last executing test programs: 21m9.52435855s ago: executing program 2 (id=2733): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2d840009aa5ab9"], 0xffdd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) syz_clone(0x0, &(0x7f0000000500)='V&', 0x2, 0x0, 0x0, 0x0) (async) syz_clone(0x0, &(0x7f0000000500)='V&', 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xc, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0xa, 0x3, 0x3a) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, @var]}}, &(0x7f0000000240)=""/237, 0x36, 0xed, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000ac00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000ac00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 21m8.888883856s ago: executing program 2 (id=2739): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000010630182000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x10001, 0x12b5, 0x1410, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x2}, 0x50) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x4a, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000240)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xd, 0x5, 0xfffff805}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x5, 0x4, 0x3, 0x4}, {0x4, 0x4, 0xd}, {0x0, 0x5, 0x8, 0x1}, {0x0, 0x3, 0xc}, {0x3, 0x5, 0xd, 0x5}], 0x10, 0x7}, 0x94) 21m8.530843677s ago: executing program 2 (id=2742): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8, 0xdff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 21m8.075372157s ago: executing program 2 (id=2744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000feffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="8000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff18090003000008000000b704000095000000009c18551498055e58c60f000000cdffffffffdd8038e851a807eb163c14db5816b119a1ede8110c8cef68c25844f9c777b3922b870ee50f1691a368b4d82a73d6aa8116fbdb2eebf2336999b0af501c79b687964153c712f25ac5966ddc9864dd65"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 21m7.871862055s ago: executing program 2 (id=2745): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x102, 0x0, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f8d90000004f0c0400010000000062d95800000000000101871edd0000a69d35a2ff7f4708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a0300", 0x4c}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070800000000000000800000850080007500009500f7000000000000"], 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x102, 0x0, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f8d90000004f0c0400010000000062d95800000000000101871edd0000a69d35a2ff7f4708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a0300", 0x4c}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070800000000000000800000850080007500009500f7000000000000"], 0x0, 0xfffffffd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) (async) 21m7.360245789s ago: executing program 2 (id=2746): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b0035", 0x17}], 0x1}, 0x0) r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) 20m52.264908428s ago: executing program 32 (id=2746): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b0035", 0x17}], 0x1}, 0x0) r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) 17m17.516802129s ago: executing program 1 (id=3551): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="05"], 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, &(0x7f0000000500)=r3, 0x4) 17m16.594944939s ago: executing program 1 (id=3556): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x6, &(0x7f0000000040), 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 17m16.432443413s ago: executing program 1 (id=3557): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tr\nr'], 0xa) (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) (async) recvmsg$unix(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x6e, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x8da, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000018, &(0x7f0000000300)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1, 0x8, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r4}, 0x38) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 17m15.08830087s ago: executing program 1 (id=3558): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x6c, 0x0, 0x7f, 0x0, 0x0, 0x480000000000000b, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x7, 0xfffc, 0x0, 0x3, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 17m14.788295786s ago: executing program 1 (id=3561): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x76fc}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 17m14.585759054s ago: executing program 1 (id=3562): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800000}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x238500, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x4d, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000006c0)=r1) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000890000009500000000000000933bc8b2d7ec926f"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0xc, &(0x7f0000000740)=@raw=[@ldst={0x1, 0x3, 0x4, 0x5, 0x0, 0xacdfc6e487de89cd, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf51af0e, 0x0, 0x0, 0x0, 0xfffffffc}, @jmp={0x5, 0x0, 0x6, 0x6, 0xd, 0xfffffffffffffff8, 0xfffffffffffffffc}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f00000007c0)='GPL\x00', 0x0, 0xc8, &(0x7f0000000800)=""/200, 0x41000, 0x11, '\x00', 0x0, @fallback=0x38, r4, 0x8, &(0x7f0000000900)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xd, 0x3, 0x80}, 0x10, r2, r4, 0x2, 0x0, &(0x7f0000000980)=[{0x3, 0x2, 0xa, 0x8}, {0x4, 0x4, 0x6, 0x2}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x1f, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40000200, 0x0, 0x0, 0x0, 0x0, 0x0) 16m59.101115776s ago: executing program 33 (id=3562): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800000}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x238500, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x4d, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000006c0)=r1) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000890000009500000000000000933bc8b2d7ec926f"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0xc, &(0x7f0000000740)=@raw=[@ldst={0x1, 0x3, 0x4, 0x5, 0x0, 0xacdfc6e487de89cd, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf51af0e, 0x0, 0x0, 0x0, 0xfffffffc}, @jmp={0x5, 0x0, 0x6, 0x6, 0xd, 0xfffffffffffffff8, 0xfffffffffffffffc}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f00000007c0)='GPL\x00', 0x0, 0xc8, &(0x7f0000000800)=""/200, 0x41000, 0x11, '\x00', 0x0, @fallback=0x38, r4, 0x8, &(0x7f0000000900)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xd, 0x3, 0x80}, 0x10, r2, r4, 0x2, 0x0, &(0x7f0000000980)=[{0x3, 0x2, 0xa, 0x8}, {0x4, 0x4, 0x6, 0x2}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x1f, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40000200, 0x0, 0x0, 0x0, 0x0, 0x0) 2m40.416216509s ago: executing program 5 (id=6304): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x17, &(0x7f00000008c0), 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x3, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x4040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x76ab30322bd40e57) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4020940d, &(0x7f00000005c0)=0x81000000000004) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000340), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) 2m40.038808612s ago: executing program 5 (id=6309): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) 2m39.025899591s ago: executing program 5 (id=6315): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x5, 0x8, 0xf}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/272], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x4, 0x4298, 0x10001, 0xc0, 0x1, 0x9, '\x00', 0x0, r1, 0x0, 0x3, 0x1, 0x9}, 0x50) 2m38.878460324s ago: executing program 5 (id=6316): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x4, 0xf, 0x3ff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x2, 0x4, 0x1, 0xb}, {0x4, 0x3, 0x2, 0x7}, {0x2, 0x4, 0x7, 0x3}, {0x2, 0x4, 0xd, 0x4}, {0x0, 0x3, 0xc, 0x1}, {0x0, 0x2, 0x0, 0x5}]}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x61, 0x30, 0x5f, 0x5f, 0x0, 0x30]}}, &(0x7f0000000340)=""/93, 0x2d, 0x5d, 0x1, 0x9, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r2, 0x20, &(0x7f0000000540)={&(0x7f0000000400)=""/59, 0x3b, 0x0, &(0x7f0000000440)=""/238, 0xee}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000600)={'geneve1\x00', 0x16636cf0698ff930}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'vxcan1\x00', 0x2}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f00000006c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r6, r2, 0x1, 0x0, 0x3}, 0x50) r8 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={&(0x7f0000000880)=@ieee802154, 0x80, &(0x7f0000000900)}, 0x20000080) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@fallback=r9, 0xa, 0x1, 0x40, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@cgroup=r8, r0, 0x33, 0x0, 0x0, @void, @value=r2, @void, @void, r11}, 0x20) getpid() openat$cgroup_type(r10, &(0x7f0000000b00), 0x2, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000b40)=""/250) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x25, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @jmp={0x5, 0x0, 0x3, 0x1, 0xa, 0x30, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0xa0, 0x4, 0x7, 0x3, 0x10000}]}, &(0x7f0000000fc0)='syzkaller\x00', 0xe0, 0xb4, &(0x7f0000001000)=""/180, 0x40f00, 0x10, '\x00', r6, 0x0, r10, 0x8, &(0x7f00000010c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001100)={0x0, 0x1, 0x81, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001140)=[r1, r1, r1, r10, r7, r10, r1], 0x0, 0x10, 0x3}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x7, 0x2, 0x5, 0xaa, 0x201, r7, 0xfffffff8, '\x00', r6, r0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x13, 0xf, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xda}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x9, 0xed, &(0x7f0000000d00)=""/237, 0x41000, 0x20, '\x00', 0x0, @fallback=0x18, r10, 0x8, &(0x7f0000000e00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x5, 0x6, 0x9, 0x2}, 0x10, r3, r12, 0x6, &(0x7f00000012c0)=[r7, r13, r1, r7, r1], &(0x7f0000001300)=[{0x0, 0x1, 0xf, 0x7}, {0x5, 0x2, 0x4, 0x6}, {0x2, 0x4, 0x2, 0x9}, {0x2, 0x1, 0x4, 0x9}, {0x1, 0x2, 0xf, 0x2}, {0x2, 0x2, 0x1, 0x9}], 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000001440)=0x7) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x7, 0x38, 0x8, 0x9, 0x0, 0x4, 0x40040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000001480), 0x8}, 0x48, 0x1, 0x0, 0x3, 0x42be, 0xfff, 0x0, 0x0, 0x9ef, 0x0, 0xd5ecdde}, 0xffffffffffffffff, 0x7, r0, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r12, 0x0, 0x8f, 0xa3, &(0x7f0000001540)="618d524e02f770f0cf30309b72a1b19d1d7204dbd817fd7f6c32a7a6b3933fa315f60d27f41813028a805f233269deb46d1fbc4484ed1e319eefdf262a6be71c6e5ce803be91ca1cb0655e13021895c5b91aab6125f0ed65620f29436aa89a428ec1194b172ab05180dc08427791441281fc81a790abb2a1168de6478d47549eb557479ad95fbc56e778822ba51f14", &(0x7f0000001600)=""/163, 0x18000, 0x0, 0x5e, 0xd, &(0x7f00000016c0)="fa91123ebacaa34c71617b709976e4cd5e715f5d4ddbec16e9a243357816aaafef4b5bac7b7655f612e5f6942c25508c749a2ff6d04207ebeee907fbd558c9d2d5dcb16f003027a7ac7da5d7171a1e88f4aea4210bcb12118dda9be28033", &(0x7f0000001740)="dfeb4a8be24d0b24052e606495", 0x7, 0x0, 0x80000001}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001840)=@o_path={&(0x7f0000001800)='./file0\x00', 