last executing test programs: 11.237518086s ago: executing program 1 (id=2357): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000500010004a10600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0c4) 8.579963982s ago: executing program 0 (id=2364): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f00000007c0)="e02742e8680d85ff9782762f88a8", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x23) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xe, &(0x7f0000000600), 0xfde7) (async) setsockopt$sock_attach_bpf(r2, 0x6, 0xe, &(0x7f0000000600), 0xfde7) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0x1100000}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) 8.109987407s ago: executing program 4 (id=2365): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000190091c8b14a0778a8123d181d"], 0xfe33) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0xace0471e710ffae1, 0x0, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000ba1cacd558db4eb94058691fa25ae3094aaf924c4940757f6526d31d3f6479bb4656506d22bd89e8e3513a8d5352a7956ad08f45baa4b385ec88d436cce7205506da86f5b3a4833c0f30"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.388792078s ago: executing program 0 (id=2366): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f00000000c0)="efb9697053788288873c3cd897688f6bd9429cd50bcf139f9ac829598ccd88cda93dc81cd49dcd25b9a477c460be6979c648ddb3016c211c35b57b3613292bec1233dd", &(0x7f0000000500)=""/196, &(0x7f0000000140)="9ccf6e217ead95a1e3917d5b2ebcf9b9cee5d4828772bcadbde2299fcf20eec8613d81ac019538a5e53d3dd50a24157902137d7c6464a450eded14d3953afac3adac9b1232f490bb577a260ad2e4ec42c9cd0f5e0b66a7ec0cdd6fac75f07862b966178b9427ae33b6951f25a2fb63a55f50f5e227b06a13d7712fa9ff5419c91bab796eec476f4e66054619", &(0x7f0000000600)="755a1543afbd09120a187aaf514cd8271b4bfacce2050b7218adc682761101e3634f17e84388923bc1829c5b12e2f8803b79a7dcd4521a59882ac3047f8f71891c549cbeb6b8cbc6bc987b7aed171d702f119d75087e1b66cf431cf911241ffbb6e2b393505faf2a14667e54710194b20fb05056e995439679bfd79a1963987f20e58d15dda0455a857cb772552373844b9d0ad8d338c6d44b86d5", 0xe5a, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x5, 0x7, 0x7, 0xfffffffffffffff4}], {{}, {}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xd2, &(0x7f0000000200)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000400)={0xbbe}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f00000000c0)="efb9697053788288873c3cd897688f6bd9429cd50bcf139f9ac829598ccd88cda93dc81cd49dcd25b9a477c460be6979c648ddb3016c211c35b57b3613292bec1233dd", &(0x7f0000000500)=""/196, &(0x7f0000000140)="9ccf6e217ead95a1e3917d5b2ebcf9b9cee5d4828772bcadbde2299fcf20eec8613d81ac019538a5e53d3dd50a24157902137d7c6464a450eded14d3953afac3adac9b1232f490bb577a260ad2e4ec42c9cd0f5e0b66a7ec0cdd6fac75f07862b966178b9427ae33b6951f25a2fb63a55f50f5e227b06a13d7712fa9ff5419c91bab796eec476f4e66054619", &(0x7f0000000600)="755a1543afbd09120a187aaf514cd8271b4bfacce2050b7218adc682761101e3634f17e84388923bc1829c5b12e2f8803b79a7dcd4521a59882ac3047f8f71891c549cbeb6b8cbc6bc987b7aed171d702f119d75087e1b66cf431cf911241ffbb6e2b393505faf2a14667e54710194b20fb05056e995439679bfd79a1963987f20e58d15dda0455a857cb772552373844b9d0ad8d338c6d44b86d5", 0xe5a, r0}, 0x38) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x5, 0x7, 0x7, 0xfffffffffffffff4}], {{}, {}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xd2, &(0x7f0000000200)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000400)={0xbbe}, 0x8) (async) 7.047962008s ago: executing program 0 (id=2367): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000090052dc513100000001000000006000000030000000000000e0200000001000000002e5f613e00"], 0x0, 0x2e, 0x0, 0x1, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x100000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000280)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x2000000000000310, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000002800)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x84, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x984}, 0x11411d, 0x32, 0xfffffbfd, 0x3, 0x8000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0xff, 0xfc, 0x7, 0x0, 0xea, 0x9800, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x1}, 0xc001, 0x10040, 0xfd84, 0x4, 0x10001, 0x1, 0xa33, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x200000000000000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/user\x00') socket$kcm(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) 4.833854816s ago: executing program 2 (id=2369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="eb0000000000000000000000000000000022000000000000000000004c37c5dd03d0799ad78fa675842dfc72892902cc77c1be3650dc660be41bac34f955e6cb95d88f96f3e9ff42becced0b7211638af90589b442e73d781a9f910f094fad0dad08f24edff49d2b3f0887f52349ae0a96ef7f28c5ac6b49c41e9155638081bd3dfe89f188b773e0f25267c676c2848ef3a91674356ed4d18cb041d7c00efc543c79b3bc5ba81cf6d8dd0b40fd"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x15, 0xf, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x20000003, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x2}, 0x440, 0x2, 0xfffffffe, 0x0, 0x0, 0x10000, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000)=r3, 0x62) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x4, 0x8, &(0x7f00000006c0)="2f070225", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40010060) sendmsg$sock(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)="975d50c4e35b233d818fc3adad12426b45ef561aea5cba64653b819e81c643359f9384ec38e25863af9503e4353abef01ad91606ed0d350dc96fba5ffba3be08e85e0e06e1e4fac17b6dd1e335a633606cfdeccc8e9a155bf6db0e3bd1baa6bf9fac6bed084994a96947482b9217d1efa521cff2aaca46d10bdd85bd1e08adb19fb16b140f382fc925cd6ed425e2f1976f9a5d2afdf1a2cdde94948e1f7e33e141a1b1fea9caf7a42463ad3abef652116733bf060262da856cc2a05ad116ef5781083a86c47de3759d54487e1af74f4e0b08a73b0fe4bab93c85d828da5822fa", 0xe0}, {&(0x7f0000000200)="c8860df767", 0x5}, {&(0x7f00000008c0)="b2160d24b2b16eecd52f72c1b33ad70f28fb6acc998958d0566c98286316e25059feb89134cf8b09208cd05c86b503a458257704b62bce2471c1ea0ad5afa4f62223b177a66ee100213147a37b1f466e0ec3082223d056d62647e1f4f8c65af29e35ccd224b9ec374f4337", 0x6b}], 0x3, &(0x7f0000000a40)}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x6, 0x18}, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@map=r7, r6, 0xc, 0x0, 0xffffffffffffffff, @void, @value=r4}, 0x20) r8 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) r9 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@phonet={0x23, 0x0, 0x0, 0xa}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r8, 0x0, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) 3.81997594s ago: executing program 2 (id=2370): perf_event_open(&(0x7f0000001980)={0x2, 0xffffffffffffffca, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x262, 0x9}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400050000", @ANYBLOB="000000002f47c439a7000000003436b702000014000000b70300000000000085000000bf090000630000006206000000230000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x1}, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180002000100000000000000000000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x5, 0x6, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9800, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x2, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x30, 0x0, 0x20000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000100000080499648be8839b7d980e130ebafded64e01059b1f00000000000000100000000000bb1dca8452442c66bb26c7e5d93d2bd6a7ca94d01de2", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x7, 0x0, 0x6, 0xff, 0x0, 0x4, 0x4020, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x1, 0x80000000}, 0x84, 0x182a, 0x2, 0x0, 0x8000000000000001, 0x2, 0x39, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x6, r1, 0x3) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000dc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d80)={@cgroup=r5, 0x1d, 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000000000000000000009f33570dffc89994a2cf6ceba72c5a723d36daf7910ca56db539717ceeb6e89eba9e60"]) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x5}, 0x800, 0xc8, 0x0, 0x7, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 3.378445953s ago: executing program 4 (id=2371): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0xc8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x17, &(0x7f0000000140)=@raw=[@ldst={0x0, 0x1, 0x6, 0x0, 0x4, 0x86, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff801}}, @ringbuf_query, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x59}], &(0x7f0000000000)='syzkaller\x00', 0x1000, 0x36, &(0x7f0000000040)=""/54, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x9, 0x8, 0xb6}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x3, 0x3, 0x6}, {0x0, 0x5, 0xf, 0xa}, {0x1, 0x3, 0x7, 0x5}, {0x3, 0x1, 0xa, 0xa}, {0x2, 0x1, 0x10}], 0x10, 0x5d2}, 0x94) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={0xffffffffffffffff}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000580)={r3, r4, 0x4, r5}, 0x10) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00082c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b"], 0xfdef) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) 3.367712807s ago: executing program 3 (id=2372): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10000000000000a5, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10080002, 0x0, 0xfffffffc, 0xc}], 0x10, 0x4000000}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000300)={r4, r0}) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c6"], 0x0}, 0x94) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="c018030031000b12d25a80648c2594f90224fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x15, 0x3000000}, 0x240040d4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00060004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10000000000000a5, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10080002, 0x0, 0xfffffffc, 0xc}], 0x10, 0x4000000}, 0x94) (async) socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000300)={r4, r0}) (async) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (async) socket$kcm(0x10, 0x2, 0x4) (async) close(r5) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="c018030031000b12d25a80648c2594f90224fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x15, 0x3000000}, 0x240040d4) (async) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00060004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) 3.366990023s ago: executing program 1 (id=2373): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x3, 0x7, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0xfe, 0x0, 0x7fef, 0xc2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) r4 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffbfffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r6, 0x3}, 0x12) 3.332535244s ago: executing program 0 (id=2374): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f00000001c0)='%-010d \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x2000300, 0xe, 0x30, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = syz_clone(0x100400, &(0x7f00000006c0)="7daea560e4ea96bd2f0efbab1711b663371e8f28225e1a23c8b758abf00ddf5afa2b9311d6e461ee6881d7dfda5e9d59031d64d3c9039c7418f49cc99efb31d80aaa215281696fafec247bb03b5da6312939866631e38be3d7f7e3091c2b6b97299f1cb2a889c858d7812e8ca5654dc0de53ea08949bbd9df3cb521d517f", 0x7e, &(0x7f0000000580), &(0x7f0000000740), &(0x7f0000000780)="e3694977afb33bda0698532ae9e70bfc4afe3a175124a22511a31f56460ef0fa1c4f2b0e72c92aafb2a7365c897468a4a689f686c31406eae4d9cc57709eb4040e5350720241cdf8ee392c9790d9dc29b0e1a565329ed6bd7234f7fda74b95ca21f7c1e6cc97c277023624838018b492a6e024793220472820ff544ecfbbaa4ab3a5836d3849486fccaf") r5 = perf_event_open$cgroup(&(0x7f0000000840)={0x5, 0x80, 0x0, 0x3, 0x4, 0xc, 0x0, 0x101, 0x80, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x5, @perf_config_ext={0x3, 0x9}, 0x20, 0x7b1, 0xfff, 0x7, 0x8, 0x3, 0x3, 0x0, 0x8b, 0x0, 0x688}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x5, 0x1, 0x5, 0xf, 0x0, 0x2, 0x128, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000004c0), 0x5}, 0x10000, 0x4, 0x8, 0x5, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x80000000}, r4, 0x4, r5, 0x9) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000240)}, 0x10) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc01, 0x3, 0x2, 0x200000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000300000e0000000000e000143bf950e0d20027000000000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4f4000000007110aa00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) 3.200907382s ago: executing program 4 (id=2375): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000a000000fe280ac4a3f002614d588c7a000000008117bba0886b71382c65030300000885ebff00a300"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.83978414s ago: executing program 2 (id=2376): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d08000071122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d08000071122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280400, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000180)) 2.792160972s ago: executing program 2 (id=2377): perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x20007, 0xffffffffffffffff}, 0x201a29, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2400c000) (rerun: 32) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 2.596814911s ago: executing program 3 (id=2378): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x0, 0x4, 0x0, 0x84, 0xc6023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_config_ext={0x14, 0x2}, 0x40, 0x20008, 0x0, 0x0, 0x6, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@typedef={0x5}, @enum64={0xb, 0x1, 0x0, 0x13, 0x1, 0xd, [{0xf, 0x6, 0x4}]}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f0000000480)=""/139, 0x51, 0x8b, 0x1, 0xee19}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0], 0x0, 0x67, &(0x7f00000014c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0], 0x0, 0x67, &(0x7f00000014c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001740)=@generic={&(0x7f0000001700)='./file0\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_lsm={0x1d, 0x6, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}]}, &(0x7f0000001100)='GPL\x00', 0x9, 0xf7, &(0x7f0000001300)=""/247, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140)={0x0, 0x5, 0x7, 0x3}, 0x10, r6, 0x0, 0x5, &(0x7f0000001780)=[r7], &(0x7f00000017c0)=[{0x2, 0x3, 0xf, 0x9}, {0x3, 0x2, 0x0, 0x7}, {0x4, 0x2, 0x4, 0x1}, {0x1, 0x5, 0xc, 0xb}, {0x5, 0x5, 0xc, 0xa}], 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_lsm={0x1d, 0x6, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}]}, &(0x7f0000001100)='GPL\x00', 0x9, 0xf7, &(0x7f0000001300)=""/247, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140)={0x0, 0x5, 0x7, 0x3}, 0x10, r6, 0x0, 0x5, &(0x7f0000001780)=[r7], &(0x7f00000017c0)=[{0x2, 0x3, 0xf, 0x9}, {0x3, 0x2, 0x0, 0x7}, {0x4, 0x2, 0x4, 0x1}, {0x1, 0x5, 0xc, 0xb}, {0x5, 0x5, 0xc, 0xa}], 0x10, 0x7}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000005000000fd09000085"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x1, 0x5, 0x2, 0x0, 0xc, 0x18}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x93, &(0x7f0000000340)=""/147, 0x40f00, 0x28, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x2, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r7, r3, r8], &(0x7f0000000600), 0x10, 0xf99}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x1, 0x5, 0x2, 0x0, 0xc, 0x18}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x93, &(0x7f0000000340)=""/147, 0x40f00, 0x28, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x2, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r7, r3, r8], &(0x7f0000000600), 0x10, 0xf99}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 2.434533097s ago: executing program 2 (id=2379): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001400)=ANY=[], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x64, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d50000000100000bb500000500242c108906d33655bbf4db01ffe41ac34b0008552994df2f11591630828246d2a0f54e673784a86e6710ce42840120", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x4b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{}], 0x10, 0x3}, 0x94) close(r3) socket$kcm(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/116, 0x74}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000080)=""/160, 0xa0}], 0x6}, 0x100) (async) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/116, 0x74}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000080)=""/160, 0xa0}], 0x6}, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050044a921f70003000000420000003c000000c0", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000010006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400120038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x1d, 0x0, 0x3d) (async) setsockopt$sock_attach_bpf(r5, 0x29, 0x1d, 0x0, 0x3d) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000580)=""/244}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) 2.433934327s ago: executing program 4 (id=2380): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc98, 0x0, @perf_config_ext={0x3, 0x8001}, 0x28e4dcf2182c8c55, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000000), 0x98) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) 2.433440915s ago: executing program 1 (id=2381): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRESHEX=0x0], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2404, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000200000003000000000100000002"], 0x0, 0x53}, 0x28) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10004}, 0x8a2c, 0xfffffffffffffc01, 0x0, 0x4, 0x0, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xc0045878, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000000000", @ANYRES32, @ANYBLOB="0000000f00000000000000000000000000000000d4c6b6ad0ccd640e535b0518f7b565d1e612264fd0ea0394f803e7a6d2e9e8aaa06bf9681e1232ba137805bcef14bee50ff4136bad499dbbfb09bd9249a79766510a1171b345d0830a7d354b864a955a42c4d6532705cdfbd0e9f699aacc9b38fab7a9d34125d5532d60d7a1665c8fb05f1342571f1e4018a174000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000007f0d00"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffca5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x30, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000a4c4b940a242a1dd88318ad6c5d40c4b724a3bde91b40a32cbe075c793390d25351a9710a29a2babc9242355eca68e758f3365a56788fdafcc24ffe31461d7ed1b9187", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = socket$kcm(0x2c, 0x3, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x11b, 0x2, &(0x7f0000000040)=r11, 0x4) socket$kcm(0x10, 0x2, 0x4) 2.432063053s ago: executing program 3 (id=2382): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffffff0424ff", 0x13}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB='\a'], 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3da22a3a6cc6001d24140750bf0fdb566e6a592d2e3344fa94e8e2f21f31b1e4429ad71e9f734d3a48f2bc794e06e06f21582d4e263d31472a5cc1beb3d205e5a8c1d0bbec77", @ANYRESDEC], 0x0, 0x50, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000003a22aa80f0000a1a0cd73001801001a696c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.342373478s ago: executing program 0 (id=2383): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0}, 0x94) r2 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119f00000000008510000002000000b7000000080000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r3 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r2, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000100)=0x2) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8], 0x12) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'erspan0\x00', 0x1000}) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB], 0x9a) 2.088231068s ago: executing program 1 (id=2384): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa4, 0x3}, 0x0, 0x400000, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x3d8acc00, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbfd, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc01, 0x3, 0x2, 0x200000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r5 = socket$kcm(0x25, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x13, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x27) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1.870171823s ago: executing program 4 (id=2385): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x9, 0x9, 0x9, 0x6, 0x0, 0x340000000000000, 0x40000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_config_ext={0x7, 0xd3f}, 0x9084, 0xfffffffffffffff7, 0x9, 0x8, 0x2, 0x0, 0x58, 0x0, 0x2, 0x0, 0x7}, r0, 0xc, 0xffffffffffffffff, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a4", 0x35}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014) sendmsg(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) 