last executing test programs: 3.587591451s ago: executing program 0 (id=8570): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x161) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x9c) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, 0x0}, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc2b868}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300b000040000000a0000008000000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/15, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x5, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 3.512680125s ago: executing program 2 (id=8572): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="2000000020008104090f9becdb4cb92e0a000069bd7d910000eaf60d00086b02", 0x20}], 0x1}, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r2}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map, 0x24, 0x1, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f00000003c0)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}, @alu={0x7, 0x0, 0xc, 0x6, 0xb, 0x8, 0x4}], &(0x7f0000000400)='syzkaller\x00', 0x4, 0xc0, &(0x7f0000000440)=""/192, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x5, 0x5, 0x100}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000580), &(0x7f00000005c0)=[{0x5, 0x1, 0xb}, {0x0, 0x3, 0x10, 0xb}, {0x8, 0x2, 0x4}, {0x1, 0x5, 0x3, 0x3}, {0x2, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x5, 0x8}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r10, r8, 0x2d, 0x0, 0x0, @void, @value=r11, @void, @void, r9}, 0x20) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b00)={[{0x2d, 'cpuacct'}, {0x2b, 'io'}, {0x2b, 'net'}]}, 0x12) 3.397039102s ago: executing program 3 (id=8573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) close(0x3) (async) 3.295083898s ago: executing program 0 (id=8574): r0 = socket$kcm(0x2, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000240)={r0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = syz_clone(0x10000000, &(0x7f00000008c0)="20dad91e8d26351cbfd829ba8f3832fb49d7951547d36a31c6f8b0ba0fcd1fac713f26c797ff1d379cb14fc53592bfa3102f5c7b3fed7ce1f69f5c28c3355561c389572ad5491d", 0x47, 0x0, &(0x7f0000000980), &(0x7f0000001780)="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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x4, 0x0, 0x4, 0x6, 0x0, 0xc, 0x20000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x400, 0x800000000004, 0x30f, 0x1, 0x8, 0xa2b4, 0x6, 0x0, 0x5, 0x0, 0x7f}, r2, 0x6, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) 2.835041265s ago: executing program 3 (id=8575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) perf_event_open(&(0x7f0000001980)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x2, 0x0, 0xfffffc60, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf0900000000000026090600000003e7040000000600000018010000786c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffff020000000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b7000000000000029500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) (async) perf_event_open(&(0x7f0000001980)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x2, 0x0, 0xfffffc60, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf0900000000000026090600000003e7040000000600000018010000786c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffff020000000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b7000000000000029500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2.787114638s ago: executing program 4 (id=8576): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) (async) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xdf, 0x9, 0x0, 0x0, 0x1, 0x50046, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x10000, 0x5}, 0x8400, 0xfffffffffffffffb, 0x6, 0x0, 0x3, 0xffffffff, 0x10, 0x0, 0x10005, 0x0, 0xdc}, 0x0, 0x4, r3, 0x2) (async) close(r3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000a300)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='(())') r5 = socket$kcm(0xa, 0x6, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0x2, &(0x7f0000000040)=r6, 0x17) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', r2, r6, 0x2, 0x5, 0x3}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r1, 0x4, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) (async, rerun: 64) r9 = socket$kcm(0x10, 0x3, 0x10) (rerun: 64) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d80000002c0081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) syz_clone(0x10800000, &(0x7f0000000280)="4c156f897eba0b13a794c3ded50d5a2cfc86d155b251711158f4e895a51d1cfe457221833e398fe85267418bd61a458d145be9d849c60a31e18c1c8b95f4e85fae674c67886c45796065767d5b8c28230420f56238178e80e87463bdafca8f9d06359b6d35c41038fc467fea016562dbee72a0898fc11bb94b30d174b43fa702766cc63ca92e53474b46c83d4ad25f343ae65e554cb01fb3e35a354c8fac02008983a8d273ff9f61186a7ee14dc8", 0xae, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000500)="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") 2.698446013s ago: executing program 2 (id=8577): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xb, 0x16, 0x1, 0x0, 0x40000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20000041) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) sendmsg$tipc(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="bbb5ef4a64908be87e17437d3fb56dce3685dd9c90383da9ae2aa21ebf5cfb3109a58a58674222978d7b4eb6992b20af4437ff8cb9f75b71f7163cc55aafffda2f0cfd9ac239dee2a357e245a635665df9a7fbe9b2167e4a35740bd39b55a8cd13131693f7da0d594f346a87dd8866d77fa332c99f01c4086cb7615cdcc1a417a47025603aa6dcad85ca645eb961917833a1117a3bdcd6a9d647804a539d5590397a7505d44ba0c2310dd3b1557cf3f83adedd1fcf166d5fff73d1d0f4c62de8840ce46245de231486b324db1ec843e0b4f8f533eb06a4ea4b29", 0xda}, {&(0x7f0000000240)="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", 0xfa}, {&(0x7f00000003c0)="29e35ac857784023b3e179f99eb5019fb5f5fe20be1b890bb9cafe790183832ce0e61ae1fe6eb1f6e90854859b9a734a33b850be07052d44c39e3763a63d413394829829354c523f012f095c890cc765f4f970bb51343572a49be847521bb01561e80caab798b3c0c05b32d35f17fcb97a14e0b86e445fbdd0a6f4fcca791c74997324aa85b3166896175fed", 0x8c}, {&(0x7f0000000480)="5d6e46f78a566873f8ab1cb1a5ad5820da91e3e09ae5aa997524422f6733e66e86bdaf002aab471eea82d8787a2677cc318cd326a2cdcade4f5fd4ab28305af5a2aafbc82fc3d92fa312447cfac860c83ede44505af414ba8f8fdf8a6ad6a9eda22031eed22b174743db779b1238f7a3c8bcb91ed67d01179ca7207afe1275b138ebe245eb408a19529eefbe4fa374fc82e9089354b1f795ff108e159f3c32", 0x9f}, {&(0x7f0000000540)="36630dd9384d8e16b81ec1e59a0e441b277f7ea78c1212a7097c5a772df1650eb34bdb09e9454773ed36ad47d535756cef04be5c7b754ed32ceb79a237975ff890c3f380f3826ce58f5c17c0f8ce06724eb9044c3276dfefdf0c37eeca5651162411d0f3092b73c1169c099b942d41b931d9b8ba5757a8adbf5869eb779b73a3841b53816efab511168bf7c27e784fd8156750e464f9c55856780c764de24898907e1d034715921ec2521fb04a4cfde4c683fb1ddee8bb1c7a4926f100d3ebc27cf8f14ddfe1967cd47be35d0eb002782a2df1ba160e66c4fa2c1bc82dbe", 0xde}, {&(0x7f00000007c0)="adb9a9cfc7290ff16d319cd2d906cbb4482572e8b3abb81a6de9a4d67fa47d9c2f95fa2af47daf6d0c6f5874cbe4bc4a8afbb1ea49252864e9a9ad4cfbeba24d8ddc251fd3f7e5c96e6c414bba1a49687ba2544a0df829ece6d4634975eb6b", 0x5f}], 0x6, &(0x7f0000000980)="e5862e18d1a5ecfd256478461371c16231ea6b743a15f8b1344301bfc20dc10a79773a7d2742b37530fdead3ae4d461d45492da3cb72261662f9223a29ed2aecefcafc449607ab859b8cfc5bb02fd2eb342ebb1144e9eb0fbe37f364b8cdd6954422c96b4c53428693c17bbbbd3a04d01ab0acaa7eb0b8124fa7bb43dc51da6391d694d7ce20f67f11da64cfa316de9ce75506d8ac3cafc9cc946eb27854d839d901913f3d745292955f4bef65027b83871f27fdbb199d8c9275840294e40bfea18bc5f03414354a6c145de8cdf624aab5b9845d39d7e21845", 0xd9, 0x81}, 0x40) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000008c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xb, 0x16, 0x1, 0x0, 0x40000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20000041) (async) socket$kcm(0xa, 0x2, 0x88) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) (async) sendmsg$tipc(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="bbb5ef4a64908be87e17437d3fb56dce3685dd9c90383da9ae2aa21ebf5cfb3109a58a58674222978d7b4eb6992b20af4437ff8cb9f75b71f7163cc55aafffda2f0cfd9ac239dee2a357e245a635665df9a7fbe9b2167e4a35740bd39b55a8cd13131693f7da0d594f346a87dd8866d77fa332c99f01c4086cb7615cdcc1a417a47025603aa6dcad85ca645eb961917833a1117a3bdcd6a9d647804a539d5590397a7505d44ba0c2310dd3b1557cf3f83adedd1fcf166d5fff73d1d0f4c62de8840ce46245de231486b324db1ec843e0b4f8f533eb06a4ea4b29", 0xda}, {&(0x7f0000000240)="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", 0xfa}, {&(0x7f00000003c0)="29e35ac857784023b3e179f99eb5019fb5f5fe20be1b890bb9cafe790183832ce0e61ae1fe6eb1f6e90854859b9a734a33b850be07052d44c39e3763a63d413394829829354c523f012f095c890cc765f4f970bb51343572a49be847521bb01561e80caab798b3c0c05b32d35f17fcb97a14e0b86e445fbdd0a6f4fcca791c74997324aa85b3166896175fed", 0x8c}, {&(0x7f0000000480)="5d6e46f78a566873f8ab1cb1a5ad5820da91e3e09ae5aa997524422f6733e66e86bdaf002aab471eea82d8787a2677cc318cd326a2cdcade4f5fd4ab28305af5a2aafbc82fc3d92fa312447cfac860c83ede44505af414ba8f8fdf8a6ad6a9eda22031eed22b174743db779b1238f7a3c8bcb91ed67d01179ca7207afe1275b138ebe245eb408a19529eefbe4fa374fc82e9089354b1f795ff108e159f3c32", 0x9f}, {&(0x7f0000000540)="36630dd9384d8e16b81ec1e59a0e441b277f7ea78c1212a7097c5a772df1650eb34bdb09e9454773ed36ad47d535756cef04be5c7b754ed32ceb79a237975ff890c3f380f3826ce58f5c17c0f8ce06724eb9044c3276dfefdf0c37eeca5651162411d0f3092b73c1169c099b942d41b931d9b8ba5757a8adbf5869eb779b73a3841b53816efab511168bf7c27e784fd8156750e464f9c55856780c764de24898907e1d034715921ec2521fb04a4cfde4c683fb1ddee8bb1c7a4926f100d3ebc27cf8f14ddfe1967cd47be35d0eb002782a2df1ba160e66c4fa2c1bc82dbe", 0xde}, {&(0x7f00000007c0)="adb9a9cfc7290ff16d319cd2d906cbb4482572e8b3abb81a6de9a4d67fa47d9c2f95fa2af47daf6d0c6f5874cbe4bc4a8afbb1ea49252864e9a9ad4cfbeba24d8ddc251fd3f7e5c96e6c414bba1a49687ba2544a0df829ece6d4634975eb6b", 0x5f}], 0x6, &(0x7f0000000980)="e5862e18d1a5ecfd256478461371c16231ea6b743a15f8b1344301bfc20dc10a79773a7d2742b37530fdead3ae4d461d45492da3cb72261662f9223a29ed2aecefcafc449607ab859b8cfc5bb02fd2eb342ebb1144e9eb0fbe37f364b8cdd6954422c96b4c53428693c17bbbbd3a04d01ab0acaa7eb0b8124fa7bb43dc51da6391d694d7ce20f67f11da64cfa316de9ce75506d8ac3cafc9cc946eb27854d839d901913f3d745292955f4bef65027b83871f27fdbb199d8c9275840294e40bfea18bc5f03414354a6c145de8cdf624aab5b9845d39d7e21845", 0xd9, 0x81}, 0x40) (async) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000008c0)) (async) 2.552675011s ago: executing program 3 (id=8578): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000003d00)=r4, 0x3b) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={&(0x7f0000000b40)="48d3ad91d38d8e8aff71ecf2928cddad3c250be90582fdfc0e136a01f97f5815ac4134b4f46db3231a1161ee99e16b534146af9ae59a7c32304364fa34da4fc68005ab918b46778fbfb4b085e07dfb0e26380bb4e032e4cc3d19e19c58bfeaed5910dcc706e1b8b97f37a036799a320e1a25f112dfa99349cd682fb51603cf3b985e45243c6feb1ce0", &(0x7f0000000c00)=""/132, &(0x7f0000000cc0)="70b2236283", &(0x7f0000000d00)="17d4c89bd12d4a349a6d15791580945ce69ff63182733208d61c58a86f4cd4435523f91b74b1c8c585103b831cd2baf6b350fb1e93ad6c6ac3e7e78e2911710d133b6836f9075a6ad83f603132f169ae0e55b217bb0fed29ef361ad231316b61fe77a5c9e9d31456366b6236ee5fe0f8d47e9237a5f16d134030c90f2658fd763674145dd94ea85796cd8e72919b44e899af78075315cf842e0881edf973cb", 0x5, r4, 0x4}, 0x38) r5 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000640)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x3d, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e00000003000000090000000400000020100000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="03000000040000000100000006000800"/28], 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)=""/115, 0x16d, 0x73, 0x1, 0x3, 0x10000}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r10}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYBLOB="ac3c8c928cf7067390ff2ad80ae9122881f7b60545a2b0ff1e4c7482d845b18b4084db7a4e3828e39f59eabca09dc0a8a8d1267b0fbbddf3bd124f557ee6ff9eede1c86c02b95077cfd0ac6feeb9373d7b93987c6bc71b61f6c16091893ffdc49523c9f5b43575a060a15fb237", @ANYRES8, @ANYRESHEX=r9], &(0x7f0000000380)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b8f}, 0x94) 2.544578762s ago: executing program 4 (id=8580): socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twr'], 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000140)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffd, 0xfffffffffffffffe}, 0x1fa04, 0xc4, 0xc2ba, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2.530635873s ago: executing program 2 (id=8581): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="f6ffffff7f00000000000000fcffffff850000002900000085000000aa0000009500000008000000ca"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) 2.317780445s ago: executing program 1 (id=8582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r2) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000000000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000023f5d05a391e29afb2906f6000000000000000"], 0x48) close(r1) (async) socketpair(0x1d, 0x1, 0xc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89e0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000ec0), 0x10}, 0x94) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e0028000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x8400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000dc0)={'syzkaller0\x00', 0x2}) (async) r10 = syz_clone(0x11000, &(0x7f00000001c0)="514153ded5872aee49ce5cc047c37a147f4bb0650f4aa4def1887c3b76062a3f9b63ddaf3c3ab8816e8f6d1017358e6cdce9faf201633f7cb328bdc985144470bbb652e7b70f48a8d75242a5f6160e601052c43ba2b953c8f5600a9e0c48afc377ee99db6eec0fe5df998f8cfc34c11085bf8e539cae9288090c05232ae85fb4a2adf434a16c8e9d695107d6317f9138a73a98b9c52fca291d1c9d484eb23600131704f06a1c868aa8", 0xa9, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000340)="11904c5c40aefe518bb28ead8eca1b00c88b2915cc293dc03d596b94f433a1974f7a6c86a89cb9729ce92952c353f0f7883a254f7b369a864fac5b8d62c638755baeb662b208ae656211487c37d6907f4f6bd54f24d24750ff3fc606bbc675d877c62f26509c2196d6f1b6cba4a62a7d646cf308f24da9e18cd06839c3fd6efa118e890e379b133d0cee03a9f4193eb18ff981d3646d783040ce85dae0e4fa186268abbd3d7426b8d6057c202a0beadc50adbf60435df69a326a0781232cd02dcab6dc949002e3eb0d02fd15c8752afd15662fab4b43cce95a52a60782947ba8e370") (async) r11 = perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0xa2, 0x7, 0xf, 0x0, 0x2, 0x10524, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f0000000280), 0x8}, 0x850b, 0x2, 0x4, 0x0, 0x2, 0x5, 0x8001, 0x0, 0x6, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xad, 0x5, 0x0, 0x7, 0x0, 0x7, 0xd591, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xb, 0x1}, 0xc04, 0x5, 0x800, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffeff, 0x0, 0x6}, r10, 0x6, r11, 0xa) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000fcff00000000000000800000850000002700000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000540)="38f1511dc5d95147c589f7230ee8fd3dab95f030159ef64429d4119475cc17171c1a2189709a2d13b6d2e3e1a6ba9a2ddf18b74331ec812bf0af98c2097234951e", 0x41}, {&(0x7f00000005c0)='d', 0x1}, {&(0x7f00000006c0)="987107b4c3b4add9b4f2df65bc7b201cb22bb7268435aea0f9bab33f0f9cda4322999a1d0b505943320f8c6320f6d127c9b8bcd9a4a6532f034f79c571939768fd030633203ea46872af03b25c2a41fca8d28f282e0873235c26bb2cff575c9a4d2bef2f86c101bab5688333242e3da1", 0x70}, {&(0x7f0000000740)="793cbd31d3ba003addc37f275ad01d2994329f4b10b092d89ab50f0755dfc29a7a209a4437894a0030e05652ab0d1b71bff934277b07ea1a093b5d10c45d77fda0e719d780636ad2ebe34e131669c8268a675c4a855e58682cc9d714785948e77803db7f7e51a4b3c3a8ec57d5c88c18c4a12b15547de8f015640034110f487b84651622d462566e64039863d95e3ee3dc84755b0114f4cfe313e53d5ca046a778ecd239f22dc371a86a4ad850871c241fd0a849d774da48c29bb919e82995454429af213b5f62046cf6", 0xca}, {&(0x7f0000000a40)="a64e109f14b8f149cb8c83b7845c51298bb7ae58784e3659d3b0b3a7cdfcbb41a7e47974290fa1e979a59a269b3af7d208990974d2ed5f8044359e6c024ee32ce99c085b653c153509b38874218475a8cc889685c89f8eadc12f068124af538443ac0720854ebf484d81b0706ad54c001f3748ddf2ede148af465380667b7b638d77b1968f946010104e090a", 0x8c}, {&(0x7f0000000840)="c5e9edb8bfd37c2f16aaa4b69e44cf53e4939e6cdd495d159ea80156433208ed62789edf52ace705ae0d1a4e4d59ebed5c57d1149a80963cecc09f7a2973d5485768681e9671b1b794f3661194bc642c03e5986ab660e910e5871ef68747608f022598b19aebe8bf65f29563b95cc9cc", 0x70}, {&(0x7f0000000640)="77ecfec3dc015317a535587874", 0xd}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000b00)="2c56c78f418aafc7ebfc13447e760e505de41574e03297e0385b5e54569088c75b00659cfee86317023d60beff2d290dff29979a9ad0d0bfc271b20bcd3021dc4dc2adb13fc2604b93bf10d18035eaa5f6fd74c3780518420e91cbfbed5811a92a7f253ce5bbaf8c9761ec548f1e151f678162777968f1869a3f18243da1a77323882ff440460fd4dbbe3c4491298470b51d38b759e6e6b0017052b8f4f8422a7f8d9cf6e6feed63b19a5053cc176321642ff8b10c75d72e65b985dba8b6e59aaf03292185b0aee7917f26359d76ea6d78e507734eeb5224", 0xd8}, {&(0x7f0000000c00)="5853ebd7f9bdc1f6eb00f1e86566595a92c8e3dbbcf510894efdc1825897070f27fb767f68b7227cfd5b6560127564c20135b3f361bc2bd7b09b88c2313da74850f07c273960cbcc054b778585ad9b1c388c305b52168893a47eff84649ae580d043584b152bb5d3dd73f6d972249c35fd0ff306783c165c6b8b5b3ff6f68088c1d1972a5466a9db489108b32c362e29d104631d857f1cd4c4a2918ff8c3f0cfbc0fe77bd666787b8b1a3fe64b5c5e1b488a501126fe11a759e40885288f920ef50e228f6cef42d99955dedf0901", 0xce}], 0xa}, 0x800) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000500)={'veth0\x00', @broadcast}) 2.06077305s ago: executing program 2 (id=8583): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x101000, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}, 0x20040000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4) 2.06025255s ago: executing program 4 (id=8584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200880, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x100) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0xb, 0x1, 0x5, 0x8, 0x0, 0x10001, 0x50250, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x110, 0x9, 0x6, 0x3, 0xa, 0x3, 0x2, 0x0, 0xfffffff9, 0x0, 0x8}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='{\x00') ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000140)=0x5a) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='{\x00') r2 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xb, 0x6, 0xfc, 0x6c, 0x0, 0xff, 0x30000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x4108, 0x9, 0x100, 0x3, 0x5, 0x1, 0x6, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0xd, r1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/42, 0x2a}], 0x2, &(0x7f00000004c0)=""/43, 0x2b}, 0x0) sendmsg$sock(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000540)="0f95611eb2260d637d5a22e1a1e62178cf6b75300a498f2bb1592094c818dafa40303b0ed2a006472a163b95c91babd679a8c02b154d6d170f5e", 0x3a}, {&(0x7f0000000580)="e70c3e6733a4e94319e6cd45ebb27396f71b10a2572b1e4083a488d284a01c69b6eb71629ef3a73b73e8c67fe15cd25b58a48b86e2f22d74985104d13d5068bdf5cd13abd37a59cf4e27b421f799660db93aaa48bae97a58f3180bc14bbce353c5d41a60cbb4ca4fcc2e4453e999deaf35d07777937b6a7231dbb416c5619dda1a7349ba7656acce11960882d5901bc32da2145061bed9efe00f505d63e45808609af557e3caf28997f1fe9088ab04aa0c7b071e9c4d49fff08d863fefedbef53787ced91fa911afd1bb600ae4b09d", 0xcf}, {&(0x7f0000000680)="0fce2a42139f3b5008452575cbc0b50ec73e7c13162c877a430e8f07866bbddbe7084586fe585fb2607967002be632fe6192160aa3dad2c0c30326a2484041d7915b3be16d76159462b928f004b75225c9226caaf8f7e25d0021c1bf680d4dee1a9ee6cb9877fa3c312777f5d5ee9f1a2e6a970a059f85a166bfae363ac3fd2e6c580a8c87d1bf19b9bce19e0f2b77a10105b3f9d5bc210521470a", 0x9b}, {&(0x7f0000000740)}, {&(0x7f0000000780)="04856932c99aadf405aa6865f0294272ab1d18848d01d271", 