0x0, 0x30, r10}, 0x18) sendmsg$kcm(r9, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001880)="a02266f5bc1bc7e8ef355b7f7595f5b6603e483e8df4064772a5a86e2d1eafe500606ec2a5c9b47e3839a7cd68fb308206ee48d5843579acf1adbfc7f893f2dfa1b032f9ed7978cc69aa31d1044cc508760e329f4fdce6a9bbdd0287fc0dfc74b4d5cc433d4b2f44fcc64461bafc13d4eeb6df308a96902546506f6a4fb63f1f7fd42ebe06a2f8ee1ab9248ce700cf47999ee1d668c26638a29ee58dbbd716a2e6f2748b37d023d8309e96f6ba530bea1fd636807c9b412c36b16b658e885c0e64bab6d38f0b770394", 0xc9}, {&(0x7f0000001980)="1e757bc1f7f7995e296fe4800553129d477d8856aa640ccdd4104ed0e6e5f0aa686269af05ea08c095b44df8655d40294a9d98de67363799bb4b9a0a7090d81e2c4be6ff6412c31892da8dcbc4c84d58ffe2c89c5c14d187e2a2ea136e67bebc70b79f0e0833ca4c7613e870c3bc27c5ff06ea10a8315a2ff1f39161afaf3f89e4a9f950f3a4c8c7bfa794232e8f9a1e36665cee4ce0b7cde2dd9d00f5d308b3d87cea05b72c661156bf48b0eb8d71f702d08af91c7bfd34cf40eed7c020", 0xbe}, {&(0x7f0000001a40)="372ec14b25f443cc48459b439f2f71ba3d6da7c3f79872e8a77c31dbef0f47092b718d87b350e6ea951efec54688383af0cc2194cec581dc2917b7822dc4515b22b5825ef12f510386dcba0b7f0103c61a4ad48bcacd7610986f15a8acff8f421e95a2743258bb72f51c1ae2f772ca454be29d1529f8e8ace040304570824557ab012ec8c28b335c08e5909d3f91d326c7d01e1b69de369ff7902518fe5b21d3316a7b5c990389d0152bbce50c9d407e9adeb8173c451eb525678875f2fe879155", 0xc1}], 0x3}, 0x40000) r14 = syz_clone(0x28000400, &(0x7f0000001c80)="75fbaa9c8ec50acc52b8040a753a45de895268433fe093a69a1a6e92c46cc378c6edcf460c17914e883f0b5752c9644d4e7acbc5a93600ab13bf46e136d6a8ce900645", 0x43, &(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80)="b81d584a365c8d5a4bd07b7d3a97b896a3a0c626703d25db0bdf89ddb5a8ac01c2d544e6d8e7472fe5cfa826aa93939341b1281dea72c9cf39ce869e9ba58ea4a60231328336185718d199a11b8e17f9a5bac4ca94751492e32ad79f1599204278bbdec134fefc473723d9cdb639c809149ffc5185845f0c9c07a9bb1433") perf_event_open(&(0x7f0000001c00)={0x1, 0x80, 0x1, 0xa, 0x40, 0x0, 0x0, 0x7, 0x20600, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000001bc0), 0xd}, 0x400, 0x9, 0x2, 0x4, 0xa141, 0xc000000, 0xb, 0x0, 0x8, 0x0, 0x5}, r14, 0xd, 0xffffffffffffffff, 0x9) 2m38.706398499s ago: executing program 5 (id=6319): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0xc, 0x4, 0x90, 0x1, 0x0, 0xfffffffffffffff7, 0x2000, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x10b010, 0x4460, 0x80000000, 0x6, 0x100, 0x10, 0xb9ed, 0x0, 0x5, 0x0, 0x3}, r0, 0x10, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000240), 0x4) r7 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000300)={r3}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r0, 0xb, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0]}, 0x40) r9 = openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup=r8, 0x20, 0x0, 0xfffffffc, &(0x7f00000004c0)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)}, 0x40) ioctl$PERF_EVENT_IOC_ID(r8, 0x80082407, &(0x7f0000000600)) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000000640)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r8, 0x30, 0x0, 0x1f4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) openat$cgroup_type(r9, &(0x7f00000007c0), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r8, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000900)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x2b, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@ifindex=r11, r8, 0x29, 0xa, r2, @void, @value=r8, @void, @void, r10}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x8, 0x6, 0x9, 0x4028, r8, 0xa1, '\x00', r11, r8, 0x4, 0x1, 0x2, 0xa}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000bc0)={0x0, r7}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d40)={r8, &(0x7f0000000c80), &(0x7f0000000cc0)=""/96, 0x4}, 0x20) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x2) perf_event_open$cgroup(&(0x7f0000000d80)={0x2, 0x80, 0x6, 0x8, 0x4, 0xc, 0x0, 0x3, 0x100, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xff, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x110e23, 0x3, 0xb44, 0x4, 0xfffffffffffffeff, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x6ed}, r0, 0x5, 0xffffffffffffffff, 0x4) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) 2m38.58480107s ago: executing program 5 (id=6320): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b07, 0x2, @perf_bp={&(0x7f00000002c0), 0xc}, 0x8500, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18001cca662bff954a123a1f9ab8baad1900040021814cf2fa705900000000fbf5872bf66d26ae599df978e271063fb8aa38b41864975217c5669ae612d7e2f3ebb1281c87ad1d39e004e07b81b9ee275d22ea4e43f888007bc5fd28ac40"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(r2, 0x6, 0x10, &(0x7f0000000200), 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000440)="682ee3dcf9002c908d2cbd85325da970178aad5e1282ba8d1b56ccb70dabb8683b8f5c6c0634dd97592f89b9d947958a624421f2b29e2dafc9ae051e1728fbecd52922ea1b4299fb0e9ad2a74aebc387dc5452ccc32ce000a0ae3d36887070078c016910a0c8587f834765621e5feb3a716dcd3dff1be66c840c0d231a4a97981d833590ddb754153176d1ceebf7cd1ce5096dd7e13994fc9629bf98816bd2a384", 0xa1}], 0x1, &(0x7f0000000600)=[@ip_tos_int={{0x14}}], 0x18}, 0x20004000) (async) r4 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x4) setsockopt$sock_attach_bpf(r4, 0x84, 0x75, &(0x7f0000000000)=r7, 0x8) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000240)) (async) close(r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x37, 0x1, 0x800, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000380)) (async) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x3ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24040080) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140), 0x55) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m23.346392693s ago: executing program 34 (id=6320): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b07, 0x2, @perf_bp={&(0x7f00000002c0), 0xc}, 0x8500, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18001cca662bff954a123a1f9ab8baad1900040021814cf2fa705900000000fbf5872bf66d26ae599df978e271063fb8aa38b41864975217c5669ae612d7e2f3ebb1281c87ad1d39e004e07b81b9ee275d22ea4e43f888007bc5fd28ac40"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(r2, 0x6, 0x10, &(0x7f0000000200), 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000440)="682ee3dcf9002c908d2cbd85325da970178aad5e1282ba8d1b56ccb70dabb8683b8f5c6c0634dd97592f89b9d947958a624421f2b29e2dafc9ae051e1728fbecd52922ea1b4299fb0e9ad2a74aebc387dc5452ccc32ce000a0ae3d36887070078c016910a0c8587f834765621e5feb3a716dcd3dff1be66c840c0d231a4a97981d833590ddb754153176d1ceebf7cd1ce5096dd7e13994fc9629bf98816bd2a384", 0xa1}], 0x1, &(0x7f0000000600)=[@ip_tos_int={{0x14}}], 0x18}, 0x20004000) (async) r4 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x4) setsockopt$sock_attach_bpf(r4, 0x84, 0x75, &(0x7f0000000000)=r7, 0x8) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000240)) (async) close(r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x37, 0x1, 0x800, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000380)) (async) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x3ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24040080) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140), 0x55) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.971219865s ago: executing program 3 (id=6834): r0 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fdfffff70000000004000000850000006f00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5004dfc6}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x28}, 0xc) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r2, 0x3edba98fce9eb241, 0x1, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r4, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x1, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7b, 0x7b, 0x4, [@datasec={0xd, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x3, 0xff}, {0x1, 0x3ff, 0x4}, {0x3, 0x8001, 0x81}], "3eff4e"}, @const={0x5, 0x0, 0x0, 0xa, 0x4}, @enum64={0xb, 0x4, 0x0, 0x13, 0x0, 0x8, [{0x5, 0x3ff}, {0x8, 0x5, 0x6}, {0xa, 0x401, 0x7}, {0x2, 0x0, 0x6}]}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000100)=""/62, 0x98, 0x3e, 0x0, 0x1000, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5ae}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @jmp={0x5, 0x0, 0x4, 0xd, 0xa, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000001680)=""/4096, 0x40f00, 0x1, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x10, 0xb}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540), &(0x7f0000000580)=[{0x2, 0x1, 0xb, 0xc}], 0x10, 0x8}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000724fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x2, [{@loopback, 0x5}, {@rand_addr=0x64010102}]}]}}}], 0x48}, 0x0) 7.911915277s ago: executing program 3 (id=6840): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x1f, 0x0, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000500)}, 0x10) 5.120840402s ago: executing program 3 (id=6847): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6e0}, 0x8) r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000340)="40170ad11b971f22057a9a3e0a32a7c962f9b1f407ba7c7b3801d8d51ca01ca2e42e812f1d590f4b3094c8e02cd4476ab95e09b910145a4cb174a024ca40f104cea9f50079fd0d5b83682e458817f993c1c0d3595d0dd00d5e441ff7d002bd9033809665270762004cb58b6aa0d4722a34a43f12507f6056d50f532a532f383578c03b8b36a5a7c59607e6d165b66b01888ae1438e5f5d8ecb39be86e42d54b36b1e1b0222f86779d043997df2505c5f6dab2a2dec7e62b3ddb51724b144a73d22d0d83926cc3ddcea10cb6351d630e0e4e636033be8e5b668bf", 0xda}, {&(0x7f0000000440)="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", 0xfa}, {&(0x7f0000000640)="a99604f5bc6168a3fbab6048ca491fcc3689364bba9337ef46076131f7d3f6e46c2b8fc30063fe8c67b27d12ff74ab5f82296448354ec0f2b2a5ba93036967b59494773e9b4d2ffcb0fae6383f85021ae8cad1b6f3b2d703d31dfb39d5a9ea8556a7b1718bda711b5a73b3e23c1739a23bc119af03cdbea7b40eec8a101400b6904500ea4c532679c96fcf87332cf8573ccfc68f139d7030fb6ad17b15734e52e1f5ebe2028ff1f9571d8027fef435cd60e9a323b2ebe440e7f86e3da47969891ee293d63a58b03c25eaa263e2ad70508b6b7551833fced872a88d13e1c019f35d6e4afa24eb", 0xe6}, {&(0x7f0000000240)="37b869c8706abc3ee56695a7e3b9b72256393b50ae12aa2000b1bdd15b9c8001a051f995b03786b80e4d6ff744eb49e78a0bbdd79582dd521ab78afe26b152f168ffc9abc71690615f7cec226d0e28b95430dfc5dd2ac383346d0b86581e992bd972f770ee793219e56aa71e7f3366ffebe3cceea8441155e22018529dff1a7d55aa926a69bda6e882886840e4a3346767ad48ff7d4dc0388a201c6f6c22e229160ffd91f64af3962e12aea456faa023", 0xb0}, {&(0x7f0000000540)="c481353e234ff8b7bf17eb3316baf47a4e57ac947b876c3feb68d91cd14d06de2eb115636684784887f6d45abec40041cb1ae5e633d155a6e6aa5005748cfbc9e19fab35e473b5b1c9014631ee7142c8605c", 0x52}], 0x5}, 0x240400c0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x80, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b1af8ff00000000bda107000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020702500000000002020207baaf8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000800)=ANY=[@ANYRESDEC=r2], 0x6a) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0006000000000000000000001600"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000d404000000000000070000008500000030000000180100002020642500004bf4002020207b1af8ff00000000bfa100000000000005010000f8ffffffb702000008000000b7030000000000237ddc9b5c2184dc2c0085000000170000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x4, 0x6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0xec, 0x0, 0x0, 0xfc, 0x0, 0x100000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x101, 0x100000000}, 0x4001, 0x400, 0x95, 0x5, 0x2, 0xfffff271, 0x3, 0x0, 