevent_event+0x45c/0x570 [ 235.363128][ C0] ? perf_tp_event+0x1520/0x1520 [ 235.363149][ C0] ? plist_add+0x3d8/0x490 [ 235.363181][ C0] perf_bp_event+0x319/0x430 [ 235.363213][ C0] ? futex_wait_queue+0x27/0x1b0 [ 235.363236][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 235.363268][ C0] ? futex_wait+0x4cc/0x5e0 [ 235.363285][ C0] ? verify_lock_unused+0x140/0x140 [ 235.363330][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 235.363360][ C0] notifier_call_chain+0x197/0x380 [ 235.363383][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 235.363407][ C0] atomic_notifier_call_chain+0xda/0x180 [ 235.363430][ C0] notify_die+0x145/0x1a0 [ 235.363453][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 235.363483][ C0] notify_debug+0x2e/0x50 [ 235.363498][ C0] noist_exc_debug+0x77/0x120 [ 235.363519][ C0] ? clear_bhb_loop+0x40/0x90 [ 235.363536][ C0] asm_exc_debug+0x33/0x40 [ 235.363559][ C0] RIP: 0033:0x7f98c1f7bbfd [ 235.363572][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 235.363584][ C0] RSP: 002b:00007f98c2f0f8a8 EFLAGS: 00000283 [ 235.363597][ C0] RAX: 0000000000000300 RBX: 00007f98c2f0fde0 RCX: 2f666c65732f636f [ 235.363608][ C0] RDX: 0000200000000300 RSI: 00007f98c205d140 RDI: 0000200000000300 [ 235.363620][ C0] RBP: 0000200000000300 R08: 00007f98c2f10010 R09: 00000000ffffffff [ 235.363631][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 235.363640][ C0] R13: 0000000000000073 R14: 00007f98c20320dd R15: 00007f98c2f0fea0 [ 235.363661][ C0]