0x18}, {&(0x7f00000007c0)="f0c5026529a111c8421d2d9dca995cc4672055feda51a0cb005a383a6e45b9184dcd41bdf0436f7f43c666c3c4526b77b1a4accee446a892c04194ebe48a15aa589c5676701bb02bf8fad573d99ffedc98d4d6ba471460901c6d2b8d98d88aea4723325bdb3d286d90739b2068a97449289f7e7b5bb5a694bd991538b0b9a49651", 0x81}, {&(0x7f0000000880)="14a5e5c2f3d13ef19853945a7767287be726bd5a9393837912bcdb0992ead8cbf435989cb542860d0f5941558781e7472f4bd9f59d397e416647620dbff1997593d62ac220530c9db0c5339c0621d03b95a0fdf3d0a0b78d5ea56f5535064687445831d13a5860aad8a6e8264fd7ec59bdb6f72ca4a6b1612cd5617cc3be95b5c9549e4a8c1ddf05a4afcb6b3fe6931511fc1b6a989144e2bfc132c3d1", 0x9d}, {&(0x7f0000000940)="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", 0xff}, {&(0x7f0000000a40)="89a33b58aafe9fa06041ee49c35b05fa8e10d745f9948b05a1239d", 0x1b}], 0x9, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x4000000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x14d}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}, 0x84080) r5 = socket$kcm(0x29, 0x7, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000c40)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0xa, [@enum={0x7, 0x3, 0x0, 0x6, 0x4, [{0x7, 0x2}, {0x2, 0x3}, {0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x5}]}, @float={0x8, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x2e, 0x61, 0x2e, 0x30, 0x30, 0x2e, 0x5f, 0x4f]}}, &(0x7f0000001080)=""/44, 0x8a, 0x2c, 0x1, 0x6}, 0x28) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0\x00', 0x0, 0x4000, r6}, 0x18) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x5c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000012c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x15, &(0x7f0000000e00)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xd3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x2a}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000ec0)='GPL\x00', 0x2, 0xb8, &(0x7f0000000f00)=""/184, 0xf72d39507d431c89, 0x10, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000001100)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001400)=[r10, r11, r12, r13, r14], &(0x7f0000001440)=[{0x4, 0x3, 0xc, 0xb}, {0x1, 0x4, 0x1, 0x5}, {0x0, 0x1, 0x8, 0x5}, {0x1, 0x5, 0x7, 0x4}, {0x3, 0x800, 0x5}], 0x10, 0x7}, 0x94) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000001580)=""/11) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7) ioctl$TUNSETOFFLOAD(r12, 0x400454d0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001740)={r15, &(0x7f0000001640)="dcc06c32cf9012568db560ece51637e011ebea293c0d06f5dc85cb1db5e0bc43ed167ad3376ece281aaf1d63f501574a739c0cc1c565a6230620532f669ce51435b8e49289a9f769a987378d14552bd6483e7645de042bfdce4e8c58bfe8b2899b390132aa7ddb3d5b916725127188fd79c1c4c6a3f6248a723071bf10aa998f0a13a7042001095f5117f24d5c41", &(0x7f0000001700)=""/62, 0x4}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001780)={r1}) 1.581260058s ago: executing program 0 (id=8585): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53b0711a55d47470a8daa76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53b0711a55d47470a8daa76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d40)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d63f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef441792b8deacf5a43cf699b0d2314908aa79a0d8e64e396865463db4dc070e2e7d7298ce48805761fd32b37419c35d5369e01633a27e0e84d78ca4143942bb15afd7c35adcc51a591e45480f0298721487f5939cd97db46a2f3cfaec5a40d1001b2f26b18f654b7e0cac23647", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d40)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d63f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef441792b8deacf5a43cf699b0d2314908aa79a0d8e64e396865463db4dc070e2e7d7298ce48805761fd32b37419c35d5369e01633a27e0e84d78ca4143942bb15afd7c35adcc51a591e45480f0298721487f5939cd97db46a2f3cfaec5a40d1001b2f26b18f654b7e0cac23647", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0600000004000000020000000500000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0xa, 0x3, 0x3a) (async) socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d0000f803600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d0000f803600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000000", @ANYRES32=r4, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000400"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000340)="f917a452f4d8706c9510786485800baa3ebce562559d3f08367b4712c2355b282dbeb62c87913e265c4290d54d005b3fc7380ca21dee3810a805c37ecf7bc069082d7d9d7ad4303bf40244cf342163389642bce9cbcd94b0fbaf2b4cbec54591f1fa30938a6d1158d81b0e46c02edc6e673c6a942b16d5b7b462b9e397f8cf4f81e9e74ab695354810b6f9c1c9b4c5ce77a56cb3762f6f4299ffe92a47afa29c725cee9721569958e8b5feb7a9d02ec7e098174530270a0af33f29f9b88c9f38d78f437ccc4c50f573c5710f3c7e58fa552227c6d50aab1b7c0ba0d03816d3a24ff761db392bbbd42115", &(0x7f00000006c0)=""/226, &(0x7f00000007c0)="19bd871c0e64fbe91adce462a2597aab897267426d16020588e5903892933d808bca13f8ca88acbdc619155835cae52f4983386d9855692008a6b68e3705aebfa0316168b5041aa1a7df343e359a1a63f0424fa367f8e1d80813d2e4e3f7b6e081c076079f8f685066a82ec172e44047f2c2c8fbf850ee561e98e220aedba001718908e037ec3a8ff700d41a9bac96299f9ba261ef90cf720d274b55bf48bcb316d14bc23710b8e69c210588d4f32d50298c1625c957b01816b0e2a9ad3fe0c235c2559abf28689ac8342f3522431ad34d60a6b2de8fe8872a6ea4b9c43ace5c", &(0x7f0000000000)="0464a4c060fa66e6cf62372886a5750845c37e184b248cf06d8bd2f48d6a2cad90bf322e9af93878918be79076f39f2fc91e549a2d23", 0xa04, r7}, 0x38) close(r5) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="85000000b900000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000d400000010000000350000000000000095000000000000005727f060e0b274e73dbd0f85d0cd2a1fc5c546297f000000d870402345f4cd32986892c237bec9e7604d0ffcf86e2f89820d233697b0f0a23c7aa27429916b566f48ced9dba83f1d32743dfadedcb674e0a75cacbbc0df8d43627b0bacfed05f3df0f47d5114c516c44048712b753711651d760ccfd477785226b6e714aaa5c94145e2c8061d1b877a4831fc946568a845c36344c25056aecc0d902c9fc6b03e0f5d7d28"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) r9 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000440)={r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000440)={r6}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000540)=r8, 0x4) write$cgroup_subtree(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x11, &(0x7f0000000bc0)=ANY=[@ANYBLOB="851000000c"], &(0x7f0000000fc0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x41100, 0xa}, 0x94) 1.564124639s ago: executing program 2 (id=8586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000280), 0x105, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f00000002c0), &(0x7f0000000540)=""/174}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x2}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x2b, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x6, 0x11e, &(0x7f0000000200), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r9, @ANYRESOCT, @ANYRES32=r9, @ANYRES32=r8, @ANYRES16, @ANYRESOCT=r6, @ANYRESHEX=r9, @ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x47e9, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000c80)=ANY=[], 0x48) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}, {&(0x7f0000000680)="660f829e3add48b05d82", 0xa}, {&(0x7f0000000800)="adb34727cc508abe1092fb01d95f9d0b31e87dc442f8138c9cc8cf1b0c1a7739d77b8b8b866bf66652153568d1e213d1e80340c008953706529e544e531cb033ddcf0335f2ecbad8877601ba128693aac2a93e8c20509fa86df2", 0x5a}, {&(0x7f00000009c0)}], 0x4}, 0x0) 1.500783343s ago: executing program 1 (id=8587): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001800000000786c250000000000202020db1af8ff51000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001800000000786c250000000000202020db1af8ff51000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000280)="39000000120081ae0000dc676f97daf01effffff0521018701546fabca1b4e8a06a6580e88370200c5090000009c40ebb3734b49bbc51245e7", 0x39}], 0x1}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', r1, r3, 0x2, 0x3, 0x4}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x3}]}, @float={0x4, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x30, 0x30, 0x5f, 0x5f, 0x61, 0x30, 0x2e]}}, &(0x7f0000000300)=""/95, 0x42, 0x5f, 0x1, 0x9, 0x10000}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x3}]}, @float={0x4, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x30, 0x30, 0x5f, 0x5f, 0x61, 0x30, 0x2e]}}, &(0x7f0000000300)=""/95, 0x42, 0x5f, 0x1, 0x9, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x5, 0x0, 0x2, 0x1008, r4, 0xfff, '\x00', 0x0, r5, 0x1, 0x4, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x5, 0x0, 0x2, 0x1008, r4, 0xfff, '\x00', 0x0, r5, 0x1, 0x4, 0x4}, 0x50) 1.479773984s ago: executing program 3 (id=8588): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="65f9f5ba", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000291200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009f437bcd850000008200000018130000", @ANYRES32=0x1, @ANYBLOB="000000000000000087ba1800f0ffffff"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000800000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, 0x0}, 0x20) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r9) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r8, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4ec7}, 0x94) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b50c19c25a9228210d5aea3e1f6de161725ea3"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x90300000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @jmp={0x5, 0x0, 0x4, 0x3, 0xb, 0xfffffffffffffff0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1f, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000009000000000000000008000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c050000b700000000000000b7080000000000007b8af8ff00000000b7080000fb0000007b8af0ff00eeecb1ef000000bfa100000000000007010000f8ffffff979d049dc70d526607040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x3, 0xeccc, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[r12], &(0x7f00000005c0)=[{0x3, 0x1, 0xb}, {0x4, 0x3, 0xe, 0x8}, {0x5, 0x3, 0xf, 0x4}, {0x2, 0x5, 0x9}, {0x2, 0x5, 0x0, 0x1}], 0x10, 0x1}, 0x94) 1.37272377s ago: executing program 1 (id=8589): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x5, 0x0, 0x300) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.308168294s ago: executing program 0 (id=8590): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c0000001e006bcd9e3fe3dc6e08000007000000000000007ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r4 = socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r6], 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000), 0xfdef) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0x0, 0x6, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1500000095000000010000009a0800000200000d", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000200"/28], 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r13}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x6, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x401}, [@ldst={0x3, 0x3, 0x1, 0xb, 0x7, 0x20, 0xfffffffffffffffc}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x6}]}, &(0x7f0000000500)='GPL\x00', 0xfffffc00, 0x9c, &(0x7f0000000540)=""/156, 0x41000, 0x11, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000980)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x4, 0xf, 0x1, 0x5c}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000bc0)=[r8, r9, 0xffffffffffffffff, 0xffffffffffffffff, r10, r11, r12, r14, r15], &(0x7f0000000c00)=[{0x3, 0x2, 0x7, 0x1}, {0x5, 0x2, 0x8, 0x6}, {0x2, 0x2, 0x1, 0x7}, {0x4, 0x3, 0x10, 0x942cdd6df05c83c}, {0x0, 0x2, 0xc, 0xc}], 0x10, 0x9}, 0x94) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) recvmsg(r2, &(0x7f0000000180)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/250, 0xfa}], 0x1}, 0x40000142) 1.275501346s ago: executing program 3 (id=8591): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x6, 0x5, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f84814000000da6a0602000000000e", 0x21}], 0x1}, 0x24044810) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000e0fff7ff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='io.weight\x00', 0x2, 0x0) 1.099970026s ago: executing program 3 (id=8592): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2043) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x14, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @generic={0x80, 0x6, 0x1, 0x8, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x2, 0xb6, &(0x7f0000000e80)=""/182, 0x0, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f40)={0x0, 0xfffffffd, 0x61, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000f80)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r0, 0x1], &(0x7f0000000fc0)=[{0x3, 0x3, 0x1, 0x7}, {0x2, 0x3, 0x6, 0x3}, {0x2, 0x3, 0x9, 0x5}, {0x1, 0x1, 0xf, 0x8}, {0x1, 0x4, 0xf, 0x5}], 0x10, 0x6}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000001100)=r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x9, [@enum={0xc, 0x1, 0x0, 0x6, 0x4, [{0x9, 0x6}]}, @union={0x8, 0x2, 0x0, 0x5, 0x1, 0x2, [{0x8, 0x4, 0x5}, {0xb, 0x5}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @union={0x5, 0x4, 0x0, 0x5, 0x0, 0x7ff, [{0xe, 0x4, 0x6}, {0xc, 0x0, 0x1fe2}, {0x1, 0x4, 0x4}, {0xd, 0x0, 0x7}]}]}, {0x0, [0x2e, 0x5f, 0x61, 0x5f, 0x5f, 0x61, 0x61]}}, &(0x7f0000000ac0), 0xa1, 0x0, 0x0, 0xd1}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pS \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x20, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x1, 0x9, 0x8, 0x7, 0xfffffffffffffff8, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x8000}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2204}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xc8, &(0x7f0000000680)=""/200, 0x40f00, 0x4, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000b40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x3, 0x6}, 0x10, 0x1cdb1, 0xffffffffffffffff, 0x2, &(0x7f0000000c80)=[0x1, r5, 0xffffffffffffffff, 0x1], &(0x7f0000000cc0)=[{0x3, 0x5, 0xd, 0x2}, {0x5, 0x2, 0x7, 0x7}], 0x10, 0x92}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f2, &(0x7f0000000900)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x11, &(0x7f0000000a00)=ANY=[@ANYBLOB="180200000200000000000000a08100008500000028000000b7080000000000007b8af8ff00000000b7080000feffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b874386d1929ebfd66cc265d21bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.012588721s ago: executing program 1 (id=8593): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f00000001c0)={'full', 0x20, 0x0, 0x20, 0x101}, 0x2f) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'c', ' *:* ', 'rwm\x00'}, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xf13e}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x2a, &(0x7f00000003c0)=""/42, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xffffff01}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 954.067584ms ago: executing program 4 (id=8594): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}, {0x0, 0x64}, {&(0x7f0000000040)="403def868d90eb29fb5b629273f5a6ebd64b218a30997d1600611c9102f22b00c5145c0c7df00a37d2332fbf98a3dc59f9cd879bdde6"}], 0x2}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYRESDEC], 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 718.559168ms ago: executing program 1 (id=8595): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) recvmsg(0xffffffffffffffff, 0x0, 0xa3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="531347c8476178cf77c2cd92d464", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x16, 0x4, 0x8, 0xc, 0x101}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073040000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) 341.87754ms ago: executing program 4 (id=8596): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb7fc72f82e1cddfc}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xcfd, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x12000, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24008095) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r4, 0x0, 0x0, 0x4c, &(0x7f0000001cc0), &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x3c, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161", 0x1, 0x0, 0x13}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r4}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb7fc72f82e1cddfc}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xcfd, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x12000, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x2) (async) socket$kcm(0x23, 0x5, 0x0) (async) socket$kcm(0xa, 0x2, 0x88) (async) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) (async) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24008095) (async) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) close(r1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r4, 0x0, 0x0, 0x4c, &(0x7f0000001cc0), &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x3c, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161", 0x1, 0x0, 0x13}, 0x50) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r4}) (async) 341.11798ms ago: executing program 0 (id=8597): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c03407f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000000)="b9ff0300600d698dff062cf008004de7f9c7643600000002007af5f3da11ee93aa1a014409a65ca947348c5352c0c05cb77a502055b8874590de801045d4d4d34aa2", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 227.535407ms ago: executing program 1 (id=8598): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) close(r5) write$cgroup_pid(r4, &(0x7f0000000000)=r0, 0x12) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x80ffff) 166.40975ms ago: executing program 2 (id=8599): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000120200000000000000000000010500000180000000000000000100008502000000000000000100000000000004"], 0x0, 0x52}, 0x28) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 569.64µs ago: executing program 0 (id=8600): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r3}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r5, &(0x7f0000000000), 0xffc0) 0s ago: executing program 4 (id=8601): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): gth. [ 1274.890064][T30290] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.7470'. [ 1275.014044][T30271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7465'. [ 1275.031326][T30282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1275.068417][T30274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7465'. [ 1275.243746][T30293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.270081][T30293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.309836][T30293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.346102][T30293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.367755][T30293] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1275.397250][T30293] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1275.643865][T30307] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7474'. [ 1275.724967][T30299] netlink: 'syz.1.7472': attribute type 39 has an invalid length. [ 1276.199519][T30310] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7475'. [ 1276.371119][T30317] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.7477'. [ 1279.450166][T30322] __nla_validate_parse: 1 callbacks suppressed [ 1279.450205][T30322] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.7479'. [ 1279.782814][T30341] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1279.854793][T30349] device sit0 entered promiscuous