0xffffffff, 0x0, 0x8}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x11, 0x2, 0x0) r10 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f0000000100)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) 4.303935053s ago: executing program 0 (id=6851): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r2, 0x58, &(0x7f00000007c0)}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r1, 0x10, 0x0, 0xffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (rerun: 64) mkdir(&(0x7f00000007c0)='./file0\x00', 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x4}, 0x114905, 0x8000000000000000, 0x6, 0x4, 0x100, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d33, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x86bf2056334f3ae6, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0xf, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x8000}, 0x84a8, 0x2f, 0x43a1bd79, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x5, 0x7c, &(0x7f00000002c0)=""/124, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4], &(0x7f00000003c0), 0x10, 0x7}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) (async, rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40012, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x8}, 0x80, 0xd6a, 0xffffff80, 0xb, 0x9, 0x7ff, 0x9, 0x0, 0xecbc, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000640)={0x4, 0x80, 0xe, 0x80, 0x4, 0x0, 0x0, 0x7fffffffffffffff, 0x80400, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3a, 0x1, @perf_bp={&(0x7f0000000340), 0x9}, 0x100080, 0x3, 0x7109, 0x6, 0x4, 0x6, 0x8, 0x0, 0x9, 0x0, 0x40}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x1a, &(0x7f0000000940), 0x4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.900228158s ago: executing program 0 (id=6854): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x84) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) close(r1) (async) socket$kcm(0x2b, 0x1, 0x0) (async) close(r2) (async) socket$kcm(0x2, 0x3, 0x84) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb) (async) close(r2) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) 3.694105067s ago: executing program 0 (id=6856): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xd, 0xffff}, 0x8085, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0xfa1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r0 = socket$kcm(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81200, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x190}, 0x24000001) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000002c0), 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x5, &(0x7f00000000c0)=[{0x35, 0x1, 0x3}, {0x4d, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x4}, {}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.279536703s ago: executing program 3 (id=6857): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d3b}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='c(u&\'\'\t|\t') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000600), 0x8}, 0x2000, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x200000, 0xfffd, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8284000, &(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000580)="a3ce5b60987995b9e988006a1ea1b048880b785b6b2d76331d9b73271c14d4b3") syz_open_procfs$namespace(r6, &(0x7f00000005c0)='ns/pid_for_children\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x3, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1124, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x0, 0x26}, 0x28) 2.879347648s ago: executing program 4 (id=6858): r0 = socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x10000009, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2eb0094401e0728f1dcb09b7", 0x30}], 0x1}, 0x40008c0) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$kcm(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000dd0e83c7732e71a9128cd51977e097ed6460f7c2715aad6f15f56c768cc4ca2ddd7b4ef360485a105bc3d8f8172aec8031127dbdf49c9e0e9e0e223b4c3bd7fe89d80a48114082a4696c3d88e5ed8ea41ce59931e5ccb28a551a3ae11d18e1ffdf72092ae800abb25398cabb7e26ef2af08cdf3cc2fa08334bb37c1bef83aab63aafde4456a527e828e7a6bf60c73a6463ada787dc83ff929e601d2a7650adf62894ac9b4a85ff8b8927120fc08c761368fac3fbf7e825db32ecfd90344b65519b8de85721fe1c9cffb8782d67189d170774e376ee2717471a8ad252f52e707b97492b634e8446490bafd3bb84089a67e49c8b4467bf9397f0d8befb7bd6141f908266f7a6d1d1b58d2cc6bfb68511447cecb0bb4106165346020490ec6063f0aaf7303847a7e0f16f5f2c135042ab3859de0eea88fe5fac0020d006c0e409700e05e439b3f2daec77a0941f446ebc0d2d732a827be72328a3c156624c3b0f404133bf2969e771db87c5076bc4a2d40e539bfcbc6f091b5e98a4684c0d8ca546a9e7df48607c048e0d2014a52c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x10000009, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2eb0094401e0728f1dcb09b7", 0x30}], 0x1}, 0x40008c0) (async) 2.62781781s ago: executing program 0 (id=6859): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000018c0)={r2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x20) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xd8, 0x0, &(0x7f0000000680)="04698cbfa1f0b86b3e4bde5aaae8de9530860d46ba97d17e7765650690d8f959e05774e123d0c54a0f3fc35aa9e4242f597d254007cdad6f4022110dc2105f608db97943d708537633e5bad216d900000045d7fc637d3541a7df7544d9246761c1f24949c9c6028894415bf33eab5400bae0f10430784f29196c26b3fb2e35ac1b4a79cbf9fe44d3d4c6ffc8eb5a8f9e6986f2f8faeba4956339c4ad1177003eab0d27b28bb15f16774be1ed29cb383d71af845c76fdb839a1724c381171bc15f7a6f88d18601c810a58697aa0670c0aa3a73ec2cafbd738", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12b4, 0x23df}, 0x5824, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002f40)=ANY=[@ANYBLOB="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", @ANYRESDEC=r6, @ANYRES32=r1, @ANYBLOB="fa4ef286a2aad8647526e4b8533cab2551a26d5d7d9706b8a051beff97d060bd58d129d2456d1285c4701f98b3b52a8df2bac2913e827df2ed8c717a840625b3f35e3fb6c7bf614151906b2382b4d3d4a8f31fcb7b6d4e435d76848d25bc6bf12ff10b81bd976d1f0e910fdb4fe7a9a4a72fa2bf189d8369c73410", @ANYBLOB, @ANYBLOB="ecf11d90f4939d3e5014ccd8a6da36b69247e8ff1f68904590870fa4a72c601e9d37ba3f5b8bac9d93ff1a0ef2ba5b582591f75d6f58f46fdc54f910ede163f8b0c59850bc2c51ca959b41a18bce6529bcc3d9d1ee3324ef50fade2bd3faae9f0beb5d185c316fe61edca8ab5a2a48fa26ae1ad1235973a38ac876e666789b86099988efd025469abbb89e109dbbaadb5bdcacffe681e1b8eb59ca732552e307d853b3347afb84ede1f99d74dba98424b9931c"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x2}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/54, 0x36}, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x5a}, 0x28) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40086602, &(0x7f0000000180)=0x20) bpf$ITER_CREATE(0x21, &(0x7f00000017c0)={r8}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a01ff0000000071100000000095000000000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.424120528s ago: executing program 6 (id=6860): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x1, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000640)}, 0x101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 2.353248694s ago: executing program 4 (id=6861): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000001304000000005f5f"], 0x0, 0x28, 0x0, 0x1}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80c00, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xb1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[], 0x20) r7 = socket$kcm(0x2, 0xa, 0x2) unlink(0x0) ioctl$SIOCSIFHWADDR(r7, 0x891a, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 2.247591843s ago: executing program 6 (id=6862): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r0, 0x0, 0x0, 0xf1, 0x0, &(0x7f0000001a00)=""/241, 0x5e880b8b, 0x0, 0x3d, 0x0, &(0x7f0000001b00)="8ba9d25ab067d03bc27c033e113bcc2df4ccd21958391b94c0f574892d298bc14666e6162aff90cae7dee2d3564e138cc1965d0226bc5b6cf8e2f21ed8", &(0x7f00000008c0), 0x5, 0x0, 0xc}, 0x50) recvmsg$kcm(r2, 0x0, 0x40012100) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0xf, 0x9, 0x4f, 0x0, 0x101, 0x10006, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x5, 0x2}, 0x28, 0xd8e, 0x66, 0x7, 0x7, 0x0, 0x7fff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='\x00') 2.175814149s ago: executing program 0 (id=6863): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x3, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa2, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80110, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x5d}, 0x0, 0xca, 0x0, 0x4, 0x3, 0x3ff, 0xfffc, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) gettid() close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x40000002) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf2, 0x1, 0x0, 0x62, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfff7fffffffffffc, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x5d31, 0xc2408, 0x52e183d943bbab27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b9a, 0x0, @perf_bp={0x0, 0x6}, 0x20, 0x8, 0x40, 0x1, 0x8, 0x0, 0xff5c, 0x0, 0x2, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) socket$kcm(0xa, 0x2, 0x88) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, 0x0, 0x20044818) sendmsg$sock(r4, 0x0, 0x4004081) 1.814273642s ago: executing program 3 (id=6864): socket$kcm(0x10, 0x2, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1bd, 0x459e, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x76, 0xdc}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x800020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44", 0xc7}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000001840)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c3acbcf3a0000000300000000000093080000000061612e2000"], &(0x7f0000001900)=""/221, 0x2a, 0xdd, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0xfffffe4a, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000000)=""/2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000000000000620000000000000010000000000000008400000008000000f19e710300000064f32b"], 0x28}, 0x41) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="b4e3cdb7b1b711328e3763b79afe18568a2cb91be993154e4aa53e3bc1cbed21b90f6b3b54b48f0a2d0644cc1bc709638f6d8ea480a6f20a8d486fc7ef57ee603b7d493fa48fb999c800000000105954aa21451a1864525f91af57b940bffa158b6bc27cc944b86a00e5f3f826b42becaf5f22", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="85100300000018010000202075250000000000159d34931af8ff09000000bfa1d4b80000000013c2f8211588583ce370f807010000f8ffffffb702000008000000b7030000090000008500000006000000183000000400001800000002000000000000000004000017b3f8ff00000000f8f977857c31a80bac43457ea528009b7b3caf4f7ccf719e54a60759e40fb713ebc510443d49b48b15209e580361edcf7556a2bd4082ae1f00cffdf084f013fa1f603f4aebbb96796a01009bcad71fe0c63e3deefb240f5be14b27e1f6dbfa62938250f3ed9017a8f32df5c031e5f8d1790714cbf00684efc8f7cbc95a7cdf790ede91478502b2e1debf0000"], &(0x7f0000000400)='GPL\x00', 0xfffffff7, 0x23, &(0x7f0000000700)=""/35, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)=[0xffffffffffffffff], &(0x7f00000009c0)=[{0x5, 0x5, 0xf, 0x2}], 0x10, 0x3ff}, 0x94) r4 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x2ba, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2020000006}, 0x0, 0x0, 0xffffffffffffffff, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000001000000000000000300000004000000030000000000000000000005000000000000005f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYRES8=r4, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="00000000000000000000000000000000000000000000000000000000216bf3e343d6166d76550607c18fce14df306ed54b2d1eff34de4a73e843eb6416a1bc3baa6993b351417f4303a55e9712bb0eef75e54d96c96c8a743ebd87687e881026a98d5a62034693316e688c6bade040fdb0c9662df2dd6625524084976b622a1ddd0e7ea9d01850bb6e2b6580373197ca57578405b74c23e0aafee1fb0504f5752337248c07f9ce50537e599de345d6"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 