1.812489902s ago: executing program 3 (id=2386): r0 = getpid() r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x1, 0xb, 0x7, 0x7, 0x0, 0x4e, 0x1a980, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x6, 0x80000000}, 0x100080, 0x5, 0x6, 0x4, 0x4056, 0x3, 0x5, 0x0, 0xffffffff, 0x0, 0x43}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0xa5, 0x10, 0x6, 0x0, 0x6, 0x1080, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5ce967a6, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x10000, 0x3, 0x0, 0x7, 0x731, 0x6, 0xcd, 0x0, 0x7, 0x0, 0xb9a}, r0, 0x8, r1, 0x1b) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101500, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg1\x00', 0x800}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x81, 0x9, 0x4, 0x2, 0x0, 0x7, 0x82, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0xb, 0x1000}, 0x100, 0x7, 0x1, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x10, r1, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000280)={0x3, 0x80, 0x3, 0x1, 0x7, 0x6, 0x0, 0x7, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xb78, 0x8}, 0x0, 0x4, 0x6, 0x3, 0x100, 0x3, 0x6, 0x0, 0x7fffffff, 0x0, 0x9}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0xa) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)={0x1, 0x3, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @local]}) close(r3) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000380)={'ip6_vti0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000400)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ldst={0x2, 0x2, 0x6, 0x9, 0x7, 0xfffffffffffffffe, 0x8}], &(0x7f0000000480)='GPL\x00', 0x9, 0xec, &(0x7f00000004c0)=""/236, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x6, 0x3b60}, 0x10, 0x9577, 0xffffffffffffffff, 0x4, &(0x7f0000000640)=[0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x1, 0x6, 0x1}, {0x3, 0x4, 0x6, 0x3}, {0x3, 0x3, 0x7, 0xc}, {0x0, 0x4, 0x6, 0x7}]}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000780)=r8, 0x4) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.controllers\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r9, &(0x7f0000000800)="ad27f66efd2f6e5cdf0375d38155cc2c25b212497fd4efca80704c7728ee302587875bf492c01be3b0cf324735d39b81cbbb24218e4c3201f5b002ef51a5df74e5053f1c15ab73c288ab79a2c4ed0c600b3e2d51fc6f89150ab052c7730675b917eecd3bc8a30e2849a312bce36a60ee7bf692a464c920b7e5bc472c8f517d09477ffb39f44ce4e5cf5ca051aa006c5b80e550354d765869596eb10fcd35763082ec0121140b124a96789809662668740ec34fcef3b62b6ef50218", &(0x7f00000008c0)=""/160, 0x4}, 0x20) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f00000009c0)) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000a00)=r9, 0x4) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000a40)) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000a80)={0x0, 0x3, [@random="61467fc0bae4", @remote, @broadcast]}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000ac0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r8, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000dc0)=[{}], 0x8, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001040)={0xffffffffffffffff}, 0x4) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001080)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x14, 0x1c, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r9}, @call={0x85, 0x0, 0x0, 0xc8}, @call={0x85, 0x0, 0x0, 0x9c}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @alu={0x4, 0x0, 0x6, 0x4, 0x9, 0xd, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000c00)='GPL\x00', 0x0, 0xa1, &(0x7f0000000c40)=""/161, 0x40f00, 0x20, '\x00', r10, @lirc_mode2, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001000)={0x5, 0xf, 0x2, 0xe000}, 0x10, 0xffffffffffffffff, r11, 0x4, &(0x7f0000001100)=[0x1, r9, r12], &(0x7f0000001140)=[{0x4, 0x4, 0x1, 0x2}, {0x3, 0x2, 0xd, 0x4}, {0x1, 0x2, 0x8, 0xb}, {0x5, 0x5}], 0x10, 0x8}, 0x94) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000001240)=0x1) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000001280)=""/232) openat$cgroup_subtree(r9, &(0x7f0000001380), 0x2, 0x0) 1.062258634s ago: executing program 1 (id=2387): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x1e, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, 0x0, 0xffdd) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg$kcm(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2062) sendmsg$inet(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86edabf0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509debb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r8 = openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0xf8, 0xa, 0x3, 0x2, 0x0, 0x400, 0x2280, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd3f, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x4, 0x9, 0x1, 0x3, 0xb, 0x7, 0x4, 0x0, 0x0, 0x0, 0xb175}, r8, 0x8, r0, 0x2) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2e", 0x69}], 0x1}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000006000000020000000600000008000000", @ANYRES32=0x1, @ANYBLOB="020000080000000000000050e1a79b001100000000000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="03000000040000000000000000000000000000000000000000000000b2254f5feca97f162d68df74e74f8db050ed4cda7b7a386a00efd7d68b2a3ad639473b1aaa6d2a7f0ffd0a91666d5e072d670dd96438a3fef98181b06e3a06af26f58038f7561dd039f214eb780dadc6cca72fc3b8afdd53f63d11981bca4964846cc0beb4abf6a548de3b226be261929f2d9463daffff0000267781f3fd65"], 0x50) 210.276516ms ago: executing program 2 (id=2388): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0xb28, 0x3, 0x0, 0x7, 0x0, 0x800000}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2f}, 0x80) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000002a00)={&(0x7f0000001580)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000002940)=[{&(0x7f00000015c0)="814f8b3e762d", 0x6}], 0x1}, 0x4001005) recvmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x79}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0xf1, &(0x7f00000003c0)=""/241, 0x40f00, 0x3a, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x81, 0xc8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[{0x0, 0x4, 0xd, 0xb}, {0x2, 0x3, 0xd, 0x3}, {0x1, 0x5, 0x2, 0x5}]}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x81, 0x20, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x2, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000080)=r5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'netdevsim0\x00', 0x20}) r10 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, r4, 0x9) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000240)={'batadv0\x00', @random="b5fbcbb974d2"}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, 0xffffffffffffffff) close(r6) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 209.456498ms ago: executing program 4 (id=2389): r0 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000001780)={0x0, 0xb0, &(0x7f0000001640), 0xb0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="beaa000001000000791008000000000095000000000000009fb5dc42e77c079f1a721e9323e1e3d6dde1fc"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="00000000000000009500c000000000f80861000040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x2, &(0x7f0000000200), 0x4) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x3, 0x96, 0xff, 0x3, 0x0, 0xfffffffffffffffb, 0x640661560d0e9e2b, 0x7, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f0e86ac}, 0x100, 0x7f, 0x7fff, 0x5, 0xffffffff, 0x3f, 0xfffb, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}, {&(0x7f0000000080)="c938ac83a2171b4fd00b282b4544cdbdc51091ef728b496448", 0x19}], 0x2}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) 208.383557ms ago: executing program 3 (id=2390): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x8) 86.438957ms ago: executing program 3 (id=2391): perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000280)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), &(0x7f00000006c0), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="1100"/12, @ANYRES32=r2, @ANYBLOB="ed41479d2ac5953e968bc212d7394bb292af8c61af61adf1bd2111796dee61f8d8af53ce4073df8c8dc277d00617d6ad978d1f4d2d5e4f9153862bc9f16180d9453a6aacf20ea532bfba5784dcdb6c3077cae34b9e375225166c179164fa91d73b0a28109862b8cde018b27def7e22ce9523770833c4430fd7dbaf5cbdc13eab662ec9c1e9c2e1ad6cc25970f17fadc176ecb27aaa1c015148a3554d", @ANYRES64=0x0], 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r5, &(0x7f0000003840)={&(0x7f0000000040)=@in={0x2, 0x4e23, @dev}, 0x80, 0x0, 0x0, 0x0, 0x58}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0), 0x2}, 0x0, 0x500000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x2f, &(0x7f0000000640), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8910, &(0x7f0000000340)='}\x02\x00\x00\x00\x06\xca\xd4\xb9\"\xb4\x1a\xda\x9cIG7:\xb9Kb') socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000008c100"/28], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 86.063414ms ago: executing program 1 (id=2392): r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x180, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x3, 0x401, 0x301, 0x1, 0x2, '\x00', 0x0, r1, 0x3, 0x0, 0x4, 0x6}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x3, 0x401, 0x301, 0x1, 0x2, '\x00', 0x0, r1, 0x3, 0x0, 0x4, 0x6}, 0x50) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)}], 0x1}, 0x4040001) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)}], 0x1}, 0x4040001) recvmsg$unix(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x3}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x72, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x8f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc4e48aa31086b87030f0000001f0300000000000028000d0003009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786afd0bdd7fcf70e4509c5bb5a00f69853000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4080) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc4e48aa31086b87030f0000001f0300000000000028000d0003009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786afd0bdd7fcf70e4509c5bb5a00f69853000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000600)=@nfc_llcp={0xa, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x2, "be4606a105888c642c13334c199f91732d13b884b4ad52d055d6d5ae3b981ffc48ca221108c4d3aa623010eab68d9504eb0034ea00000001f000", 0xb}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)="800041020eaaa200", 0x8}], 0x3b, 0x0, 0x0, 0x900}, 0x2004080) (async) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000600)=@nfc_llcp={0xa, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x2, "be4606a105888c642c13334c199f91732d13b884b4ad52d055d6d5ae3b981ffc48ca221108c4d3aa623010eab68d9504eb0034ea00000001f000", 0xb}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)="800041020eaaa200", 0x8}], 0x3b, 0x0, 0x0, 0x900}, 0x2004080) 0s ago: executing program 0 (id=2393): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (fail_nth: 81) kernel console output (not intermixed with test programs): 189.698297][ T7529] ? stack_depot_save_flags+0x40/0x900 [ 189.698359][ T7529] ? __pfx_warn_alloc+0x10/0x10 [ 189.698413][ T7529] ? kasan_save_track+0x4f/0x80 [ 189.698449][ T7529] ? xskq_create+0x56/0x170 [ 189.698466][ T7529] ? xsk_init_queue+0xb0/0x110 [ 189.698491][ T7529] ? xsk_setsockopt+0x57b/0x8d0 [ 189.698516][ T7529] ? do_sock_setsockopt+0x17c/0x1b0 [ 189.698538][ T7529] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 189.698559][ T7529] ? do_syscall_64+0xfa/0x3b0 [ 189.698578][ T7529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.698649][ T7529] __vmalloc_node_range_noprof+0x125/0x12f0 [ 189.698855][ T7529] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.698895][ T7529] ? xskq_create+0x56/0x170 [ 189.698945][ T7529] ? __kasan_kmalloc+0x93/0xb0 [ 189.699000][ T7529] vmalloc_user_noprof+0xad/0xf0 [ 189.699037][ T7529] ? xskq_create+0xbf/0x170 [ 189.699072][ T7529] xskq_create+0xbf/0x170 [ 189.699120][ T7529] xsk_init_queue+0xb0/0x110 [ 189.699177][ T7529] xsk_setsockopt+0x57b/0x8d0 [ 189.699240][ T7529] ? __pfx_xsk_setsockopt+0x10/0x10 [ 189.699280][ T7529] ? __pfx_aa_sk_perm+0x10/0x10 [ 189.699333][ T7529] ? __fget_files+0x2a/0x420 [ 189.699369][ T7529] ? aa_sock_opt_perm+0x74/0x110 [ 189.699415][ T7529] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 189.699436][ T7529] ? __pfx_xsk_setsockopt+0x10/0x10 [ 189.699484][ T7529] do_sock_setsockopt+0x17c/0x1b0 [ 189.699546][ T7529] __x64_sys_setsockopt+0x13f/0x1b0 [ 189.699613][ T7529] do_syscall_64+0xfa/0x3b0 [ 189.699634][ T7529] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.699660][ T7529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.699684][ T7529] ? clear_bhb_loop+0x60/0xb0 [ 189.699730][ T7529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.699751][ T7529] RIP: 0033:0x7f8598d8eb69 [ 189.699778][ T7529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.699795][ T7529] RSP: 002b:00007f8599ba3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 189.699817][ T7529] RAX: ffffffffffffffda RBX: 00007f8598fb6080 RCX: 00007f8598d8eb69 [ 189.699832][ T7529] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 189.699844][ T7529] RBP: 00007f8598e11df1 R08: 0000000000000004 R09: 0000000000000000 [ 189.699856][ T7529] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 189.699868][ T7529] R13: 0000000000000000 R14: 00007f8598fb6080 R15: 00007ffee6e62058 [ 189.699977][ T7529] [ 190.361303][ T7529] Mem-Info: [ 190.365530][ T7529] active_anon:20273 inactive_anon:0 isolated_anon:0 [ 190.365530][ T7529] active_file:18892 inactive_file:39871 isolated_file:0 [ 190.365530][ T7529] unevictable:768 dirty:62 writeback:0 [ 190.365530][ T7529] slab_reclaimable:10444 slab_unreclaimable:96342 [ 190.365530][ T7529] mapped:29237 shmem:16136 pagetables:1163 [ 190.365530][ T7529] sec_pagetables:0 bounce:0 [ 190.365530][ T7529] kernel_misc_reclaimable:0 [ 190.365530][ T7529] free:1279475 free_pcp:18968 free_cma:0 [ 190.466556][ T7529] Node 0 active_anon:77492kB inactive_anon:0kB active_file:75568kB inactive_file:159284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116948kB dirty:248kB writeback:0kB shmem:59408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11796kB pagetables:4516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.548145][ T7529] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.626144][ T7529] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.706625][ T7529] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 190.723112][ T7529] Node 0 DMA32 free:1219272kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:71248kB inactive_anon:0kB active_file:75568kB inactive_file:157716kB unevictable:1536kB writepending:248kB present:3129332kB managed:2557608kB mlocked:0kB bounce:0kB free_pcp:62608kB local_pcp:34368kB free_cma:0kB [ 190.799634][ T7529] lowmem_reserve[]: 0 0 1 1 1 [ 190.825662][ T7529] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 190.896054][ T7529] lowmem_reserve[]: 0 0 0 0 0 [ 190.913325][ T7529] Node 1 Normal free:3884044kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21728kB local_pcp:8928kB free_cma:0kB [ 190.992337][ T7529] lowmem_reserve[]: 0 0 0 0 0 [ 191.007074][ T7529] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 191.093223][ T7529] Node 0 DMA32: 657*4kB (UME) 710*8kB (UM) 56*16kB (UM) 36*32kB (M) 9*64kB (UME) 6*128kB (UE) 55*256kB (UM) 32*512kB (UM) 19*1024kB (UM) 1*2048kB (U) 282*4096kB (UM) = 1218740kB [ 191.167001][ T7529] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 191.229326][ T7529] Node 1 Normal: 189*4kB (UE) 49*8kB (UME) 41*16kB (UME) 90*32kB (UME) 23*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3884044kB [ 191.329530][ T7529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.371971][ T7529] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.407072][ T7529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.439077][ T7529] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.579691][ T7529] 66795 total pagecache pages [ 191.584438][ T7529] 0 pages in swap cache [ 191.588613][ T7529] Free swap = 124996kB [ 191.601734][ T7529] Total swap = 124996kB [ 191.605937][ T7529] 2097051 pages RAM [ 191.665517][ T7529] 0 pages HighMem/MovableOnly [ 191.684008][ T7529] 425607 pages reserved [ 191.709525][ T7529] 0 pages cma reserved [ 191.874252][ T7540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.792969][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 193.523715][ T7566] netlink: 'syz.2.417': attribute type 15 has an invalid length. [ 193.724571][ T7566] netlink: 'syz.2.417': attribute type 5 has an invalid length. [ 193.814249][ T7566] netlink: 144 bytes leftover after parsing attributes in process `syz.2.417'. [ 194.463703][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.471873][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.621647][ T7578] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 197.170454][ T7608] netlink: 'syz.2.429': attribute type 10 has an invalid length. [ 201.765782][ T7608] bond0: (slave bond_slave_0): Releasing backup interface [ 203.668992][ T7660] netlink: 'syz.4.442': attribute type 10 has an invalid length. [ 203.684437][ T7660] : entered allmulticast mode [ 203.946502][ T7660] team0: Device 4 failed to register rx_handler [ 205.198018][ T7697] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.453'. [ 206.698105][ T7717] netlink: 'syz.1.459': attribute type 27 has an invalid length. [ 206.993156][ T7733] netlink: 'syz.4.462': attribute type 16 has an invalid length. [ 207.001313][ T7733] netlink: 152 bytes leftover after parsing attributes in process `syz.4.462'. [ 207.664228][ T7746] netlink: 'syz.4.466': attribute type 39 has an invalid length. [ 207.694115][ T7746] macvtap0: entered promiscuous mode [ 208.042861][ T7750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.467'. [ 208.150441][ T5884] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 209.257417][ T7770] netlink: 124 bytes leftover after parsing attributes in process `syz.2.474'. [ 209.631958][ T7775] net_ratelimit: 75 callbacks suppressed [ 209.632448][ T7775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.074299][ T7775] syz.4.475 (7775) used greatest stack depth: 17808 bytes left [ 211.198471][ T7791] syzkaller0: entered promiscuous mode [ 211.230192][ T7791] syzkaller0: entered allmulticast mode [ 211.881202][ T5883] Bluetooth: hci1: command 0x0406 tx timeout [ 211.962802][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 211.967518][ T5883] Bluetooth: hci4: command 0x0406 tx timeout [ 211.969046][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 211.981936][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 213.622780][ T7811] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 214.281321][ T7856] netlink: 'syz.2.493': attribute type 10 has an invalid length. [ 214.314648][ T7849] IPv6: Can't replace route, no match found [ 214.342263][ T7858] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.496'. [ 214.772974][ T7869] netlink: 'syz.1.499': attribute type 10 has an invalid length. [ 214.827316][ T7869] veth1_vlan: entered allmulticast mode [ 214.867075][ T7869] team0: Device veth1_vlan failed to register rx_handler [ 215.463725][ T7887] netlink: 'syz.0.504': attribute type 21 has an invalid length. [ 215.510428][ T7887] netlink: 'syz.0.504': attribute type 10 has an invalid length. [ 216.446567][ T7887] team0 (unregistering): Port device team_slave_0 removed [ 216.487753][ T7887] team0 (unregistering): Port device team_slave_1 removed [ 216.493177][ T7903] netlink: 'syz.3.510': attribute type 21 has an invalid length. [ 216.504679][ T7903] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.512621][ T7903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.517352][ T7887] team0 (unregistering): Port device geneve1 removed [ 216.519899][ T7903] IPv6: NLM_F_CREATE should be set when creating new route [ 216.519983][ T7903] IPv6: NLM_F_CREATE should be set when creating new route [ 216.530310][ T7903] netlink: 'syz.3.510': attribute type 6 has an invalid length. [ 216.844764][ T7908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.511'. [ 216.867998][ T7915] sock: sock_timestamping_bind_phc: sock not bind to device [ 216.873236][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.045609][ T7908] bridge_slave_0 (unregistering): left allmulticast mode [ 217.054658][ T7908] bridge_slave_0 (unregistering): left promiscuous mode [ 217.078773][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.129516][ T7926] netlink: 60 bytes leftover after parsing attributes in process `syz.4.516'. [ 217.149148][ T7923] netlink: 60 bytes leftover after parsing attributes in process `syz.4.516'. [ 217.173920][ T7926] netlink: 60 bytes leftover after parsing attributes in process `syz.4.516'. [ 220.323830][ T7983] netlink: 132 bytes leftover after parsing attributes in process `syz.1.528'. [ 221.085071][ T8009] sit0: entered promiscuous mode [ 221.105646][ T8009] sit0: entered allmulticast mode [ 222.191778][ T5186] Bluetooth: Frame is too long (len 13, expected len 4) [ 222.380172][ T8036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.545'. [ 222.480113][ T8036] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 222.890632][ T8043] netlink: 26 bytes leftover after parsing attributes in process `syz.0.547'. [ 224.008782][ T8086] netlink: 'syz.0.559': attribute type 6 has an invalid length. [ 224.030001][ T8086] netlink: 164 bytes leftover after parsing attributes in process `syz.0.559'. [ 224.758787][ T8095] netlink: 61955 bytes leftover after parsing attributes in process `syz.4.558'. [ 224.768550][ T8095] netlink: 2 bytes leftover after parsing attributes in process `syz.4.558'. [ 225.082006][ T36] wlan1: Trigger new scan to find an IBSS to join [ 225.856942][ T8125] netlink: 'syz.1.569': attribute type 12 has an invalid length. [ 225.876621][ T8125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.569'. [ 226.037963][ T8129] netlink: 'syz.3.566': attribute type 21 has an invalid length. [ 227.651469][ T8156] netlink: 132 bytes leftover after parsing attributes in process `syz.1.576'. [ 228.716447][ T8178] netlink: 'syz.0.583': attribute type 13 has an invalid length. [ 228.737794][ T8178] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.583'. [ 229.058512][ T8186] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.586'. [ 230.040542][ T2964] wlan1: Trigger new scan to find an IBSS to join [ 230.061264][ T8225] sctp: [Deprecated]: syz.3.594 (pid 8225) Use of int in max_burst socket option deprecated. [ 230.061264][ T8225] Use struct sctp_assoc_value instead [ 230.727854][ T8238] netlink: 'syz.2.599': attribute type 27 has an invalid length. [ 231.508169][ T8267] netlink: 14 bytes leftover after parsing attributes in process `syz.4.606'. [ 231.513560][ T2964] wlan1: Creating new IBSS network, BSSID 6a:ed:c1:1d:fc:7a [ 231.645497][ T8271] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 231.658034][ T8271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.609'. [ 231.795946][ T8267] team0: Port device bond0 removed [ 231.875956][ T8267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.888877][ T8267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.901917][ T8267] bond0 (unregistering): Released all slaves [ 231.950016][ T8271] veth0_vlan: entered allmulticast mode [ 231.971000][ T8271] bridge0: port 3(veth0_vlan) entered blocking state [ 231.989092][ T8271] bridge0: port 3(veth0_vlan) entered disabled state [ 232.044475][ T8271] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 232.401875][ T8305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.617'. [ 234.783030][ T8360] netlink: 'syz.4.632': attribute type 10 has an invalid length. [ 234.794239][ T8360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.807810][ T8360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.463697][ T8373] syzkaller0: entered promiscuous mode [ 235.469246][ T8373] syzkaller0: entered allmulticast mode [ 235.530662][ T8384] netlink: 'syz.4.638': attribute type 21 has an invalid length. [ 235.538535][ T8384] netlink: 164 bytes leftover after parsing attributes in process `syz.4.638'. [ 237.397865][ T8412] netlink: 'syz.1.648': attribute type 21 has an invalid length. [ 237.408549][ T8412] netlink: 128 bytes leftover after parsing attributes in process `syz.1.648'. [ 237.545750][ T8388] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.639'. [ 237.563091][ T8412] netlink: 'syz.1.648': attribute type 6 has an invalid length. [ 237.572136][ T8412] netlink: 3 bytes leftover after parsing attributes in process `syz.1.648'. [ 237.792902][ T8420] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.649'. [ 238.361032][ T8429] netlink: 'syz.1.652': attribute type 10 has an invalid length. [ 239.756687][ T8429] team0: Port device geneve1 added [ 240.097495][ T8441] netlink: 'syz.4.656': attribute type 21 has an invalid length. [ 240.781095][ T8462] netlink: 60 bytes leftover after parsing attributes in process `syz.4.662'. [ 240.811245][ T8462] netlink: 60 bytes leftover after parsing attributes in process `syz.4.662'. [ 241.200764][ T8471] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 241.678784][ T8476] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.666'. [ 241.691858][ T8476] netlink: zone id is out of range [ 241.708553][ T8476] netlink: zone id is out of range [ 241.725035][ T8476] netlink: get zone limit has 8 unknown bytes [ 241.769059][ T8479] netlink: 'syz.3.667': attribute type 4 has an invalid length. [ 242.169027][ T8471] bond0: (slave geneve0): Releasing backup interface [ 243.235329][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 243.400247][ T8514] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.674'. [ 243.456142][ T8514] tc_dump_action: action bad kind [ 243.467119][ T8517] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.674'. [ 243.495846][ T8514] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.674'. [ 243.507869][ T8519] netlink: 72 bytes leftover after parsing attributes in process `syz.3.676'. [ 243.517193][ T8514] tc_dump_action: action bad kind [ 243.524878][ T8514] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.674'. [ 243.534616][ T8514] tc_dump_action: action bad kind [ 243.546306][ T8514] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.674'. [ 243.594006][ T8514] tc_dump_action: action bad kind [ 243.610674][ T8514] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.674'. [ 243.654477][ T8514] tc_dump_action: action bad kind [ 243.686421][ T8514] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.674'. [ 243.771906][ T8514] tc_dump_action: action bad kind [ 243.817346][ T8514] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.674'. [ 243.861304][ T8514] tc_dump_action: action bad kind [ 243.866717][ T8514] tc_dump_action: action bad kind [ 243.907745][ T8536] netlink: 'syz.0.681': attribute type 6 has an invalid length. [ 243.928428][ T8514] tc_dump_action: action bad kind [ 243.961347][ T8514] tc_dump_action: action bad kind [ 243.966768][ T8514] tc_dump_action: action bad kind [ 243.999710][ T8514] tc_dump_action: action bad kind [ 244.025257][ T8514] tc_dump_action: action bad kind [ 244.058309][ T8514] tc_dump_action: action bad kind [ 244.078860][ T8514] tc_dump_action: action bad kind [ 244.089935][ T8514] tc_dump_action: action bad kind [ 244.095260][ T8514] tc_dump_action: action bad kind [ 244.159029][ T8514] tc_dump_action: action bad kind [ 244.234883][ T8552] netlink: 'syz.3.685': attribute type 39 has an invalid length. [ 244.544319][ T8562] netlink: 'syz.2.687': attribute type 1 has an invalid length. [ 245.570208][ T8598] netlink: 'syz.0.697': attribute type 6 has an invalid length. [ 246.113615][ T8609] netlink: 'syz.0.702': attribute type 6 has an invalid length. [ 246.882919][ T8633] veth1_macvtap: left promiscuous mode [ 246.896512][ T8633] macsec0: entered promiscuous mode [ 246.958066][ T8633] veth1_macvtap: entered promiscuous mode [ 246.993484][ T8633] veth1_macvtap: entered allmulticast mode [ 247.052099][ T8643] netlink: 'syz.3.708': attribute type 2 has an invalid length. [ 248.388795][ T8691] __nla_validate_parse: 19 callbacks suppressed [ 248.388816][ T8691] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.725'. [ 249.585381][ T8713] netlink: 'syz.4.733': attribute type 10 has an invalid length. [ 249.765929][ T8720] netlink: 14 bytes leftover after parsing attributes in process `syz.2.735'. [ 250.572667][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 251.390924][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.398812][ T8713] bridge_slave_1: left allmulticast mode [ 251.405620][ T8713] bridge_slave_1: left promiscuous mode [ 251.411543][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.554102][ T8749] netlink: 'syz.0.741': attribute type 22 has an invalid length. [ 251.784323][ T8762] netlink: 199364 bytes leftover after parsing attributes in process `syz.2.745'. [ 251.811600][ T8762] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 252.927990][ T8781] netlink: 'syz.1.747': attribute type 2 has an invalid length. [ 252.944727][ T8781] netlink: 'syz.1.747': attribute type 1 has an invalid length. [ 253.459695][ T8795] netlink: 'syz.0.751': attribute type 10 has an invalid length. [ 253.501019][ T8795] netlink: 'syz.0.751': attribute type 16 has an invalid length. [ 253.542580][ T8795] netlink: 156 bytes leftover after parsing attributes in process `syz.0.751'. [ 253.988585][ T8813] lo: entered allmulticast mode [ 254.073273][ T8813] lo: entered promiscuous mode [ 254.109924][ T8813] lo: left allmulticast mode [ 254.207835][ T5186] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 254.327444][ T5186] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 254.339201][ T8820] netlink: 'syz.3.759': attribute type 9 has an invalid length. [ 254.352845][ T8820] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.759'. [ 254.725593][ T8836] IPv6: Can't replace route, no match found [ 255.856920][ T8863] netlink: 'syz.3.771': attribute type 21 has an invalid length. [ 256.015669][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.022069][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.213166][ T8858] netlink: 44 bytes leftover after parsing attributes in process `syz.0.770'. [ 256.417339][ T8866] netlink: 10 bytes leftover after parsing attributes in process `syz.0.772'. [ 257.370977][ T8872] netlink: 'syz.4.774': attribute type 39 has an invalid length. [ 259.072175][ T8897] netlink: 17 bytes leftover after parsing attributes in process `syz.3.780'. [ 259.320155][ T8897] netlink: zone id is out of range [ 259.325336][ T8897] netlink: zone id is out of range [ 259.440023][ T8897] netlink: zone id is out of range [ 259.519852][ T8897] netlink: zone id is out of range [ 259.535016][ T8897] netlink: zone id is out of range [ 259.540657][ T8897] netlink: zone id is out of range [ 259.545860][ T8897] netlink: zone id is out of range [ 259.784635][ T8897] netlink: zone id is out of range [ 259.918716][ T8897] netlink: zone id is out of range [ 260.039989][ T8897] netlink: zone id is out of range [ 260.761835][ T8927] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.785'. [ 261.552399][ T8914] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 263.044233][ T8962] žÿ: renamed from team_slave_1 (while UP) [ 263.664780][ T8989] netlink: 'syz.2.801': attribute type 21 has an invalid length. [ 263.687213][ T8989] netlink: 128 bytes leftover after parsing attributes in process `syz.2.801'. [ 263.716444][ T8989] netlink: 'syz.2.801': attribute type 4 has an invalid length. [ 263.724349][ T8989] netlink: 'syz.2.801': attribute type 5 has an invalid length. [ 263.732481][ T8989] netlink: 3 bytes leftover after parsing attributes in process `syz.2.801'. [ 264.067951][ T9001] netlink: 'syz.0.804': attribute type 21 has an invalid length. [ 264.100758][ T9001] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 264.121538][ T9001] netlink: 132 bytes leftover after parsing attributes in process `syz.0.804'. [ 267.387308][ T9066] netlink: 'syz.2.820': attribute type 3 has an invalid length. [ 267.479609][ T9066] netlink: 'syz.2.820': attribute type 1 has an invalid length. [ 267.499572][ T9057] netlink: 'syz.4.818': attribute type 10 has an invalid length. [ 267.855457][ T9060] netlink: 'syz.3.819': attribute type 10 has an invalid length. [ 268.045061][ T9057] team0: Port device wlan1 removed [ 268.049552][ T9067] sctp: [Deprecated]: syz.0.821 (pid 9067) Use of int in max_burst socket option deprecated. [ 268.049552][ T9067] Use struct sctp_assoc_value instead [ 269.099724][ T9085] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.826'. [ 269.151846][ T9085] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.826'. [ 269.383317][ T9093] netlink: 'syz.1.827': attribute type 10 has an invalid length. [ 269.930546][ T9093] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 270.070011][ T9107] netlink: 'syz.2.830': attribute type 29 has an invalid length. [ 270.113685][ T9110] netlink: 'syz.2.830': attribute type 29 has an invalid length. [ 270.951659][ T9127] netlink: 'syz.2.836': attribute type 10 has an invalid length. [ 270.994343][ T9127] netlink: 55 bytes leftover after parsing attributes in process `syz.2.836'. [ 274.228847][ T9165] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.846'. [ 274.999337][ T9127] veth1_vlan (unregistering): left allmulticast mode [ 275.153667][ T9127] bond0: (slave macvlan0): Releasing backup interface [ 275.548008][ T9158] macsec0: entered allmulticast mode [ 276.532809][ T9203] netlink: 10 bytes leftover after parsing attributes in process `syz.0.855'. [ 276.584866][ T9202] netlink: 14 bytes leftover after parsing attributes in process `syz.3.857'. [ 277.690851][ T9243] netlink: 'syz.3.865': attribute type 19 has an invalid length. [ 277.698653][ T9243] netlink: 55 bytes leftover after parsing attributes in process `syz.3.865'. [ 278.212377][ T9231] netlink: 'syz.1.864': attribute type 2 has an invalid length. [ 278.318881][ T9231] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.864'. [ 278.819985][ T9264] netlink: 'syz.0.869': attribute type 39 has an invalid length. [ 279.305912][ T9275] netlink: 'syz.2.873': attribute type 10 has an invalid length. [ 279.763219][ T9282] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.876'. [ 280.300927][ T9294] netlink: 'syz.4.880': attribute type 1 has an invalid length. [ 280.737834][ T9301] netlink: 'syz.4.881': attribute type 29 has an invalid length. [ 280.786444][ T9301] netlink: 'syz.4.881': attribute type 29 has an invalid length. [ 280.958005][ T9301] net_ratelimit: 72 callbacks suppressed [ 280.958026][ T9301] ip6_tunnel: non-ECT from 0000:0800:3300:0000:0000:0800:1b00:0000 with DS=0x37 [ 281.230634][ T9304] syzkaller0: entered promiscuous mode [ 281.248730][ T9304] syzkaller0: entered allmulticast mode [ 284.391355][ T9336] netlink: 'syz.4.887': attribute type 10 has an invalid length. [ 285.444887][ T9380] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.900'. [ 285.797019][ T9394] netlink: 188 bytes leftover after parsing attributes in process `syz.2.905'. [ 286.489033][ T9405] netlink: 3850 bytes leftover after parsing attributes in process `syz.2.907'. [ 286.504826][ T9407] netlink: 3850 bytes leftover after parsing attributes in process `syz.2.907'. [ 286.726974][ T9419] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 286.924995][ T9419] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 287.924554][ T9458] netlink: 'syz.2.921': attribute type 13 has an invalid length. [ 288.004070][ T9461] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.920'. [ 288.057093][ T9460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.922'. [ 288.139783][ T9469] netlink: 188 bytes leftover after parsing attributes in process `syz.2.924'. [ 289.089618][ T9456] C: renamed from team_slave_0 [ 289.096237][ T9456] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 289.104002][ T9456] netlink: 152 bytes leftover after parsing attributes in process `syz.0.920'. [ 289.115732][ T9456] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 289.154401][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.190676][ T9460] bridge_slave_0 (unregistering): left allmulticast mode [ 289.197973][ T9460] bridge_slave_0 (unregistering): left promiscuous mode [ 289.217799][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.488812][ T9487] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.930'. [ 289.513288][ T9487] netlink: zone id is out of range [ 289.536685][ T9487] netlink: get zone limit has 8 unknown bytes [ 289.813110][ T9495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.820967][ T9495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.857946][ T9495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.868548][ T9495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.174771][ T9513] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 290.184283][ T9507] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 290.198450][ T9513] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 290.215394][ T9507] netlink: 17 bytes leftover after parsing attributes in process `syz.0.933'. [ 290.338530][ T5186] Bluetooth: hci4: ISO packet for unknown connection handle 3854 [ 290.405682][ T9522] netlink: 'syz.1.937': attribute type 3 has an invalid length. [ 291.931175][ T9556] netlink: 'syz.2.948': attribute type 39 has an invalid length. [ 293.209178][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 297.461195][ T9600] netlink: 'syz.3.961': attribute type 13 has an invalid length. [ 297.521003][ T9600] __nla_validate_parse: 1 callbacks suppressed [ 297.521023][ T9600] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.961'. [ 298.029287][ T9619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.965'. [ 298.170281][ T9620] netlink: 60 bytes leftover after parsing attributes in process `syz.1.965'. [ 298.765641][ T9634] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 298.782867][ T9634] netlink: 'syz.2.970': attribute type 2 has an invalid length. [ 298.799908][ T9634] netlink: 'syz.2.970': attribute type 4 has an invalid length. [ 298.812668][ T9634] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 298.822115][ T9634] netlink: 'syz.2.970': attribute type 2 has an invalid length. [ 298.831617][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 298.843760][ T9634] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.970'. [ 298.853879][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 299.710718][ T9652] netlink: 'syz.2.973': attribute type 12 has an invalid length. [ 299.718604][ T9652] netlink: 132 bytes leftover after parsing attributes in process `syz.2.973'. [ 299.736329][ T9649] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 300.111887][ T9649] geneve0: entered promiscuous mode [ 300.293044][ T9663] syz.1.976: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 300.356225][ T9663] CPU: 1 UID: 0 PID: 9663 Comm: syz.1.976 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 300.356256][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.356267][ T9663] Call Trace: [ 300.356277][ T9663] [ 300.356286][ T9663] dump_stack_lvl+0x189/0x250 [ 300.356323][ T9663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.356347][ T9663] ? __pfx__printk+0x10/0x10 [ 300.356375][ T9663] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 300.356399][ T9663] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 300.356424][ T9663] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 300.356450][ T9663] warn_alloc+0x214/0x310 [ 300.356479][ T9663] ? stack_depot_save_flags+0x40/0x900 [ 300.356514][ T9663] ? __pfx_warn_alloc+0x10/0x10 [ 300.356546][ T9663] ? kasan_save_track+0x4f/0x80 [ 300.356571][ T9663] ? xskq_create+0x56/0x170 [ 300.356588][ T9663] ? xsk_init_queue+0xb0/0x110 [ 300.356614][ T9663] ? xsk_setsockopt+0x57b/0x8d0 [ 300.356637][ T9663] ? do_sock_setsockopt+0x17c/0x1b0 [ 300.356658][ T9663] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 300.356678][ T9663] ? do_syscall_64+0xfa/0x3b0 [ 300.356697][ T9663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.356727][ T9663] __vmalloc_node_range_noprof+0x125/0x12f0 [ 300.356798][ T9663] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 300.356836][ T9663] ? __kasan_kmalloc+0x93/0xb0 [ 300.356865][ T9663] vmalloc_user_noprof+0xad/0xf0 [ 300.356910][ T9663] ? xskq_create+0xbf/0x170 [ 300.356930][ T9663] xskq_create+0xbf/0x170 [ 300.356954][ T9663] xsk_init_queue+0xb0/0x110 [ 300.356987][ T9663] xsk_setsockopt+0x57b/0x8d0 [ 300.357020][ T9663] ? __pfx_xsk_setsockopt+0x10/0x10 [ 300.357050][ T9663] ? __pfx_aa_sk_perm+0x10/0x10 [ 300.357079][ T9663] ? __fget_files+0x2a/0x420 [ 300.357107][ T9663] ? aa_sock_opt_perm+0x74/0x110 [ 300.357136][ T9663] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 300.357157][ T9663] ? __pfx_xsk_setsockopt+0x10/0x10 [ 300.357187][ T9663] do_sock_setsockopt+0x17c/0x1b0 [ 300.357217][ T9663] __x64_sys_setsockopt+0x13f/0x1b0 [ 300.357248][ T9663] do_syscall_64+0xfa/0x3b0 [ 300.357266][ T9663] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.357285][ T9663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.357304][ T9663] ? clear_bhb_loop+0x60/0xb0 [ 300.357330][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.357349][ T9663] RIP: 0033:0x7f8598d8eb69 [ 300.357368][ T9663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.357383][ T9663] RSP: 002b:00007f8599bc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 300.357406][ T9663] RAX: ffffffffffffffda RBX: 00007f8598fb5fa0 RCX: 00007f8598d8eb69 [ 300.357420][ T9663] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 300.357432][ T9663] RBP: 00007f8598e11df1 R08: 0000000000000004 R09: 0000000000000000 [ 300.357444][ T9663] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 300.357456][ T9663] R13: 0000000000000000 R14: 00007f8598fb5fa0 R15: 00007ffee6e62058 [ 300.357492][ T9663] [ 300.510399][ T9649] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 300.512539][ T9663] Mem-Info: [ 300.680328][ T9663] active_anon:5367 inactive_anon:0 isolated_anon:0 [ 300.680328][ T9663] active_file:19321 inactive_file:39914 isolated_file:0 [ 300.680328][ T9663] unevictable:768 dirty:119 writeback:0 [ 300.680328][ T9663] slab_reclaimable:10621 slab_unreclaimable:96249 [ 300.680328][ T9663] mapped:30337 shmem:1356 pagetables:1144 [ 300.680328][ T9663] sec_pagetables:0 bounce:0 [ 300.680328][ T9663] kernel_misc_reclaimable:0 [ 300.680328][ T9663] free:1307449 free_pcp:21550 free_cma:0 [ 300.737315][ T9663] Node 0 active_anon:21468kB inactive_anon:0kB active_file:77284kB inactive_file:159456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121348kB dirty:476kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12224kB pagetables:4440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 300.812106][ T9663] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 300.852985][ T9672] netlink: 'syz.4.977': attribute type 25 has an invalid length. [ 300.890860][ T9672] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.977'. [ 300.925714][ T9663] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 300.977582][ T9663] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 300.985826][ T9663] Node 0 DMA32 free:1329956kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21224kB inactive_anon:0kB active_file:77284kB inactive_file:157888kB unevictable:1536kB writepending:576kB present:3129332kB managed:2557608kB mlocked:0kB bounce:0kB free_pcp:65276kB local_pcp:32084kB free_cma:0kB [ 301.133003][ T9679] veth1_macvtap: left promiscuous mode [ 301.138534][ T9679] macsec0: entered allmulticast mode [ 301.176596][ T9681] netlink: 'syz.0.981': attribute type 39 has an invalid length. [ 301.187916][ T9663] lowmem_reserve[]: 0 0 1 1 1 [ 301.249625][ T9663] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 301.308491][ T9663] lowmem_reserve[]: 0 0 0 0 0 [ 301.313847][ T9663] Node 1 Normal free:3884044kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21792kB local_pcp:12832kB free_cma:0kB [ 301.352457][ T9663] lowmem_reserve[]: 0 0 0 0 0 [ 301.357511][ T9663] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 301.375671][ T9663] Node 0 DMA32: 1852*4kB (UM) 1844*8kB (UME) 1106*16kB (UM) 1125*32kB (UME) 530*64kB (UME) 137*128kB (UME) 171*256kB (UME) 86*512kB (UME) 42*1024kB (UME) 12*2048kB (UME) 257*4096kB (UM) = 1335376kB [ 301.397010][ T9682] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 301.417146][ T9663] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 301.417384][ T9663] Node 1 Normal: 189*4kB (UE) 49*8kB (UME) 41*16kB (UME) 90*32kB (UME) 23*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3884044kB [ 301.417725][ T9663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.417748][ T9663] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.417868][ T9663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.417891][ T9663] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.417914][ T9663] 60604 total pagecache pages [ 301.417929][ T9663] 0 pages in swap cache [ 301.417943][ T9663] Free swap = 124996kB [ 301.417957][ T9663] Total swap = 124996kB [ 301.417972][ T9663] 2097051 pages RAM [ 301.417985][ T9663] 0 pages HighMem/MovableOnly [ 301.417999][ T9663] 425607 pages reserved [ 301.418012][ T9663] 0 pages cma reserved [ 301.550783][ T9682] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 304.247148][ T9741] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.996'. [ 304.257646][ T9741] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.996'. [ 304.909957][ T9766] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 304.917738][ T9766] netlink: 'syz.1.1002': attribute type 2 has an invalid length. [ 304.952067][ T9766] netlink: 'syz.1.1002': attribute type 7 has an invalid length. [ 305.039490][ T9766] netlink: 'syz.1.1002': attribute type 6 has an invalid length. [ 305.068759][ T9766] netlink: 85 bytes leftover after parsing attributes in process `syz.1.1002'. [ 305.072185][ T9774] pim6reg1: entered promiscuous mode [ 305.096082][ T9774] pim6reg1: entered allmulticast mode [ 305.100118][ T9766] netlink: 130140 bytes leftover after parsing attributes in process `syz.1.1002'. [ 305.151897][ T9766] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 305.174035][ T9766] netlink: 'syz.1.1002': attribute type 2 has an invalid length. [ 305.201457][ T9766] netlink: 'syz.1.1002': attribute type 7 has an invalid length. [ 305.219449][ T9766] netlink: 'syz.1.1002': attribute type 6 has an invalid length. [ 305.239087][ T9766] netlink: 85 bytes leftover after parsing attributes in process `syz.1.1002'. [ 305.771725][ T9784] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.690242][ T9802] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1011'. [ 307.406767][ T9809] netlink: 'syz.4.1012': attribute type 10 has an invalid length. [ 307.495954][ T9812] netlink: 'syz.3.1013': attribute type 10 has an invalid length. [ 307.514150][ T9812] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1013'. [ 308.228159][ T9809] geneve0: entered promiscuous mode [ 310.776559][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.874199][ T9858] bridge_slave_1: left allmulticast mode [ 310.889659][ T9858] bridge_slave_1: left promiscuous mode [ 310.896608][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.198067][ T9866] validate_nla: 2 callbacks suppressed [ 311.198092][ T9866] netlink: 'syz.1.1025': attribute type 2 has an invalid length. [ 311.256690][ T9866] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 311.289907][ T9878] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 311.300496][ T9878] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1026'. [ 311.329853][ T9878] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 311.337720][ T9878] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1026'. [ 311.355886][ T9866] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1025'. [ 311.366993][ T9878] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 311.379630][ T9866] block nbd5: not configured, cannot reconfigure [ 311.401197][ T9878] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1026'. [ 311.588241][ T9885] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1028'. [ 314.013691][ T9917] netlink: 'syz.0.1033': attribute type 3 has an invalid length. [ 314.057218][ T9917] netlink: 137972 bytes leftover after parsing attributes in process `syz.0.1033'. [ 314.122742][ T9920] netlink: 'syz.1.1036': attribute type 29 has an invalid length. [ 314.226106][ T9926] netlink: 'syz.1.1036': attribute type 29 has an invalid length. [ 314.331820][ T9920] syz_tun: refused to change device tx_queue_len [ 314.497372][ T9927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1035'. [ 314.548445][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 315.040950][ T9935] netlink: 'syz.2.1038': attribute type 10 has an invalid length. [ 315.300873][ T9943] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1042'. [ 315.319183][ T9940] C: renamed from team_slave_0 (while UP) [ 315.549052][ T9947] netlink: 'syz.3.1042': attribute type 2 has an invalid length. [ 315.581090][ T9947] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1042'. [ 316.259812][ T9964] netlink: 'syz.2.1046': attribute type 10 has an invalid length. [ 316.968606][ T9940] netlink: 'syz.1.1039': attribute type 3 has an invalid length. [ 316.998508][ T9940] netlink: 'syz.1.1039': attribute type 1 has an invalid length. [ 317.017405][ T9940] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1039'. [ 317.063659][ T9940] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 317.145747][ T9969] netlink: 'syz.4.1047': attribute type 29 has an invalid length. [ 317.327234][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.333930][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.553493][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'. [ 317.896850][ T9993] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1056'. [ 318.209882][T10002] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 318.229482][T10002] netlink: 35347 bytes leftover after parsing attributes in process `syz.3.1058'. [ 318.659077][ T8929] tipc: Subscription rejected, illegal request [ 320.606571][T10056] netlink: 'syz.1.1075': attribute type 2 has an invalid length. [ 320.671317][T10056] netlink: 'syz.1.1075': attribute type 3 has an invalid length. [ 320.711584][T10056] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1075'. [ 321.275613][T10073] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1076'. [ 322.735624][T10105] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1084'. [ 323.184953][T10105] netlink: zone id is out of range [ 323.282821][T10105] netlink: zone id is out of range [ 323.287998][T10105] netlink: zone id is out of range [ 323.349529][T10105] netlink: zone id is out of range [ 323.354843][T10105] netlink: zone id is out of range [ 323.360576][T10105] netlink: zone id is out of range [ 323.400400][T10105] netlink: zone id is out of range [ 323.436629][T10105] netlink: zone id is out of range [ 323.461797][T10105] netlink: zone id is out of range [ 323.477319][T10105] netlink: zone id is out of range [ 323.493280][T10114] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1087'. [ 323.827189][T10123] netlink: 'syz.1.1088': attribute type 10 has an invalid length. [ 323.918316][T10124] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1088'. [ 326.057643][T10150] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1098'. [ 326.636804][T10123] team0 (unregistering): Port device C removed [ 326.697744][T10123] team0 (unregistering): Port device 76žÿ removed [ 326.758202][T10123] team0 (unregistering): Port device syz_tun removed [ 326.803256][T10166] netlink: 'syz.3.1103': attribute type 10 has an invalid length. [ 326.805823][T10123] team0 (unregistering): Port device geneve1 removed [ 326.952001][T10165] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1102'. [ 326.969571][ T2928] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.000179][ T2928] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.042594][ T2928] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.069431][ T2928] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.595687][T10185] netlink: 'syz.0.1109': attribute type 10 has an invalid length. [ 327.621191][T10185] geneve0: entered promiscuous mode [ 327.644694][T10185] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 328.271679][T10208] netlink: 'syz.4.1114': attribute type 10 has an invalid length. [ 328.340691][T10208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1114'. [ 328.620247][T10208] ipvlan1: entered promiscuous mode [ 328.658583][T10208] ipvlan1: entered allmulticast mode [ 328.665606][T10208] veth0_vlan: entered allmulticast mode [ 328.691725][T10208] bridge0: port 1(ipvlan1) entered blocking state [ 328.734673][T10208] bridge0: port 1(ipvlan1) entered disabled state [ 328.792384][T10208] net_ratelimit: 75 callbacks suppressed [ 328.792404][T10208] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 330.400220][T10245] netlink: 'syz.1.1124': attribute type 10 has an invalid length. [ 333.518829][T10327] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1149'. [ 334.119739][T10327] netlink: 'syz.0.1149': attribute type 10 has an invalid length. [ 334.404579][T10358] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1157'. [ 334.419037][T10359] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1160'. [ 334.444810][T10356] tap0: tun_chr_ioctl cmd 1074025677 [ 334.479694][T10356] tap0: linktype set to 823 [ 334.591000][T10365] netlink: 'syz.3.1161': attribute type 10 has an invalid length. [ 334.627724][T10365] batman_adv: batadv0: Adding interface: team0 [ 334.636711][T10365] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.682525][T10365] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 334.719561][T10366] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1161'. [ 334.914774][T10366] netlink: 'syz.3.1161': attribute type 10 has an invalid length. [ 334.926569][T10366] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1161'. [ 335.014434][T10366] team0: entered promiscuous mode [ 335.024021][T10366] team_slave_0: entered promiscuous mode [ 335.049650][T10366] team_slave_1: entered promiscuous mode [ 335.055572][T10366] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 335.081213][T10366] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.088675][T10366] batman_adv: batadv0: Interface activated: team0 [ 335.119558][T10366] batman_adv: batadv0: Interface deactivated: team0 [ 335.126210][T10366] batman_adv: batadv0: Removing interface: team0 [ 336.272404][T10399] netlink: 'syz.1.1170': attribute type 10 has an invalid length. [ 337.009250][T10407] syz.2.1166: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 337.132684][T10407] CPU: 1 UID: 0 PID: 10407 Comm: syz.2.1166 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 337.132714][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.132726][T10407] Call Trace: [ 337.132735][T10407] [ 337.132744][T10407] dump_stack_lvl+0x189/0x250 [ 337.132780][T10407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.132803][T10407] ? __pfx__printk+0x10/0x10 [ 337.132831][T10407] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 337.132854][T10407] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 337.132880][T10407] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 337.132907][T10407] warn_alloc+0x214/0x310 [ 337.132936][T10407] ? stack_depot_save_flags+0x40/0x900 [ 337.132972][T10407] ? __pfx_warn_alloc+0x10/0x10 [ 337.133003][T10407] ? kasan_save_track+0x4f/0x80 [ 337.133028][T10407] ? xskq_create+0x56/0x170 [ 337.133044][T10407] ? xsk_init_queue+0xb0/0x110 [ 337.133069][T10407] ? xsk_setsockopt+0x57b/0x8d0 [ 337.133094][T10407] ? do_sock_setsockopt+0x17c/0x1b0 [ 337.133114][T10407] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 337.133134][T10407] ? do_syscall_64+0xfa/0x3b0 [ 337.133152][T10407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.133183][T10407] __vmalloc_node_range_noprof+0x125/0x12f0 [ 337.133253][T10407] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 337.133289][T10407] ? __kasan_kmalloc+0x93/0xb0 [ 337.133319][T10407] vmalloc_user_noprof+0xad/0xf0 [ 337.133345][T10407] ? xskq_create+0xbf/0x170 [ 337.133365][T10407] xskq_create+0xbf/0x170 [ 337.133388][T10407] xsk_init_queue+0xb0/0x110 [ 337.133421][T10407] xsk_setsockopt+0x57b/0x8d0 [ 337.133461][T10407] ? __pfx_xsk_setsockopt+0x10/0x10 [ 337.133489][T10407] ? __pfx_aa_sk_perm+0x10/0x10 [ 337.133516][T10407] ? __fget_files+0x2a/0x420 [ 337.133544][T10407] ? aa_sock_opt_perm+0x74/0x110 [ 337.133572][T10407] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 337.133591][T10407] ? __pfx_xsk_setsockopt+0x10/0x10 [ 337.133621][T10407] do_sock_setsockopt+0x17c/0x1b0 [ 337.133652][T10407] __x64_sys_setsockopt+0x13f/0x1b0 [ 337.133683][T10407] do_syscall_64+0xfa/0x3b0 [ 337.133705][T10407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.133722][T10407] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.133742][T10407] ? clear_bhb_loop+0x60/0xb0 [ 337.133768][T10407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.133787][T10407] RIP: 0033:0x7f5c40f8eb69 [ 337.133805][T10407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.133820][T10407] RSP: 002b:00007f5c3edd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 337.133842][T10407] RAX: ffffffffffffffda RBX: 00007f5c411b6160 RCX: 00007f5c40f8eb69 [ 337.133856][T10407] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000010 [ 337.133868][T10407] RBP: 00007f5c41011df1 R08: 0000000000000004 R09: 0000000000000000 [ 337.133879][T10407] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 337.133891][T10407] R13: 0000000000000000 R14: 00007f5c411b6160 R15: 00007ffe9f504798 [ 337.133929][T10407] [ 337.138885][T10407] Mem-Info: [ 337.614779][T10407] active_anon:5523 inactive_anon:0 isolated_anon:0 [ 337.614779][T10407] active_file:19355 inactive_file:39930 isolated_file:0 [ 337.614779][T10407] unevictable:768 dirty:175 writeback:0 [ 337.614779][T10407] slab_reclaimable:10576 slab_unreclaimable:96192 [ 337.614779][T10407] mapped:33397 shmem:1356 pagetables:1244 [ 337.614779][T10407] sec_pagetables:0 bounce:0 [ 337.614779][T10407] kernel_misc_reclaimable:0 [ 337.614779][T10407] free:1309715 free_pcp:18628 free_cma:0 [ 337.763695][T10410] netlink: 'syz.3.1175': attribute type 2 has an invalid length. [ 337.819756][T10410] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.1175'. [ 337.866667][T10407] Node 0 active_anon:21992kB inactive_anon:0kB active_file:77420kB inactive_file:159520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129488kB dirty:700kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12320kB pagetables:4840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 338.100305][T10407] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 338.228299][T10407] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.263956][T10407] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 338.272212][T10407] Node 0 DMA32 free:1345308kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21660kB inactive_anon:0kB active_file:77420kB inactive_file:157952kB unevictable:1536kB writepending:700kB present:3129332kB managed:2557608kB mlocked:0kB bounce:0kB free_pcp:48264kB local_pcp:21640kB free_cma:0kB [ 338.307077][T10407] lowmem_reserve[]: 0 0 1 1 1 [ 338.315363][T10407] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 338.344652][T10407] lowmem_reserve[]: 0 0 0 0 0 [ 338.349713][T10407] Node 1 Normal free:3884044kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21792kB local_pcp:8960kB free_cma:0kB [ 338.391657][T10407] lowmem_reserve[]: 0 0 0 0 0 [ 338.396634][T10407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 338.413695][T10407] Node 0 DMA32: 1874*4kB (UM) 2274*8kB (UME) 1144*16kB (UME) 1356*32kB (UME) 767*64kB (UME) 284*128kB (UM) 199*256kB (UME) 90*512kB (UM) 42*1024kB (UM) 8*2048kB (M) 248*4096kB (M) = 1345048kB [ 338.475917][T10407] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 338.549496][T10407] Node 1 Normal: 189*4kB (UE) 49*8kB (UME) 41*16kB (UME) 90*32kB (UME) 23*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3884044kB [ 338.654134][T10407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.686494][T10407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.757987][T10407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.873776][T10407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.950295][T10407] 60637 total pagecache pages [ 338.976983][T10407] 0 pages in swap cache [ 338.997186][T10407] Free swap = 124996kB [ 339.039479][T10407] Total swap = 124996kB [ 339.056766][T10407] 2097051 pages RAM [ 339.065275][T10407] 0 pages HighMem/MovableOnly [ 339.079658][T10407] 425607 pages reserved [ 339.089454][T10407] 0 pages cma reserved [ 339.258468][T10453] raw_sendmsg: syz.2.1185 forgot to set AF_INET. Fix it! [ 340.111371][T10471] netlink: 'syz.3.1187': attribute type 10 has an invalid length. [ 341.863178][T10482] @ÿ: renamed from bond_slave_0 [ 343.107868][T10504] veth1_macvtap: left promiscuous mode [ 343.821779][T10526] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1199'. [ 344.918287][T10546] netlink: 'syz.0.1206': attribute type 10 has an invalid length. [ 345.009948][T10546] bridge0: port 3(macsec0) entered blocking state [ 345.054504][T10546] bridge0: port 3(macsec0) entered disabled state [ 345.085034][T10546] macsec0: entered allmulticast mode [ 345.093192][T10546] veth1_macvtap: entered allmulticast mode [ 345.233640][T10546] macsec0: entered promiscuous mode [ 345.274709][T10546] bridge0: port 3(macsec0) entered blocking state [ 345.281389][T10546] bridge0: port 3(macsec0) entered forwarding state [ 346.266966][ T5186] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 346.332074][T10580] netlink: 'syz.3.1213': attribute type 7 has an invalid length. [ 347.461010][T10616] netlink: 'syz.4.1223': attribute type 17 has an invalid length. [ 347.521490][T10616] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1223'. [ 348.660113][T10641] netlink: 'syz.4.1229': attribute type 5 has an invalid length. [ 348.667987][T10641] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1229'. [ 349.768819][T10664] netlink: 'syz.4.1234': attribute type 21 has an invalid length. [ 349.793867][T10664] IPv6: NLM_F_CREATE should be specified when creating new route [ 349.803042][T10664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.810388][T10664] IPv6: NLM_F_CREATE should be set when creating new route [ 349.817994][T10664] IPv6: NLM_F_CREATE should be set when creating new route [ 349.825430][T10664] IPv6: NLM_F_CREATE should be set when creating new route [ 349.846880][T10663] netlink: 'syz.1.1237': attribute type 10 has an invalid length. [ 349.867623][T10663] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1237'. [ 349.980497][T10663] bond0: entered