mode [ 1280.131254][T30365] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.7491'. [ 1280.190556][T30367] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7492'. [ 1280.594290][T30378] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.7496'. [ 1281.068257][T30405] delete_channel: no stack [ 1281.088278][T30403] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.7504'. [ 1281.108002][T30405] delete_channel: no stack [ 1281.296894][T30407] netlink: 'syz.2.7506': attribute type 1 has an invalid length. [ 1281.345277][T30407] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.7506'. [ 1281.596102][T30421] netlink: 'syz.3.7511': attribute type 2 has an invalid length. [ 1281.912646][T30428] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.7512'. [ 1282.151196][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1282.180745][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1282.199709][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1282.208804][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1282.219143][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1282.229710][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1282.336395][ T5802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.586275][ T5802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.778414][T30447] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.7516'. [ 1282.781322][ T5802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.852718][T30453] netlink: 'syz.0.7517': attribute type 27 has an invalid length. [ 1282.912292][T30453] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7517'. [ 1282.981052][ T5802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.018481][T30456] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1283.512797][T30432] chnl_net:caif_netlink_parms(): no params data found [ 1283.598443][ T5802] device 0 left promiscuous mode [ 1283.947334][T30432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.043068][T30432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.141070][T30432] device bridge_slave_0 entered promiscuous mode [ 1284.194709][T30486] netlink: 'syz.3.7527': attribute type 39 has an invalid length. [ 1284.249571][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 1284.680436][T30502] __nla_validate_parse: 2 callbacks suppressed [ 1284.680458][T30502] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.7529'. [ 1284.850747][T30432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.868096][T30432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.940233][T30432] device bridge_slave_1 entered promiscuous mode [ 1285.587000][T30517] netlink: 'syz.4.7531': attribute type 22 has an invalid length. [ 1285.606987][T30517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7531'. [ 1285.782715][T30432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.945353][T30432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.959907][T30533] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.7536'. [ 1286.339848][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 1286.516032][T30432] team0: Port device team_slave_0 added [ 1286.549668][T30432] team0: Port device team_slave_1 added [ 1286.558442][T30538] netlink: 'syz.4.7537': attribute type 29 has an invalid length. [ 1286.644903][T30538] netlink: 'syz.4.7537': attribute type 29 has an invalid length. [ 1286.752735][T30432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.768208][T30432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.800294][T30432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.814245][T30545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7539'. [ 1286.824663][T30540] netlink: 'syz.4.7537': attribute type 29 has an invalid length. [ 1286.953234][T30432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.972919][T30432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.032344][T30557] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.7542'. [ 1287.041802][T30432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.059543][T30542] netlink: 'syz.4.7537': attribute type 29 has an invalid length. [ 1287.143174][T30546] netlink: 'syz.4.7537': attribute type 29 has an invalid length. [ 1287.267530][T30432] device hsr_slave_0 entered promiscuous mode [ 1287.370381][T30432] device hsr_slave_1 entered promiscuous mode [ 1287.420115][T30432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1287.427744][T30432] Cannot create hsr debugfs directory [ 1287.911611][T30575] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.7547'. [ 1288.195047][T30579] netlink: 'syz.2.7546': attribute type 12 has an invalid length. [ 1288.209622][T30579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7546'. [ 1288.409549][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 1288.541525][ T5802] device hsr_slave_0 left promiscuous mode [ 1288.551031][ T5802] device hsr_slave_1 left promiscuous mode [ 1288.618681][ T5802] device veth1_vlan left promiscuous mode [ 1288.637359][ T5802] device veth0_vlan left promiscuous mode [ 1288.787953][T30608] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.7552'. [ 1289.665772][ T5802] device team_slave_1 left promiscuous mode [ 1289.676056][ T5802] team0 (unregistering): Port device team_slave_1 removed [ 1289.758192][ T5802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1289.767731][ T5802] device bond_slave_1 left promiscuous mode [ 1290.002513][ T5802] bond0 (unregistering): (slave team0): Releasing backup interface [ 1290.012650][ T5802] device team0 left promiscuous mode [ 1290.046126][ T5802] bond0 (unregistering): Released all slaves [ 1290.102447][T30626] netlink: 'syz.4.7557': attribute type 13 has an invalid length. [ 1290.115215][T30626] netlink: 160 bytes leftover after parsing attributes in process `syz.4.7557'. [ 1290.349151][T30630] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.7558'. [ 1290.489746][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 1293.512264][T30644] netlink: 'syz.3.7562': attribute type 28 has an invalid length. [ 1293.801241][T30666] netlink: 'syz.4.7564': attribute type 10 has an invalid length. [ 1294.436197][T30432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1294.542045][T30432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1294.554701][T30432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1294.570570][T30432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1294.821385][T30432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.842702][T30702] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7571'. [ 1294.881370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1294.900303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1294.923551][T30432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.943046][T30704] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1294.956934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1294.980593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1295.010977][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.018141][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.034533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1295.049641][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1295.079245][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1295.091442][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.098655][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.132239][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1295.164434][T30711] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.7574'. [ 1295.218294][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1295.257434][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1295.279336][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1295.301488][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1295.334022][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1295.363416][T30719] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1295.370028][T30719] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1295.371403][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1295.390942][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1295.405271][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1295.414205][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1295.427297][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1295.447165][T30432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1295.525890][T30719] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.7576'. [ 1296.189905][T30737] netlink: 'syz.4.7581': attribute type 3 has an invalid length. [ 1296.218528][T30737] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7581'. [ 1296.258987][T30738] netlink: 'syz.4.7581': attribute type 1 has an invalid length. [ 1296.287438][T30738] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7581'. [ 1296.540080][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1296.547684][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1296.587215][T30432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.755882][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1296.785438][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1296.853254][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1296.874543][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1296.915771][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1296.937394][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1296.963515][T30754] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.7584'. [ 1296.979702][T30432] device veth0_vlan entered promiscuous mode [ 1297.021809][T30432] device veth1_vlan entered promiscuous mode [ 1297.159525][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1297.180874][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1297.207428][T30432] device veth0_macvtap entered promiscuous mode [ 1297.241183][T30432] device veth1_macvtap entered promiscuous mode [ 1297.316040][T30432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.351747][T30432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.416516][T30432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.445130][T30432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.471118][T30432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.491745][T30432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.571659][T30432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.632149][T30432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.681756][T30432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.732559][T30432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.769568][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1297.778168][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1297.786882][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1297.796103][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1297.805624][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1297.889794][T25451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1297.905974][T30432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.945431][T30432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.990842][T30432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.018212][T30432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.053786][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.099329][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.162647][ T7630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1300.191730][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.236172][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.252220][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.258682][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.275872][T30810] netlink: 'syz.4.7593': attribute type 11 has an invalid length. [ 1300.299157][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1300.379537][T30810] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7593'. [ 1300.422673][T30810] netlink: 'syz.4.7593': attribute type 11 has an invalid length. [ 1300.459488][T30810] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7593'. [ 1301.231616][T30830] device syzkaller0 entered promiscuous mode [ 1301.586393][T30834] netlink: 'syz.0.7597': attribute type 11 has an invalid length. [ 1301.594532][T30834] netlink: 145752 bytes leftover after parsing attributes in process `syz.0.7597'. [ 1301.606567][T30834] netlink: 'syz.0.7597': attribute type 11 has an invalid length. [ 1301.615419][T30834] netlink: 145752 bytes leftover after parsing attributes in process `syz.0.7597'. [ 1301.666074][T30833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1302.141255][T30809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1302.526225][T30857] Ÿë: port 1(gretap0) entered blocking state [ 1302.578014][T30857] Ÿë: port 1(gretap0) entered disabled state [ 1302.611223][T30857] device gretap0 entered promiscuous mode [ 1302.656461][T30856] Ÿë: port 2(veth0_to_team) entered blocking state [ 1302.697219][T30856] Ÿë: port 2(veth0_to_team) entered disabled state [ 1302.804942][T30856] device veth0_to_team entered promiscuous mode [ 1302.827249][T30868] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7605'. [ 1304.554407][T30906] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7614'. [ 1304.989349][T30918] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7619'. [ 1305.326687][T30940] netlink: 'syz.2.7623': attribute type 2 has an invalid length. [ 1305.349457][T30940] netlink: 'syz.2.7623': attribute type 4 has an invalid length. [ 1305.376739][T30940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7623'. [ 1305.424762][T30941] netlink: 'syz.1.7624': attribute type 39 has an invalid length. [ 1305.573741][T30941] netlink: 'syz.1.7624': attribute type 28 has an invalid length. [ 1305.604415][T30943] device syzkaller0 entered promiscuous mode [ 1305.622355][T30941] netlink: 'syz.1.7624': attribute type 29 has an invalid length. [ 1305.649373][T30941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7624'. [ 1306.012451][T30960] netlink: 'syz.0.7628': attribute type 3 has an invalid length. [ 1306.089635][T30960] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7628'. [ 1306.199879][T30966] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7630'. [ 1306.284986][T30967] IPv6: Can't replace route, no match found [ 1307.417460][ T4279] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1307.583014][T31003] device syzkaller0 entered promiscuous mode [ 1309.451759][ T4279] Bluetooth: hci3: command 0x2016 tx timeout [ 1310.588128][T31069] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7661'. [ 1310.997838][T31089] IPv6: Can't replace route, no match found [ 1311.150459][T31090] netlink: 'syz.0.7668': attribute type 10 has an invalid length. [ 1311.158546][T31090] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7668'. [ 1312.266121][T31107] netlink: 'syz.4.7674': attribute type 3 has an invalid length. [ 1312.295778][T31107] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7674'. [ 1312.384703][ T5809] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1312.591670][T31116] netlink: 'syz.1.7678': attribute type 16 has an invalid length. [ 1312.636737][T31116] netlink: 'syz.1.7678': attribute type 4 has an invalid length. [ 1312.666466][T31116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7678'. [ 1313.019545][T31109] bridge0: port 3(dummy0) entered disabled state [ 1313.026148][T31109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.033831][T31109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.072011][T31114] bridge0: port 3(dummy0) entered disabled state [ 1313.091565][T31114] device bridge_slave_1 left promiscuous mode [ 1313.111068][T31114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.152268][T31114] device bridge_slave_0 left promiscuous mode [ 1313.179949][T31114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.280503][T31130] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.7680'. [ 1313.382826][T31115] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1313.430861][T31112] device syzkaller0 left promiscuous mode [ 1313.460989][T31126] netlink: 'syz.1.7679': attribute type 10 has an invalid length. [ 1313.468900][T31126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7679'. [ 1313.483090][T31126] device team0 entered promiscuous mode [ 1313.488935][T31126] device team_slave_0 entered promiscuous mode [ 1313.525391][T31126] device team_slave_1 entered promiscuous mode [ 1313.574645][T31126] bridge0: port 3(team0) entered blocking state [ 1313.615739][T31126] bridge0: port 3(team0) entered disabled state [ 1313.650653][T31126] bridge0: port 3(team0) entered blocking state [ 1313.657145][T31126] bridge0: port 3(team0) entered forwarding state [ 1314.487633][T31165] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.7692'. [ 1314.693137][T31170] netlink: 'syz.0.7693': attribute type 3 has an invalid length. [ 1314.708724][T31170] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7693'. [ 1314.948748][T31180] netlink: 'syz.3.7698': attribute type 3 has an invalid length. [ 1315.022468][T31180] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7698'. [ 1315.188157][T31185] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.7700'. [ 1315.264530][T31188] netlink: 'syz.2.7700': attribute type 7 has an invalid length. [ 1315.289879][T31188] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.7700'. [ 1315.360856][T31185] netlink: 'syz.2.7700': attribute type 19 has an invalid length. [ 1315.635458][T31202] device wg2 entered promiscuous mode [ 1315.712239][T31205] sctp: [Deprecated]: syz.1.7708 (pid 31205) Use of int in maxseg socket option. [ 1315.712239][T31205] Use struct sctp_assoc_value instead [ 1315.756818][T31207] netlink: 'syz.4.7718': attribute type 21 has an invalid length. [ 1317.921844][T31236] IPv6: NLM_F_CREATE should be specified when creating new route [ 1318.103949][T31236] __nla_validate_parse: 7 callbacks suppressed [ 1318.104023][T31236] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7717'. [ 1318.125778][T31240] validate_nla: 1 callbacks suppressed [ 1318.125816][T31240] netlink: 'syz.3.7719': attribute type 3 has an invalid length. [ 1318.249909][T31240] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7719'. [ 1319.018320][T31255] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.7723'. [ 1319.722663][T31264] netlink: 'syz.1.7727': attribute type 21 has an invalid length. [ 1319.778166][T31264] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7727'. [ 1319.830454][T31269] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.7727'. [ 1320.112652][T31287] netlink: 'syz.3.7733': attribute type 2 has an invalid length. [ 1320.209805][T31287] netlink: 'syz.3.7733': attribute type 8 has an invalid length. [ 1320.217732][T31287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7733'. [ 1320.307510][T31291] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.7736'. [ 1320.951716][T31310] netlink: 'syz.4.7743': attribute type 4 has an invalid length. [ 1320.962485][T31315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7743'. [ 1320.988728][T31310] netlink: 'syz.4.7743': attribute type 8 has an invalid length. [ 1321.016252][T31310] netlink: 193092 bytes leftover after parsing attributes in process `syz.4.7743'. [ 1321.444726][T31336] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.7751'. [ 1322.689885][T31379] netlink: 'syz.3.7761': attribute type 39 has an invalid length. [ 1326.823932][T31383] netlink: 'syz.2.7763': attribute type 2 has an invalid length. [ 1326.832089][T31383] netlink: 'syz.2.7763': attribute type 8 has an invalid