1.514494067s ago: executing program 4 (id=6865): perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8b, 0x5, 0x9, 0x1, 0x1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.423992175s ago: executing program 6 (id=6866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="1900"/12, @ANYRES32, @ANYBLOB="83d13b7c34ec78b5e446a57f789d5057b236c6491006b5a813bdf4ca000b92981b6723c620d58dca78b3da6a94b129c59d4a82414092059d771ebfda3c41df806c8da2aa0facdcb497f046dd7ffac65eed2804554a00fe6ecf9c98803f83d1f1", @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x11, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="951f0a00ed"], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='=cpu '], 0x5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2ffffd335b8cade70300000009000000010000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000040000000c00"/25], 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e", 0x23}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0x0) 1.247305911s ago: executing program 0 (id=6867): bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x2}]}, {0x0, [0x30, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/133, 0x85}, {&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000280)=""/252, 0xfc}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r1 = socket$kcm(0x2a, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000300)=r6) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8915, &(0x7f0000001cc0)) 985.355744ms ago: executing program 6 (id=6868): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1820000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x8, '\x00', r1, 0x0, r2}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@restrict={0x8, 0x0, 0x0, 0xb, 0x4}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @ptr={0x9, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x5f]}}, &(0x7f00000004c0)=""/63, 0x3f, 0x3f, 0x1, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@alu={0x7, 0x1, 0xa, 0x7, 0x8, 0x50, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x2e, &(0x7f0000000440)=""/46, 0x40f00, 0x98, '\x00', r1, 0x25, r3, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x1, 0x80, 0x10000}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x3, 0x2, 0x9, 0x2}, {0x4, 0x4, 0xf, 0x9}, {0x2, 0x1, 0x1}, {0x3, 0x4, 0x6, 0x3}], 0x10, 0x80000000}, 0x94) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r4}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)='\\\x00\x00', 0x3}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000009000000000000000000000000000000000000aef436f66f4cf3c3880d00000000000060ae9ea361189bd8b6906486ad1a4e73fa940cb119cffc7d31ee2542e777789a37e71bfccf3fb4287061e479750ef90d1b3c4148317e0cbb53dd94a70257db36ee475c9e431d7fb69bdd9c82e128c4bb1953e2199aec919736ff45"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r9, &(0x7f0000000780)}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 649.017713ms ago: executing program 4 (id=6869): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1000000000000001, 0x12) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 64) r3 = getpid() write$cgroup_pid(r1, &(0x7f00000000c0)=r3, 0x12) openat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) 615.138346ms ago: executing program 6 (id=6870): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b703000000000000850000008300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b493016411"], 0xfdef) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="58db1d", 0x0, 0x0, 0x0, 0x40}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x7, 0x2, 0x2}}, 0x80, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan1\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 480.742098ms ago: executing program 4 (id=6871): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e", 0x19}], 0x1}, 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) socketpair(0xa, 0x3, 0xff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7c1292442b01efe434b6ff54b9"], 0xfe3a) 328.016582ms ago: executing program 3 (id=6872): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x5, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001680)={@ifindex, 0x26, 0x1, 0x10000, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000015c0)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001700), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="2e0000efab650019000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB, @ANYRES64=r2], 0x20) r4 = socket$kcm(0x28, 0x5, 0x0) close(r4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) socket$kcm(0xa, 0x3, 0x73) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0x11, &(0x7f0000000000), 0x4) socket$kcm(0x2, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1CC\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000003280)=ANY=[], 0x38}, 0x41) 170.098525ms ago: executing program 6 (id=6873): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000458c35d43ae7040019b06e5454f20a698b65cbec40bf1ac6553202c7b5f9bfd104ca34461bafca4d413462534c61b18de64b3de09bbcc585e72ffe304c4740fac1c352129526701ee9552a176601000000010000001e96d2296e7a8d828e2034924e79631c55765929b07b2ff2c144f9c717b3eac18d692b50", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x20, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:'], 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="62202a3a2a20720033e3e8"], 0x8) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r5 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="62a02a3a2a20726d00"], 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) r7 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x20, 0x480c0}, 0x20000005) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc0000000000000014000000000000"], 0x68}, 0x0) 0s ago: executing program 4 (id=6874): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff", 0x21}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e08000007", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63", 0x8}], 0x1}, 0x0) socketpair(0x5, 0x2, 0x9, &(0x7f00000000c0)) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00"], 0xfe33) kernel console output (not intermixed with test programs): bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.341324][T12694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.518237][T26382] netlink: 'syz.5.5218': attribute type 19 has an invalid length. [ 1482.550016][T26382] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5218'. [ 1482.858413][T26157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.736355][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.745473][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.835274][T26157] veth0_vlan: entered promiscuous mode [ 1484.912867][T26157] veth1_vlan: entered promiscuous mode [ 1485.253485][T26157] veth0_macvtap: entered promiscuous mode [ 1485.306278][T26157] veth1_macvtap: entered promiscuous mode [ 1485.423823][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.455424][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.476131][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.508299][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.535559][T26157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1485.584232][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 1485.596785][T26430] netlink: 'syz.0.5228': attribute type 3 has an invalid length. [ 1485.605119][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.605145][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.605167][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.605187][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.605205][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.607575][T26157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1485.660106][T26430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5228'. [ 1485.820561][T26157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.849788][T26157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.858781][T26157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.889903][T26157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.313091][T18770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.370125][T18770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1486.493811][T26440] netlink: 'syz.5.5230': attribute type 21 has an invalid length. [ 1486.511096][T26440] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5230'. [ 1486.650879][T12702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.658814][T12702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.130467][T26507] netlink: 'syz.4.5242': attribute type 2 has an invalid length. [ 1491.176189][T26507] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5242'. [ 1491.888609][T26522] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5245'. [ 1491.923881][T26522] openvswitch: netlink: Flow key attribute not present in set flow. [ 1492.685331][T26532] macsec0: entered promiscuous mode [ 1492.726240][T26532] macsec0: entered allmulticast mode [ 1492.753562][T26532] veth1_macvtap: entered allmulticast mode [ 1496.366546][T26583] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5258'. [ 1496.653926][T26597] netlink: 'syz.0.5260': attribute type 21 has an invalid length. [ 1496.720777][T26597] netlink: 'syz.0.5260': attribute type 20 has an invalid length. [ 1496.729934][T26597] IPv6: NLM_F_CREATE should be specified when creating new route [ 1497.333825][T26606] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1498.358323][T26628] netlink: 'syz.0.5267': attribute type 9 has an invalid length. [ 1498.488279][T26628] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5267'. [ 1499.274502][T26635] netlink: 'syz.0.5269': attribute type 29 has an invalid length. [ 1499.361091][T26635] netlink: 'syz.0.5269': attribute type 29 has an invalid length. [ 1499.370005][T26636] netlink: 'syz.0.5269': attribute type 29 has an invalid length. [ 1499.427831][T26636] netlink: 'syz.0.5269': attribute type 29 has an invalid length. [ 1499.479935][T26640] netlink: 'syz.0.5269': attribute type 29 has an invalid length. [ 1499.560404][T26639] netlink: 'syz.5.5268': attribute type 19 has an invalid length. [ 1500.872441][T26655] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.5273'. [ 1502.115407][T26667] netlink: 'syz.0.5276': attribute type 64 has an invalid length. [ 1503.558402][T26686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5283'. [ 1505.902778][T26716] sit0: entered allmulticast mode [ 1506.046035][T26719] sit0: entered promiscuous mode [ 1508.408939][T26760] netlink: 'syz.3.5301': attribute type 7 has an invalid length. [ 1508.442594][T26760] netlink: 'syz.3.5301': attribute type 1 has an invalid length. [ 1508.470317][T26760] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5301'. [ 1508.713860][T26765] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5302'. [ 1508.771466][T26765] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1512.398160][T18975] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 1513.472419][T26818] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1515.642195][T26860] netlink: 'syz.3.5330': attribute type 21 has an invalid length. [ 1515.759230][T26864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1515.862550][T26863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1516.412965][T26871] pim6reg1: entered promiscuous mode [ 1516.419570][T26871] pim6reg1: entered