promiscuous mode [ 349.997183][T10663] bond_slave_0: entered promiscuous mode [ 350.089150][T10663] bond_slave_1: entered promiscuous mode [ 350.166787][T10663] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 350.262618][T10663] bridge0: port 3(bond0) entered blocking state [ 350.273735][T10663] bridge0: port 3(bond0) entered disabled state [ 350.286953][T10663] bond0: entered allmulticast mode [ 350.292921][T10663] bond_slave_0: entered allmulticast mode [ 350.309703][T10663] bond_slave_1: entered allmulticast mode [ 350.316287][T10663] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 350.425431][T10663] bridge0: port 3(bond0) entered blocking state [ 350.433561][T10663] bridge0: port 3(bond0) entered forwarding state [ 351.102875][T10694] netlink: 'syz.1.1244': attribute type 13 has an invalid length. [ 354.959490][T10749] netlink: 'syz.4.1258': attribute type 29 has an invalid length. [ 354.981376][T10755] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1260'. [ 355.136280][T10759] netlink: 'syz.0.1261': attribute type 46 has an invalid length. [ 356.137250][T10795] syzkaller0: entered promiscuous mode [ 356.142879][T10795] syzkaller0: entered allmulticast mode [ 356.351441][T10797] ref_ctr_offset mismatch. inode: 0x559 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 356.710564][T10818] netlink: 'syz.2.1281': attribute type 21 has an invalid length. [ 356.718515][T10818] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1281'. [ 356.842801][T10825] netlink: 'syz.0.1278': attribute type 10 has an invalid length. [ 356.860739][T10825] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1278'. [ 357.622399][T10847] delete_channel: no stack [ 357.627017][T10847] delete_channel: no stack [ 358.054665][T10855] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 358.060981][ T928] syzkaller1: tun_net_xmit 90 [ 358.088785][T10855] syzkaller1: Linktype set failed because interface is up [ 358.107995][ T8929] syzkaller1: tun_net_xmit 86 [ 358.421749][T10869] netlink: 'syz.4.1291': attribute type 11 has an invalid length. [ 359.091292][T10889] netlink: 'syz.0.1297': attribute type 6 has an invalid length. [ 359.109855][T10889] netlink: 'syz.0.1297': attribute type 1 has an invalid length. [ 359.117914][T10889] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1297'. [ 359.553578][T10907] C: renamed from team_slave_0 [ 359.692013][T10907] netlink: 'syz.3.1302': attribute type 3 has an invalid length. [ 359.703107][T10907] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1302'. [ 359.714259][T10907] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 359.755472][T10909] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1303'. [ 360.010874][T10920] netlink: 'syz.1.1307': attribute type 10 has an invalid length. [ 360.041012][T10920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1307'. [ 360.101510][T10920] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 360.135631][T10920] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.205000][T10920] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 360.533314][T10935] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1311'. [ 360.717063][T10937] netlink: 'syz.3.1312': attribute type 6 has an invalid length. [ 360.877264][T10946] netlink: 'syz.3.1312': attribute type 1 has an invalid length. [ 361.009604][T10946] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1312'. [ 362.449258][T10973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1322'. [ 364.125977][T11004] tap0: tun_chr_ioctl cmd 1074025677 [ 364.157785][T11004] tap0: linktype set to 32 [ 364.446996][T11017] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1334'. [ 364.666611][T10996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1328'. [ 364.679572][T10996] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.696587][T11019] netlink: 'syz.4.1335': attribute type 39 has an invalid length. [ 364.799553][T11028] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 364.814467][T10996] bridge_slave_0 (unregistering): left allmulticast mode [ 364.823395][T10996] bridge_slave_0 (unregistering): left promiscuous mode [ 364.876173][T10996] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.451907][T11036] netlink: 'syz.0.1342': attribute type 1 has an invalid length. [ 365.723779][T11046] netlink: 'syz.1.1345': attribute type 10 has an invalid length. [ 366.234769][T11059] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1347'. [ 366.380360][T11060] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1350'. [ 366.406935][T11062] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1350'. [ 367.230393][T11104] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1363'. [ 367.277829][T11104] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 367.308431][T11104] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1363'. [ 368.100992][T11131] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1370'. [ 368.185229][T11131] netlink: 'syz.0.1370': attribute type 10 has an invalid length. [ 368.313578][T11131] veth1_macvtap (unregistering): left allmulticast mode [ 368.355109][T11131] bridge0: port 3(macsec0) entered disabled state [ 368.459866][T11131] macsec0 (unregistering): left allmulticast mode [ 368.511489][T11131] macsec0 (unregistering): left promiscuous mode [ 368.569495][T11131] bridge0: port 3(macsec0) entered disabled state [ 368.662949][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1375'. [ 368.738663][T11147] netlink: 'syz.1.1373': attribute type 3 has an invalid length. [ 368.764201][T11147] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1373'. [ 370.173491][T11170] netlink: 'syz.4.1379': attribute type 29 has an invalid length. [ 370.196794][T11169] syzkaller0: entered promiscuous mode [ 370.202800][T11169] syzkaller0: entered allmulticast mode [ 370.240785][T11170] netlink: 'syz.4.1379': attribute type 29 has an invalid length. [ 370.425059][T11180] netlink: 'syz.1.1382': attribute type 3 has an invalid length. [ 370.443859][T11180] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1382'. [ 371.207802][T11211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1390'. [ 371.357688][T11220] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1393'. [ 371.614064][T11217] can: request_module (can-proto-0) failed. [ 373.072865][T11241] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1399'. [ 373.297642][T11248] sctp: [Deprecated]: syz.1.1401 (pid 11248) Use of int in max_burst socket option deprecated. [ 373.297642][T11248] Use struct sctp_assoc_value instead [ 373.397838][T11256] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1404'. [ 373.462407][T11260] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1401'. [ 374.013120][T11281] netlink: 'syz.3.1408': attribute type 2 has an invalid length. [ 374.155662][T11281] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1408'. [ 374.352775][T11286] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1411'. [ 374.484039][T11286] netlink: 'syz.2.1411': attribute type 10 has an invalid length. [ 374.492432][T11286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1411'. [ 374.563683][T11286] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 374.735564][T11286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.016372][T11295] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1412'. [ 376.256741][T11333] netlink: 'syz.0.1421': attribute type 29 has an invalid length. [ 376.312432][T11334] netlink: 'syz.0.1421': attribute type 29 has an invalid length. [ 377.025102][T11354] caif0: entered promiscuous mode [ 377.039522][T11354] caif0: entered allmulticast mode [ 377.101454][T11358] netlink: 'syz.0.1428': attribute type 29 has an invalid length. [ 377.537101][T11364] netlink: 'syz.2.1429': attribute type 10 has an invalid length. [ 377.563363][T11359] netlink: 'syz.0.1428': attribute type 29 has an invalid length. [ 377.579643][T11364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1429'. [ 378.771495][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.777854][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.829783][T11395] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1437'. [ 380.806229][T11426] netlink: 'syz.3.1444': attribute type 6 has an invalid length. [ 380.849470][T11426] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1444'. [ 381.310458][T11434] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 381.499416][T11434] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1447'. [ 381.613699][T11440] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1448'. [ 381.958854][T11459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.966483][T11459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.515870][T11476] netlink: 'syz.4.1458': attribute type 7 has an invalid length. [ 382.749062][T11488] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1461'. [ 383.821124][T11520] netlink: 'syz.0.1471': attribute type 27 has an invalid length. [ 383.847871][T11520] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1471'. [ 387.569491][T11549] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1478'. [ 388.617011][T11581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1485'. [ 388.699093][T11581] caif0: entered promiscuous mode [ 388.711300][T11581] caif0: entered allmulticast mode [ 388.726356][T11584] ksmbd: Unknown IPC event: 3, ignore. [ 388.982262][T11589] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1490'. [ 391.184979][T11614] netlink: 'syz.4.1494': attribute type 21 has an invalid length. [ 391.752705][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'. [ 392.099690][T11645] team_slave_1: entered allmulticast mode [ 394.765684][T11673] netlink: 'syz.2.1512': attribute type 2 has an invalid length. [ 394.802367][T11673] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 394.822169][T11673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1512'. [ 394.952386][T11687] hsr0: entered promiscuous mode [ 394.957576][T11687] hsr0: entered allmulticast mode [ 394.963483][T11687] hsr_slave_0: entered allmulticast mode [ 394.969268][T11687] hsr_slave_1: entered allmulticast mode [ 395.048971][T11688] netlink: 495 bytes leftover after parsing attributes in process `syz.4.1516'. [ 397.586089][T11706] syzkaller0: entered promiscuous mode [ 397.592185][T11706] syzkaller0: entered allmulticast mode [ 397.599554][T11724] netlink: 'syz.3.1525': attribute type 12 has an invalid length. [ 397.607518][T11724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1525'. [ 398.914970][T11737] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1530'. [ 399.281796][T11756] netlink: 'syz.2.1535': attribute type 2 has an invalid length. [ 399.319495][T11756] netlink: 'syz.2.1535': attribute type 8 has an invalid length. [ 399.327287][T11756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1535'. [ 399.516497][T11772] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1540'. [ 399.645382][T11775] netlink: 'syz.3.1541': attribute type 19 has an invalid length. [ 399.655743][T11775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1541'. [ 400.034748][T11787] netlink: 'syz.3.1546': attribute type 10 has an invalid length. [ 400.066243][T11787] bond0: (slave bond_slave_0): Releasing backup interface [ 400.174264][T11795] netlink: 'syz.1.1548': attribute type 10 has an invalid length. [ 400.195033][T11795] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1548'. [ 400.303170][T11801] netlink: 'syz.2.1547': attribute type 10 has an invalid length. [ 401.277645][T11839] netlink: 'syz.1.1561': attribute type 27 has an invalid length. [ 401.289174][T11839] netlink: 'syz.1.1561': attribute type 3 has an invalid length. [ 401.345449][T11839] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1561'. [ 401.390266][T11837] netlink: 'syz.0.1560': attribute type 33 has an invalid length. [ 401.402479][T11837] netlink: 187492 bytes leftover after parsing attributes in process `syz.0.1560'. [ 403.646956][T11874] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1570'. [ 403.926318][T11885] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1573'. [ 404.041006][T11889] validate_nla: 1 callbacks suppressed [ 404.041057][T11889] netlink: 'syz.0.1575': attribute type 10 has an invalid length. [ 404.056382][T11889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1575'. [ 404.089701][T11889] ipvlan1: entered promiscuous mode [ 404.095273][T11889] ipvlan1: entered allmulticast mode [ 404.144778][T11889] bridge0: port 1(ipvlan1) entered blocking state [ 404.153254][T11889] bridge0: port 1(ipvlan1) entered disabled state [ 404.220330][T11889] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 405.214076][T11918] netlink: 'syz.1.1584': attribute type 3 has an invalid length. [ 405.236780][T11918] netlink: 'syz.1.1584': attribute type 2 has an invalid length. [ 405.256753][T11918] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.1584'. [ 405.880837][T11939] netlink: 'syz.1.1590': attribute type 3 has an invalid length. [ 405.888930][T11939] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 405.898023][T11939] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1590'. [ 406.008685][T11943] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1591'. [ 406.099561][T11941] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1591'. [ 406.242950][T11947] netlink: 'syz.4.1592': attribute type 10 has an invalid length. [ 406.329259][T11947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1592'. [ 406.382253][T11947] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 407.135526][T11954] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1594'. [ 407.776906][T11982] netlink: 'syz.1.1601': attribute type 3 has an invalid length. [ 407.836961][T11982] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1601'. [ 410.218952][T12011] netlink: 'syz.0.1609': attribute type 16 has an invalid length. [ 410.239869][T12011] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1609'. [ 410.716739][T12030] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1611'. [ 411.007470][T12036] wg2: entered promiscuous mode [ 411.014864][T12036] wg2: entered allmulticast mode [ 411.656114][T12056] netlink: 'syz.0.1622': attribute type 10 has an invalid length. [ 411.752373][T12056] bond0: (slave geneve0): Releasing backup interface [ 411.839730][ T8934] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.860046][ T8934] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.951430][ T2942] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.971168][ T2942] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.820601][T12090] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1632'. [ 414.046568][T12099] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1635'. [ 415.849033][T12142] pim6reg1: entered promiscuous mode [ 415.910991][T12142] pim6reg1: entered allmulticast mode [ 416.099992][T12165] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1652'. [ 416.109866][T12165] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 416.118364][T12165] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 416.368686][T12178] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1655'. [ 416.396726][T12178] netlink: zone id is out of range [ 416.406218][T12178] netlink: zone id is out of range [ 416.535055][T12180] netlink: 'syz.1.1655': attribute type 3 has an invalid length. [ 416.580172][T12178] netlink: zone id is out of range [ 416.626411][T12178] netlink: zone id is out of range [ 416.664155][T12178] netlink: zone id is out of range [ 416.684830][T12176] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.1654'. [ 416.735812][T12180] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1655'. [ 416.758275][T12178] netlink: zone id is out of range [ 416.840061][T12178] netlink: zone id is out of range [ 416.847261][T12178] netlink: zone id is out of range [ 417.265174][T12194] netlink: 'syz.3.1658': attribute type 10 has an invalid length. [ 417.296363][T12194] geneve1: entered promiscuous mode [ 417.312094][T12194] team0: Port device geneve1 added [ 417.505433][T12208] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1662'. [ 417.648519][T12212] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 417.654675][T12212] syzkaller1: linktype set to 768 [ 419.115468][T12229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1667'. [ 420.433845][T12281] sctp: [Deprecated]: syz.1.1678 (pid 12281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.433845][T12281] Use struct sctp_sack_info instead [ 421.507632][T12321] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1690'. [ 421.575161][T12321] sit0: entered promiscuous mode [ 421.921871][T12328] caif0: entered promiscuous mode [ 421.928529][T12328] caif0: entered allmulticast mode [ 422.086752][T12333] netlink: 'syz.4.1692': attribute type 10 has an invalid length. [ 422.370988][T12342] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1694'. [ 422.465442][T12333] veth0_vlan: left promiscuous mode [ 422.486614][T12333] veth0_vlan: entered promiscuous mode [ 422.534531][T12333] team0: Device veth0_vlan failed to register rx_handler [ 423.841696][T12367] netlink: 'syz.4.1701': attribute type 3 has an invalid length. [ 423.867311][T12367] netlink: 'syz.4.1701': attribute type 4 has an invalid length. [ 423.980834][T12367] netlink: 'syz.4.1701': attribute type 5 has an invalid length. [ 423.989901][T12367] netlink: 'syz.4.1701': attribute type 6 has an invalid length. [ 423.997743][T12367] netlink: 'syz.4.1701': attribute type 7 has an invalid length. [ 424.010439][T12367] netlink: 'syz.4.1701': attribute type 7 has an invalid length. [ 424.036482][T12367] netlink: 13014 bytes leftover after parsing attributes in process `syz.4.1701'. [ 425.574114][T12415] netlink: 'syz.4.1713': attribute type 21 has an invalid length. [ 425.587334][T12415] netlink: 'syz.4.1713': attribute type 6 has an invalid length. [ 425.638179][T12415] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1713'. [ 425.816537][T12425] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1718'. [ 426.516604][T12462] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1730'. [ 426.572713][T12462] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 427.135016][T12479] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1733'. [ 427.829011][T12482] €Â: renamed from hsr0 (while UP) [ 428.628272][T12494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.635690][T12494] IPv6: NLM_F_CREATE should be set when creating new route [ 428.643284][T12494] IPv6: NLM_F_CREATE should be set when creating new route [ 428.650723][T12494] IPv6: NLM_F_CREATE should be set when creating new route [ 428.876447][T12500] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1741'. [ 429.057843][T12501] netlink: 'syz.1.1741': attribute type 7 has an invalid length. [ 431.861698][T12510] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1744'. [ 432.589167][T12522] syzkaller0: entered promiscuous mode [ 432.633145][T12522] syzkaller0: entered allmulticast mode [ 432.717274][T12546] netlink: 'syz.3.1752': attribute type 21 has an invalid length. [ 432.752196][T12546] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1752'. [ 432.947182][T12550] netlink: 'syz.2.1755': attribute type 5 has an invalid length. [ 432.957806][T12550] netlink: 713 bytes leftover after parsing attributes in process `syz.2.1755'. [ 432.968438][T12550] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.1755'. [ 432.980845][T12550] netlink: 'syz.2.1755': attribute type 5 has an invalid length. [ 432.992078][T12550] netlink: 713 bytes leftover after parsing attributes in process `syz.2.1755'. [ 433.880408][T12561] netlink: 'syz.3.1758': attribute type 10 has an invalid length. [ 435.378379][T12576] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 435.647985][T12583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1766'. [ 436.580389][T12608] FAULT_INJECTION: forcing a failure. [ 436.580389][T12608] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 436.593700][T12608] CPU: 0 UID: 0 PID: 12608 Comm: syz.0.1767 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 436.593727][T12608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.593739][T12608] Call Trace: [ 436.593748][T12608] [ 436.593757][T12608] dump_stack_lvl+0x189/0x250 [ 436.593787][T12608] ? __pfx____ratelimit+0x10/0x10 [ 436.593809][T12608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.593834][T12608] ? __pfx__printk+0x10/0x10 [ 436.593862][T12608] ? __might_fault+0xb0/0x130 [ 436.593903][T12608] should_fail_ex+0x414/0x560 [ 436.593939][T12608] _copy_from_user+0x2d/0xb0 [ 436.593967][T12608] csum_and_copy_from_iter_full+0x4a1/0x1eb0 [ 436.594019][T12608] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 436.594061][T12608] ? trace_kmalloc+0x1f/0xd0 [ 436.594090][T12608] ip_generic_getfrag+0x12f/0x2b0 [ 436.594122][T12608] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 436.594153][T12608] ? skb_put+0x11b/0x210 [ 436.594181][T12608] __ip6_append_data+0x30e7/0x3f30 [ 436.594242][T12608] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 436.594292][T12608] ? __pfx___ip6_append_data+0x10/0x10 [ 436.594319][T12608] ? __pfx_ip6_mtu+0x10/0x10 [ 436.594367][T12608] ip6_append_data+0x1c4/0x380 [ 436.594402][T12608] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 436.594432][T12608] l2tp_ip6_sendmsg+0x1286/0x17c0 [ 436.594474][T12608] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 436.594525][T12608] ? __pfx_aa_sk_perm+0x10/0x10 [ 436.594546][T12608] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 436.594587][T12608] ? inet_sendmsg+0x2f4/0x370 [ 436.594614][T12608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.594641][T12608] __sock_sendmsg+0x19c/0x270 [ 436.594674][T12608] ____sys_sendmsg+0x505/0x830 [ 436.594707][T12608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.594743][T12608] ? import_iovec+0x74/0xa0 [ 436.594774][T12608] ___sys_sendmsg+0x21f/0x2a0 [ 436.594802][T12608] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.594870][T12608] ? __fget_files+0x2a/0x420 [ 436.594898][T12608] ? __fget_files+0x3a0/0x420 [ 436.594940][T12608] __x64_sys_sendmsg+0x19b/0x260 [ 436.594969][T12608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.595006][T12608] ? __pfx_ksys_write+0x10/0x10 [ 436.595029][T12608] ? rcu_is_watching+0x15/0xb0 [ 436.595056][T12608] ? do_syscall_64+0xbe/0x3b0 [ 436.595082][T12608] do_syscall_64+0xfa/0x3b0 [ 436.595099][T12608] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.595118][T12608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.595138][T12608] ? clear_bhb_loop+0x60/0xb0 [ 436.595163][T12608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.595182][T12608] RIP: 0033:0x7f852858eb69 [ 436.595201][T12608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.595218][T12608] RSP: 002b:00007f85293c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.595241][T12608] RAX: ffffffffffffffda RBX: 00007f85287b5fa0 RCX: 00007f852858eb69 [ 436.595255][T12608] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 436.595268][T12608] RBP: 00007f85293c3090 R08: 0000000000000000 R09: 0000000000000000 [ 436.595280][T12608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.595293][T12608] R13: 0000000000000000 R14: 00007f85287b5fa0 R15: 00007ffc13c8c4b8 [ 436.595328][T12608] [ 437.221672][T12624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1778'. [ 437.429132][T12628] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1780'. [ 437.457246][T12632] netlink: 'syz.3.1778': attribute type 1 has an invalid length. [ 437.605420][T12639] netlink: 'syz.4.1782': attribute type 10 has an invalid length. [ 438.988711][T12639] team0: Port device geneve1 added [ 439.100417][T12642] netlink: 'syz.2.1784': attribute type 1 has an invalid length. [ 439.593284][T12677] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1795'. [ 439.655146][T12679] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1793'. [ 439.657745][T12682] netlink: 'syz.2.1796': attribute type 21 has an invalid length. [ 440.204815][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.211340][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.588732][T12705] netlink: 'syz.4.1803': attribute type 39 has an invalid length. [ 440.817143][T12721] netlink: 'syz.3.1807': attribute type 37 has an invalid length. [ 440.902887][T12723] netlink: 'syz.3.1807': attribute type 21 has an invalid length. [ 440.927377][T12723] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1807'. [ 440.958652][T12731] FAULT_INJECTION: forcing a failure. [ 440.958652][T12731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.006920][T12731] CPU: 1 UID: 0 PID: 12731 Comm: syz.0.1808 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 441.006949][T12731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.006962][T12731] Call Trace: [ 441.006970][T12731] [ 441.006978][T12731] dump_stack_lvl+0x189/0x250 [ 441.007008][T12731] ? __pfx____ratelimit+0x10/0x10 [ 441.007029][T12731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.007051][T12731] ? __pfx__printk+0x10/0x10 [ 441.007078][T12731] ? __might_fault+0xb0/0x130 [ 441.007117][T12731] should_fail_ex+0x414/0x560 [ 441.007152][T12731] _copy_from_user+0x2d/0xb0 [ 441.007179][T12731] csum_and_copy_from_iter_full+0x4a1/0x1eb0 [ 441.007237][T12731] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 441.007276][T12731] ? trace_kmalloc+0x1f/0xd0 [ 441.007303][T12731] ip_generic_getfrag+0x12f/0x2b0 [ 441.007334][T12731] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 441.007363][T12731] ? skb_put+0x11b/0x210 [ 441.007390][T12731] __ip6_append_data+0x30e7/0x3f30 [ 441.007446][T12731] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 441.007494][T12731] ? __pfx___ip6_append_data+0x10/0x10 [ 441.007519][T12731] ? __pfx_ip6_mtu+0x10/0x10 [ 441.007557][T12731] ip6_append_data+0x1c4/0x380 [ 441.007590][T12731] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 441.007618][T12731] l2tp_ip6_sendmsg+0x1286/0x17c0 [ 441.007657][T12731] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 441.007702][T12731] ? __pfx_aa_sk_perm+0x10/0x10 [ 441.007722][T12731] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 441.007760][T12731] ? inet_sendmsg+0x2f4/0x370 [ 441.007785][T12731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.007810][T12731] __sock_sendmsg+0x19c/0x270 [ 441.007841][T12731] ____sys_sendmsg+0x505/0x830 [ 441.007872][T12731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.007908][T12731] ? import_iovec+0x74/0xa0 [ 441.007938][T12731] ___sys_sendmsg+0x21f/0x2a0 [ 441.007965][T12731] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.008032][T12731] ? __fget_files+0x2a/0x420 [ 441.008058][T12731] ? __fget_files+0x3a0/0x420 [ 441.008098][T12731] __x64_sys_sendmsg+0x19b/0x260 [ 441.008125][T12731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.008160][T12731] ? __pfx_ksys_write+0x10/0x10 [ 441.008181][T12731] ? rcu_is_watching+0x15/0xb0 [ 441.008206][T12731] ? do_syscall_64+0xbe/0x3b0 [ 441.008238][T12731] do_syscall_64+0xfa/0x3b0 [ 441.008256][T12731] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.008274][T12731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.008293][T12731] ? clear_bhb_loop+0x60/0xb0 [ 441.008316][T12731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.008335][T12731] RIP: 0033:0x7f852858eb69 [ 441.008353][T12731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.008370][T12731] RSP: 002b:00007f85293c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.008393][T12731] RAX: ffffffffffffffda RBX: 00007f85287b5fa0 RCX: 00007f852858eb69 [ 441.008408][T12731] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 441.008420][T12731] RBP: 00007f85293c3090 R08: 0000000000000000 R09: 0000000000000000 [ 441.008432][T12731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.008443][T12731] R13: 0000000000000000 R14: 00007f85287b5fa0 R15: 00007ffc13c8c4b8 [ 441.008476][T12731] [ 441.651913][T12739] syzkaller0: entered promiscuous mode [ 441.657518][T12739] syzkaller0: entered allmulticast mode [ 444.526162][T12779] netlink: 'syz.2.1820': attribute type 21 has an invalid length. [ 445.198478][T12788] netlink: 'syz.0.1821': attribute type 13 has an invalid length. [ 445.223037][T12788] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1821'. [ 445.382878][T12788] : renamed from syz_tun (while UP) [ 448.320905][T12830] netlink: 'syz.3.1834': attribute type 4 has an invalid length. [ 450.474647][T12871] netlink: 'syz.0.1844': attribute type 11 has an invalid length. [ 450.482878][T12871] netlink: 191644 bytes leftover after parsing attributes in process `syz.0.1844'. [ 451.167858][T12868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.877574][T12870] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.889246][T12869] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 451.901490][T12869] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 451.938958][T12869] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 452.253778][T12882] netlink: 'syz.3.1849': attribute type 3 has an invalid length. [ 452.268015][T12891] netlink: 'syz.3.1849': attribute type 12 has an invalid length. [ 452.292663][T12891] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1849'. [ 454.545599][T12942] netlink: 'syz.4.1863': attribute type 3 has an invalid length. [ 454.557112][T12942] netlink: 'syz.4.1863': attribute type 5 has an invalid length. [ 454.571440][T12942] netlink: 'syz.4.1863': attribute type 6 has an invalid length. [ 454.579243][T12942] netlink: 'syz.4.1863': attribute type 7 has an invalid length. [ 454.587725][T12942] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1863'. [ 454.597478][T12942] netlink: 130080 bytes leftover after parsing attributes in process `syz.4.1863'. [ 454.606914][T12942] netlink: 'syz.4.1863': attribute type 3 has an invalid length. [ 454.614945][T12942] netlink: 'syz.4.1863': attribute type 5 has an invalid length. [ 454.622927][T12942] netlink: 'syz.4.1863': attribute type 6 has an invalid length. [ 454.630744][T12942] netlink: 'syz.4.1863': attribute type 7 has an invalid length. [ 454.638516][T12942] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1863'. [ 455.092658][T12942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1863'. [ 455.107390][T12943] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1863'. [ 455.136149][T12944] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1863'. [ 455.498304][T12953] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1865'. [ 457.047398][T12998] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1877'. [ 457.169542][T13001] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1877'. [ 458.472500][T13040] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1886'. [ 458.936101][T13047] syzkaller0: entered promiscuous mode [ 458.960575][T13047] syzkaller0: entered allmulticast mode [ 459.041050][T13057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1892'. [ 459.132300][T13061] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1891'. [ 463.328358][T13103] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1905'. [ 463.662966][T13113] validate_nla: 1 callbacks suppressed [ 463.662986][T13113] netlink: 'syz.1.1908': attribute type 23 has an invalid length. [ 464.553266][T13143] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1918'. [ 464.723194][T13126] blkio.reset_stats is deprecated [ 465.142440][T13152] -1: renamed from syzkaller0 [ 465.479711][T13154] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1920'. [ 466.402940][T13172] netlink: 'syz.4.1925': attribute type 10 has an invalid length. [ 466.423641][T13172] team0: Device 4 failed to register rx_handler [ 466.648821][T13182] netlink: 'syz.3.1928': attribute type 9 has an invalid length. [ 466.676249][T13186] FAULT_INJECTION: forcing a failure. [ 466.676249][T13186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.695546][T13186] CPU: 1 UID: 0 PID: 13186 Comm: syz.1.1929 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 466.695577][T13186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.695589][T13186] Call Trace: [ 466.695598][T13186] [ 466.695608][T13186] dump_stack_lvl+0x189/0x250 [ 466.695639][T13186] ? __pfx____ratelimit+0x10/0x10 [ 466.695661][T13186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.695684][T13186] ? __pfx__printk+0x10/0x10 [ 466.695712][T13186] ? __might_fault+0xb0/0x130 [ 466.695754][T13186] should_fail_ex+0x414/0x560 [ 466.695791][T13186] _copy_from_user+0x2d/0xb0 [ 466.695819][T13186] csum_and_copy_from_iter_full+0x4a1/0x1eb0 [ 466.695878][T13186] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 466.695919][T13186] ? trace_kmalloc+0x1f/0xd0 [ 466.695957][T13186] ip_generic_getfrag+0x12f/0x2b0 [ 466.695990][T13186] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 466.696021][T13186] ? skb_put+0x11b/0x210 [ 466.696049][T13186] __ip6_append_data+0x30e7/0x3f30 [ 466.696109][T13186] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 466.696159][T13186] ? __pfx___ip6_append_data+0x10/0x10 [ 466.696187][T13186] ? __pfx_ip6_mtu+0x10/0x10 [ 466.696228][T13186] ip6_append_data+0x1c4/0x380 [ 466.696262][T13186] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 466.696292][T13186] l2tp_ip6_sendmsg+0x1286/0x17c0 [ 466.696334][T13186] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 466.696384][T13186] ? __pfx_aa_sk_perm+0x10/0x10 [ 466.696405][T13186] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 466.696444][T13186] ? inet_sendmsg+0x2f4/0x370 [ 466.696471][T13186] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.696498][T13186] __sock_sendmsg+0x19c/0x270 [ 466.696537][T13186] ____sys_sendmsg+0x505/0x830 [ 466.696578][T13186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.696616][T13186] ? import_iovec+0x74/0xa0 [ 466.696649][T13186] ___sys_sendmsg+0x21f/0x2a0 [ 466.696678][T13186] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.696748][T13186] ? __fget_files+0x2a/0x420 [ 466.696775][T13186] ? __fget_files+0x3a0/0x420 [ 466.696818][T13186] __x64_sys_sendmsg+0x19b/0x260 [ 466.696847][T13186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.696869][T13186] ? perf_trace_preemptirq_template+0xa3/0x340 [ 466.696909][T13186] ? __pfx_ksys_write+0x10/0x10 [ 466.696931][T13186] ? rcu_is_watching+0x15/0xb0 [ 466.696966][T13186] ? do_syscall_64+0xbe/0x3b0 [ 466.696992][T13186] do_syscall_64+0xfa/0x3b0 [ 466.697011][T13186] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.697031][T13186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.697051][T13186] ? clear_bhb_loop+0x60/0xb0 [ 466.697077][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.697097][T13186] RIP: 0033:0x7f8598d8eb69 [ 466.697117][T13186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.697134][T13186] RSP: 002b:00007f8599bc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.697157][T13186] RAX: ffffffffffffffda RBX: 00007f8598fb5fa0 RCX: 00007f8598d8eb69 [ 466.697171][T13186] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 466.697184][T13186] RBP: 00007f8599bc4090 R08: 0000000000000000 R09: 0000000000000000 [ 466.697196][T13186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.697208][T13186] R13: 0000000000000000 R14: 00007f8598fb5fa0 R15: 00007ffee6e62058 [ 466.697243][T13186] [ 467.405729][T13198] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1932'. [ 467.410810][T13199] C: renamed from team_slave_0 [ 467.452345][T13199] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1933'. [ 467.604441][T13201] netlink: 'syz.1.1934': attribute type 4 has an invalid length. [ 467.703863][T13201] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1934'. [ 468.051049][T13216] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1937'. [ 468.072015][T13213] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1937'. [ 470.148358][T13273] wg2: left promiscuous mode [ 470.160028][T13273] wg2: left allmulticast mode [ 470.313573][T13288] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1955'. [ 470.534248][T13294] netlink: 'syz.0.1958': attribute type 2 has an invalid length. [ 470.553155][T13294] netlink: 'syz.0.1958': attribute type 11 has an invalid length. [ 470.571821][T13296] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1957'. [ 470.582200][T13294] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1958'. [ 470.619435][T13296] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1957'. [ 471.348724][T13321] netlink: 'syz.2.1965': attribute type 17 has an invalid length. [ 471.439553][T13321] netlink: 'syz.2.1965': attribute type 41 has an invalid length. [ 471.833722][T13334] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1968'. [ 471.880600][T13334] netlink: 'syz.2.1968': attribute type 29 has an invalid length. [ 471.968593][T13339] netlink: 'syz.2.1968': attribute type 29 has an invalid length. [ 472.007581][T13334] netlink: 'syz.2.1968': attribute type 29 has an invalid length. [ 472.090335][T13331] netlink: 'syz.2.1968': attribute type 29 has an invalid length. [ 472.114269][T13331] netlink: 'syz.2.1968': attribute type 21 has an invalid length. [ 472.165552][T13331] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1968'. [ 472.435667][T13354] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1975'. [ 472.722418][T13361] syz.0.1973: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 472.850995][T13361] CPU: 0 UID: 0 PID: 13361 Comm: syz.0.1973 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 472.851027][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.851039][T13361] Call Trace: [ 472.851048][T13361] [ 472.851057][T13361] dump_stack_lvl+0x189/0x250 [ 472.851092][T13361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.851117][T13361] ? __pfx__printk+0x10/0x10 [ 472.851147][T13361] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 472.851172][T13361] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 472.851197][T13361] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 472.851225][T13361] warn_alloc+0x214/0x310 [ 472.851255][T13361] ? stack_depot_save_flags+0x40/0x900 [ 472.851292][T13361] ? __pfx_warn_alloc+0x10/0x10 [ 472.851326][T13361] ? kasan_save_track+0x4f/0x80 [ 472.851350][T13361] ? xskq_create+0x56/0x170 [ 472.851368][T13361] ? xsk_init_queue+0xb0/0x110 [ 472.851396][T13361] ? xsk_setsockopt+0x57b/0x8d0 [ 472.851421][T13361] ? do_sock_setsockopt+0x17c/0x1b0 [ 472.851443][T13361] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 472.851464][T13361] ? do_syscall_64+0xfa/0x3b0 [ 472.851483][T13361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.851514][T13361] __vmalloc_node_range_noprof+0x125/0x12f0 [ 472.851582][T13361] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 472.851627][T13361] ? __kasan_kmalloc+0x93/0xb0 [ 472.851659][T13361] vmalloc_user_noprof+0xad/0xf0 [ 472.851687][T13361] ? xskq_create+0xbf/0x170 [ 472.851708][T13361] xskq_create+0xbf/0x170 [ 472.851731][T13361] xsk_init_queue+0xb0/0x110 [ 472.851766][T13361] xsk_setsockopt+0x57b/0x8d0 [ 472.851798][T13361] ? __pfx_xsk_setsockopt+0x10/0x10 [ 472.851829][T13361] ? __pfx_aa_sk_perm+0x10/0x10 [ 472.851857][T13361] ? __fget_files+0x2a/0x420 [ 472.851887][T13361] ? aa_sock_opt_perm+0x74/0x110 [ 472.851915][T13361] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 472.851941][T13361] ? __pfx_xsk_setsockopt+0x10/0x10 [ 472.851973][T13361] do_sock_setsockopt+0x17c/0x1b0 [ 472.852004][T13361] __x64_sys_setsockopt+0x13f/0x1b0 [ 472.852035][T13361] do_syscall_64+0xfa/0x3b0 [ 472.852053][T13361] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.852073][T13361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.852094][T13361] ? clear_bhb_loop+0x60/0xb0 [ 472.852119][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.852139][T13361] RIP: 0033:0x7f852858eb69 [ 472.852159][T13361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.852176][T13361] RSP: 002b:00007f85293a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 472.852200][T13361] RAX: ffffffffffffffda RBX: 00007f85287b6080 RCX: 00007f852858eb69 [ 472.852216][T13361] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 472.852228][T13361] RBP: 00007f8528611df1 R08: 0000000000000004 R09: 0000000000000000 [ 472.852241][T13361] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 472.852254][T13361] R13: 0000000000000000 R14: 00007f85287b6080 R15: 00007ffc13c8c4b8 [ 472.852291][T13361] [ 473.171969][T13361] Mem-Info: [ 473.175313][T13361] active_anon:27383 inactive_anon:0 isolated_anon:0 [ 473.175313][T13361] active_file:19450 inactive_file:39983 isolated_file:0 [ 473.175313][T13361] unevictable:768 dirty:88 writeback:0 [ 473.175313][T13361] slab_reclaimable:11165 slab_unreclaimable:97195 [ 473.175313][T13361] mapped:36388 shmem:23070 pagetables:1219 [ 473.175313][T13361] sec_pagetables:0 bounce:0 [ 473.175313][T13361] kernel_misc_reclaimable:0 [ 473.175313][T13361] free:1288519 free_pcp:12627 free_cma:0 [ 473.221388][T13361] Node 0 active_anon:109532kB inactive_anon:0kB active_file:77800kB inactive_file:159732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145552kB dirty:352kB writeback:0kB shmem:90744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12248kB pagetables:4740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 473.253642][T13361] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 473.288771][T13361] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.318005][T13361] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 473.324384][T13361] Node 0 DMA32 free:1254616kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110352kB inactive_anon:0kB active_file:77800kB inactive_file:158164kB unevictable:1536kB writepending:352kB present:3129332kB managed:2557608kB mlocked:0kB bounce:0kB free_pcp:27508kB local_pcp:5684kB free_cma:0kB [ 473.356836][T13361] lowmem_reserve[]: 0 0 1 1 1 [ 473.361636][T13361] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 473.390824][T13361] lowmem_reserve[]: 0 0 0 0 0 [ 473.395633][T13361] Node 1 Normal free:3884044kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21792kB