length. [ 1326.840227][T31383] __nla_validate_parse: 1 callbacks suppressed [ 1326.840242][T31383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7763'. [ 1326.856457][T31388] netlink: 'syz.0.7765': attribute type 21 has an invalid length. [ 1326.869387][T31388] IPv6: NLM_F_CREATE should be specified when creating new route [ 1327.117259][T31426] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.7777'. [ 1327.255678][ T4279] Bluetooth: hci5: ISO packet for unknown connection handle 2622 [ 1327.339065][T31432] device wg2 entered promiscuous mode [ 1327.371415][T31418] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.7775'. [ 1327.388842][T31435] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7780'. [ 1327.672040][T31447] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7784'. [ 1327.719503][T31447] device hsr_slave_0 left promiscuous mode [ 1327.736042][T31447] device hsr_slave_1 left promiscuous mode [ 1327.846926][T31451] netlink: 'syz.4.7785': attribute type 46 has an invalid length. [ 1328.136160][T31465] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.7789'. [ 1328.203869][T31473] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7791'. [ 1328.298464][T31479] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7794'. [ 1328.901447][T31500] netlink: 56855 bytes leftover after parsing attributes in process `syz.2.7800'. [ 1329.237242][T31511] netlink: 'syz.1.7801': attribute type 4 has an invalid length. [ 1329.249061][T31513] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7803'. [ 1329.293787][T31511] netlink: 'syz.1.7801': attribute type 3 has an invalid length. [ 1330.801207][T31575] netlink: 'syz.1.7823': attribute type 10 has an invalid length. [ 1331.094386][T31583] openvswitch: netlink: Flow actions attr not present in new flow. [ 1331.415369][T31592] netlink: 'syz.0.7828': attribute type 2 has an invalid length. [ 1331.437804][T31592] netlink: 'syz.0.7828': attribute type 1 has an invalid length. [ 1333.641592][T31658] __nla_validate_parse: 10 callbacks suppressed [ 1333.641614][T31658] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.7844'. [ 1334.032185][T31664] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7846'. [ 1335.435200][T31716] netlink: 'syz.3.7859': attribute type 13 has an invalid length. [ 1335.463942][T31716] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.7859'. [ 1335.966269][T31724] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.7861'. [ 1337.160425][T31742] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7866'. [ 1337.185605][T31741] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7867'. [ 1339.740415][T31768] netlink: 'syz.3.7876': attribute type 21 has an invalid length. [ 1340.262111][T31794] netlink: 'syz.0.7884': attribute type 9 has an invalid length. [ 1340.309345][T31794] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7884'. [ 1340.389720][T31798] sctp: [Deprecated]: syz.4.7885 (pid 31798) Use of int in max_burst socket option deprecated. [ 1340.389720][T31798] Use struct sctp_assoc_value instead [ 1341.113738][T31834] netlink: 57923 bytes leftover after parsing attributes in process `syz.3.7897'. [ 1341.430674][T31842] netlink: 'syz.3.7900': attribute type 2 has an invalid length. [ 1341.440882][T31841] netlink: 'syz.2.7899': attribute type 2 has an invalid length. [ 1341.473213][T31842] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7900'. [ 1341.708765][T31836] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7896'. [ 1341.752028][T31848] netlink: 'syz.4.7902': attribute type 3 has an invalid length. [ 1341.761264][T31848] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7902'. [ 1342.251096][T31870] netlink: 57923 bytes leftover after parsing attributes in process `syz.0.7910'. [ 1342.743383][T31888] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7915'. [ 1342.763902][T31889] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7915'. [ 1342.886795][T31892] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7916'. [ 1343.222870][T31902] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7920'. [ 1343.244044][T31902] netlink: 'syz.2.7920': attribute type 3 has an invalid length. [ 1343.479232][T31906] netlink: 'syz.0.7924': attribute type 21 has an invalid length. [ 1343.630888][T31917] netlink: 'syz.4.7922': attribute type 1 has an invalid length. [ 1345.232552][T32065] netlink: 'syz.3.7942': attribute type 10 has an invalid length. [ 1345.890792][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1345.903269][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1345.913101][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1345.923652][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1345.934994][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1345.942857][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1348.010995][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 1348.218183][T32092] __nla_validate_parse: 8 callbacks suppressed [ 1348.218196][T32092] netlink: 57923 bytes leftover after parsing attributes in process `syz.0.7948'. [ 1348.279740][T32083] device syzkaller0 left promiscuous mode [ 1348.949712][T32085] chnl_net:caif_netlink_parms(): no params data found [ 1349.250371][T32085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.261039][T32085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.271563][T32126] netlink: 57923 bytes leftover after parsing attributes in process `syz.2.7956'. [ 1349.283396][T32085] device bridge_slave_0 entered promiscuous mode [ 1349.334160][T32085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.355166][T32085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.370829][T32085] device bridge_slave_1 entered promiscuous mode [ 1349.461598][T32085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.507373][T32085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.570812][T32085] team0: Port device team_slave_0 added [ 1349.598220][T32085] team0: Port device team_slave_1 added [ 1349.647797][T32085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.662803][T32085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.734818][T32085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.750263][T32085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.757455][T32085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.819712][T32085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.975909][T32085] device hsr_slave_0 entered promiscuous mode [ 1349.995087][T32085] device hsr_slave_1 entered promiscuous mode [ 1350.012789][T32085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1350.033963][T32085] Cannot create hsr debugfs directory [ 1350.044204][T32142] netlink: 'syz.0.7963': attribute type 22 has an invalid length. [ 1350.059322][T32142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7963'. [ 1350.099306][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 1350.294817][T32150] device syzkaller0 entered promiscuous mode [ 1350.526650][T32155] netlink: 'syz.0.7966': attribute type 39 has an invalid length. [ 1350.783556][T32085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.993228][T32085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.060962][T32169] netlink: 'syz.3.7969': attribute type 10 has an invalid length. [ 1351.161159][T32173] netlink: 57923 bytes leftover after parsing attributes in process `syz.2.7970'. [ 1351.183184][T32085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.341498][T32085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.420898][T32176] netlink: 57923 bytes leftover after parsing attributes in process `syz.0.7971'. [ 1351.643972][T32179] device macvlan0 entered promiscuous mode [ 1351.723056][T32085] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1351.758067][T32085] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1351.797025][T32085] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1351.997116][T32085] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1352.060713][T31359] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1352.083282][T32187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7973'. [ 1352.101605][T32191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7973'. [ 1352.136178][T32194] syzkaller0: create flow: hash 3688031183 index 1 [ 1352.150634][ T4318] syzkaller0: tun_net_xmit 76 [ 1352.174983][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 1352.207011][T32184] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1352.217487][T32189] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1352.269484][ T4318] syzkaller0: tun_net_xmit 76 [ 1352.331452][T32188] syzkaller0: delete flow: hash 3688031183 index 1 [ 1352.493718][T32085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.525414][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1352.540986][T32222] netlink: 57923 bytes leftover after parsing attributes in process `syz.0.7983'. [ 1352.556053][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1352.576184][T32085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.588117][T32218] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.7980'. [ 1352.602807][T32218] netlink: zone id is out of range [ 1352.608389][T32218] netlink: get zone limit has 8 unknown bytes [ 1352.616402][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1352.629165][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1352.660490][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.667665][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.698760][T32225] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.7984'. [ 1352.709006][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1352.745056][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1352.776658][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1352.804114][T32227] FAULT_INJECTION: forcing a failure. [ 1352.804114][T32227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.810967][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.824453][ T5785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.846536][T32227] CPU: 1 PID: 32227 Comm: syz.0.7985 Not tainted syzkaller #0 [ 1352.854159][T32227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1352.864259][T32227] Call Trace: [ 1352.867579][T32227] [ 1352.870548][T32227] dump_stack_lvl+0x188/0x24e [ 1352.875270][T32227] ? show_regs_print_info+0x12/0x12 [ 1352.880498][T32227] ? load_image+0x400/0x400 [ 1352.885047][T32227] ? __lock_acquire+0x7d10/0x7d10 [ 1352.890135][T32227] should_fail_ex+0x399/0x4d0 [ 1352.894864][T32227] _copy_from_user+0x2c/0x170 [ 1352.899635][T32227] ___sys_recvmsg+0x172/0x590 [ 1352.904373][T32227] ? __sys_recvmsg+0x290/0x290 [ 1352.909297][T32227] ? common_file_perm+0x171/0x1c0 [ 1352.914372][T32227] ? __fget_files+0x43d/0x4b0 [ 1352.919126][T32227] __x64_sys_recvmsg+0x205/0x2e0 [ 1352.924129][T32227] ? ___sys_recvmsg+0x590/0x590 [ 1352.929020][T32227] ? lockdep_hardirqs_on+0x94/0x140 [ 1352.934255][T32227] do_syscall_64+0x4c/0xa0 [ 1352.938699][T32227] ? clear_bhb_loop+0x60/0xb0 [ 1352.943391][T32227] ? clear_bhb_loop+0x60/0xb0 [ 1352.948088][T32227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.954011][T32227] RIP: 0033:0x7f28f599acb9 [ 1352.958463][T32227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.978104][T32227] RSP: 002b:00007f28f680c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1352.986549][T32227] RAX: ffffffffffffffda RBX: 00007f28f5c15fa0 RCX: 00007f28f599acb9 [ 1352.994581][T32227] RDX: 0000000000018000 RSI: 0000200000000800 RDI: 0000000000000005 [ 1353.002584][T32227] RBP: 00007f28f680c090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.010577][T32227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1353.018570][T32227] R13: 00007f28f5c16038 R14: 00007f28f5c15fa0 R15: 00007ffebd2e5c08 [ 1353.026653][T32227] [ 1353.057678][T25450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1353.070838][T25450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1353.109876][T31359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1353.130811][T31359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1353.142011][T31359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1353.157565][T31359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1353.166682][T31359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1353.184975][T31359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1353.211308][T31359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1353.251685][T31359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1353.286088][T31359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1353.333046][T32085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1353.973502][T32240] netlink: 'syz.3.7989': attribute type 10 has an invalid length. [ 1354.003836][T32240] netlink: 56823 bytes leftover after parsing attributes in process `syz.3.7989'. [ 1354.101428][T32244] netlink: 'syz.2.7991': attribute type 39 has an invalid length. [ 1354.265730][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 1354.751195][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1354.758808][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1354.783162][T32085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.935907][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1354.948464][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1355.048802][T25450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1355.067327][T25450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1355.094642][T25450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1355.123161][T25450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1355.154194][T32085] device veth0_vlan entered promiscuous mode [ 1355.187957][T32085] device veth1_vlan entered promiscuous mode [ 1355.224528][T32264] netlink: 57923 bytes leftover after parsing attributes in process `syz.3.7995'. [ 1355.269346][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1355.292413][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1355.344683][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1355.360239][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1355.394169][T32085] device veth0_macvtap entered promiscuous mode [ 1355.456149][T32085] device veth1_macvtap entered promiscuous mode [ 1355.475934][T32268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7996'. [ 1355.500834][T32085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.536120][T32085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.566975][T32085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.596667][T32085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.617888][T32085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.636611][T32085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.661020][T32085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.668382][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1355.708364][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1355.717999][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1355.748865][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1355.774209][T32268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7996'. [ 1355.797763][T32269] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7996'. [ 1355.861667][T32085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.897081][T32085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.914415][T32085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.929077][T32279] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.7999'. [ 1355.930901][T32085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.965462][T32085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.980340][T32085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.994426][T32085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1356.004357][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1356.027272][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1356.052289][T32274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7996'. [ 1356.088864][T32085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.128758][T32085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.144615][T32085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.164656][T32085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.377146][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.398576][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.444657][ T5817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1356.499975][ T5814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.508722][ T5814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.762812][T32294] netlink: 'syz.3.8005': attribute type 39 has an invalid length. [ 1356.855359][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1356.879002][T32300] FAULT_INJECTION: forcing a failure. [ 1356.879002][T32300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.895368][T32300] CPU: 1 PID: 32300 Comm: syz.2.8004 Not tainted syzkaller #0 [ 1356.902901][T32300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1356.912998][T32300] Call Trace: [ 1356.916382][T32300] [ 1356.919360][T32300] dump_stack_lvl+0x188/0x24e [ 1356.924087][T32300] ? show_regs_print_info+0x12/0x12 [ 1356.929331][T32300] ? load_image+0x400/0x400 [ 1356.933873][T32300] ? __lock_acquire+0x7d10/0x7d10 [ 1356.938969][T32300] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1356.944648][T32300] should_fail_ex+0x399/0x4d0 [ 1356.949377][T32300] _copy_from_user+0x2c/0x170 [ 1356.954110][T32300] kstrtouint_from_user+0xda/0x170 [ 1356.959284][T32300] ? kstrtol_from_user+0x190/0x190 [ 1356.964475][T32300] proc_fail_nth_write+0x8b/0x200 [ 1356.969538][T32300] ? proc_fail_nth_read+0x220/0x220 [ 1356.974775][T32300] ? common_file_perm+0x171/0x1c0 [ 1356.979846][T32300] ? proc_fail_nth_read+0x220/0x220 [ 1356.985092][T32300] vfs_write+0x2e6/0xa30 [ 1356.989396][T32300] ? file_end_write+0x250/0x250 [ 1356.994299][T32300] ? __fget_files+0x28/0x4b0 [ 1356.998942][T32300] ? __fget_files+0x28/0x4b0 [ 1357.003590][T32300] ? __fget_files+0x43d/0x4b0 [ 1357.008343][T32300] ? __fdget_pos+0x2ae/0x360 [ 1357.012980][T32300] ? ksys_write+0x71/0x250 [ 1357.017516][T32300] ksys_write+0x14c/0x250 [ 1357.021918][T32300] ? __ia32_sys_read+0x80/0x80 [ 1357.026743][T32300] ? lockdep_hardirqs_on+0x94/0x140 [ 1357.032030][T32300] do_syscall_64+0x4c/0xa0 [ 1357.036515][T32300] ? clear_bhb_loop+0x60/0xb0 [ 1357.041240][T32300] ? clear_bhb_loop+0x60/0xb0 [ 1357.045967][T32300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1357.051912][T32300] RIP: 0033:0x7f2935f5b58e [ 1357.056422][T32300] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1357.076076][T32300] RSP: 002b:00007f29341f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1357.084523][T32300] RAX: ffffffffffffffda RBX: 00007f29341f66c0 RCX: 00007f2935f5b58e [ 1357.092515][T32300] RDX: 0000000000000001 RSI: 00007f29341f60a0 RDI: 0000000000000005 [ 1357.100504][T32300] RBP: 00007f29341f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.108493][T32300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.116489][T32300] R13: 00007f2936216128 R14: 00007f2936216090 R15: 00007ffc21f02d48 [ 1357.124526][T32300] [ 1357.144749][T32303] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8007'. [ 1357.508464][T32318] sctp: [Deprecated]: syz.4.8010 (pid 32318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1357.508464][T32318] Use struct sctp_sack_info instead [ 1357.545619][T32311] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.8009'. [ 1357.562018][T32311] netlink: zone id is out of range [ 1357.567360][T32311] netlink: zone id is out of range [ 