allmulticast mode [ 1516.851716][T26877] pim6reg1: entered promiscuous mode [ 1516.859962][T26877] pim6reg1: entered allmulticast mode [ 1517.695995][T26896] netlink: 'syz.3.5338': attribute type 4 has an invalid length. [ 1517.710098][T26896] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5338'. [ 1517.727534][T26896] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1518.703912][T26912] netlink: 'syz.3.5343': attribute type 3 has an invalid length. [ 1518.730165][T26912] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5343'. [ 1519.938166][T26943] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5353'. [ 1519.970035][T26941] netlink: 'syz.5.5351': attribute type 4 has an invalid length. [ 1520.007494][T26943] netlink: 76512 bytes leftover after parsing attributes in process `syz.0.5353'. [ 1521.057902][T26959] netlink: 'syz.5.5356': attribute type 10 has an invalid length. [ 1521.091094][T26959] `: Device ipvlan1 is up. Set it down before adding it as a team port [ 1521.768255][T26975] netlink: 'syz.3.5358': attribute type 3 has an invalid length. [ 1521.821264][T26975] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5358'. [ 1522.120078][T26979] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1522.419239][T26985] netlink: 'syz.4.5363': attribute type 33 has an invalid length. [ 1522.453925][T26985] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5363'. [ 1522.517922][T26985] `: renamed from team0 (while UP) [ 1524.279385][T27013] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5368'. [ 1524.442337][T27006] netlink: 'syz.0.5367': attribute type 19 has an invalid length. [ 1524.460195][T27006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5367'. [ 1524.480726][T27008] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5368'. [ 1524.501519][T27012] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5368'. [ 1527.230700][T18975] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 1528.686140][T27054] netlink: 'syz.0.5378': attribute type 4 has an invalid length. [ 1528.719720][T27054] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5378'. [ 1529.197445][T27067] netlink: 'syz.4.5383': attribute type 21 has an invalid length. [ 1529.201485][T27065] netlink: 'syz.3.5382': attribute type 153 has an invalid length. [ 1529.219442][T27065] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5382'. [ 1529.240218][T27067] netlink: 'syz.4.5383': attribute type 3 has an invalid length. [ 1529.248513][T27067] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5383'. [ 1529.302128][T27071] netlink: 'syz.0.5384': attribute type 2 has an invalid length. [ 1529.985316][T27074] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5386'. [ 1533.166067][T27116] netlink: 'syz.4.5398': attribute type 5 has an invalid length. [ 1533.208783][T27116] netlink: 'syz.4.5398': attribute type 1 has an invalid length. [ 1533.239406][T27119] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5399'. [ 1533.272094][T27116] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.5398'. [ 1533.482502][T27119] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5399'. [ 1534.086094][T27130] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5401'. [ 1534.988735][T27139] netlink: 'syz.5.5403': attribute type 4 has an invalid length. [ 1535.021778][T27139] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5403'. [ 1535.049311][T27144] syzkaller0: entered promiscuous mode [ 1535.077068][T27144] syzkaller0: entered allmulticast mode [ 1536.686546][T27161] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5410'. [ 1540.509515][T27188] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.5417'. [ 1540.539884][T27188] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1540.558602][T27188] openvswitch: netlink: Message has 4 unknown bytes. [ 1540.954130][T27190] netlink: 'syz.4.5416': attribute type 4 has an invalid length. [ 1540.969399][T27190] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5416'. [ 1541.201164][T27196] netlink: 'syz.3.5418': attribute type 6 has an invalid length. [ 1541.808208][T27199] netlink: 'syz.0.5420': attribute type 3 has an invalid length. [ 1541.822687][T27199] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5420'. [ 1541.946988][T27201] netlink: 'syz.4.5421': attribute type 4 has an invalid length. [ 1541.968724][T27201] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1542.046833][T27201] .`: renamed from bond0 (while UP) [ 1542.178563][T27206] netlink: 763 bytes leftover after parsing attributes in process `syz.3.5422'. [ 1542.231947][T27207] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5422'. [ 1544.850854][T27242] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1544.900577][T27242] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1544.968348][T27242] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1545.020298][T27242] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1546.348599][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.355654][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.703293][T27284] pim6reg1: entered promiscuous mode [ 1549.722124][T27284] pim6reg1: entered allmulticast mode [ 1552.490232][T27302] __nla_validate_parse: 29 callbacks suppressed [ 1552.490255][T27302] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5445'. [ 1554.334530][T27312] syzkaller0: entered promiscuous mode [ 1554.355187][T27312] syzkaller0: entered allmulticast mode [ 1555.259252][T27319] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5450'. [ 1557.090527][T27325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1557.640173][T27331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5455'. [ 1558.519502][T27345] netlink: 'syz.5.5458': attribute type 10 has an invalid length. [ 1558.552307][T27345] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5458'. [ 1558.591527][T27345] €Â0: entered promiscuous mode [ 1558.612510][T27345] batman_adv: batadv0: Interface deactivated: €Â0 [ 1558.633850][T27345] batman_adv: batadv0: Removing interface: €Â0 [ 1559.240917][T27357] netlink: 'syz.3.5461': attribute type 10 has an invalid length. [ 1559.281342][T27357] lo: entered allmulticast mode [ 1560.488454][T27380] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5467'. [ 1562.214921][T27400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5473'. [ 1563.320063][T27409] tun0: tun_chr_ioctl cmd 1074025675 [ 1563.377106][T27409] tun0: persist enabled [ 1563.652920][T27411] tun0: tun_chr_ioctl cmd 2147767519 [ 1563.760871][T27411] tun0: tun_chr_ioctl cmd 1074025672 [ 1563.766755][T27411] tun0: ignored: set checksum disabled [ 1567.572326][T27454] netlink: set zone limit has 8 unknown bytes [ 1567.837503][T27455] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.5489'. [ 1568.539761][T27468] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.5492'. [ 1568.621162][T27468] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.5492'. [ 1568.722103][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5493'. [ 1568.783171][T27464] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.5492'. [ 1569.039956][T27469] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.5492'. [ 1572.184409][T27521] netlink: 'syz.5.5506': attribute type 13 has an invalid length. [ 1572.200009][T27521] netlink: 160 bytes leftover after parsing attributes in process `syz.5.5506'. [ 1573.697647][T27541] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5510'. [ 1574.308941][T27545] ref_ctr_offset mismatch. inode: 0x31c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1577.392880][T27599] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.590005][T27599] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5526'. [ 1578.626021][T27616] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.5532'. [ 1578.679127][T27616] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.5532'. [ 1578.704765][T27615] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.5532'. [ 1578.725468][T27615] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.5532'. [ 1580.469049][T27635] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5536'. [ 1580.533894][T27635] netlink: 'syz.3.5536': attribute type 29 has an invalid length. [ 1580.581924][T27635] netlink: 'syz.3.5536': attribute type 29 has an invalid length. [ 1581.290020][T18975] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1583.644671][T27667] €Â0: renamed from batadv_slave_1 (while UP) [ 1584.105019][T25862] Bluetooth: hci2: command 0x0406 tx timeout [ 1585.273609][T27681] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.5549'. [ 1589.203248][T27739] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 1591.225215][T27764] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5572'. [ 1592.308631][T27774] syzkaller0: entered promiscuous mode [ 1592.346021][T27774] syzkaller0: entered allmulticast mode [ 1592.929055][T27776] netlink: 'syz.4.5574': attribute type 1 has an invalid length. [ 1592.939692][T27776] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.5574'. [ 1599.355662][T27792] syz.0.5579[27792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1599.356053][T27792] syz.0.5579[27792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1599.730749][T27797] netlink: 'syz.0.5579': attribute type 21 has an invalid length. [ 1602.885776][T27841] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5593'. [ 1603.366036][T27847] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5596'. [ 1604.752160][T27866] netlink: 'syz.0.5601': attribute type 2 has an invalid length. [ 1604.760884][T27866] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.5601'. [ 1607.954232][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.960863][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.772395][T27910] syz.4.5615[27910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1608.772658][T27910] syz.4.5615[27910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1609.648490][T27927] netlink: 'syz.4.5617': attribute type 7 has an invalid length. [ 1609.700212][T27927] netlink: 'syz.4.5617': attribute type 1 has an invalid length. [ 1609.713231][T27927] netlink: 182156 bytes leftover after parsing attributes in process `syz.4.5617'. [ 1611.576005][T27964] netlink: 'syz.3.5625': attribute type 39 has an invalid length. [ 1611.718355][T27968] netlink: 'syz.0.5626': attribute type 9 has an invalid length. [ 1611.749716][T27968] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5626'. [ 1612.269256][T27977] netlink: 'syz.5.5638': attribute type 1 has an invalid length. [ 1612.297462][T27977] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.5638'. [ 1613.234333][T27990] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.5634'. [ 1613.236171][T27992] netlink: 'syz.0.5635': attribute type 2 has an invalid length. [ 1613.274589][T27992] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5635'. [ 1614.931674][T28012] netlink: 'syz.0.5640': attribute type 10 has an invalid length. [ 1615.351954][T28012] team0: Port device geneve1 added [ 1616.168576][T28032] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5645'. [ 1617.144372][T28041] netlink: 'syz.3.5648': attribute type 6 has an invalid length. [ 1617.191429][T28041] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5648'. [ 1617.849154][T28049] veth1_macvtap: left promiscuous mode [ 1617.893748][T28049] macsec0: entered allmulticast mode [ 1618.840002][T28068] IPv6: Can't replace route, no match found [ 1619.854250][T28087] netlink: 'syz.0.5659': attribute type 2 has an invalid length. [ 1619.899701][T28087] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5659'. [ 