local_pcp:8960kB free_cma:0kB [ 473.428594][T13361] lowmem_reserve[]: 0 0 0 0 0 [ 473.433909][T13361] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 473.447157][T13361] Node 0 DMA32: 2119*4kB (UE) 1070*8kB (UME) 427*16kB (U) 0*32kB 565*64kB (UME) 211*128kB (UM) 149*256kB (UME) 65*512kB (UME) 36*1024kB (UME) 7*2048kB (ME) 255*4096kB (UM) = 1254140kB [ 473.478289][T13361] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 473.539450][T13361] Node 1 Normal: 189*4kB (UE) 49*8kB (UME) 41*16kB (UME) 90*32kB (UME) 23*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3884044kB [ 473.606692][T13361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.626947][T13361] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 473.649573][T13361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.729665][T13361] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 473.789559][T13361] 81225 total pagecache pages [ 473.797438][T13361] 0 pages in swap cache [ 473.811907][T13361] Free swap = 124996kB [ 473.892748][T13361] Total swap = 124996kB [ 473.923833][T13361] 2097051 pages RAM [ 473.927723][T13361] 0 pages HighMem/MovableOnly [ 473.966646][T13361] 425607 pages reserved [ 473.989396][T13361] 0 pages cma reserved [ 474.859929][T13397] netlink: 'syz.0.1984': attribute type 2 has an invalid length. [ 474.941417][T13397] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1984'. [ 475.423626][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1986'. [ 476.497223][T13399] syzkaller0: entered promiscuous mode [ 476.502961][T13399] syzkaller0: entered allmulticast mode [ 476.989700][T13419] validate_nla: 1 callbacks suppressed [ 476.989722][T13419] netlink: 'syz.2.1991': attribute type 4 has an invalid length. [ 477.081452][T13419] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1991'. [ 481.032718][T13419] net_ratelimit: 77 callbacks suppressed [ 481.032733][T13419] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 481.888783][T13471] netlink: 'syz.3.2005': attribute type 10 has an invalid length. [ 481.943316][T13475] netlink: 'syz.3.2005': attribute type 39 has an invalid length. [ 482.104886][T13483] netlink: 'syz.1.2007': attribute type 4 has an invalid length. [ 482.114203][T13483] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2007'. [ 482.826935][T13495] netlink: 'syz.0.2010': attribute type 21 has an invalid length. [ 482.836720][T13495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2010'. [ 483.483669][T13515] netlink: 'syz.0.2014': attribute type 3 has an invalid length. [ 483.498640][T13502] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2012'. [ 483.550792][T13515] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2014'. [ 483.979237][T13519] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2015'. [ 484.265097][T13525] netlink: 'syz.4.2018': attribute type 16 has an invalid length. [ 484.273204][T13525] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2018'. [ 484.466181][T13524] netlink: 'syz.0.2016': attribute type 11 has an invalid length. [ 484.613254][T13524] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2016'. [ 484.712202][T13526] netlink: 'syz.0.2016': attribute type 11 has an invalid length. [ 484.754630][T13526] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2016'. [ 485.029655][T13537] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2019'. [ 485.128415][T13522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.593006][T13577] netlink: 'syz.1.2030': attribute type 21 has an invalid length. [ 486.624475][T13575] syzkaller0: entered promiscuous mode [ 486.630942][T13575] syzkaller0: entered allmulticast mode [ 486.638568][T13577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2030'. [ 488.303629][T13592] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2034'. [ 488.313658][T13589] netlink: 'syz.2.2033': attribute type 29 has an invalid length. [ 488.371884][T13599] bond0: left allmulticast mode [ 488.383002][T13599] bond_slave_0: left allmulticast mode [ 488.395889][T13599] bond_slave_1: left allmulticast mode [ 488.409402][T13599] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 488.428952][T13599] bridge0: port 3(bond0) entered disabled state [ 488.457030][T13599] bridge_slave_1: left allmulticast mode [ 488.480448][T13599] bridge_slave_1: left promiscuous mode [ 488.493050][T13599] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.513676][T13599] bridge_slave_0: left allmulticast mode [ 488.519573][T13599] bridge_slave_0: left promiscuous mode [ 488.525478][T13599] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.574413][T13619] netlink: 'syz.3.2041': attribute type 39 has an invalid length. [ 488.670703][T13613] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2041'. [ 489.000789][T13636] netlink: 'syz.3.2047': attribute type 2 has an invalid length. [ 489.100261][T13636] netlink: 'syz.3.2047': attribute type 7 has an invalid length. [ 489.159034][T13636] netlink: 85 bytes leftover after parsing attributes in process `syz.3.2047'. [ 489.191559][T13641] pim6reg1: entered promiscuous mode [ 489.197559][T13641] pim6reg1: entered allmulticast mode [ 489.205125][T13636] netlink: 130140 bytes leftover after parsing attributes in process `syz.3.2047'. [ 489.247614][T13636] netlink: 'syz.3.2047': attribute type 2 has an invalid length. [ 489.281839][T13644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2048'. [ 489.292310][T13636] netlink: 'syz.3.2047': attribute type 7 has an invalid length. [ 489.322791][T13643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2048'. [ 489.348060][T13636] netlink: 85 bytes leftover after parsing attributes in process `syz.3.2047'. [ 489.420509][T13643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2048'. [ 490.400181][T13653] netlink: 208344 bytes leftover after parsing attributes in process `syz.3.2050'. [ 492.195283][T13675] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.2053'. [ 492.876920][T13688] netlink: 'syz.2.2058': attribute type 21 has an invalid length. [ 493.315280][T13688] __nla_validate_parse: 2 callbacks suppressed [ 493.315304][T13688] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2058'. [ 493.760215][T13694] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2059'. [ 495.992186][T13706] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 496.052443][T13702] netlink: 'syz.1.2061': attribute type 29 has an invalid length. [ 496.143047][T13709] netlink: 'syz.2.2063': attribute type 2 has an invalid length. [ 496.147076][T13707] netlink: 'syz.1.2061': attribute type 29 has an invalid length. [ 496.185635][T13709] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2063'. [ 496.542054][T13710] netlink: 'syz.1.2061': attribute type 29 has an invalid length. [ 496.782733][T13707] netlink: 'syz.1.2061': attribute type 29 has an invalid length. [ 497.531581][T13738] netlink: 'syz.1.2070': attribute type 6 has an invalid length. [ 497.847853][T13750] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2073'. [ 497.890277][T13746] netlink: 'syz.1.2072': attribute type 21 has an invalid length. [ 497.917310][T13746] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2072'. [ 498.378343][T13767] syzkaller0: create flow: hash 1892970564 index 1 [ 498.521538][ T8913] syzkaller0: tun_net_xmit 76 [ 498.536026][ T8913] syzkaller0: tun_net_xmit 48 [ 498.550711][ T9] syzkaller0: tun_net_xmit 76 [ 498.649651][ T9] syzkaller0: tun_net_xmit 76 [ 498.813349][T13776] netlink: 'syz.1.2081': attribute type 21 has an invalid length. [ 498.832033][T13776] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2081'. [ 498.956264][T13772] syzkaller0: entered promiscuous mode [ 498.961905][T13772] syzkaller0: entered allmulticast mode [ 499.019665][ T45] syzkaller0: tun_net_xmit 76 [ 499.036038][T13776] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2081'. [ 499.124675][T13760] syzkaller0: delete flow: hash 1892970564 index 1 [ 501.654270][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.660924][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.327120][T13802] netlink: 'syz.0.2085': attribute type 29 has an invalid length. [ 503.564590][T13846] netlink: 'syz.1.2097': attribute type 2 has an invalid length. [ 503.588681][T13846] netlink: 'syz.1.2097': attribute type 1 has an invalid length. [ 503.608574][T13846] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2097'. [ 503.630204][T13846] block nbd5: not configured, cannot reconfigure [ 505.708760][T13865] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 505.731537][T13865] syz_tun: entered promiscuous mode [ 506.098437][T13865] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 507.476306][T13897] netlink: 'syz.0.2112': attribute type 4 has an invalid length. [ 507.546227][T13897] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2112'. [ 507.868968][T13907] netlink: 'syz.0.2116': attribute type 39 has an invalid length. [ 508.675625][T13920] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2115'. [ 509.875354][T13939] syzkaller0: entered promiscuous mode [ 509.883299][T13939] syzkaller0: entered allmulticast mode [ 510.111461][T13955] netlink: 'syz.1.2126': attribute type 1 has an invalid length. [ 510.129064][T13955] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2126'. [ 510.768432][T13954] netlink: 'syz.1.2126': attribute type 10 has an invalid length. [ 511.431919][T13972] netlink: 'syz.3.2131': attribute type 10 has an invalid length. [ 513.417301][T13982] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 (while UP) [ 514.153584][T14017] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2141'. [ 514.238411][T14017] hsr_slave_0: left promiscuous mode [ 514.262333][T14017] hsr_slave_1: left promiscuous mode [ 514.318732][T14020] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2144'. [ 514.925975][T14032] netlink: 'syz.2.2146': attribute type 21 has an invalid length. [ 514.952595][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 516.039234][T14056] netlink: 'syz.1.2152': attribute type 21 has an invalid length. [ 518.374906][T14091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2166'. [ 518.382384][T14090] netlink: 'syz.2.2165': attribute type 15 has an invalid length. [ 518.492779][T14091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2166'. [ 518.526181][T14088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2166'. [ 518.527509][T14090] netlink: 'syz.2.2165': attribute type 5 has an invalid length. [ 518.589726][T14090] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2165'. [ 519.424066][T14107] pim6reg1: entered promiscuous mode [ 519.433666][T14107] pim6reg1: entered allmulticast mode [ 520.691332][T14120] netlink: 'syz.0.2173': attribute type 13 has an invalid length. [ 520.699454][T14120] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2173'. [ 520.936236][T14125] netlink: 2451 bytes leftover after parsing attributes in process `syz.3.2176'. [ 521.187619][T14136] netlink: 'syz.1.2177': attribute type 21 has an invalid length. [ 521.327130][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 521.353917][T14138] netlink: 164596 bytes leftover after parsing attributes in process `syz.2.2179'. [ 521.471289][T14130] netlink: 'syz.1.2177': attribute type 11 has an invalid length. [ 521.505633][T14130] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2177'. [ 521.696651][T14142] netlink: 'syz.2.2180': attribute type 7 has an invalid length. [ 521.988629][T14144] netlink: 96676 bytes leftover after parsing attributes in process `syz.4.2181'. [ 522.084291][T14159] ksmbd: Unknown IPC event: 3, ignore. [ 522.496632][T14180] ±ÿ: renamed from team_slave_1 [ 523.507974][T14218] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2203'. [ 524.708890][T14245] netlink: 'syz.0.2210': attribute type 10 has an invalid length. [ 527.436104][T14253] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2213'. [ 527.720540][T14262] netlink: 'syz.0.2214': attribute type 3 has an invalid length. [ 527.728334][T14262] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2214'. [ 528.513123][T14277] syzkaller0: entered promiscuous mode [ 528.541573][T14277] syzkaller0: entered allmulticast mode [ 533.971904][T14342] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2235'. [ 534.331917][T14371] syzkaller0: entered promiscuous mode [ 534.352795][T14371] syzkaller0: entered allmulticast mode [ 535.329889][T14392] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2249'. [ 536.146031][T14421] netlink: 'syz.0.2255': attribute type 21 has an invalid length. [ 536.191862][T14421] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2255'. [ 537.082085][T14458] netlink: 'syz.1.2260': attribute type 4 has an invalid length. [ 537.090005][T14458] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2260'. [ 537.788074][T14458] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 538.130560][T14468] netlink: 'syz.0.2266': attribute type 21 has an invalid length. [ 538.178893][T14468] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2266'. [ 538.601595][T14479] netlink: 'syz.3.2268': attribute type 1 has an invalid length. [ 538.633121][T14479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2268'. [ 538.645440][T14479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2268'. [ 538.744121][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 539.533724][T14502] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2273'. [ 539.941642][T14506] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2277'. [ 540.611194][T14517] netlink: 'syz.3.2279': attribute type 1 has an invalid length. [ 540.689233][T14517] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2279'. [ 541.315217][T14532] netlink: 'syz.1.2281': attribute type 21 has an invalid length. [ 541.325518][T14532] netlink: 'syz.1.2281': attribute type 27 has an invalid length. [ 541.410829][T14531] »»»»»»: renamed from vlan0 [ 542.045634][T14549] netlink: 'syz.0.2286': attribute type 5 has an invalid length. [ 542.089572][T14549] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2286'. [ 542.743757][T14554] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2288'. [ 542.814187][T14553] netlink: 15974 bytes leftover after parsing attributes in process `syz.3.2287'. [ 543.400204][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2291'. [ 543.821878][T14578] syzkaller0: tun_chr_ioctl cmd 35111 [ 544.265314][T14563] syzkaller0: entered promiscuous mode [ 544.305535][T14563] syzkaller0: entered allmulticast mode [ 544.699759][T14584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2295'. [ 544.869979][T14587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2295'. [ 545.248636][T14589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2295'. [ 545.561639][T14616] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2303'. [ 546.674826][ T5186] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 547.108961][T14625] netlink: 'syz.1.2305': attribute type 10 has an invalid length. [ 547.687441][T14659] netlink: 'syz.2.2311': attribute type 28 has an invalid length. [ 547.819425][T14659] netlink: 'syz.2.2311': attribute type 4 has an invalid length. [ 547.861641][T14659] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2311'. [ 548.670777][T14675] delete_channel: no stack [ 548.675481][T14675] delete_channel: no stack [ 548.969186][T14681] netlink: 'syz.2.2319': attribute type 16 has an invalid length. [ 548.990017][T14681] netlink: 'syz.2.2319': attribute type 3 has an invalid length. [ 549.009381][T14681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2319'. [ 549.756612][T14696] netlink: 'syz.2.2321': attribute type 10 has an invalid length. [ 550.098833][T14694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2322'. [ 550.787368][T14696] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.822613][T14696] bond0: (slave team0): Enslaving as an active interface with an up link [ 551.573262][ T5186] Bluetooth: Frame is too long (len 149, expected len 4) [ 551.809203][T14725] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2328'. [ 551.818615][T14725] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.2328'. [ 551.859351][T14725] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2328'. [ 552.226344][T14749] netlink: 'syz.3.2335': attribute type 10 has an invalid length. [ 553.540931][T14761] netlink: 64519 bytes leftover after parsing attributes in process `syz.4.2337'. [ 553.832561][T14771] netlink: 'syz.4.2341': attribute type 4 has an invalid length. [ 553.849426][T14771] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2341'. [ 554.176489][T14785] netlink: 'syz.3.2343': attribute type 12 has an invalid length. [ 554.185659][T14785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2343'. [ 554.521781][T14786] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2345'. [ 556.892841][T14819] netlink: 'syz.3.2354': attribute type 1 has an invalid length. [ 556.942985][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2354'. [ 558.264333][T14830] netlink: 'syz.3.2356': attribute type 10 has an invalid length. [ 558.884133][T14830] hsr_slave_0 (unregistering): left promiscuous mode [ 560.210523][T14857] netlink: 'syz.3.2362': attribute type 2 has an invalid length. [ 560.218326][T14857] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2362'. [ 560.273343][T14836] syzkaller0: entered promiscuous mode [ 560.278873][T14836] syzkaller0: entered allmulticast mode [ 560.390160][T14861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2362'. [ 563.630753][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.637368][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.183532][T14894] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2371'. [ 566.283988][T14900] netlink: 'syz.0.2374': attribute type 11 has an invalid length. [ 566.292938][T14900] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2374'. [ 566.308078][T14900] netlink: 'syz.0.2374': attribute type 11 has an invalid length. [ 566.336826][T14900] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2374'. [ 566.852182][T14907] netlink: 'syz.4.2375': attribute type 11 has an invalid length. [ 566.860329][T14907] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2375'. [ 566.876461][T14905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.887287][T14917] netlink: 'syz.2.2377': attribute type 6 has an invalid length. [ 566.899107][T14917] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2377'. [ 567.122666][T14899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.236945][T14931] netlink: 'syz.3.2382': attribute type 39 has an invalid length. [ 567.392018][ T5186] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 567.403201][ T5186] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 568.593117][T14957] netlink: 'syz.1.2387': attribute type 21 has an invalid length. [ 569.253423][T14943] netlink: 'syz.4.2385': attribute type 21 has an invalid length. [ 569.261605][T14943] netlink: 'syz.4.2385': attribute type 2 has an invalid length. [ 569.269908][T14943] netlink: 9062 bytes leftover after parsing attributes in process `syz.4.2385'. [ 569.594520][T14972] netlink: 'syz.1.2392': attribute type 13 has an invalid length. [ 569.611629][T14973] netlink: 'syz.1.2392': attribute type 13 has an invalid length. [ 569.612563][T14976] FAULT_INJECTION: forcing a failure. [ 569.612563][T14976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.613459][T14976] [ 569.613467][T14976] ====================================================== [ 569.613474][T14976] WARNING: possible circular locking dependency detected [ 569.613482][T14976] 6.16.0-syzkaller-gf3af62b6cee8 #0 Not tainted [ 569.613492][T14976] ------------------------------------------------------ [ 569.613499][T14976] syz.0.2393/14976 is trying to acquire lock: [ 569.613509][T14976] ffffffff8e12e0a0 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x444/0x7a0 [ 569.613557][T14976] [ 569.613557][T14976] but task is already holding lock: [ 569.613563][T14976] ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 569.613608][T14976] [ 569.613608][T14976] which lock already depends on the new lock. [ 569.613608][T14976] [ 569.613614][T14976] [ 569.613614][T14976] the existing dependency chain (in reverse order) is: [ 569.613621][T14976] [ 569.613621][T14976] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 569.613645][T14976] lock_acquire+0x120/0x360 [ 569.613667][T14976] _raw_spin_lock_nested+0x32/0x50 [ 569.613683][T14976] raw_spin_rq_lock_nested+0x2a/0x140 [ 569.613714][T14976] task_rq_lock+0xbc/0x470 [ 569.613736][T14976] cgroup_move_task+0x92/0x2a0 [ 569.613751][T14976] css_set_move_task+0x658/0x9e0 [ 569.613770][T14976] cgroup_post_fork+0x1ef/0x790 [ 569.613787][T14976] copy_process+0x3862/0x3c00 [ 569.613803][T14976] kernel_clone+0x21e/0x840 [ 569.613819][T14976] user_mode_thread+0xdd/0x140 [ 569.613837][T14976] rest_init+0x23/0x300 [ 569.613855][T14976] start_kernel+0x3a9/0x410 [ 569.613872][T14976] x86_64_start_reservations+0x24/0x30 [ 569.613896][T14976] x86_64_start_kernel+0x143/0x1c0 [ 569.613917][T14976] common_startup_64+0x13e/0x147 [ 569.613938][T14976] [ 569.613938][T14976] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 569.613960][T14976] lock_acquire+0x120/0x360 [ 569.613981][T14976] _raw_spin_lock_irqsave+0xa7/0xf0 [ 569.614004][T14976] try_to_wake_up+0x67/0x12b0 [ 569.614022][T14976] __wake_up_common_lock+0x137/0x1f0 [ 569.614041][T14976] tty_port_default_wakeup+0xa2/0xf0 [ 569.614062][T14976] serial8250_tx_chars+0x72e/0x970 [ 569.614080][T14976] serial8250_handle_irq+0x633/0xbb0 [ 569.614097][T14976] serial8250_default_handle_irq+0xbf/0x1e0 [ 569.614118][T14976] serial8250_interrupt+0x8a/0x160 [ 569.614142][T14976] __handle_irq_event_percpu+0x289/0x980 [ 569.614161][T14976] handle_irq_event+0x8b/0x1e0 [ 569.614178][T14976] handle_edge_irq+0x23b/0xa10 [ 569.614194][T14976] __common_interrupt+0x143/0x250 [ 569.614217][T14976] common_interrupt+0xb6/0xe0 [ 569.614242][T14976] asm_common_interrupt+0x26/0x40 [ 569.614258][T14976] __sanitizer_cov_trace_pc+0x31/0x70 [ 569.614277][T14976] security_mmap_addr+0x3f/0x270 [ 569.614295][T14976] __get_unmapped_area+0x3d9/0x450 [ 569.614314][T14976] do_mmap+0x4ab/0x10d0 [ 569.614331][T14976] vm_mmap_pgoff+0x2a6/0x4d0 [ 569.614349][T14976] ksys_mmap_pgoff+0x51f/0x760 [ 569.614367][T14976] do_syscall_64+0xfa/0x3b0 [ 569.614383][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.614400][T14976] [ 569.614400][T14976] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 569.614423][T14976] lock_acquire+0x120/0x360 [ 569.614443][T14976] _raw_spin_lock_irqsave+0xa7/0xf0 [ 569.614465][T14976] __wake_up_common_lock+0x2f/0x1f0 [ 569.614484][T14976] tty_port_default_wakeup+0xa2/0xf0 [ 569.614504][T14976] serial8250_tx_chars+0x72e/0x970 [ 569.614521][T14976] serial8250_handle_irq+0x633/0xbb0 [ 569.614538][T14976] serial8250_default_handle_irq+0xbf/0x1e0 [ 569.614560][T14976] serial8250_interrupt+0x8a/0x160 [ 569.614583][T14976] __handle_irq_event_percpu+0x289/0x980 [ 569.614602][T14976] handle_irq_event+0x8b/0x1e0 [ 569.614620][T14976] handle_edge_irq+0x23b/0xa10 [ 569.614636][T14976] __common_interrupt+0x143/0x250 [ 569.614658][T14976] common_interrupt+0xb6/0xe0 [ 569.614677][T14976] asm_common_interrupt+0x26/0x40 [ 569.614699][T14976] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 569.614723][T14976] uart_port_unlock_deref+0x111/0x2f0 [ 569.614740][T14976] uart_write+0xe8/0x130 [ 569.614755][T14976] n_tty_write+0xd29/0x1200 [ 569.614775][T14976] file_tty_write+0x551/0xa20 [ 569.614790][T14976] vfs_write+0x54b/0xa90 [ 569.614809][T14976] ksys_write+0x145/0x250 [ 569.614828][T14976] do_syscall_64+0xfa/0x3b0 [ 569.614843][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.614859][T14976] [ 569.614859][T14976] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 569.614881][T14976] lock_acquire+0x120/0x360 [ 569.614902][T14976] _raw_spin_lock_irqsave+0xa7/0xf0 [ 569.614924][T14976] serial8250_console_write+0x17e/0x1ba0 [ 569.614943][T14976] console_flush_all+0x728/0xc40 [ 569.614961][T14976] console_unlock+0xc4/0x270 [ 569.614975][T14976] vprintk_emit+0x5b7/0x7a0 [ 569.614990][T14976] _printk+0xcf/0x120 [ 569.615012][T14976] register_console+0xa8b/0xf90 [ 569.615029][T14976] univ8250_console_init+0x3a/0x70 [ 569.615051][T14976] console_init+0x10e/0x430 [ 569.615072][T14976] start_kernel+0x254/0x410 [ 569.615088][T14976] x86_64_start_reservations+0x24/0x30 [ 569.615110][T14976] x86_64_start_kernel+0x143/0x1c0 [ 569.615132][T14976] common_startup_64+0x13e/0x147 [ 569.615153][T14976] [ 569.615153][T14976] -> #0 (console_owner){-.-.}-{0:0}: [ 569.615175][T14976] validate_chain+0xb9b/0x2140 [ 569.615190][T14976] __lock_acquire+0xab9/0xd20 [ 569.615211][T14976] lock_acquire+0x120/0x360 [ 569.615232][T14976] vprintk_emit+0x460/0x7a0 [ 569.615247][T14976] _printk+0xcf/0x120 [ 569.615266][T14976] should_fail_ex+0x3f5/0x560 [ 569.615289][T14976] strncpy_from_user+0x36/0x290 [ 569.615311][T14976] strncpy_from_user_nofault+0x72/0x150 [ 569.615328][T14976] bpf_probe_read_compat_str+0xe2/0x180 [ 569.615343][T14976] bpf_prog_d745503085a14d72+0x6d/0x73 [ 569.615357][T14976] bpf_trace_run2+0x281/0x4b0 [ 569.615375][T14976] __bpf_trace_tlb_flush+0xf5/0x150 [ 569.615395][T14976] trace_tlb_flush+0x115/0x140 [ 569.615415][T14976] switch_mm_irqs_off+0x53e/0x7a0 [ 569.615434][T14976] __schedule+0x110e/0x4cc0 [ 569.615456][T14976] preempt_schedule_irq+0xb5/0x150 [ 569.615480][T14976] irqentry_exit+0x6f/0x90 [ 569.615493][T14976] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 569.615510][T14976] lock_acquire+0x175/0x360 [ 569.615531][T14976] unwind_next_frame+0xc2/0x2390 [ 569.615547][T14976] __unwind_start+0x5b9/0x760 [ 569.615563][T14976] arch_stack_walk+0xe4/0x150 [ 569.615581][T14976] stack_trace_save+0x9c/0xe0 [ 569.615599][T14976] kasan_save_track+0x3e/0x80 [ 569.615617][T14976] __kasan_slab_alloc+0x6c/0x80 [ 569.615636][T14976] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 569.615657][T14976] __alloc_skb+0x112/0x2d0 [ 569.615674][T14976] __ip6_append_data+0x2c16/0x3f30 [ 569.615705][T14976] ip6_append_data+0x1c4/0x380 [ 569.615728][T14976] l2tp_ip6_sendmsg+0x1286/0x17c0 [ 569.615743][T14976] __sock_sendmsg+0x19c/0x270 [ 569.615766][T14976] ____sys_sendmsg+0x505/0x830 [ 569.615784][T14976] ___sys_sendmsg+0x21f/0x2a0 [ 569.615802][T14976] __x64_sys_sendmsg+0x19b/0x260 [ 569.615820][T14976] do_syscall_64+0xfa/0x3b0 [ 569.615836][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.615852][T14976] [ 569.615852][T14976] other info that might help us debug this: [ 569.615852][T14976] [ 569.615858][T14976] Chain exists of: [ 569.615858][T14976] console_owner --> &p->pi_lock --> &rq->__lock [ 569.615858][T14976] [ 569.615884][T14976] Possible unsafe locking scenario: [ 569.615884][T14976] [ 569.615890][T14976] CPU0 CPU1 [ 569.615895][T14976] ---- ---- [ 569.615900][T14976] lock(&rq->__lock); [ 569.615917][T14976] lock(&p->pi_lock); [ 569.615929][T14976] lock(&rq->__lock); [ 569.615941][T14976] lock(console_owner); [ 569.615953][T14976] [ 569.615953][T14976] *** DEADLOCK *** [ 569.615953][T14976] [ 569.615958][T14976] 4 locks held by syz.0.2393/14976: [ 569.615968][T14976] #0: ffff8880292498d8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: l2tp_ip6_sendmsg+0x120d/0x17c0 [ 569.616008][T14976] #1: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 569.616048][T14976] #2: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 569.616096][T14976] #3: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 569.616138][T14976] [ 569.616138][T14976] stack backtrace: [ 569.616146][T14976] CPU: 1 UID: 0 PID: 14976 Comm: syz.0.2393 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 569.616167][T14976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.616178][T14976] Call Trace: [ 569.616184][T14976] [ 569.616191][T14976] dump_stack_lvl+0x189/0x250 [ 569.616214][T14976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.616233][T14976] ? __pfx__printk+0x10/0x10 [ 569.616256][T14976] ? print_lock_name+0xde/0x100 [ 569.616280][T14976] print_circular_bug+0x2ee/0x310 [ 569.616299][T14976] check_noncircular+0x134/0x160 [ 569.616320][T14976] validate_chain+0xb9b/0x2140 [ 569.616346][T14976] __lock_acquire+0xab9/0xd20 [ 569.616372][T14976] ? vprintk_emit+0x444/0x7a0 [ 569.616388][T14976] lock_acquire+0x120/0x360 [ 569.616411][T14976] ? vprintk_emit+0x444/0x7a0 [ 569.616431][T14976] ? do_raw_spin_unlock+0x122/0x240 [ 569.616450][T14976] ? vprintk_emit+0x444/0x7a0 [ 569.616468][T14976] vprintk_emit+0x460/0x7a0 [ 569.616484][T14976] ? vprintk_emit+0x444/0x7a0 [ 569.616501][T14976] ? __pfx_vprintk_emit+0x10/0x10 [ 569.616521][T14976] ? bpf_try_get_buffers+0x91/0x170 [ 569.616542][T14976] ? bpf_bprintf_prepare+0x1282/0x13d0 [ 569.616566][T14976] _printk+0xcf/0x120 [ 569.616587][T14976] ? __pfx____ratelimit+0x10/0x10 [ 569.616605][T14976] ? __pfx__printk+0x10/0x10 [ 569.616628][T14976] ? bpf_trace_printk+0xc1/0x190 [ 569.616646][T14976] should_fail_ex+0x3f5/0x560 [ 569.616673][T14976] strncpy_from_user+0x36/0x290 [ 569.616705][T14976] strncpy_from_user_nofault+0x72/0x150 [ 569.616725][T14976] bpf_probe_read_compat_str+0xe2/0x180 [ 569.616743][T14976] bpf_prog_d745503085a14d72+0x6d/0x73 [ 569.616757][T14976] bpf_trace_run2+0x281/0x4b0 [ 569.616777][T14976] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 569.616797][T14976] ? bpf_trace_run2+0x186/0x4b0 [ 569.616818][T14976] ? __pfx_bpf_trace_run2+0x10/0x10 [ 569.616841][T14976] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 569.616864][T14976] __bpf_trace_tlb_flush+0xf5/0x150 [ 569.616887][T14976] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 569.616911][T14976] ? perf_cgroup_switch+0xe6/0x910 [ 569.616933][T14976] ? psi_group_change+0xab8/0x1050 [ 569.616950][T14976] trace_tlb_flush+0x115/0x140 [ 569.616972][T14976] switch_mm_irqs_off+0x53e/0x7a0 [ 569.616996][T14976] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 569.617017][T14976] ? psi_task_switch+0x4e3/0x880 [ 569.617037][T14976] __schedule+0x110e/0x4cc0 [ 569.617067][T14976] ? __lock_acquire+0xab9/0xd20 [ 569.617094][T14976] ? __pfx___schedule+0x10/0x10 [ 569.617118][T14976] ? perf_trace_preemptirq_template+0xa3/0x340 [ 569.617140][T14976] ? preempt_schedule_irq+0xaa/0x150 [ 569.617166][T14976] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 569.617193][T14976] ? preempt_schedule_irq+0xaa/0x150 [ 569.617219][T14976] preempt_schedule_irq+0xb5/0x150 [ 569.617243][T14976] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 569.617269][T14976] ? page_table_check_set+0x18d/0x730 [ 569.617294][T14976] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 569.617312][T14976] irqentry_exit+0x6f/0x90 [ 569.617327][T14976] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 569.617345][T14976] RIP: 0010:lock_acquire+0x175/0x360 [ 569.617370][T14976] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b 06 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 569.617386][T14976] RSP: 0018:ffffc900030e6e58 EFLAGS: 00000206 [ 569.617401][T14976] RAX: 3b5835973a8b6500 RBX: 0000000000000000 RCX: 3b5835973a8b6500 [ 569.617414][T14976] RDX: 0000000000000000 RSI: ffffffff8dba01c6 RDI: ffffffff8be2fd00 [ 569.617426][T14976] RBP: ffffffff8172c025 R08: 0000000000000000 R09: ffffffff8172c025 [ 569.617438][T14976] R10: ffffc900030e7078 R11: fffff5200061ce11 R12: 0000000000000002 [ 569.617450][T14976] R13: ffffffff8e139e60 R14: 0000000000000000 R15: 0000000000000246 [ 569.617463][T14976] ? unwind_next_frame+0xa5/0x2390 [ 569.617482][T14976] ? unwind_next_frame+0xa5/0x2390 [ 569.617507][T14976] ? unwind_next_frame+0xa5/0x2390 [ 569.617525][T14976] ? arch_stack_walk+0xe4/0x150 [ 569.617544][T14976] ? unwind_next_frame+0xa5/0x2390 [ 569.617562][T14976] unwind_next_frame+0xc2/0x2390 [ 569.617580][T14976] ? unwind_next_frame+0xa5/0x2390 [ 569.617599][T14976] ? unwind_next_frame+0xa5/0x2390 [ 569.617617][T14976] ? __unwind_start+0xf8/0x760 [ 569.617638][T14976] __unwind_start+0x5b9/0x760 [ 569.617658][T14976] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 569.617678][T14976] arch_stack_walk+0xe4/0x150 [ 569.617706][T14976] ? arch_stack_walk+0xe4/0x150 [ 569.617727][T14976] stack_trace_save+0x9c/0xe0 [ 569.617745][T14976] ? __pfx_stack_trace_save+0x10/0x10 [ 569.617766][T14976] ? __might_fault+0xb0/0x130 [ 569.617790][T14976] kasan_save_track+0x3e/0x80 [ 569.617848][T14976] __kasan_slab_alloc+0x6c/0x80 [ 569.617870][T14976] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 569.617892][T14976] ? __alloc_skb+0x112/0x2d0 [ 569.617912][T14976] __alloc_skb+0x112/0x2d0 [ 569.617931][T14976] __ip6_append_data+0x2c16/0x3f30 [ 569.617964][T14976] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 569.617995][T14976] ? __pfx___ip6_append_data+0x10/0x10 [ 569.618018][T14976] ? __pfx_ip6_mtu+0x10/0x10 [ 569.618045][T14976] ip6_append_data+0x1c4/0x380 [ 569.618070][T14976] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 569.618093][T14976] l2tp_ip6_sendmsg+0x1286/0x17c0 [ 569.618117][T14976] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 569.618142][T14976] ? __pfx_aa_sk_perm+0x10/0x10 [ 569.618160][T14976] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 569.618189][T14976] ? inet_sendmsg+0x2f4/0x370 [ 569.618212][T14976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.618232][T14976] __sock_sendmsg+0x19c/0x270 [ 569.618257][T14976] ____sys_sendmsg+0x505/0x830 [ 569.618280][T14976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.618304][T14976] ? import_iovec+0x74/0xa0 [ 569.618327][T14976] ___sys_sendmsg+0x21f/0x2a0 [ 569.618348][T14976] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.618382][T14976] ? __fget_files+0x2a/0x420 [ 569.618406][T14976] ? __fget_files+0x3a0/0x420 [ 569.618434][T14976] __x64_sys_sendmsg+0x19b/0x260 [ 569.618456][T14976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.618476][T14976] ? perf_trace_preemptirq_template+0xa3/0x340 [ 569.618501][T14976] ? __pfx_ksys_write+0x10/0x10 [ 569.618521][T14976] ? rcu_is_watching+0x15/0xb0 [ 569.618539][T14976] ? do_syscall_64+0xbe/0x3b0 [ 569.618557][T14976] do_syscall_64+0xfa/0x3b0 [ 569.618574][T14976] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.618589][T14976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.618607][T14976] ? clear_bhb_loop+0x60/0xb0 [ 569.618627][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.618643][T14976] RIP: 0033:0x7f852858eb69 [ 569.618657][T14976] Code: Unable to access opcode bytes at 0x7f852858eb3f. [ 569.618666][T14976] RSP: 002b:00007f85293c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.618683][T14976] RAX: ffffffffffffffda RBX: 00007f85287b5fa0 RCX: 00007f852858eb69 [ 569.618742][T14976] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 569.618754][T14976] RBP: 00007f85293c3090 R08: 0000000000000000 R09: 0000000000000000 [ 569.618765][T14976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.618776][T14976] R13: 0000000000000000 R14: 00007f85287b5fa0 R15: 00007ffc13c8c4b8 [ 569.618795][T14976] [ 571.169943][T14976] CPU: 1 UID: 0 PID: 14976 Comm: syz.0.2393 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 571.169963][T14976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.169971][T14976] Call Trace: [ 571.169978][T14976] [ 571.169984][T14976] dump_stack_lvl+0x189/0x250 [ 571.170003][T14976] ? __pfx____ratelimit+0x10/0x10 [ 571.170016][T14976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.170028][T14976] ? __pfx__printk+0x10/0x10 [ 571.170044][T14976] ? bpf_trace_printk+0xc1/0x190 [ 571.170057][T14976] should_fail_ex+0x414/0x560 [ 571.170076][T14976] strncpy_from_user+0x36/0x290 [ 571.170092][T14976] strncpy_from_user_nofault+0x72/0x150 [ 571.170106][T14976] bpf_probe_read_compat_str+0xe2/0x180 [ 571.170118][T14976] bpf_prog_d745503085a14d72+0x6d/0x73 [ 571.170130][T14976] bpf_trace_run2+0x281/0x4b0 [ 571.170144][T14976] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 571.170158][T14976] ? bpf_trace_run2+0x186/0x4b0 [ 571.170171][T14976] ? __pfx_bpf_trace_run2+0x10/0x10 [ 571.170186][T14976] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 571.170202][T14976] __bpf_trace_tlb_flush+0xf5/0x150 [ 571.170216][T14976] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 571.170231][T14976] ? perf_cgroup_switch+0xe6/0x910 [ 571.170245][T14976] ? psi_group_change+0xab8/0x1050 [ 571.170257][T14976] trace_tlb_flush+0x115/0x140 [ 571.170273][T14976] switch_mm_irqs_off+0x53e/0x7a0 [ 571.170288][T14976] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 571.170301][T14976] ? psi_task_switch+0x4e3/0x880 [ 571.170314][T14976] __schedule+0x110e/0x4cc0 [ 571.170333][T14976] ? __lock_acquire+0xab9/0xd20 [ 571.170351][T14976] ? __pfx___schedule+0x10/0x10 [ 571.170365][T14976] ? perf_trace_preemptirq_template+0xa3/0x340 [ 571.170380][T14976] ? preempt_schedule_irq+0xaa/0x150 [ 571.170396][T14976] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 571.170413][T14976] ? preempt_schedule_irq+0xaa/0x150 [ 571.170429][T14976] preempt_schedule_irq+0xb5/0x150 [ 571.170445][T14976] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 571.170461][T14976] ? page_table_check_set+0x18d/0x730 [ 571.170477][T14976] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 571.170489][T14976] irqentry_exit+0x6f/0x90 [ 571.170499][T14976] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 571.170512][T14976] RIP: 0010:lock_acquire+0x175/0x360 [ 571.170528][T14976] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b 06 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 571.170539][T14976] RSP: 0018:ffffc900030e6e58 EFLAGS: 00000206 [ 571.170551][T14976] RAX: 3b5835973a8b6500 RBX: 0000000000000000 RCX: 3b5835973a8b6500 [ 571.170560][T14976] RDX: 0000000000000000 RSI: ffffffff8dba01c6 RDI: ffffffff8be2fd00 [ 571.170568][T14976] RBP: ffffffff8172c025 R08: 0000000000000000 R09: ffffffff8172c025 [ 571.170576][T14976] R10: ffffc900030e7078 R11: fffff5200061ce11 R12: 0000000000000002 [ 571.170584][T14976] R13: ffffffff8e139e60 R14: 0000000000000000 R15: 0000000000000246 [ 571.170593][T14976] ? unwind_next_frame+0xa5/0x2390 [ 571.170606][T14976] ? unwind_next_frame+0xa5/0x2390 [ 571.170622][T14976] ? unwind_next_frame+0xa5/0x2390 [ 571.170633][T14976] ? arch_stack_walk+0xe4/0x150 [ 571.170646][T14976] ? unwind_next_frame+0xa5/0x2390 [ 571.170657][T14976] unwind_next_frame+0xc2/0x2390 [ 571.170669][T14976] ? unwind_next_frame+0xa5/0x2390 [ 571.170681][T14976] ? unwind_next_frame+0xa5/0x2390 [ 571.170693][T14976] ? __unwind_start+0xf8/0x760 [ 571.170706][T14976] __unwind_start+0x5b9/0x760 [ 571.170718][T14976] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 571.170731][T14976] arch_stack_walk+0xe4/0x150 [ 571.170751][T14976] ? arch_stack_walk+0xe4/0x150 [ 571.170764][T14976] stack_trace_save+0x9c/0xe0 [ 571.170776][T14976] ? __pfx_stack_trace_save+0x10/0x10 [ 571.170789][T14976] ? __might_fault+0xb0/0x130 [ 571.170805][T14976] kasan_save_track+0x3e/0x80 [ 571.170831][T14976] __kasan_slab_alloc+0x6c/0x80 [ 571.170846][T14976] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 571.170861][T14976] ? __alloc_skb+0x112/0x2d0 [ 571.170875][T14976] __alloc_skb+0x112/0x2d0 [ 571.170887][T14976] __ip6_append_data+0x2c16/0x3f30 [ 571.170910][T14976] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 571.170929][T14976] ? __pfx___ip6_append_data+0x10/0x10 [ 571.170944][T14976] ? __pfx_ip6_mtu+0x10/0x10 [ 571.170961][T14976] ip6_append_data+0x1c4/0x380 [ 571.170978][T14976] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 571.170992][T14976] l2tp_ip6_sendmsg+0x1286/0x17c0 [ 571.171008][T14976] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 571.171024][T14976] ? __pfx_aa_sk_perm+0x10/0x10 [ 571.171036][T14976] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 571.171055][T14976] ? inet_sendmsg+0x2f4/0x370 [ 571.171070][T14976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 571.171083][T14976] __sock_sendmsg+0x19c/0x270 [ 571.171099][T14976] ____sys_sendmsg+0x505/0x830 [ 571.171114][T14976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.171129][T14976] ? import_iovec+0x74/0xa0 [ 571.171145][T14976] ___sys_sendmsg+0x21f/0x2a0 [ 571.171158][T14976] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.171180][T14976] ? __fget_files+0x2a/0x420 [ 571.171195][T14976] ? __fget_files+0x3a0/0x420 [ 571.171212][T14976] __x64_sys_sendmsg+0x19b/0x260 [ 571.171226][T14976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.171238][T14976] ? perf_trace_preemptirq_template+0xa3/0x340 [ 571.171255][T14976] ? __pfx_ksys_write+0x10/0x10 [ 571.171268][T14976] ? rcu_is_watching+0x15/0xb0 [ 571.171279][T14976] ? do_syscall_64+0xbe/0x3b0 [ 571.171291][T14976] do_syscall_64+0xfa/0x3b0 [ 571.171302][T14976] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.171312][T14976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.171324][T14976] ? clear_bhb_loop+0x60/0xb0 [ 571.171336][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.171347][T14976] RIP: 0033:0x7f852858eb69 [ 571.171357][T14976] Code: Unable to access opcode bytes at 0x7f852858eb3f. [ 571.171363][T14976] RSP: 002b:00007f85293c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.171375][T14976] RAX: ffffffffffffffda RBX: 00007f85287b5fa0 RCX: 00007f852858eb69 [ 571.171383][T14976] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 571.171391][T14976] RBP: 00007f85293c3090 R08: 0000000000000000 R09: 0000000000000000 [ 571.171398][T14976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.171405][T14976] R13: 0000000000000000 R14: 00007f85287b5fa0 R15: 00007ffc13c8c4b8 [ 571.171417][T14976] [ 571.787956][T14973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2392'. [ 571.797034][T14973] bond0: entered allmulticast mode [ 571.802350][T14973] bond_slave_0: entered allmulticast mode [ 571.808109][T14973] bond_slave_1: entered allmulticast mode [ 571.813886][T14973] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 571.821338][T14973] syz_tun: entered allmulticast mode [ 571.829431][T14972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2392'.