1357.575820][T32311] netlink: zone id is out of range [ 1357.577380][T32319] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8012'. [ 1357.602612][T32311] netlink: zone id is out of range [ 1357.608224][T32311] netlink: zone id is out of range [ 1357.627736][T32311] netlink: zone id is out of range [ 1357.650474][T32311] netlink: zone id is out of range [ 1357.657994][T32311] netlink: zone id is out of range [ 1357.689060][T32311] netlink: get zone limit has 8 unknown bytes [ 1357.844456][T32326] netlink: 'syz.2.8014': attribute type 10 has an invalid length. [ 1357.869873][T32327] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1357.917370][T32326] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1358.242476][T32338] netlink: 'syz.3.8018': attribute type 3 has an invalid length. [ 1358.270883][T32338] netlink: 'syz.3.8018': attribute type 1 has an invalid length. [ 1358.412570][T32345] netlink: 'syz.4.8022': attribute type 39 has an invalid length. [ 1359.535949][T32373] __nla_validate_parse: 6 callbacks suppressed [ 1359.535968][T32373] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8029'. [ 1359.618285][T32378] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8031'. [ 1359.735634][T32384] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8034'. [ 1361.980152][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.986566][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.898226][T32422] netlink: 'syz.3.8042': attribute type 10 has an invalid length. [ 1363.125949][T32426] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8044'. [ 1363.155577][T32430] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8045'. [ 1363.176853][T32432] FAULT_INJECTION: forcing a failure. [ 1363.176853][T32432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.253942][T32432] CPU: 0 PID: 32432 Comm: syz.0.8046 Not tainted syzkaller #0 [ 1363.261495][T32432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1363.271614][T32432] Call Trace: [ 1363.274929][T32432] [ 1363.277891][T32432] dump_stack_lvl+0x188/0x24e [ 1363.282627][T32432] ? show_regs_print_info+0x12/0x12 [ 1363.287872][T32432] ? load_image+0x400/0x400 [ 1363.292465][T32432] ? __lock_acquire+0x7d10/0x7d10 [ 1363.297595][T32432] should_fail_ex+0x399/0x4d0 [ 1363.302349][T32432] _copy_from_user+0x2c/0x170 [ 1363.307081][T32432] __sys_bpf+0x2ea/0x780 [ 1363.311401][T32432] ? bpf_link_show_fdinfo+0x380/0x380 [ 1363.316895][T32432] ? lock_chain_count+0x20/0x20 [ 1363.321810][T32432] __x64_sys_bpf+0x78/0x90 [ 1363.326329][T32432] do_syscall_64+0x4c/0xa0 [ 1363.330800][T32432] ? clear_bhb_loop+0x60/0xb0 [ 1363.335520][T32432] ? clear_bhb_loop+0x60/0xb0 [ 1363.340254][T32432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1363.346236][T32432] RIP: 0033:0x7f28f599acb9 [ 1363.350700][T32432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.370362][T32432] RSP: 002b:00007f28f680c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1363.378830][T32432] RAX: ffffffffffffffda RBX: 00007f28f5c15fa0 RCX: 00007f28f599acb9 [ 1363.386851][T32432] RDX: 0000000000000020 RSI: 0000200000001cc0 RDI: 0000000000000003 [ 1363.394874][T32432] RBP: 00007f28f680c090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.402902][T32432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.410914][T32432] R13: 00007f28f5c16038 R14: 00007f28f5c15fa0 R15: 00007ffebd2e5c08 [ 1363.419064][T32432] [ 1363.462196][T32438] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8049'. [ 1364.165517][T32473] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8058'. [ 1364.393791][T32478] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8060'. [ 1364.484758][T32482] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8062'. [ 1364.761693][T32487] FAULT_INJECTION: forcing a failure. [ 1364.761693][T32487] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.839475][T32487] CPU: 1 PID: 32487 Comm: syz.1.8064 Not tainted syzkaller #0 [ 1364.847014][T32487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1364.857110][T32487] Call Trace: [ 1364.860413][T32487] [ 1364.863364][T32487] dump_stack_lvl+0x188/0x24e [ 1364.868099][T32487] ? show_regs_print_info+0x12/0x12 [ 1364.873340][T32487] ? load_image+0x400/0x400 [ 1364.877880][T32487] ? __might_sleep+0xd0/0xd0 [ 1364.882503][T32487] ? __lock_acquire+0x7d10/0x7d10 [ 1364.887571][T32487] ? verify_lock_unused+0x140/0x140 [ 1364.892813][T32487] should_fail_ex+0x399/0x4d0 [ 1364.897540][T32487] should_failslab+0x5/0x20 [ 1364.902082][T32487] slab_pre_alloc_hook+0x59/0x310 [ 1364.907147][T32487] ? __get_vm_area_node+0x122/0x330 [ 1364.912403][T32487] __kmem_cache_alloc_node+0x4f/0x260 [ 1364.917819][T32487] ? __get_vm_area_node+0x122/0x330 [ 1364.923066][T32487] kmalloc_node_trace+0x22/0xe0 [ 1364.927969][T32487] __get_vm_area_node+0x122/0x330 [ 1364.933018][T32487] ? __local_bh_enable_ip+0x136/0x1c0 [ 1364.938415][T32487] __vmalloc_node_range+0x357/0x13b0 [ 1364.943715][T32487] ? netlink_sendmsg+0x5ec/0xbd0 [ 1364.948681][T32487] ? netlink_insert+0x1034/0x13c0 [ 1364.953750][T32487] ? free_vm_area+0x50/0x50 [ 1364.958308][T32487] ? netlink_sendmsg+0x5ec/0xbd0 [ 1364.963274][T32487] vmalloc+0x75/0x80 [ 1364.967195][T32487] ? netlink_sendmsg+0x5ec/0xbd0 [ 1364.972153][T32487] netlink_sendmsg+0x5ec/0xbd0 [ 1364.976967][T32487] ? netlink_getsockopt+0x550/0x550 [ 1364.982204][T32487] ? aa_file_perm+0x3ea/0xf00 [ 1364.986906][T32487] ? aa_file_perm+0x112/0xf00 [ 1364.991602][T32487] ? aa_sock_msg_perm+0x94/0x150 [ 1364.996561][T32487] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1365.001864][T32487] ? security_socket_sendmsg+0x7c/0xa0 [ 1365.007352][T32487] sock_write_iter+0x2d9/0x3e0 [ 1365.012149][T32487] ? sock_read_iter+0x3a0/0x3a0 [ 1365.017026][T32487] ? common_file_perm+0x171/0x1c0 [ 1365.022072][T32487] vfs_write+0x4b1/0xa30 [ 1365.026358][T32487] ? file_end_write+0x250/0x250 [ 1365.031240][T32487] ? __fget_files+0x43d/0x4b0 [ 1365.035955][T32487] ? __fdget_pos+0x1d4/0x360 [ 1365.040581][T32487] ? ksys_write+0x71/0x250 [ 1365.045026][T32487] ksys_write+0x14c/0x250 [ 1365.049384][T32487] ? __ia32_sys_read+0x80/0x80 [ 1365.054172][T32487] ? lockdep_hardirqs_on+0x94/0x140 [ 1365.059411][T32487] do_syscall_64+0x4c/0xa0 [ 1365.063850][T32487] ? clear_bhb_loop+0x60/0xb0 [ 1365.068544][T32487] ? clear_bhb_loop+0x60/0xb0 [ 1365.073239][T32487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1365.079153][T32487] RIP: 0033:0x7fd3a279acb9 [ 1365.083592][T32487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.103220][T32487] RSP: 002b:00007fd3a35fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1365.111659][T32487] RAX: ffffffffffffffda RBX: 00007fd3a2a15fa0 RCX: 00007fd3a279acb9 [ 1365.119738][T32487] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1365.127715][T32487] RBP: 00007fd3a35fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.135713][T32487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.143701][T32487] R13: 00007fd3a2a16038 R14: 00007fd3a2a15fa0 R15: 00007ffc19866028 [ 1365.151703][T32487] [ 1365.162386][T32487] syz.1.8064: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1365.192654][T32490] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.8065'. [ 1365.217385][T32493] netlink: 'syz.2.8066': attribute type 3 has an invalid length. [ 1365.230320][T32487] CPU: 0 PID: 32487 Comm: syz.1.8064 Not tainted syzkaller #0 [ 1365.237832][T32487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1365.247919][T32487] Call Trace: [ 1365.251228][T32487] [ 1365.254196][T32487] dump_stack_lvl+0x188/0x24e [ 1365.258927][T32487] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1365.265395][T32487] ? show_regs_print_info+0x12/0x12 [ 1365.270646][T32487] ? load_image+0x400/0x400 [ 1365.275177][T32487] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1365.281613][T32487] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1365.288134][T32487] warn_alloc+0x242/0x330 [ 1365.292489][T32487] ? __get_vm_area_node+0x122/0x330 [ 1365.297716][T32487] ? zone_watermark_ok_safe+0x270/0x270 [ 1365.303289][T32487] ? rcu_is_watching+0x11/0xa0 [ 1365.308084][T32487] ? __get_vm_area_node+0x318/0x330 [ 1365.313299][T32487] ? __local_bh_enable_ip+0x136/0x1c0 [ 1365.318691][T32487] __vmalloc_node_range+0x37c/0x13b0 [ 1365.324004][T32487] ? netlink_insert+0x1034/0x13c0 [ 1365.329061][T32487] ? free_vm_area+0x50/0x50 [ 1365.333599][T32487] ? netlink_sendmsg+0x5ec/0xbd0 [ 1365.338562][T32487] vmalloc+0x75/0x80 [ 1365.342480][T32487] ? netlink_sendmsg+0x5ec/0xbd0 [ 1365.347462][T32487] netlink_sendmsg+0x5ec/0xbd0 [ 1365.352276][T32487] ? netlink_getsockopt+0x550/0x550 [ 1365.357503][T32487] ? aa_file_perm+0x3ea/0xf00 [ 1365.362195][T32487] ? aa_file_perm+0x112/0xf00 [ 1365.366887][T32487] ? aa_sock_msg_perm+0x94/0x150 [ 1365.371833][T32487] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1365.377134][T32487] ? security_socket_sendmsg+0x7c/0xa0 [ 1365.382625][T32487] sock_write_iter+0x2d9/0x3e0 [ 1365.387410][T32487] ? sock_read_iter+0x3a0/0x3a0 [ 1365.392310][T32487] ? common_file_perm+0x171/0x1c0 [ 1365.397354][T32487] vfs_write+0x4b1/0xa30 [ 1365.401621][T32487] ? file_end_write+0x250/0x250 [ 1365.406502][T32487] ? __fget_files+0x43d/0x4b0 [ 1365.411222][T32487] ? __fdget_pos+0x1d4/0x360 [ 1365.415854][T32487] ? ksys_write+0x71/0x250 [ 1365.420306][T32487] ksys_write+0x14c/0x250 [ 1365.424657][T32487] ? __ia32_sys_read+0x80/0x80 [ 1365.429446][T32487] ? lockdep_hardirqs_on+0x94/0x140 [ 1365.434667][T32487] do_syscall_64+0x4c/0xa0 [ 1365.439100][T32487] ? clear_bhb_loop+0x60/0xb0 [ 1365.443793][T32487] ? clear_bhb_loop+0x60/0xb0 [ 1365.448484][T32487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1365.454387][T32487] RIP: 0033:0x7fd3a279acb9 [ 1365.458813][T32487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.478429][T32487] RSP: 002b:00007fd3a35fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1365.486870][T32487] RAX: ffffffffffffffda RBX: 00007fd3a2a15fa0 RCX: 00007fd3a279acb9 [ 1365.494859][T32487] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1365.502853][T32487] RBP: 00007fd3a35fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.510850][T32487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.518842][T32487] R13: 00007fd3a2a16038 R14: 00007fd3a2a15fa0 R15: 00007ffc19866028 [ 1365.526838][T32487] [ 1365.908123][T32512] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8072'. [ 1365.932992][T32514] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8073'. [ 1366.097621][T32487] Mem-Info: [ 1366.112611][T32487] active_anon:7157 inactive_anon:0 isolated_anon:0 [ 1366.112611][T32487] active_file:20676 inactive_file:40439 isolated_file:0 [ 1366.112611][T32487] unevictable:768 dirty:133 writeback:0 [ 1366.112611][T32487] slab_reclaimable:21374 slab_unreclaimable:101183 [ 1366.112611][T32487] mapped:29635 shmem:1361 pagetables:606 [ 1366.112611][T32487] sec_pagetables:0 bounce:0 [ 1366.112611][T32487] kernel_misc_reclaimable:0 [ 1366.112611][T32487] free:1316000 free_pcp:5914 free_cma:0 [ 1366.205626][T32518] netlink: 'syz.4.8074': attribute type 5 has an invalid length. [ 1366.288790][T32487] Node 0 active_anon:28628kB inactive_anon:0kB active_file:82704kB inactive_file:161552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118540kB dirty:632kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12412kB pagetables:2424kB sec_pagetables:0kB all_unreclaimable? no [ 1366.340418][T32487] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1366.441421][T32487] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1366.521564][T32522] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8076'. [ 1366.544614][T32487] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1366.573410][T32487] Node 0 DMA32 free:1347524kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:28628kB inactive_anon:0kB active_file:82704kB inactive_file:161552kB unevictable:1536kB writepending:632kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:3912kB local_pcp:2716kB free_cma:0kB [ 1366.719433][T32487] lowmem_reserve[]: 0 0 1 1 1 [ 1366.724351][T32487] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1366.832778][T32487] lowmem_reserve[]: 0 0 0 0 0 [ 1366.849365][T32487] Node 1 Normal free:3900880kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18628kB local_pcp:9316kB free_cma:0kB [ 1366.929347][T32487] lowmem_reserve[]: 0 0 0 0 0 [ 1366.940316][T32487] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1366.969469][T32487] Node 0 DMA32: 2000*4kB (UME) 1859*8kB (UME) 2399*16kB (UME) 510*32kB (UME) 978*64kB (UME) 787*128kB (UME) 328*256kB (UME) 194*512kB (UM) 85*1024kB (UM) 14*2048kB (UM) 197*4096kB (UM) = 1346824kB [ 1367.019759][T32487] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1367.049453][T32487] Node 1 Normal: 260*4kB (UME) 56*8kB (UME) 42*16kB (UE) 35*32kB (UME) 16*64kB (UME) 10*128kB (UME) 4*256kB (UM) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3900880kB [ 1367.088737][T32487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1367.108564][T32487] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1367.148722][T32487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1367.179403][T32487] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1367.188760][T32487] 62476 total pagecache pages [ 1367.199459][T32487] 0 pages in swap cache [ 1367.206378][T32487] Free swap = 124728kB [ 1367.218374][T32487] Total swap = 124996kB [ 1367.231458][T32487] 2097051 pages RAM [ 1367.242798][T32487] 0 pages HighMem/MovableOnly [ 1367.255855][T32487] 415205 pages reserved [ 1367.267450][T32487] 0 pages cma reserved [ 1368.236127][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 1368.253351][T32545] FAULT_INJECTION: forcing a failure. [ 1368.253351][T32545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.272719][T32545] CPU: 1 PID: 32545 Comm: syz.4.8083 Not tainted syzkaller #0 [ 1368.280302][T32545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1368.290407][T32545] Call Trace: [ 1368.293721][T32545] [ 1368.296678][T32545] dump_stack_lvl+0x188/0x24e [ 1368.301395][T32545] ? show_regs_print_info+0x12/0x12 [ 1368.306630][T32545] ? load_image+0x400/0x400 [ 1368.311174][T32545] ? __lock_acquire+0x7d10/0x7d10 [ 1368.316242][T32545] ? __kmem_cache_alloc_node+0x140/0x260 [ 1368.322004][T32545] should_fail_ex+0x399/0x4d0 [ 1368.326724][T32545] _copy_from_user+0x2c/0x170 [ 1368.331452][T32545] ___bpf_copy_key+0xb0/0x100 [ 1368.336180][T32545] map_delete_elem+0x1f8/0x570 [ 1368.340992][T32545] ? bpf_lsm_bpf+0x5/0x10 [ 1368.345358][T32545] __sys_bpf+0x51e/0x780 [ 1368.349631][T32545] ? bpf_link_show_fdinfo+0x380/0x380 [ 1368.355078][T32545] ? lock_chain_count+0x20/0x20 [ 1368.359994][T32545] __x64_sys_bpf+0x78/0x90 [ 1368.364462][T32545] do_syscall_64+0x4c/0xa0 [ 1368.368912][T32545] ? clear_bhb_loop+0x60/0xb0 [ 1368.373635][T32545] ? clear_bhb_loop+0x60/0xb0 [ 1368.378365][T32545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1368.384305][T32545] RIP: 0033:0x7f310639acb9 [ 1368.388749][T32545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.408379][T32545] RSP: 002b:00007f310722b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1368.416846][T32545] RAX: ffffffffffffffda RBX: 00007f3106615fa0 RCX: 00007f310639acb9 [ 1368.424841][T32545] RDX: 0000000000000020 RSI: 0000200000001cc0 RDI: 0000000000000003 [ 1368.432926][T32545] RBP: 00007f310722b090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.440923][T32545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.448913][T32545] R13: 00007f3106616038 R14: 00007f3106615fa0 R15: 00007ffd6082e578 [ 1368.456960][T32545] [ 1368.471065][T32541] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8082'. [ 1368.631089][T32554] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8085'. [ 1368.805319][T32556] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8086'. [ 1368.880887][T32560] FAULT_INJECTION: forcing a failure. [ 1368.880887][T32560] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.909148][T32560] CPU: 0 PID: 32560 Comm: syz.0.8087 Not tainted syzkaller #0 [ 1368.916730][T32560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1368.926870][T32560] Call Trace: [ 1368.930199][T32560] [ 1368.933178][T32560] dump_stack_lvl+0x188/0x24e [ 1368.937899][T32560] ? show_regs_print_info+0x12/0x12 [ 1368.943132][T32560] ? load_image+0x400/0x400 [ 1368.947669][T32560] ? __might_sleep+0xd0/0xd0 [ 1368.952308][T32560] ? __lock_acquire+0x7d10/0x7d10 [ 1368.957439][T32560] should_fail_ex+0x399/0x4d0 [ 1368.962193][T32560] should_failslab+0x5/0x20 [ 1368.966732][T32560] slab_pre_alloc_hook+0x59/0x310 [ 1368.971797][T32560] ? __get_vm_area_node+0x122/0x330 [ 1368.977031][T32560] __kmem_cache_alloc_node+0x4f/0x260 [ 1368.982520][T32560] ? __get_vm_area_node+0x122/0x330 [ 1368.987747][T32560] kmalloc_node_trace+0x22/0xe0 [ 1368.992655][T32560] __get_vm_area_node+0x122/0x330 [ 1368.997714][T32560] ? __local_bh_enable_ip+0x136/0x1c0 [ 1369.003121][T32560] __vmalloc_node_range+0x357/0x13b0 [ 1369.008448][T32560] ? netlink_sendmsg+0x5ec/0xbd0 [ 1369.013424][T32560] ? netlink_insert+0x1034/0x13c0 [ 1369.018509][T32560] ? free_vm_area+0x50/0x50 [ 1369.023056][T32560] ? netlink_sendmsg+0x5ec/0xbd0 [ 1369.028018][T32560] vmalloc+0x75/0x80 [ 1369.031977][T32560] ? netlink_sendmsg+0x5ec/0xbd0 [ 1369.036944][T32560] netlink_sendmsg+0x5ec/0xbd0 [ 1369.041745][T32560] ? netlink_getsockopt+0x550/0x550 [ 1369.046969][T32560] ? aa_file_perm+0x3ea/0xf00 [ 1369.051668][T32560] ? aa_file_perm+0x112/0xf00 [ 1369.056372][T32560] ? aa_sock_msg_perm+0x94/0x150 [ 1369.061342][T32560] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1369.066648][T32560] ? security_socket_sendmsg+0x7c/0xa0 [ 1369.072156][T32560] sock_write_iter+0x2d9/0x3e0 [ 1369.076954][T32560] ? sock_read_iter+0x3a0/0x3a0 [ 1369.081859][T32560] ? common_file_perm+0x171/0x1c0 [ 1369.086915][T32560] vfs_write+0x4b1/0xa30 [ 1369.091188][T32560] ? file_end_write+0x250/0x250 [ 1369.096074][T32560] ? __fget_files+0x43d/0x4b0 [ 1369.100843][T32560] ? __fdget_pos+0x1d4/0x360 [ 1369.105461][T32560] ? ksys_write+0x71/0x250 [ 1369.109908][T32560] ksys_write+0x14c/0x250 [ 1369.114264][T32560] ? __ia32_sys_read+0x80/0x80 [ 1369.119090][T32560] ? lockdep_hardirqs_on+0x94/0x140 [ 1369.124322][T32560] do_syscall_64+0x4c/0xa0 [ 1369.128765][T32560] ? clear_bhb_loop+0x60/0xb0 [ 1369.133492][T32560] ? clear_bhb_loop+0x60/0xb0 [ 1369.138202][T32560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1369.144126][T32560] RIP: 0033:0x7f28f599acb9 [ 1369.148568][T32560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1369.168184][T32560] RSP: 002b:00007f28f680c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1369.176619][T32560] RAX: ffffffffffffffda RBX: 00007f28f5c15fa0 RCX: 00007f28f599acb9 [ 1369.184625][T32560] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 1369.192625][T32560] RBP: 00007f28f680c090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.200616][T32560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.208604][T32560] R13: 00007f28f5c16038 R14: 00007f28f5c15fa0 R15: 00007ffebd2e5c08 [ 1369.216623][T32560] [ 1369.237727][T32563] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8089'. [ 1369.395949][T32567] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8091'. [ 1369.496931][T32574] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8093'. [ 1370.202506][T32583] __nla_validate_parse: 1 callbacks suppressed [ 1370.202530][T32583] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8097'. [ 1370.584602][T32587] FAULT_INJECTION: forcing a failure. [ 1370.584602][T32587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1370.648736][T32587] CPU: 1 PID: 32587 Comm: syz.0.8099 