1621.419203][T28105] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.5665'. [ 1621.945434][T28112] Â: renamed from pim6reg1 [ 1623.350790][T28121] netlink: 'syz.4.5668': attribute type 21 has an invalid length. [ 1623.360139][T28121] IPv6: NLM_F_CREATE should be specified when creating new route [ 1623.368236][T28121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1623.375715][T28121] IPv6: NLM_F_CREATE should be set when creating new route [ 1623.384099][T28121] IPv6: NLM_F_CREATE should be set when creating new route [ 1623.391614][T28121] IPv6: NLM_F_CREATE should be set when creating new route [ 1624.304636][T28132] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5672'. [ 1627.275417][T28176] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5682'. [ 1627.455167][T28178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1627.462847][T28178] IPv6: NLM_F_CREATE should be set when creating new route [ 1627.470408][T28178] IPv6: NLM_F_CREATE should be set when creating new route [ 1627.477692][T28178] IPv6: NLM_F_CREATE should be set when creating new route [ 1627.560419][T28175] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.5683'. [ 1627.893746][T28181] @: port 1(`) entered blocking state [ 1627.899409][T28181] @: port 1(`) entered disabled state [ 1627.991644][T28181] `: entered allmulticast mode [ 1628.110254][T28181] team_slave_0: entered allmulticast mode [ 1628.116100][T28181] team_slave_1: entered allmulticast mode [ 1628.150128][T28187] netlink: 'syz.3.5686': attribute type 3 has an invalid length. [ 1628.179476][T28187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5686'. [ 1628.241118][T28181] `: entered promiscuous mode [ 1628.246008][T28181] team_slave_0: entered promiscuous mode [ 1628.300151][T28181] team_slave_1: entered promiscuous mode [ 1629.240165][T28198] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5689'. [ 1633.464338][T28233] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5702'. [ 1633.487848][T28233] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5702'. [ 1633.530564][T28242] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5702'. [ 1633.600581][T28233] netlink: 'syz.0.5702': attribute type 21 has an invalid length. [ 1634.496715][T28250] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.5706'. [ 1635.926151][T28268] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5710'. [ 1636.079882][T28268] veth0_to_bond: entered promiscuous mode [ 1639.829911][T28311] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5720'. [ 1639.859926][T28310] IPv6: Can't replace route, no match found [ 1639.920095][T28311] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1639.928025][T28313] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1640.835925][T28325] netlink: 'syz.3.5725': attribute type 10 has an invalid length. [ 1641.359549][T28329] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5727'. [ 1641.413233][T28329] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1641.439997][T28329] CPU: 1 PID: 28329 Comm: syz.0.5727 Not tainted syzkaller #0 [ 1641.447588][T28329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1641.457819][T28329] Call Trace: [ 1641.461189][T28329] [ 1641.464333][T28329] dump_stack_lvl+0x18c/0x250 [ 1641.469245][T28329] ? show_regs_print_info+0x20/0x20 [ 1641.474564][T28329] ? load_image+0x400/0x400 [ 1641.479283][T28329] sysfs_warn_dup+0x8e/0xa0 [ 1641.484115][T28329] sysfs_do_create_link_sd+0xc0/0x110 [ 1641.489698][T28329] device_add_class_symlinks+0x1cf/0x240 [ 1641.495557][T28329] device_add+0x507/0xc20 [ 1641.500033][T28329] wiphy_register+0x1dad/0x2ae0 [ 1641.505187][T28329] ? cfg80211_event_work+0x40/0x40 [ 1641.510386][T28329] ? minstrel_ht_alloc+0x88a/0x990 [ 1641.515646][T28329] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1641.521931][T28329] ieee80211_register_hw+0x3464/0x4250 [ 1641.527723][T28329] ? ieee80211_tasklet_handler+0x20/0x20 [ 1641.533452][T28329] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1641.539561][T28329] ? __debug_object_init+0xec/0x450 [ 1641.544887][T28329] ? __asan_memset+0x22/0x40 [ 1641.549584][T28329] ? __hrtimer_init+0x186/0x270 [ 1641.554733][T28329] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1641.560700][T28329] ? mac80211_hwsim_free+0x220/0x220 [ 1641.566117][T28329] ? rcu_is_watching+0x15/0xb0 [ 1641.571069][T28329] ? kstrndup+0xbd/0x140 [ 1641.575481][T28329] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1641.580818][T28329] ? __nla_validate+0x50/0x50 [ 1641.585666][T28329] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1641.592223][T28329] ? __nla_parse+0x40/0x50 [ 1641.596783][T28329] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1641.603250][T28329] genl_family_rcv_msg_doit+0x211/0x310 [ 1641.608905][T28329] ? end_current_label_crit_section+0x170/0x170 [ 1641.615292][T28329] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1641.621362][T28329] ? bpf_lsm_capable+0x9/0x10 [ 1641.626238][T28329] ? security_capable+0x89/0xb0 [ 1641.631420][T28329] genl_rcv_msg+0x619/0x7a0 [ 1641.636078][T28329] ? genl_bind+0x360/0x360 [ 1641.640596][T28329] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1641.647047][T28329] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1641.653815][T28329] netlink_rcv_skb+0x241/0x4d0 [ 1641.658694][T28329] ? genl_bind+0x360/0x360 [ 1641.663324][T28329] ? netlink_ack+0x1180/0x1180 [ 1641.668277][T28329] ? __lock_acquire+0x7d40/0x7d40 [ 1641.673551][T28329] ? down_read+0x1ac/0x2e0 [ 1641.678328][T28329] genl_rcv+0x28/0x40 [ 1641.682553][T28329] netlink_unicast+0x751/0x8d0 [ 1641.687503][T28329] netlink_sendmsg+0x8d0/0xbf0 [ 1641.692377][T28329] ? perf_trace_lock+0x304/0x3b0 [ 1641.697674][T28329] ? netlink_getsockopt+0x590/0x590 [ 1641.703008][T28329] ? aa_sock_msg_perm+0x94/0x150 [ 1641.708049][T28329] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1641.713444][T28329] ? security_socket_sendmsg+0x80/0xa0 [ 1641.719070][T28329] ? netlink_getsockopt+0x590/0x590 [ 1641.724564][T28329] ____sys_sendmsg+0x5ba/0x960 [ 1641.729470][T28329] ? __asan_memset+0x22/0x40 [ 1641.734280][T28329] ? __sys_sendmsg_sock+0x30/0x30 [ 1641.739398][T28329] ? __import_iovec+0x5f2/0x850 [ 1641.744518][T28329] ? import_iovec+0x73/0xa0 [ 1641.749515][T28329] ___sys_sendmsg+0x2a6/0x360 [ 1641.754425][T28329] ? __sys_sendmsg+0x2a0/0x2a0 [ 1641.759606][T28329] __se_sys_sendmsg+0x1c2/0x2b0 [ 1641.764758][T28329] ? __x64_sys_sendmsg+0x80/0x80 [ 1641.770065][T28329] ? lockdep_hardirqs_on+0x98/0x150 [ 1641.775398][T28329] do_syscall_64+0x55/0xa0 [ 1641.779919][T28329] ? clear_bhb_loop+0x40/0x90 [ 1641.784783][T28329] ? clear_bhb_loop+0x40/0x90 [ 1641.789823][T28329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1641.796240][T28329] RIP: 0033:0x7f067499c629 [ 1641.800836][T28329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.820633][T28329] RSP: 002b:00007f06758dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1641.829168][T28329] RAX: ffffffffffffffda RBX: 00007f0674c15fa0 RCX: 00007f067499c629 [ 1641.837228][T28329] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1641.845291][T28329] RBP: 00007f0674a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1641.853375][T28329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.861699][T28329] R13: 00007f0674c16038 R14: 00007f0674c15fa0 R15: 00007ffeec5c82e8 [ 1641.869856][T28329] [ 1641.895158][T28338] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5728'. [ 1641.985099][T28338] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5728'. [ 1642.196521][T28337] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5728'. [ 1642.322448][T28341] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5728'. [ 1642.348267][T28333] netlink: 208064 bytes leftover after parsing attributes in process `syz.5.5728'. [ 1642.381044][T28339] netlink: 'syz.3.5729': attribute type 21 has an invalid length. [ 1642.422391][T28339] netlink: 'syz.3.5729': attribute type 20 has an invalid length. [ 1642.441107][T28339] IPv6: NLM_F_CREATE should be specified when creating new route [ 1643.187619][T28347] netlink: 'syz.0.5731': attribute type 39 has an invalid length. [ 1644.101866][T28350] delete_channel: no stack [ 1646.737308][T28381] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5741'. [ 1647.456649][T28397] IPv6: NLM_F_CREATE should be specified when creating new route [ 1647.572047][T28397] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5744'. [ 1647.684657][T28401] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5747'. [ 1648.573942][T28417] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.5751'. [ 1648.978281][T28425] delete_channel: no stack [ 1649.001491][T28425] delete_channel: no stack [ 1649.065122][T28423] netlink: 'syz.5.5752': attribute type 10 has an invalid length. [ 1651.341818][T28448] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5760'. [ 1651.523909][T28452] netlink: 'syz.5.5761': attribute type 9 has an invalid length. [ 1651.532041][T28452] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.5761'. [ 1652.297790][T28462] netlink: 'syz.5.5764': attribute type 8 has an invalid length. [ 1652.335962][T28462] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5764'. [ 1652.451646][T28465] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5766'. [ 1653.127482][T28471] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.5768'. [ 1654.076827][T28483] netlink: 'syz.5.5770': attribute type 11 has an invalid length. [ 1654.105317][T28483] netlink: 184116 bytes leftover after parsing attributes in process `syz.5.5770'. [ 1654.368737][T28483] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1654.427037][T28478] netlink: 'syz.3.5771': attribute type 7 has an invalid length. [ 1654.440151][T28478] netlink: 'syz.3.5771': attribute type 1 has an invalid length. [ 1654.459097][T28478] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5771'. [ 1654.496925][T28489] netlink: 'syz.4.5772': attribute type 13 has an invalid length. [ 1654.505235][T28489] netlink: 160 bytes leftover after parsing attributes in process `syz.4.5772'. [ 1654.552605][T28489] erspan0: refused to change device tx_queue_len [ 1654.577331][T28489] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1658.613899][T28521] lo: entered promiscuous mode [ 1658.618779][T28521] lo: left allmulticast mode [ 1658.687653][T28523] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.5782'. [ 1659.359013][T28535] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5785'. [ 1659.892197][T28539] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5787'. [ 1661.820984][T28570] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.5795'. [ 1662.197263][T28575] netlink: 'syz.3.5796': attribute type 9 has an invalid length. [ 1662.205653][T28575] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5796'. [ 1662.527396][T28572] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5796'. [ 1662.650264][T28572] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1662.710493][T28568] delete_channel: no stack [ 1663.067372][T28584] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5799'. [ 1663.397313][T28590] lo: left promiscuous mode [ 1663.417354][T28590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1665.344214][T28618] netlink: 142528 bytes leftover after parsing attributes in process `syz.0.5810'. [ 1665.417896][T28618] netlink: 'syz.0.5810': attribute type 1 has an invalid length. [ 1665.463752][T28620] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.5810'. [ 1665.783757][T28623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1665.920449][T28625] netlink: 