Not tainted syzkaller #0 [ 1370.656286][T32587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1370.666398][T32587] Call Trace: [ 1370.669754][T32587] [ 1370.672738][T32587] dump_stack_lvl+0x188/0x24e [ 1370.677485][T32587] ? show_regs_print_info+0x12/0x12 [ 1370.682749][T32587] ? load_image+0x400/0x400 [ 1370.687298][T32587] ? __lock_acquire+0x7d10/0x7d10 [ 1370.692430][T32587] ? snprintf+0xe5/0x140 [ 1370.696741][T32587] should_fail_ex+0x399/0x4d0 [ 1370.701582][T32587] _copy_to_user+0x2c/0x130 [ 1370.706228][T32587] simple_read_from_buffer+0xe3/0x150 [ 1370.711677][T32587] proc_fail_nth_read+0x1a6/0x220 [ 1370.716797][T32587] ? proc_fault_inject_write+0x310/0x310 [ 1370.722493][T32587] ? fsnotify_perm+0x248/0x550 [ 1370.727316][T32587] ? proc_fault_inject_write+0x310/0x310 [ 1370.733025][T32587] vfs_read+0x2de/0xa00 [ 1370.737260][T32587] ? kernel_read+0x1e0/0x1e0 [ 1370.741954][T32587] ? __fget_files+0x28/0x4b0 [ 1370.746590][T32587] ? __fget_files+0x28/0x4b0 [ 1370.751249][T32587] ? __fget_files+0x43d/0x4b0 [ 1370.756087][T32587] ? __fdget_pos+0x2ae/0x360 [ 1370.760740][T32587] ? ksys_read+0x71/0x250 [ 1370.765176][T32587] ksys_read+0x14c/0x250 [ 1370.769502][T32587] ? vfs_write+0xa30/0xa30 [ 1370.773977][T32587] ? lockdep_hardirqs_on+0x94/0x140 [ 1370.779246][T32587] do_syscall_64+0x4c/0xa0 [ 1370.783732][T32587] ? clear_bhb_loop+0x60/0xb0 [ 1370.788454][T32587] ? clear_bhb_loop+0x60/0xb0 [ 1370.793190][T32587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1370.799133][T32587] RIP: 0033:0x7f28f595b58e [ 1370.803588][T32587] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1370.823247][T32587] RSP: 002b:00007f28f680bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1370.831741][T32587] RAX: ffffffffffffffda RBX: 00007f28f680c6c0 RCX: 00007f28f595b58e [ 1370.839771][T32587] RDX: 000000000000000f RSI: 00007f28f680c0a0 RDI: 0000000000000005 [ 1370.847797][T32587] RBP: 00007f28f680c090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.855817][T32587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.863845][T32587] R13: 00007f28f5c16038 R14: 00007f28f5c15fa0 R15: 00007ffebd2e5c08 [ 1370.871905][T32587] [ 1370.892949][T32592] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8100'. [ 1371.153247][T32600] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8103'. [ 1371.395809][T32611] FAULT_INJECTION: forcing a failure. [ 1371.395809][T32611] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.416169][T32606] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1371.430636][T32606] syzkaller1: linktype set to 823 [ 1371.445514][T32611] CPU: 1 PID: 32611 Comm: syz.4.8107 Not tainted syzkaller #0 [ 1371.453044][T32611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1371.463129][T32611] Call Trace: [ 1371.466448][T32611] [ 1371.469415][T32611] dump_stack_lvl+0x188/0x24e [ 1371.474137][T32611] ? show_regs_print_info+0x12/0x12 [ 1371.479371][T32611] ? load_image+0x400/0x400 [ 1371.483932][T32611] ? __lock_acquire+0x7d10/0x7d10 [ 1371.489015][T32611] should_fail_ex+0x399/0x4d0 [ 1371.493747][T32611] should_failslab+0x5/0x20 [ 1371.498307][T32611] slab_pre_alloc_hook+0x59/0x310 [ 1371.503384][T32611] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1371.509481][T32611] kmem_cache_alloc_node+0x5a/0x320 [ 1371.514702][T32611] ? alloc_vmap_area+0x18e/0x18c0 [ 1371.519763][T32611] alloc_vmap_area+0x18e/0x18c0 [ 1371.524650][T32611] ? vm_map_ram+0xab0/0xab0 [ 1371.529180][T32611] ? rcu_is_watching+0x11/0xa0 [ 1371.533969][T32611] __get_vm_area_node+0x158/0x330 [ 1371.539017][T32611] ? __local_bh_enable_ip+0x136/0x1c0 [ 1371.544412][T32611] __vmalloc_node_range+0x357/0x13b0 [ 1371.549741][T32611] ? netlink_sendmsg+0x5ec/0xbd0 [ 1371.554731][T32611] ? netlink_insert+0x1034/0x13c0 [ 1371.559791][T32611] ? free_vm_area+0x50/0x50 [ 1371.564353][T32611] ? netlink_sendmsg+0x5ec/0xbd0 [ 1371.569322][T32611] vmalloc+0x75/0x80 [ 1371.573236][T32611] ? netlink_sendmsg+0x5ec/0xbd0 [ 1371.578197][T32611] netlink_sendmsg+0x5ec/0xbd0 [ 1371.582993][T32611] ? netlink_getsockopt+0x550/0x550 [ 1371.588216][T32611] ? aa_file_perm+0x3ea/0xf00 [ 1371.592915][T32611] ? aa_file_perm+0x112/0xf00 [ 1371.597621][T32611] ? aa_sock_msg_perm+0x94/0x150 [ 1371.602600][T32611] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1371.607900][T32611] ? security_socket_sendmsg+0x7c/0xa0 [ 1371.613404][T32611] sock_write_iter+0x2d9/0x3e0 [ 1371.618186][T32611] ? sock_read_iter+0x3a0/0x3a0 [ 1371.623072][T32611] ? common_file_perm+0x171/0x1c0 [ 1371.628120][T32611] vfs_write+0x4b1/0xa30 [ 1371.632395][T32611] ? file_end_write+0x250/0x250 [ 1371.637274][T32611] ? __fget_files+0x43d/0x4b0 [ 1371.641975][T32611] ? __fdget_pos+0x1d4/0x360 [ 1371.646585][T32611] ? ksys_write+0x71/0x250 [ 1371.651052][T32611] ksys_write+0x14c/0x250 [ 1371.655404][T32611] ? __ia32_sys_read+0x80/0x80 [ 1371.660191][T32611] ? lockdep_hardirqs_on+0x94/0x140 [ 1371.665418][T32611] do_syscall_64+0x4c/0xa0 [ 1371.669859][T32611] ? clear_bhb_loop+0x60/0xb0 [ 1371.674567][T32611] ? clear_bhb_loop+0x60/0xb0 [ 1371.679271][T32611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1371.685183][T32611] RIP: 0033:0x7f310639acb9 [ 1371.689611][T32611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1371.709226][T32611] RSP: 002b:00007f310722b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1371.717667][T32611] RAX: ffffffffffffffda RBX: 00007f3106615fa0 RCX: 00007f310639acb9 [ 1371.725687][T32611] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 1371.733688][T32611] RBP: 00007f310722b090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.741670][T32611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1371.749671][T32611] R13: 00007f3106616038 R14: 00007f3106615fa0 R15: 00007ffd6082e578 [ 1371.757674][T32611] [ 1371.800671][T32607] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1371.862027][T32607] syzkaller1: linktype set to 823 [ 1372.448998][T32629] pimreg: tun_chr_ioctl cmd 2147767520 [ 1372.684244][T32633] netlink: 'syz.1.8114': attribute type 1 has an invalid length. [ 1372.696611][T32633] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8114'. [ 1372.708529][T32633] netlink: 'syz.1.8114': attribute type 10 has an invalid length. [ 1373.863015][T32633] team0 (unregistering): Port device team_slave_0 removed [ 1373.903692][T32633] team0 (unregistering): Port device team_slave_1 removed [ 1374.052366][T32643] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8117'. [ 1374.142420][T32647] netlink: 'syz.3.8119': attribute type 153 has an invalid length. [ 1374.150791][T32647] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.8119'. [ 1374.242574][T32651] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8120'. [ 1374.290901][T32653] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8121'. [ 1374.352008][T32659] FAULT_INJECTION: forcing a failure. [ 1374.352008][T32659] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.401619][T32659] CPU: 1 PID: 32659 Comm: syz.4.8123 Not tainted syzkaller #0 [ 1374.409158][T32659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1374.419272][T32659] Call Trace: [ 1374.422588][T32659] [ 1374.425570][T32659] dump_stack_lvl+0x188/0x24e [ 1374.430322][T32659] ? show_regs_print_info+0x12/0x12 [ 1374.435574][T32659] ? load_image+0x400/0x400 [ 1374.440169][T32659] ? __lock_acquire+0x7d10/0x7d10 [ 1374.445226][T32659] should_fail_ex+0x399/0x4d0 [ 1374.449931][T32659] should_failslab+0x5/0x20 [ 1374.454463][T32659] slab_pre_alloc_hook+0x59/0x310 [ 1374.459530][T32659] kmem_cache_alloc_node+0x5a/0x320 [ 1374.464760][T32659] ? alloc_vmap_area+0x683/0x18c0 [ 1374.469807][T32659] alloc_vmap_area+0x683/0x18c0 [ 1374.474687][T32659] ? vm_map_ram+0xab0/0xab0 [ 1374.479208][T32659] ? rcu_is_watching+0x11/0xa0 [ 1374.484014][T32659] __get_vm_area_node+0x158/0x330 [ 1374.489068][T32659] ? __local_bh_enable_ip+0x136/0x1c0 [ 1374.494460][T32659] __vmalloc_node_range+0x357/0x13b0 [ 1374.499765][T32659] ? netlink_sendmsg+0x5ec/0xbd0 [ 1374.504730][T32659] ? netlink_insert+0x1034/0x13c0 [ 1374.509799][T32659] ? free_vm_area+0x50/0x50 [ 1374.514341][T32659] ? netlink_sendmsg+0x5ec/0xbd0 [ 1374.519315][T32659] vmalloc+0x75/0x80 [ 1374.523241][T32659] ? netlink_sendmsg+0x5ec/0xbd0 [ 1374.528229][T32659] netlink_sendmsg+0x5ec/0xbd0 [ 1374.533075][T32659] ? netlink_getsockopt+0x550/0x550 [ 1374.538294][T32659] ? aa_file_perm+0x3ea/0xf00 [ 1374.543000][T32659] ? aa_file_perm+0x112/0xf00 [ 1374.547692][T32659] ? aa_sock_msg_perm+0x94/0x150 [ 1374.552667][T32659] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1374.557975][T32659] ? security_socket_sendmsg+0x7c/0xa0 [ 1374.563462][T32659] sock_write_iter+0x2d9/0x3e0 [ 1374.568248][T32659] ? sock_read_iter+0x3a0/0x3a0 [ 1374.573132][T32659] ? common_file_perm+0x171/0x1c0 [ 1374.578172][T32659] vfs_write+0x4b1/0xa30 [ 1374.582452][T32659] ? file_end_write+0x250/0x250 [ 1374.587322][T32659] ? __fget_files+0x43d/0x4b0 [ 1374.592025][T32659] ? __fdget_pos+0x1d4/0x360 [ 1374.596639][T32659] ? ksys_write+0x71/0x250 [ 1374.601082][T32659] ksys_write+0x14c/0x250 [ 1374.605442][T32659] ? __ia32_sys_read+0x80/0x80 [ 1374.610226][T32659] ? lockdep_hardirqs_on+0x94/0x140 [ 1374.615451][T32659] do_syscall_64+0x4c/0xa0 [ 1374.619889][T32659] ? clear_bhb_loop+0x60/0xb0 [ 1374.624609][T32659] ? clear_bhb_loop+0x60/0xb0 [ 1374.629334][T32659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1374.635278][T32659] RIP: 0033:0x7f310639acb9 [ 1374.639715][T32659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.659423][T32659] RSP: 002b:00007f310722b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1374.667854][T32659] RAX: ffffffffffffffda RBX: 00007f3106615fa0 RCX: 00007f310639acb9 [ 1374.675845][T32659] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 1374.683854][T32659] RBP: 00007f310722b090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.691853][T32659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.699851][T32659] R13: 00007f3106616038 R14: 00007f3106615fa0 R15: 00007ffd6082e578 [ 1374.707851][T32659] [ 1374.816011][T32665] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8126'. [ 1375.053931][T32677] netlink: 'syz.0.8130': attribute type 15 has an invalid length. [ 1375.075317][T32677] netlink: 'syz.0.8130': attribute type 7 has an invalid length. [ 1375.310492][T32659] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8123'. [ 1375.325736][T32682] netlink: 'syz.3.8128': attribute type 10 has an invalid length. [ 1375.375756][T32682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8128'. [ 1377.317910][T32706] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8137'. [ 1377.574901][T32709] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8138'. [ 1378.265085][T32712] netlink: 'syz.0.8142': attribute type 2 has an invalid length. [ 1378.268479][T32717] netlink: 57923 bytes leftover after parsing attributes in process `syz.1.8143'. [ 1378.295856][T32712] netlink: 'syz.0.8142': attribute type 8 has an invalid length. [ 1378.331190][T32712] netlink: 'syz.0.8142': attribute type 9 has an invalid length. [ 1378.367014][T32712] netlink: 'syz.0.8142': attribute type 10 has an invalid length. [ 1378.389531][T32712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1378.428664][T32722] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.8141'. [ 1378.626335][T32725] FAULT_INJECTION: forcing a failure. [ 1378.626335][T32725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1378.669460][T32725] CPU: 1 PID: 32725 Comm: syz.2.8144 Not tainted syzkaller #0 [ 1378.677007][T32725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1378.687101][T32725] Call Trace: [ 1378.690422][T32725] [ 1378.693394][T32725] dump_stack_lvl+0x188/0x24e [ 1378.698125][T32725] ? show_regs_print_info+0x12/0x12 [ 1378.703366][T32725] ? load_image+0x400/0x400 [ 1378.707928][T32725] ? __lock_acquire+0x7d10/0x7d10 [ 1378.713037][T32725] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1378.719678][T32725] should_fail_ex+0x399/0x4d0 [ 1378.724423][T32725] prepare_alloc_pages+0x1e2/0x5f0 [ 1378.729597][T32725] __alloc_pages+0x130/0x4f0 [ 1378.734236][T32725] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 1378.740019][T32725] ? zone_statistics+0x170/0x170 [ 1378.745019][T32725] ? __rwlock_init+0x140/0x140 [ 1378.749845][T32725] ? do_raw_spin_unlock+0x11d/0x230 [ 1378.755086][T32725] __get_free_pages+0x8/0x30 [ 1378.759719][T32725] kasan_populate_vmalloc_pte+0x31/0xf0 [ 1378.765342][T32725] ? __apply_to_page_range+0x977/0xd10 [ 1378.770876][T32725] __apply_to_page_range+0x989/0xd10 [ 1378.776247][T32725] ? kasan_populate_vmalloc+0x70/0x70 [ 1378.781703][T32725] alloc_vmap_area+0x178f/0x18c0 [ 1378.786711][T32725] ? vm_map_ram+0xab0/0xab0 [ 1378.791260][T32725] ? rcu_is_watching+0x11/0xa0 [ 1378.796088][T32725] __get_vm_area_node+0x158/0x330 [ 1378.801157][T32725] ? __local_bh_enable_ip+0x136/0x1c0 [ 1378.806577][T32725] __vmalloc_node_range+0x357/0x13b0 [ 1378.811919][T32725] ? netlink_sendmsg+0x5ec/0xbd0 [ 1378.816923][T32725] ? netlink_insert+0x1034/0x13c0 [ 1378.822017][T32725] ? free_vm_area+0x50/0x50 [ 1378.826579][T32725] ? netlink_sendmsg+0x5ec/0xbd0 [ 1378.831580][T32725] vmalloc+0x75/0x80 [ 1378.835521][T32725] ? netlink_sendmsg+0x5ec/0xbd0 [ 1378.840509][T32725] netlink_sendmsg+0x5ec/0xbd0 [ 1378.845356][T32725] ? netlink_getsockopt+0x550/0x550 [ 1378.850596][T32725] ? aa_file_perm+0x3ea/0xf00 [ 1378.855354][T32725] ? aa_file_perm+0x112/0xf00 [ 1378.860076][T32725] ? aa_sock_msg_perm+0x94/0x150 [ 1378.865050][T32725] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1378.870364][T32725] ? security_socket_sendmsg+0x7c/0xa0 [ 1378.875873][T32725] sock_write_iter+0x2d9/0x3e0 [ 1378.880708][T32725] ? sock_read_iter+0x3a0/0x3a0 [ 1378.885655][T32725] ? common_file_perm+0x171/0x1c0 [ 1378.890729][T32725] vfs_write+0x4b1/0xa30 [ 1378.895070][T32725] ? file_end_write+0x250/0x250 [ 1378.899983][T32725] ? __fget_files+0x43d/0x4b0 [ 1378.904732][T32725] ? __fdget_pos+0x1d4/0x360 [ 1378.909392][T32725] ? ksys_write+0x71/0x250 [ 1378.913859][T32725] ksys_write+0x14c/0x250 [ 1378.918241][T32725] ? __ia32_sys_read+0x80/0x80 [ 1378.923067][T32725] ? lockdep_hardirqs_on+0x94/0x140 [ 1378.928320][T32725] do_syscall_64+0x4c/0xa0 [ 1378.932780][T32725] ? clear_bhb_loop+0x60/0xb0 [ 1378.937499][T32725] ? clear_bhb_loop+0x60/0xb0 [ 1378.942214][T32725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1378.948174][T32725] RIP: 0033:0x7f2935f9acb9 [ 1378.952657][T32725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.972309][T32725] RSP: 002b:00007f2936d7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1378.980765][T32725] RAX: ffffffffffffffda RBX: 00007f2936215fa0 RCX: 00007f2935f9acb9 [ 1378.988775][T32725] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 1378.996792][T32725] RBP: 00007f2936d7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.004823][T32725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.012831][T32725] R13: 00007f2936216038 R14: 00007f2936215fa0 R15: 00007ffc21f02d48 [ 1379.020859][T32725] [ 1379.044296][T32725] warn_alloc: 2 callbacks suppressed [ 1379.044311][T32725] syz.2.8144: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1379.119329][T32725] CPU: 1 PID: 32725 Comm: syz.2.8144 Not tainted syzkaller #0 [ 1379.126918][T32725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1379.137024][T32725] Call Trace: [ 1379.140345][T32725] [ 1379.143335][T32725] dump_stack_lvl+0x188/0x24e [ 1379.148062][T32725] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1379.154520][T32725] ? show_regs_print_info+0x12/0x12 [ 1379.159769][T32725] ? load_image+0x400/0x400 [ 1379.164327][T32725] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1379.170786][T32725] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1379.177329][T32725] warn_alloc+0x242/0x330 [ 1379.181708][T32725] ? slab_free_freelist_hook+0x131/0x1a0 [ 1379.187402][T32725] ? zone_watermark_ok_safe+0x270/0x270 [ 1379.193013][T32725] ? __get_vm_area_node+0x16d/0x330 [ 1379.198263][T32725] ? __get_vm_area_node+0x16d/0x330 [ 1379.203507][T32725] ? __local_bh_enable_ip+0x136/0x1c0 [ 1379.208929][T32725] __vmalloc_node_range+0x37c/0x13b0 [ 1379.214265][T32725] ? netlink_insert+0x1034/0x13c0 [ 1379.219356][T32725] ? free_vm_area+0x50/0x50 [ 1379.223922][T32725] ? netlink_sendmsg+0x5ec/0xbd0 [ 1379.228910][T32725] vmalloc+0x75/0x80 [ 1379.232863][T32725] ? netlink_sendmsg+0x5ec/0xbd0 [ 1379.237846][T32725] netlink_sendmsg+0x5ec/0xbd0 [ 1379.242684][T32725] ? netlink_getsockopt+0x550/0x550 [ 1379.247931][T32725] ? aa_file_perm+0x3ea/0xf00 [ 1379.252650][T32725] ? aa_file_perm+0x112/0xf00 [ 1379.257358][T32725] ? aa_sock_msg_perm+0x94/0x150 [ 1379.262329][T32725] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1379.267643][T32725] ? security_socket_sendmsg+0x7c/0xa0 [ 1379.273169][T32725] sock_write_iter+0x2d9/0x3e0 [ 1379.277992][T32725] ? sock_read_iter+0x3a0/0x3a0 [ 1379.283001][T32725] ? common_file_perm+0x171/0x1c0 [ 1379.288075][T32725] vfs_write+0x4b1/0xa30 [ 1379.292368][T32725] ? file_end_write+0x250/0x250 [ 1379.297270][T32725] ? __fget_files+0x43d/0x4b0 [ 1379.302006][T32725] ? __fdget_pos+0x1d4/0x360 [ 1379.306679][T32725] ? ksys_write+0x71/0x250 [ 1379.311159][T32725] ksys_write+0x14c/0x250 [ 1379.315540][T32725] ? __ia32_sys_read+0x80/0x80 [ 1379.320384][T32725] ? lockdep_hardirqs_on+0x94/0x140 [ 1379.325664][T32725] do_syscall_64+0x4c/0xa0 [ 1379.330130][T32725] ? clear_bhb_loop+0x60/0xb0 [ 1379.334860][T32725] ? clear_bhb_loop+0x60/0xb0 [ 1379.339595][T32725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.345524][T32725] RIP: 0033:0x7f2935f9acb9 [ 1379.349997][T32725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.369745][T32725] RSP: 002b:00007f2936d7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1379.378201][T32725] RAX: ffffffffffffffda RBX: 00007f2936215fa0 RCX: 00007f2935f9acb9 [ 1379.386229][T32725] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 1379.394244][T32725] RBP: 00007f2936d7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.402250][T32725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.410262][T32725] R13: 00007f2936216038 R14: 00007f2936215fa0 R15: 00007ffc21f02d48 [ 1379.418293][T32725] [ 1379.907362][T32743] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8149'. [ 1379.952745][T32725] Mem-Info: [ 1379.955968][T32725] active_anon:39867 inactive_anon:0 isolated_anon:0 [ 1379.955968][T32725] active_file:20704 inactive_file:40445 isolated_file:0 [ 1379.955968][T32725] unevictable:768 dirty:227 writeback:0 [ 1379.955968][T32725] slab_reclaimable:21321 slab_unreclaimable:101213 [ 1379.955968][T32725] mapped:37545 shmem:33979 pagetables:711 [ 1379.955968][T32725] sec_pagetables:0 bounce:0 [ 1379.955968][T32725] kernel_misc_reclaimable:0 [ 1379.955968][T32725] free:1281357 free_pcp:7148 free_cma:0 [ 1380.009990][T32725] Node 0 active_anon:159268kB inactive_anon:0kB active_file:82816kB inactive_file:161576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150480kB dirty:908kB writeback:0kB shmem:134080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12400kB pagetables:2844kB sec_pagetables:0kB all_unreclaimable? no [ 1380.139309][T32725] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1380.227093][T32725] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1380.389511][T32725] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1380.395523][T32725] Node 0 DMA32 free:1207096kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:154168kB inactive_anon:0kB active_file:82816kB inactive_file:161576kB unevictable:1536kB writepending:908kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:18480kB local_pcp:14044kB free_cma:0kB [ 1380.446590][T32748] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1380.476369][T32748] syzkaller1: linktype set to 6 [ 1380.489503][T32725] lowmem_reserve[]: 0 0 1 1 1 [ 1380.494511][T32725] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1380.527823][T32749] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1380.545936][T32749] syzkaller1: linktype set to 6 [ 1380.586434][T32725] lowmem_reserve[]: 0 0 0 0 0 [ 1380.619370][T32725] Node 1 Normal free:3900880kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18628kB local_pcp:9316kB free_cma:0kB [ 1380.712617][T32725] lowmem_reserve[]: 0 0 0 0 0 [ 1380.717510][T32725] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1380.738820][T32725] Node 0 DMA32: 2*4kB (UM) 144*8kB (UME) 1109*16kB (UE) 589*32kB (UE) 473*64kB (UME) 630*128kB (UE) 215*256kB (UME) 156*512kB (UM) 85*1024kB (UM) 14*2048kB (UM) 197*4096kB (UM) = 1206200kB [ 1380.768530][T32725] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1380.789497][T32725] Node 1 Normal: 260*4kB (UME) 56*8kB (UME) 42*16kB (UE) 35*32kB (UME) 16*64kB (UME) 10*128kB (UME) 4*256kB (UM) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3900880kB [ 1380.829406][T32725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.859518][T32725] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1380.869503][T32725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.892566][T32725] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1380.921828][T32725] 92410 total pagecache pages [ 1380.939372][T32725] 0 pages in swap cache [ 1380.943593][T32725] Free swap = 124728kB [ 1380.978573][T32725] Total swap = 124996kB [ 1380.990158][T32762] netlink: 57923 bytes leftover after parsing attributes in process `syz.4.8155'. [ 1381.006307][T32725] 2097051 pages RAM [ 1381.012971][T32765] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8158'. [ 1381.022368][T32725] 0 pages HighMem/MovableOnly [ 1381.027114][T32725] 415205 pages reserved [ 1381.040695][T32725] 0 pages cma reserved [ 1381.074854][ T300] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8159'. [ 1381.129806][T32765] device caif0 entered promiscuous mode [ 1381.222306][ T302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8160'. [ 1381.841770][ T320] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8164'. [ 1383.737604][ T360] netlink: 57923 bytes leftover after parsing attributes in process `syz.4.8174'. [ 1383.945138][ T368] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8180'. [ 1384.189927][ T380] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8185'. [ 1384.448024][ T393] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8190'. [ 1384.865915][ T408] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1385.087414][ T413] netlink: 57923 bytes leftover after parsing attributes in process `syz.2.8194'. [ 1385.831719][ T444] device syzkaller0 left promiscuous mode [ 1385.870998][ T5802] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1385.903000][ T444] netlink: 'syz.3.8203': attribute type 4 has an invalid length. [ 1385.933491][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1386.561551][ T466] __nla_validate_parse: 2 callbacks suppressed [ 1386.561567][ T466] netlink: 57923 bytes leftover after parsing attributes in process `syz.1.8208'. [ 1386.723943][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1386.762763][ T472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1387.611837][ T482] netlink: 'syz.0.8216': attribute type 4 has an invalid length. [ 1387.634350][ T482] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8216'. [ 1387.687110][ T482] wlan1: mtu less than device minimum [ 1387.742398][ T481] delete_channel: no stack [ 1387.838935][ T492] netlink: 'syz.2.8218': attribute type 10 has an invalid length. [ 1387.917621][ T492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8218'. [ 1388.780296][ T518] netlink: 57923 bytes leftover after parsing attributes in process `syz.0.8227'. [ 1388.982954][ T523] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.8229'. [ 1389.692235][ T536] netlink: 'syz.1.8234': attribute type 3 has an invalid length. [ 1389.726240][ T536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8234'. [ 1389.753355][ T539] netlink: 92148 bytes leftover after parsing attributes in process `syz.1.8234'. [ 1389.787581][ T538] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.8235'. [ 1390.410305][ T553] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8239'. [ 1390.690469][ T560] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8241'. [ 1391.267925][ T577] netlink: 'syz.4.8246': attribute type 28 has an invalid length. [ 1391.292446][ T577] netlink: 'syz.4.8246': attribute type 3 has an invalid length. [ 1391.347150][ T580] netlink: 'syz.2.8247': attribute type 21 has an invalid length. [ 1392.334110][ T590] netlink: 'syz.4.8250': attribute type 21 has an invalid length. [ 1392.379427][ T590] __nla_validate_parse: 3 callbacks suppressed [ 1392.379444][ T590] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8250'. [ 1392.445733][ T594] netlink: 'syz.4.8250': attribute type 1 has an invalid length. [ 1392.499444][ T594] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.8250'. [ 1392.521800][ T596] netlink: 'syz.3.8252': attribute type 21 has an invalid length. [ 1392.582314][ T596] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8252'. [ 1392.856431][ T608] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8254'. [ 1393.279633][ T626] netlink: 'syz.3.8260': attribute type 17 has an invalid length. [ 1393.443522][ T633] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8262'. [ 1393.588610][ T643] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8266'. [ 1393.827221][ T647] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8267'. [ 1395.216840][ T671] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.8274'. [ 1395.836891][ T690] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.8279'. [ 1395.881766][ T687] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8281'. [ 1396.618438][ T691] device syzkaller0 entered promiscuous mode [ 1399.804530][ T719] netlink: 'syz.0.8287': attribute type 10 has an invalid length. [ 1399.879828][ T719] team0: Port device geneve1 added [ 1400.225658][ T735] __nla_validate_parse: 2 callbacks suppressed [ 1400.225681][ T735] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8292'. [ 1400.520668][ T741] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.8294'. [ 1400.947828][ T748] netlink: 'syz.0.8296': attribute type 3 has an invalid length. [ 1400.976488][ T748] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8296'. [ 1401.078310][ T751] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8297'. [ 1401.841394][ T766] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8303'. [ 1402.001667][ T770] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8304'. [ 1402.141344][ T773] netlink: 'syz.0.8306': attribute type 29 has an invalid length. [ 1402.182672][ T773] netlink: 'syz.0.8306': attribute type 29 has an invalid length. [ 1402.382700][ T771] delete_channel: no stack [ 1402.400177][ T784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8309'. [ 1402.857766][ T804] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.8315'. [ 1403.217289][ T810] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8318'. [ 1403.521283][ T819] FAULT_INJECTION: forcing a failure. [ 1403.521283][ T819] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.544341][ T819] CPU: 1 PID: 819 Comm: syz.4.8320 Not tainted syzkaller #0 [ 1403.551737][ T819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1403.561842][ T819] Call Trace: [ 1403.565164][ T819] [ 1403.568130][ T819] dump_stack_lvl+0x188/0x24e [ 1403.572874][ T819] ? show_regs_print_info+0x12/0x12 [ 1403.578120][ T819] ? load_image+0x400/0x400 [ 1403.582674][ T819] ? __might_sleep+0xd0/0xd0 [ 1403.587320][ T819] ? __lock_acquire+0x7d10/0x7d10 [ 1403.592414][ T819] should_fail_ex+0x399/0x4d0 [ 1403.597152][ T819] should_failslab+0x5/0x20 [ 1403.601709][ T819] slab_pre_alloc_hook+0x59/0x310 [ 1403.606778][ T819] ? __get_vm_area_node+0x122/0x330 [ 1403.612033][ T819] __kmem_cache_alloc_node+0x4f/0x260 [ 1403.617423][ T819] ? __get_vm_area_node+0x122/0x330 [ 1403.622651][ T819] kmalloc_node_trace+0x22/0xe0 [ 1403.627566][ T819] __get_vm_area_node+0x122/0x330 [ 1403.632612][ T819] ? __local_bh_enable_ip+0x136/0x1c0 [ 1403.638053][ T819] __vmalloc_node_range+0x357/0x13b0 [ 1403.643367][ T819] ? netlink_sendmsg+0x5ec/0xbd0 [ 1403.648341][ T819] ? netlink_insert+0x1034/0x13c0 [ 1403.653405][ T819] ? free_vm_area+0x50/0x50 [ 1403.657944][ T819] ? netlink_sendmsg+0x5ec/0xbd0 [ 1403.662920][ T819] vmalloc+0x75/0x80 [ 1403.666865][ T819] ? netlink_sendmsg+0x5ec/0xbd0 [ 1403.671832][ T819] netlink_sendmsg+0x5ec/0xbd0 [ 1403.676641][ T819] ? netlink_getsockopt+0x550/0x550 [ 1403.681873][ T819] ? aa_file_perm+0x3ea/0xf00 [ 1403.686571][ T819] ? aa_file_perm+0x112/0xf00 [ 1403.691322][ T819] ? aa_sock_msg_perm+0x94/0x150 [ 1403.696282][ T819] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1403.701585][ T819] ? security_socket_sendmsg+0x7c/0xa0 [ 1403.707093][ T819] sock_write_iter+0x2d9/0x3e0 [ 1403.711906][ T819] ? sock_read_iter+0x3a0/0x3a0 [ 1403.716828][ T819] ? common_file_perm+0x171/0x1c0 [ 1403.721898][ T819] vfs_write+0x4b1/0xa30 [ 1403.726171][ T819] ? file_end_write+0x250/0x250 [ 1403.731091][ T819] ? __fget_files+0x43d/0x4b0 [ 1403.735802][ T819] ? __fdget_pos+0x1d4/0x360 [ 1403.740423][ T819] ? ksys_write+0x71/0x250 [ 1403.744871][ T819] ksys_write+0x14c/0x250 [ 1403.749243][ T819] ? __ia32_sys_read+0x80/0x80 [ 1403.754041][ T819] ? lockdep_hardirqs_on+0x94/0x140 [ 1403.759281][ T819] do_syscall_64+0x4c/0xa0 [ 1403.763722][ T819] ? clear_bhb_loop+0x60/0xb0 [ 1403.768443][ T819] ? clear_bhb_loop+0x60/0xb0 [ 1403.773140][ T819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1403.779051][ T819] RIP: 0033:0x7f310639acb9 [ 1403.783479][ T819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.803098][ T819] RSP: 002b:00007f310722b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1403.811542][ T819] RAX: ffffffffffffffda RBX: 00007f3106615fa0 RCX: 00007f310639acb9 [ 1403.819532][ T819] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004 [ 1403.827520][ T819] RBP: 00007f310722b090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.835510][ T819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.843496][ T819] R13: 00007f3106616038 R14: 00007f3106615fa0 R15: 00007ffd6082e578 [ 1403.851505][ T819] [ 1404.146364][ T823] netlink: 'syz.3.8322': attribute type 3 has an invalid length. [ 1404.165523][ T823] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8322'. [ 1404.397674][ T819] syz.4.8320: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1404.440830][ T819] CPU: 1 PID: 819 Comm: syz.4.8320 Not tainted syzkaller #0 [ 1404.448207][ T819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1404.458310][ T819] Call Trace: [ 1404.461629][ T819] [ 1404.464598][ T819] dump_stack_lvl+0x188/0x24e [ 1404.469333][ T819] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1404.475802][ T819] ? show_regs_print_info+0x12/0x12 [ 1404.481053][ T819] ? load_image+0x400/0x400 [ 1404.485630][ T819] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1404.492353][ T819] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1404.498912][ T819] warn_alloc+0x242/0x330 [ 1404.503287][ T819] ? __get_vm_area_node+0x122/0x330 [ 1404.508564][ T819] ? zone_watermark_ok_safe+0x270/0x270 [ 1404.514162][ T819] ? rcu_is_watching+0x11/0xa0 [ 1404.518993][ T819] ? __get_vm_area_node+0x318/0x330 [ 1404.524258][ T819] ? __local_bh_enable_ip+0x136/0x1c0 [ 1404.529688][ T819] __vmalloc_node_range+0x37c/0x13b0 [ 1404.535030][ T819] ? netlink_insert+0x1034/0x13c0 [ 1404.540126][ T819] ? free_vm_area+0x50/0x50 [ 1404.544692][ T819] ? netlink_sendmsg+0x5ec/0xbd0 [ 1404.549680][ T819] vmalloc+0x75/0x80 [ 1404.553626][ T819] ? netlink_sendmsg+0x5ec/0xbd0 [ 1404.558622][ T819] netlink_sendmsg+0x5ec/0xbd0 [ 1404.563446][ T819] ? netlink_getsockopt+0x550/0x550 [ 1404.568701][ T819] ? aa_file_perm+0x3ea/0xf00 [ 1404.573432][ T819] ? aa_file_perm+0x112/0xf00 [ 1404.578150][ T819] ? aa_sock_msg_perm+0x94/0x150 [ 1404.583130][ T819] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1404.588468][ T819] ? security_socket_sendmsg+0x7c/0xa0 [ 1404.594012][ T819] sock_write_iter+0x2d9/0x3e0 [ 1404.598852][ T819] ? sock_read_iter+0x3a0/0x3a0 [ 1404.604203][ T819] ? common_file_perm+0x171/0x1c0 [ 1404.609280][ T819] vfs_write+0x4b1/0xa30 [ 1404.613584][ T819] ? file_end_write+0x250/0x250 [ 1404.618489][ T819] ? __fget_files+0x43d/0x4b0 [ 1404.623232][ T819] ? __fdget_pos+0x1d4/0x360 [ 1404.627876][ T819] ? ksys_write+0x71/0x250 [ 1404.632358][ T819] ksys_write+0x14c/0x250 [ 1404.636748][ T819] ? __ia32_sys_read+0x80/0x80 [ 1404.641586][ T819] ? lockdep_hardirqs_on+0x94/0x140 [ 1404.646856][ T819] do_syscall_64+0x4c/0xa0 [ 1404.651319][ T819] ? clear_bhb_loop+0x60/0xb0 [ 1404.656056][ T819] ? clear_bhb_loop+0x60/0xb0 [ 1404.660790][ T819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1404.666773][ T819] RIP: 0033:0x7f310639acb9 [ 1404.671248][ T819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1404.691004][ T819] RSP: 002b:00007f310722b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1404.699469][ T819] RAX: ffffffffffffffda RBX: 00007f3106615fa0 RCX: 00007f310639acb9 [ 1404.707483][ T819] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004 [ 1404.715505][ T819] RBP: 00007f310722b090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.723520][ T819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.731547][ T819] R13: 00007f3106616038 R14: 00007f3106615fa0 R15: 00007ffd6082e578 [ 1404.739587][ T819] [ 1404.767693][ T819] Mem-Info: [ 1404.773836][ T819] active_anon:7050 inactive_anon:0 isolated_anon:0 [ 1404.773836][ T819] active_file:20704 inactive_file:40453 isolated_file:0 [ 1404.773836][ T819] unevictable:768 dirty:80 writeback:0 [ 1404.773836][ T819] slab_reclaimable:21346 slab_unreclaimable:102743 [ 1404.773836][ T819] mapped:30322 shmem:1379 pagetables:610 [ 1404.773836][ T819] sec_pagetables:0 bounce:0 [ 1404.773836][ T819] kernel_misc_reclaimable:0 [ 1404.773836][ T819] free:1311362 free_pcp:8979 free_cma:0 [ 1404.840978][ T834] delete_channel: no stack [ 1404.847513][ T834] delete_channel: no stack [ 1404.856624][ T819] Node 0 active_anon:28300kB inactive_anon:0kB active_file:82816kB inactive_file:161608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122588kB dirty:320kB writeback:0kB shmem:3980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12468kB pagetables:2440kB sec_pagetables:0kB all_unreclaimable? no [ 1404.893398][ T819] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1404.924696][ T819] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1404.987290][ T835] openvswitch: netlink: Message has 6 unknown bytes. [ 1404.994981][ T819] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1405.004050][ T819] Node 0 DMA32 free:1329192kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:28324kB inactive_anon:0kB active_file:82816kB inactive_file:161608kB unevictable:1536kB writepending:320kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:15732kB local_pcp:2792kB free_cma:0kB [ 1405.065886][ T819] lowmem_reserve[]: 0 0 1 1 1 [ 1405.078438][ T819] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1405.121669][ T819] lowmem_reserve[]: 0 0 0 0 0 [ 1405.129673][ T819] Node 1 Normal free:3900880kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18628kB local_pcp:9312kB free_cma:0kB [ 1405.177907][ T819] lowmem_reserve[]: 0 0 0 0 0 [ 1405.186673][ T819] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1405.214063][ T819] Node 0 DMA32: 1229*4kB (UME) 2127*8kB (UME) 2214*16kB (UME) 597*32kB (UME) 805*64kB (UME) 814*128kB (UME) 337*256kB (UME) 187*512kB (UM) 76*1024kB (UM) 14*2048kB (UM) 197*4096kB (UM) = 1327596kB [ 1405.260513][ T819] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1405.282981][ T819] Node 1 Normal: 260*4kB (UME) 56*8kB (UME) 42*16kB (UE) 35*32kB (UME) 16*64kB (UME) 10*128kB (UME) 4*256kB (UM) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3900880kB [ 1405.324700][ T819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1405.344112][ T819] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1405.373313][ T819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1405.393559][ T819] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1405.410120][ T819] 62518 total pagecache pages [ 1405.414899][ T819] 0 pages in swap cache [ 1405.444659][ T819] Free swap = 124728kB [ 1405.451105][ T819] Total swap = 124996kB [ 1405.455705][ T819] 2097051 pages RAM [ 1405.464595][ T819] 0 pages HighMem/MovableOnly [ 1405.484253][ T819] 415205 pages reserved [ 1405.488586][ T819] 0 pages cma reserved [ 1406.118776][ T837] __nla_validate_parse: 1 callbacks suppressed [ 1406.118797][ T837] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8324'. [ 1406.527099][ T846] netlink: 'syz.1.8328': attribute type 10 has an invalid length. [ 1406.543163][ T852] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8330'. [ 1406.947908][ T860] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8334'. [ 1407.014071][ T864] device lo entered promiscuous mode [ 1408.096662][ T881] netlink: 'syz.2.8336': attribute type 10 has an invalid length. [ 1408.264278][ T881] team0: Port device geneve1 added [ 1408.284408][ T889] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8337'. [ 1408.534772][ T913] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.8340'. [ 1408.683348][ T919] netlink: 'syz.1.8343': attribute type 10 has an invalid length. [ 1408.755601][ T926] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8345'. [ 1408.838529][ T930] netlink: 'syz.1.8343': attribute type 10 has an invalid length. [ 1409.160667][ T939] netlink: 'syz.2.8349': attribute type 21 has an invalid length. [ 1409.185849][ T939] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8349'. [ 1409.255483][ T939] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8349'. [ 1409.288980][ T948] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8352'. [ 1410.306801][ T979] IPv6: Can't replace route, no match found [ 1410.458694][ T994] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8364'. [ 1410.768975][ T1010] netlink: 'syz.2.8369': attribute type 3 has an invalid length. [ 1411.341202][ T1038] __nla_validate_parse: 2 callbacks suppressed [ 1411.341226][ T1038] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8374'. [ 1412.650902][ T48] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1412.843217][ T1060] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8381'. [ 1413.280857][ T1071] netlink: 'syz.2.8384': attribute type 10 has an invalid length. [ 1413.346545][ T1071] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1413.388134][ T1074] netlink: 'syz.3.8386': attribute type 21 has an invalid length. [ 1413.406502][ T1074] netlink: 'syz.3.8386': attribute type 5 has an invalid length. [ 1413.418002][ T1082] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8387'. [ 1414.078625][ T1114] netlink: 8218 bytes leftover after parsing attributes in process `syz.4.8397'. [ 1414.181110][ T1115] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8396'. [ 1414.720998][ T1127] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1414.739276][ T48] Bluetooth: hci2: command 0x2016 tx timeout [ 1415.371762][ T1147] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8405'. [ 1417.067518][ T1179] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.8415'. [ 