'syz.0.5812': attribute type 29 has an invalid length. [ 1665.964159][T28625] netlink: 'syz.0.5812': attribute type 29 has an invalid length. [ 1666.027943][T28625] netlink: 'syz.0.5812': attribute type 10 has an invalid length. [ 1666.318055][T28631] netlink: 'syz.4.5813': attribute type 17 has an invalid length. [ 1666.382519][T28631] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5813'. [ 1666.402763][T28631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1667.670034][T28646] syz.4.5819: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1667.750770][T28646] CPU: 1 PID: 28646 Comm: syz.4.5819 Not tainted syzkaller #0 [ 1667.758343][T28646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1667.768588][T28646] Call Trace: [ 1667.772024][T28646] [ 1667.775037][T28646] dump_stack_lvl+0x18c/0x250 [ 1667.779900][T28646] ? show_regs_print_info+0x20/0x20 [ 1667.785198][T28646] ? load_image+0x400/0x400 [ 1667.789809][T28646] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1667.796296][T28646] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1667.802949][T28646] warn_alloc+0x246/0x340 [ 1667.807307][T28646] ? stack_trace_save+0xaa/0x100 [ 1667.812487][T28646] ? zone_watermark_ok_safe+0x230/0x230 [ 1667.818169][T28646] ? kasan_set_track+0x5f/0x70 [ 1667.823129][T28646] ? kasan_set_track+0x4e/0x70 [ 1667.828245][T28646] ? __kasan_kmalloc+0x8f/0xa0 [ 1667.833068][T28646] ? xsk_init_queue+0xad/0x100 [ 1667.837872][T28646] ? xsk_setsockopt+0x4e5/0x760 [ 1667.842764][T28646] ? do_sock_setsockopt+0x175/0x1a0 [ 1667.847996][T28646] ? __x64_sys_setsockopt+0x182/0x200 [ 1667.853589][T28646] __vmalloc_node_range+0x126/0x1330 [ 1667.859169][T28646] ? free_vm_area+0x50/0x50 [ 1667.863948][T28646] vmalloc_user+0x74/0x80 [ 1667.868402][T28646] ? xskq_create+0xbf/0x170 [ 1667.872941][T28646] xskq_create+0xbf/0x170 [ 1667.877437][T28646] xsk_init_queue+0xad/0x100 [ 1667.882369][T28646] xsk_setsockopt+0x4e5/0x760 [ 1667.887294][T28646] ? xsk_poll+0x680/0x680 [ 1667.891934][T28646] ? __fget_files+0x28/0x4b0 [ 1667.896654][T28646] ? __fget_files+0x28/0x4b0 [ 1667.901457][T28646] ? aa_sock_opt_perm+0x74/0x100 [ 1667.906523][T28646] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1667.912409][T28646] ? security_socket_setsockopt+0x7e/0xa0 [ 1667.918191][T28646] ? xsk_poll+0x680/0x680 [ 1667.922687][T28646] do_sock_setsockopt+0x175/0x1a0 [ 1667.927959][T28646] ? __fdget+0x180/0x210 [ 1667.932265][T28646] __x64_sys_setsockopt+0x182/0x200 [ 1667.937607][T28646] do_syscall_64+0x55/0xa0 [ 1667.942071][T28646] ? clear_bhb_loop+0x40/0x90 [ 1667.946784][T28646] ? clear_bhb_loop+0x40/0x90 [ 1667.951591][T28646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1667.957604][T28646] RIP: 0033:0x7f681ad9c629 [ 1667.962228][T28646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.982129][T28646] RSP: 002b:00007f681bc2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1667.990609][T28646] RAX: ffffffffffffffda RBX: 00007f681b016090 RCX: 00007f681ad9c629 [ 1667.998654][T28646] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 1668.006679][T28646] RBP: 00007f681ae32b39 R08: 0000000000000004 R09: 0000000000000000 [ 1668.014891][T28646] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1668.022983][T28646] R13: 00007f681b016128 R14: 00007f681b016090 R15: 00007ffdbb760e78 [ 1668.031212][T28646] [ 1668.042803][T28646] Mem-Info: [ 1668.046106][T28646] active_anon:9380 inactive_anon:0 isolated_anon:0 [ 1668.046106][T28646] active_file:18707 inactive_file:40540 isolated_file:0 [ 1668.046106][T28646] unevictable:768 dirty:32 writeback:0 [ 1668.046106][T28646] slab_reclaimable:10779 slab_unreclaimable:97189 [ 1668.046106][T28646] mapped:24294 shmem:1385 pagetables:699 [ 1668.046106][T28646] sec_pagetables:0 bounce:0 [ 1668.046106][T28646] kernel_misc_reclaimable:0 [ 1668.046106][T28646] free:1335902 free_pcp:8133 free_cma:0 [ 1668.140074][T28646] Node 0 active_anon:37548kB inactive_anon:0kB active_file:74828kB inactive_file:161968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97080kB dirty:128kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11192kB pagetables:2884kB sec_pagetables:0kB all_unreclaimable? no [ 1668.219924][T28646] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1668.311268][T28646] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1668.369923][T28646] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1668.388239][T28646] Node 0 DMA32 free:1437620kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:37460kB inactive_anon:0kB active_file:74828kB inactive_file:161144kB unevictable:1536kB writepending:128kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:9468kB local_pcp:4772kB free_cma:0kB [ 1668.463719][T28646] lowmem_reserve[]: 0 0 0 0 0 [ 1668.474193][T28646] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1668.602272][T28646] lowmem_reserve[]: 0 0 0 0 0 [ 1668.607177][T28646] Node 1 Normal free:3890620kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24028kB local_pcp:9448kB free_cma:0kB [ 1668.840441][T28646] lowmem_reserve[]: 0 0 0 0 0 [ 1668.845745][T28646] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1668.871321][T28646] Node 0 DMA32: 1799*4kB (UME) 1613*8kB (UME) 1527*16kB (UME) 1014*32kB (UME) 254*64kB (UME) 301*128kB (UME) 257*256kB (UME) 164*512kB (UM) 131*1024kB (UM) 7*2048kB (UM) 246*4096kB (UM) = 1437620kB [ 1668.943130][T28646] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1668.999959][T28646] Node 1 Normal: 269*4kB (UME) 81*8kB (UME) 56*16kB (UME) 58*32kB (UME) 17*64kB (UME) 8*128kB (UME) 2*256kB (UM) 1*512kB (E) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3890620kB [ 1669.047124][T28646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1669.062466][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.062561][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.167938][T28646] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1669.188454][T28646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1669.208933][T28646] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1669.229747][T28646] 60634 total pagecache pages [ 1669.234603][T28646] 0 pages in swap cache [ 1669.238881][T28646] Free swap = 124996kB [ 1669.258146][T28646] Total swap = 124996kB [ 1669.268343][T28646] 2097051 pages RAM [ 1669.275525][T28646] 0 pages HighMem/MovableOnly [ 1669.292414][T28646] 416922 pages reserved [ 1669.297488][T28646] 0 pages cma reserved [ 1669.962106][T28677] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5828'. [ 1671.091529][T12689] tipc: Subscription rejected, illegal request [ 1671.156923][T28692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.165576][T28692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.275382][T28692] bridge0: entered allmulticast mode [ 1676.427938][T28740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.436038][T28740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.450569][T28740] bridge0: entered allmulticast mode [ 1676.482369][T28741] bridge_slave_1: left allmulticast mode [ 1676.499339][T28741] bridge_slave_1: left promiscuous mode [ 1676.515498][T28741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.686031][T28741] bridge_slave_0: left allmulticast mode [ 1676.710909][T28741] bridge_slave_0: left promiscuous mode [ 1676.740676][T28741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.032277][T28744] netlink: 'syz.5.5846': attribute type 21 has an invalid length. [ 1677.040854][T28744] IPv6: NLM_F_CREATE should be specified when creating new route [ 1677.049275][T28747] netlink: 'syz.4.5847': attribute type 10 has an invalid length. [ 1677.059980][T28747] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5847'. [ 1677.071753][T28750] IPv6: Can't replace route, no match found [ 1684.003235][T28795] netlink: 'syz.0.5859': attribute type 1 has an invalid length. [ 1684.042571][T28795] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5859'. [ 1685.842678][T28795] netlink: 'syz.0.5859': attribute type 11 has an invalid length. [ 1685.980202][T28795] netlink: 126332 bytes leftover after parsing attributes in process `syz.0.5859'. [ 1689.801129][T28849] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5872'. [ 1690.476767][T28856] netlink: 'syz.0.5874': attribute type 10 has an invalid length. [ 1690.680618][T28856] team0: Device veth1_macvtap failed to register rx_handler [ 1691.500072][T18975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1691.513245][T18975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1691.522453][T18975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1691.541725][T18975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1691.552572][T18975] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1691.560144][T18975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1691.781678][T28841] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.946268][T28841] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.025379][T28841] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.589749][T28868] chnl_net:caif_netlink_parms(): no params data found [ 1692.644886][T28841] tipc: Left network mode [ 1693.515638][T28940] netlink: 'syz.3.5891': attribute type 10 has an invalid length. [ 1693.540930][T28940] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1693.609778][T25862] Bluetooth: hci3: command tx timeout [ 1694.785083][T28868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.807400][T28868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.837611][T28868] bridge_slave_0: entered allmulticast mode [ 1694.851800][T28868] bridge_slave_0: entered promiscuous mode [ 1695.024022][T28868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.024749][T28962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1695.046802][T28868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.057853][T28868] bridge_slave_1: entered allmulticast mode [ 1695.070902][T28868] bridge_slave_1: entered promiscuous mode [ 1695.244477][T28967] netlink: 'syz.0.5896': attribute type 39 has an invalid length. [ 1695.421413][T28868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.462336][T28868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.689740][T25862] Bluetooth: hci3: command tx timeout [ 1695.782125][T28868] team0: Port device team_slave_0 added [ 1695.812806][T28868] team0: Port device team_slave_1 added [ 1695.954145][T28868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.965358][T28868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.996476][T28868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.044598][T28868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1696.069850][T28868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.106767][T28868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.273090][T28868] hsr_slave_0: entered promiscuous mode [ 1696.291281][T28868] hsr_slave_1: entered promiscuous mode [ 1696.348755][T28868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1696.371602][T28868] Cannot create hsr debugfs directory [ 1696.377441][T28980] netlink: 'syz.0.5900': attribute type 21 has an invalid length. [ 1696.389841][T28980] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5900'. [ 1697.204313][T29002] netlink: 'syz.0.5903': attribute type 21 has an invalid length. [ 1697.219809][T29002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5903'. [ 1697.234330][T29002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5903'. [ 1697.519802][T29006] tap0: tun_chr_ioctl cmd 1074025677 [ 1697.525584][T29006] tap0: linktype set to 0 [ 1697.769861][T25862] Bluetooth: hci3: command tx timeout [ 1698.037810][T29012] netlink: 'syz.3.5906': attribute type 10 has an invalid length. [ 1698.852794][T28841] veth0_to_team: left allmulticast mode [ 1698.858447][T28841] veth0_to_team: left promiscuous mode [ 1698.884902][T28841] Ÿë: port 1(veth0_to_team) entered disabled state [ 1698.919405][T28841] bridge_slave_1: left allmulticast mode [ 1698.939639][T28841] bridge_slave_1: left promiscuous mode [ 1698.945596][T28841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.992128][T28841] bridge_slave_0: left allmulticast mode [ 1699.004204][T28841] bridge_slave_0: left promiscuous mode [ 1699.010594][T28841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.180138][T28841] veth1_macvtap: left promiscuous mode [ 1699.185992][T28841] veth1_vlan: left promiscuous mode [ 1699.205474][T28841] veth0_vlan: left promiscuous mode [ 1699.851110][T25862] Bluetooth: hci3: command tx timeout [ 1702.408611][T28841] ` (unregistering): Port device hsr_slave_0 removed [ 1702.517168][T28841] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1702.578123][T28841] ` (unregistering): Port device team_slave_1 removed [ 1702.641911][T28841] ` (unregistering): Port device C removed [ 1702.706367][T28841] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.763603][T28841] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1703.175421][T28841] .