1417.131594][ T1179] tipc: Started in network mode [ 1417.136593][ T1179] tipc: Node identity 9215a268, cluster identity 4711 [ 1417.175421][ T1179] tipc: Node number set to 2450891368 [ 1417.681532][ T1193] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8418'. [ 1417.695102][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1417.713999][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1417.744911][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1417.764709][ T1194] netlink: 'syz.4.8420': attribute type 10 has an invalid length. [ 1417.814907][ T1194] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8420'. [ 1417.848350][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1417.870135][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1418.004183][ T1207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8422'. [ 1418.040933][ T1207] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8422'. [ 1418.262642][ T1218] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.8427'. [ 1418.418050][ T1224] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.8428'. [ 1418.516147][ T1227] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8429'. [ 1418.614347][ T1233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8429'. [ 1419.944743][ T1261] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8437'. [ 1419.973767][ T1264] netlink: 'syz.1.8437': attribute type 25 has an invalid length. [ 1420.064736][ T1259] can: request_module (can-proto-0) failed. [ 1420.465823][ T1276] netlink: 'syz.1.8442': attribute type 21 has an invalid length. [ 1422.778301][ T1335] __nla_validate_parse: 4 callbacks suppressed [ 1422.778322][ T1335] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8457'. [ 1422.826530][ T1336] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8456'. [ 1422.871418][ T1335] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1423.134743][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.141175][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.294493][ T1339] device syzkaller0 entered promiscuous mode [ 1423.370486][ T1334] delete_channel: no stack [ 1423.661241][ T1349] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.8462'. [ 1426.682949][ T1344] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.8460'. [ 1426.699547][ T1356] netlink: 'syz.3.8464': attribute type 21 has an invalid length. [ 1426.716641][ T1349] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1426.740552][ T1349] CPU: 1 PID: 1349 Comm: syz.0.8462 Not tainted syzkaller #0 [ 1426.748037][ T1349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1426.758162][ T1349] Call Trace: [ 1426.761499][ T1349] [ 1426.764480][ T1349] dump_stack_lvl+0x188/0x24e [ 1426.769229][ T1349] ? show_regs_print_info+0x12/0x12 [ 1426.774500][ T1349] ? load_image+0x400/0x400 [ 1426.779081][ T1349] sysfs_warn_dup+0x8a/0xa0 [ 1426.783654][ T1349] sysfs_do_create_link_sd+0xc0/0x110 [ 1426.789103][ T1349] device_add+0x7ed/0xfb0 [ 1426.793521][ T1349] wiphy_register+0x1d9f/0x2ac0 [ 1426.798456][ T1349] ? cfg80211_event_work+0x40/0x40 [ 1426.803639][ T1349] ? minstrel_ht_alloc+0x894/0xa20 [ 1426.808821][ T1349] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1426.814968][ T1349] ieee80211_register_hw+0x2d00/0x39f0 [ 1426.820530][ T1349] ? ieee80211_register_hw+0xea1/0x39f0 [ 1426.826126][ T1349] ? ieee80211_register_hw+0xea1/0x39f0 [ 1426.831760][ T1349] ? ieee80211_tasklet_handler+0x20/0x20 [ 1426.837471][ T1349] ? memset+0x1e/0x40 [ 1426.841507][ T1349] ? __hrtimer_init+0x186/0x270 [ 1426.846453][ T1349] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1426.852299][ T1349] hwsim_new_radio_nl+0xafa/0xce0 [ 1426.857427][ T1349] genl_family_rcv_msg_doit+0x22a/0x330 [ 1426.863036][ T1349] ? end_current_label_crit_section+0x170/0x170 [ 1426.869334][ T1349] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1426.875307][ T1349] ? bpf_lsm_capable+0x5/0x10 [ 1426.880048][ T1349] ? security_capable+0x85/0xb0 [ 1426.884975][ T1349] genl_rcv_msg+0x604/0x790 [ 1426.889568][ T1349] ? genl_bind+0x360/0x360 [ 1426.894061][ T1349] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1426.900472][ T1349] netlink_rcv_skb+0x1fb/0x450 [ 1426.905306][ T1349] ? genl_bind+0x360/0x360 [ 1426.909928][ T1349] ? netlink_ack+0x1170/0x1170 [ 1426.914774][ T1349] ? down_read+0x1a8/0x2d0 [ 1426.919255][ T1349] genl_rcv+0x24/0x40 [ 1426.923314][ T1349] netlink_unicast+0x74d/0x8d0 [ 1426.928155][ T1349] netlink_sendmsg+0x8ad/0xbd0 [ 1426.932989][ T1349] ? netlink_getsockopt+0x550/0x550 [ 1426.938249][ T1349] ? aa_sock_msg_perm+0x94/0x150 [ 1426.943248][ T1349] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1426.948609][ T1349] ? security_socket_sendmsg+0x7c/0xa0 [ 1426.954161][ T1349] ? netlink_getsockopt+0x550/0x550 [ 1426.959427][ T1349] ____sys_sendmsg+0x5be/0x970 [ 1426.964295][ T1349] ? __sys_sendmsg_sock+0x30/0x30 [ 1426.969363][ T1349] ? __import_iovec+0x315/0x500 [ 1426.974268][ T1349] ? import_iovec+0x6f/0xa0 [ 1426.978841][ T1349] ___sys_sendmsg+0x2a2/0x360 [ 1426.983567][ T1349] ? try_to_wake_up+0x67c/0x1080 [ 1426.988565][ T1349] ? __sys_sendmsg+0x290/0x290 [ 1426.993473][ T1349] __se_sys_sendmsg+0x1bb/0x2a0 [ 1426.998386][ T1349] ? __x64_sys_sendmsg+0x80/0x80 [ 1427.003410][ T1349] ? lockdep_hardirqs_on+0x94/0x140 [ 1427.008679][ T1349] do_syscall_64+0x4c/0xa0 [ 1427.013150][ T1349] ? clear_bhb_loop+0x60/0xb0 [ 1427.017883][ T1349] ? clear_bhb_loop+0x60/0xb0 [ 1427.022613][ T1349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1427.028566][ T1349] RIP: 0033:0x7f28f599acb9 [ 1427.033049][ T1349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.052713][ T1349] RSP: 002b:00007f28f680c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.061206][ T1349] RAX: ffffffffffffffda RBX: 00007f28f5c15fa0 RCX: 00007f28f599acb9 [ 1427.069229][ T1349] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1427.077248][ T1349] RBP: 00007f28f5a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1427.085253][ T1349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1427.093252][ T1349] R13: 00007f28f5c16038 R14: 00007f28f5c15fa0 R15: 00007ffebd2e5c08 [ 1427.101316][ T1349] [ 1427.250178][ T1359] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8466'. [ 1427.356557][ T1363] netlink: 'syz.2.8467': attribute type 10 has an invalid length. [ 1427.389062][ T1363] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8467'. [ 1427.626719][ T1374] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.8470'. [ 1427.806052][ T1379] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.8470'. [ 1428.456926][ T1369] netlink: 'syz.0.8469': attribute type 21 has an invalid length. [ 1428.465267][ T1369] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8469'. [ 1428.510358][ T1387] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.8472'. [ 1428.765432][ T1392] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8473'. [ 1429.720977][ T1404] netlink: 'syz.1.8477': attribute type 10 has an invalid length. [ 1430.400462][ T1420] netlink: 'syz.2.8482': attribute type 12 has an invalid length. [ 1430.469350][ T1420] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8482'. [ 1430.811578][ T1429] TCP: TCP_TX_DELAY enabled [ 1431.046007][ T1431] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8485'. [ 1434.393308][ T1523] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.8497'. [ 1434.580218][ T1525] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8498'. [ 1434.671029][ T1525] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1436.539119][ T5809] device gretap0 left promiscuous mode [ 1436.565942][ T5809] Ÿë: port 1(gretap0) entered disabled state [ 1436.582563][ T1548] netlink: 'syz.0.8504': attribute type 10 has an invalid length. [ 1436.595806][ T1548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8504'. [ 1436.607698][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1436.661818][ T1548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1437.511677][ T5809] device veth0_to_team left promiscuous mode [ 1437.533420][ T5809] Ÿë: port 2(veth0_to_team) entered disabled state [ 1437.564498][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.640448][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.680438][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.687940][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.730433][ T5809] bridge0: port 3(team0) entered disabled state [ 1437.761959][ T5809] device bridge_slave_1 left promiscuous mode [ 1437.768294][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.786403][ T5809] device bridge_slave_0 left promiscuous mode [ 1437.794365][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.847802][ T5809] device veth1_macvtap left promiscuous mode [ 1437.857055][ T5809] device veth0_macvtap left promiscuous mode [ 1437.869113][ T5809] device veth1_vlan left promiscuous mode [ 1437.889419][ T5809] device veth0_vlan left promiscuous mode [ 1438.559810][ T5809] device team_slave_1 left promiscuous mode [ 1438.600187][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 1438.684886][ T5809] device team_slave_0 left promiscuous mode [ 1438.698305][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 1438.770289][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1438.847445][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.234468][ T5809] bond0 (unregistering): Released all slaves [ 1439.336332][ T1583] device syzkaller0 left promiscuous mode [ 1439.343450][ T1585] netlink: 'syz.0.8513': attribute type 4 has an invalid length. [ 1439.351541][ T1586] netlink: 'syz.4.8514': attribute type 2 has an invalid length. [ 1439.369399][ T1586] netlink: 'syz.4.8514': attribute type 11 has an invalid length. [ 1439.379902][ T1586] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8514'. [ 1439.419602][ T1594] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.8517'. [ 1440.270281][ T1620] netlink: 'syz.3.8524': attribute type 21 has an invalid length. [ 1440.503915][ T1622] netlink: 'syz.3.8524': attribute type 29 has an invalid length. [ 1440.540053][ T1622] netlink: 'syz.3.8524': attribute type 29 has an invalid length. [ 1440.556485][ T1620] netlink: 'syz.3.8524': attribute type 29 has an invalid length. [ 1440.593931][ T1620] netlink: 'syz.3.8524': attribute type 29 has an invalid length. [ 1440.655185][ T1622] netlink: 'syz.3.8524': attribute type 29 has an invalid length. [ 1440.864309][ T1631] delete_channel: no stack [ 1440.865509][ T1629] delete_channel: no stack [ 1440.868942][ T1631] delete_channel: no stack [ 1440.967031][ T1629] delete_channel: no stack [ 1441.047744][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1441.071308][ T1635] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1444.814636][ T1670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1444.822213][ T1670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1444.847047][ T1670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1444.874388][ T1670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.011523][ T1680] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.8543'. [ 1445.036316][ T1680] netlink: zone id is out of range [ 1445.049623][ T1680] netlink: get zone limit has 8 unknown bytes [ 1445.056414][ T1675] netlink: 'syz.4.8542': attribute type 39 has an invalid length. [ 1445.592581][ T1697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1445.599927][ T1697] IPv6: NLM_F_CREATE should be set when creating new route [ 1445.607257][ T1697] IPv6: NLM_F_CREATE should be set when creating new route [ 1445.614578][ T1697] IPv6: NLM_F_CREATE should be set when creating new route [ 1445.756222][ T1699] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.8547'. [ 1446.463789][ T1717] netlink: 'syz.0.8553': attribute type 3 has an invalid length. [ 1446.482115][ T1717] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.8553'. [ 1448.425589][ T1778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8572'. [ 1448.455131][ T1776] netlink: 'syz.1.8571': attribute type 21 has an invalid length. [ 1448.498742][ T1776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8571'. [ 1448.539569][ T1779] netlink: 'syz.1.8571': attribute type 10 has an invalid length. [ 1448.590501][ T1779] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.8571'. [ 1449.249675][ T1799] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8577'. [ 1449.456596][ T1812] netlink: 'syz.4.8580': attribute type 10 has an invalid length. [ 1449.540009][ T1814] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.8581'. [ 1449.555702][ T1812] team0: Port device geneve1 added [ 1451.023350][ T1857] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8593'. [ 1451.307160][ T1861] netlink: 'syz.1.8595': attribute type 21 has an invalid length. [ 1451.904939][ C0] [ 1451.904949][ C0] ================================ [ 1451.904956][ C0] WARNING: inconsistent lock state [ 1451.904976][ C0] syzkaller #0 Not tainted [ 1451.904985][ C0] -------------------------------- [ 1451.904991][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1451.904999][ C0] syz.0.8600/1876 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1451.905019][ C0] ffff888086b603a0 (&htab->lockdep_key#2){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 1451.905078][ C0] {INITIAL USE} state was registered at: [ 1451.905085][ C0] lock_acquire+0x1bb/0x4a0 [ 1451.905112][ C0] _raw_spin_lock+0x2a/0x40 [ 1451.905151][ C0] htab_lock_bucket+0x179/0x2f0 [ 1451.905176][ C0] htab_lru_map_update_elem+0x31e/0xe80 [ 1451.905198][ C0] bpf_map_update_value+0x59e/0x670 [ 1451.905222][ C0] map_update_elem+0x4d7/0x680 [ 1451.905248][ C0] __sys_bpf+0x4ec/0x780 [ 1451.905273][ C0] __x64_sys_bpf+0x78/0x90 [ 1451.905297][ C0] do_syscall_64+0x4c/0xa0 [ 1451.905333][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1451.905351][ C0] irq event stamp: 1102 [ 1451.905358][ C0] hardirqs last enabled at (1101): [] __kmalloc_large_node+0x101/0x1e0 [ 1451.905394][ C0] hardirqs last disabled at (1102): [] exc_debug+0x6e/0x130 [ 1451.905424][ C0] softirqs last enabled at (696): [] bpf_prog_load+0x1127/0x1560 [ 1451.905457][ C0] softirqs last disabled at (694): [] bpf_ksym_add+0x29/0x340 [ 1451.905491][ C0] [ 1451.905491][ C0] other info that might help us debug this: [ 1451.905515][ C0] Possible unsafe locking scenario: [ 1451.905515][ C0] [ 1451.905520][ C0] CPU0 [ 1451.905524][ C0] ---- [ 1451.905528][ C0] lock(&htab->lockdep_key#2); [ 1451.905546][ C0] [ 1451.905550][ C0] lock(&htab->lockdep_key#2); [ 1451.905566][ C0] [ 1451.905566][ C0] *** DEADLOCK *** [ 1451.905566][ C0] [ 1451.905571][ C0] no locks held by syz.0.8600/1876. [ 1451.905580][ C0] [ 1451.905580][ C0] stack backtrace: [ 1451.905586][ C0] CPU: 0 PID: 1876 Comm: syz.0.8600 Not tainted syzkaller #0 [ 1451.905605][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1451.905616][ C0] Call Trace: [ 1451.905623][ C0] <#DB> [ 1451.905630][ C0] dump_stack_lvl+0x188/0x24e [ 1451.905659][ C0] ? show_regs_print_info+0x12/0x12 [ 1451.905690][ C0] ? print_usage_bug+0x42a/0x690 [ 1451.905719][ C0] ? verify_lock_unused+0x18/0x140 [ 1451.905750][ C0] lock_acquire+0x2df/0x4a0 [ 1451.905780][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 1451.905805][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1451.905833][ C0] ? rcu_is_watching+0x11/0xa0 [ 1451.905862][ C0] ? lock_release+0xcf/0x920 [ 1451.905893][ C0] _raw_spin_lock+0x2a/0x40 [ 1451.905923][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 1451.905946][ C0] htab_lock_bucket+0x179/0x2f0 [ 1451.905972][ C0] ? htab_lru_map_delete_node+0x630/0x630 [ 1451.906002][ C0] ? htab_map_hash+0x269/0x6d0 [ 1451.906027][ C0] htab_lru_map_delete_elem+0x1ad/0x780 [ 1451.906054][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 1451.906078][ C0] ? htab_lru_map_update_elem+0xe80/0xe80 [ 1451.906110][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 1451.906133][ C0] bpf_overflow_handler+0x6e8/0x7c0 [ 1451.906167][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 1451.906195][ C0] ? perf_event_switch_output+0x760/0x760 [ 1451.906223][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1451.906256][ C0] __perf_event_overflow+0x448/0x610 [ 1451.906291][ C0] perf_bp_event+0x28c/0x330 [ 1451.906323][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 1451.906371][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1451.906396][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1451.906429][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 1451.906461][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 1451.906484][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1451.906509][ C0] notify_die+0x141/0x1a0 [ 1451.906533][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 1451.906565][ C0] notify_debug+0x20/0x30 [ 1451.906588][ C0] exc_debug+0xd9/0x130 [ 1451.906616][ C0] asm_exc_debug+0x1a/0x40 [ 1451.906636][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1451.906667][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1451.906685][ C0] RSP: 0018:ffffc900066b7898 EFLAGS: 00050202 [ 1451.906704][ C0] RAX: ffffffff840eb701 RBX: ffff888060ba0040 RCX: 000000000000fc80 [ 1451.906720][ C0] RDX: 000000000000ffc0 RSI: 0000200000000340 RDI: ffff888060ba0380 [ 1451.906736][ C0] RBP: ffffc900066b79d0 R08: ffff888060baffff R09: 1ffff1100c175fff [ 1451.906752][ C0] R10: dffffc0000000000 R11: ffffed100c176000 R12: 1ffff92000cd6fb7 [ 1451.906768][ C0] R13: 0000200000000000 R14: 000000000000ffc0 R15: 00007ffffffef040 [ 1451.906788][ C0] ? _copy_from_iter+0x281/0x1130 [ 1451.906824][ C0] [ 1451.906830][ C0] [ 1451.906836][ C0] _copy_from_iter+0x2a9/0x1130 [ 1451.906865][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1451.906892][ C0] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 1451.906919][ C0] ? copyout_mc+0x110/0x110 [ 1451.906947][ C0] ? __virt_addr_valid+0x188/0x540 [ 1451.906974][ C0] ? __virt_addr_valid+0x188/0x540 [ 1451.907000][ C0] ? __virt_addr_valid+0x465/0x540 [ 1451.907028][ C0] ? __check_object_size+0x500/0xa40 [ 1451.907052][ C0] skb_copy_datagram_from_iter+0xef/0x690 [ 1451.907078][ C0] ? skb_put+0x117/0x210 [ 1451.907108][ C0] tun_get_user+0xb81/0x3c70 [ 1451.907154][ C0] ? rcu_read_unlock+0xa0/0xa0 [ 1451.907187][ C0] ? tun_get+0x1c/0x2e0 [ 1451.907215][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1451.907246][ C0] ? tun_get+0x1c/0x2e0 [ 1451.907276][ C0] tun_chr_write_iter+0x112/0x1f0 [ 1451.907305][ C0] vfs_write+0x4b1/0xa30 [ 1451.907339][ C0] ? file_end_write+0x250/0x250 [ 1451.907383][ C0] ? __fget_files+0x43d/0x4b0 [ 1451.907415][ C0] ? __fdget_pos+0x1d4/0x360 [ 1451.907438][ C0] ? ksys_write+0x71/0x250 [ 1451.907465][ C0] ksys_write+0x14c/0x250 [ 1451.907491][ C0] ? __ia32_sys_read+0x80/0x80 [ 1451.907520][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1451.907548][ C0] do_syscall_64+0x4c/0xa0 [ 1451.907589][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1451.907610][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1451.907633][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1451.907653][ C0] RIP: 0033:0x7f28f599acb9 [ 1451.907669][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.907686][ C0] RSP: 002b:00007f28f680c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1451.907707][ C0] RAX: ffffffffffffffda RBX: 00007f28f5c15fa0 RCX: 00007f28f599acb9 [ 1451.907722][ C0] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 1451.907736][ C0] RBP: 00007f28f5a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1451.907749][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1451.907762][ C0] R13: 00007f28f5c16038 R14: 00007f28f5c15fa0 R15: 00007ffebd2e5c08 [ 1451.907787][ C0]