` (unregistering): Released all slaves [ 1703.748591][T29068] netlink: 'syz.4.5916': attribute type 10 has an invalid length. [ 1703.784751][T29068] syz_tun: entered promiscuous mode [ 1703.805244][T29068] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 1704.227193][T28868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1704.276333][T28868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1704.305910][T28868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1704.338772][T28868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1704.512925][T29079] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5917'. [ 1704.677407][T28868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.725646][T28868] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.761357][T28845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.768592][T28845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.842850][T12697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.850369][T12697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1705.254930][T29104] netlink: 'syz.4.5922': attribute type 10 has an invalid length. [ 1705.316155][T29104] hsr_slave_0: left promiscuous mode [ 1705.415739][T29104] hsr_slave_1: left promiscuous mode [ 1706.015288][T28868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1707.850939][T28868] veth0_vlan: entered promiscuous mode [ 1707.920089][T28868] veth1_vlan: entered promiscuous mode [ 1708.018490][T28868] veth0_macvtap: entered promiscuous mode [ 1708.062442][T28868] veth1_macvtap: entered promiscuous mode [ 1708.151720][T28868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1708.168500][T28868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.198816][T28868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1708.230888][T28868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.280322][T28868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1708.340592][T28868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.353447][T28868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1708.366124][T28868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1708.405666][T28868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.430666][T28868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 1708.471343][T28868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.496460][T28868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1708.508127][T28868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.527064][T28868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1708.540301][T29174] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.5936'. [ 1708.675846][T28868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.700784][T28868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.728472][T28868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.753157][T28868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.006050][T29195] netlink: 'syz.4.5939': attribute type 8 has an invalid length. [ 1709.060644][T29195] netlink: 'syz.4.5939': attribute type 1 has an invalid length. [ 1709.069281][T29195] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5939'. [ 1709.120723][T28841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1709.128602][T28841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.265453][T28844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1709.306006][T28844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.913347][T29221] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5944'. [ 1713.800255][T29275] netlink: 'syz.5.5952': attribute type 21 has an invalid length. [ 1713.808219][T29275] netlink: 'syz.5.5952': attribute type 4 has an invalid length. [ 1714.633838][T29305] netlink: 'syz.4.5960': attribute type 33 has an invalid length. [ 1714.735282][T29305] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5960'. [ 1715.137440][T29329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5967'. [ 1715.495862][T29335] wg2: entered allmulticast mode [ 1717.485479][T29368] netlink: 'syz.5.5977': attribute type 10 has an invalid length. [ 1718.085479][T29368] batman_adv: batadv0: Adding interface: netdevsim0 [ 1718.097295][T29368] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.156995][T29368] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1718.189761][T29370] netlink: 'syz.5.5977': attribute type 10 has an invalid length. [ 1719.771553][T29400] netlink: 'syz.0.5984': attribute type 6 has an invalid length. [ 1720.465644][T29397] delete_channel: no stack [ 1720.651193][T29418] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5989'. [ 1720.693106][T29418] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5989'. [ 1720.708865][T29422] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5989'. [ 1720.733536][T29418] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5989'. [ 1720.764531][T29422] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5989'. [ 1721.600649][T29440] netlink: 'syz.4.5994': attribute type 10 has an invalid length. [ 1721.745012][T29440] `: left allmulticast mode [ 1721.750207][T29440] team_slave_0: left allmulticast mode [ 1721.769859][T29440] team_slave_1: left allmulticast mode [ 1721.789807][T29440] `: left promiscuous mode [ 1721.800635][T29440] team_slave_0: left promiscuous mode [ 1721.824595][T29440] team_slave_1: left promiscuous mode [ 1721.849008][T29440] @: port 1(`) entered disabled state [ 1721.879374][T29440] `: Cannot enslave team device to itself [ 1722.355927][T29449] netlink: 'syz.4.5996': attribute type 19 has an invalid length. [ 1722.473327][T29458] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.5998'. [ 1722.861222][T29449] netlink: 'syz.4.5996': attribute type 19 has an invalid length. [ 1722.876170][T29459] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.5998'. [ 1723.089387][T29462] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.6000'. [ 1724.331832][T29476] netlink: 'syz.4.6003': attribute type 10 has an invalid length. [ 1724.358970][T29476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.367022][T29476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.419044][T29476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.426948][T29476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.436349][T29476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.443595][T29476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.485613][T29476] `: Port device bridge0 added [ 1725.463069][T29503] netlink: 'syz.0.6009': attribute type 21 has an invalid length. [ 1725.595982][T29507] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6011'. [ 1727.378673][T29563] netlink: 'syz.3.6026': attribute type 9 has an invalid length. [ 1727.394407][T29563] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6026'. [ 1727.604279][T29568] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.6024'. [ 1727.745893][T25862] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 1730.504058][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.527807][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.965528][T29591] netlink: 'syz.0.6033': attribute type 21 has an invalid length. [ 1730.992781][T29591] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6033'. [ 1731.106626][T29596] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6033'. [ 1733.699242][T29596] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1733.717740][T29596] CPU: 0 PID: 29596 Comm: syz.0.6033 Not tainted syzkaller #0 [ 1733.725355][T29596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1733.735550][T29596] Call Trace: [ 1733.738961][T29596] [ 1733.741924][T29596] dump_stack_lvl+0x18c/0x250 [ 1733.746668][T29596] ? show_regs_print_info+0x20/0x20 [ 1733.751906][T29596] ? load_image+0x400/0x400 [ 1733.756452][T29596] sysfs_warn_dup+0x8e/0xa0 [ 1733.760994][T29596] sysfs_do_create_link_sd+0xc0/0x110 [ 1733.766414][T29596] device_add_class_symlinks+0x1cf/0x240 [ 1733.772102][T29596] device_add+0x507/0xc20 [ 1733.776499][T29596] wiphy_register+0x1dad/0x2ae0 [ 1733.781428][T29596] ? cfg80211_event_work+0x40/0x40 [ 1733.786567][T29596] ? minstrel_ht_alloc+0x88a/0x990 [ 1733.791812][T29596] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1733.797922][T29596] ieee80211_register_hw+0x3464/0x4250 [ 1733.803457][T29596] ? ieee80211_tasklet_handler+0x20/0x20 [ 1733.809137][T29596] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1733.815195][T29596] ? __debug_object_init+0xec/0x450 [ 1733.820436][T29596] ? __asan_memset+0x22/0x40 [ 1733.825152][T29596] ? __hrtimer_init+0x186/0x270 [ 1733.830056][T29596] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1733.836117][T29596] ? mac80211_hwsim_free+0x220/0x220 [ 1733.841444][T29596] ? rcu_is_watching+0x15/0xb0 [ 1733.846251][T29596] ? kstrndup+0xbd/0x140 [ 1733.850630][T29596] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1733.855792][T29596] ? __nla_validate+0x50/0x50 [ 1733.860556][T29596] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1733.866939][T29596] ? __nla_parse+0x40/0x50 [ 1733.871400][T29596] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1733.877857][T29596] genl_family_rcv_msg_doit+0x211/0x310 [ 1733.883615][T29596] ? end_current_label_crit_section+0x170/0x170 [ 1733.889982][T29596] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1733.896017][T29596] ? bpf_lsm_capable+0x9/0x10 [ 1733.900734][T29596] ? security_capable+0x89/0xb0 [ 1733.905629][T29596] genl_rcv_msg+0x619/0x7a0 [ 1733.910182][T29596] ? genl_bind+0x360/0x360 [ 1733.914634][T29596] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1733.921089][T29596] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1733.927713][T29596] ? ref_tracker_free+0x690/0x840 [ 1733.932785][T29596] netlink_rcv_skb+0x241/0x4d0 [ 1733.937589][T29596] ? genl_bind+0x360/0x360 [ 1733.942042][T29596] ? netlink_ack+0x1180/0x1180 [ 1733.946865][T29596] ? __lock_acquire+0x7d40/0x7d40 [ 1733.951941][T29596] ? down_read+0x1ac/0x2e0 [ 1733.956399][T29596] genl_rcv+0x28/0x40 [ 1733.960417][T29596] netlink_unicast+0x751/0x8d0 [ 1733.965255][T29596] netlink_sendmsg+0x8d0/0xbf0 [ 1733.970087][T29596] ? netlink_getsockopt+0x590/0x590 [ 1733.975348][T29596] ? aa_sock_msg_perm+0x94/0x150 [ 1733.980325][T29596] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1733.985652][T29596] ? security_socket_sendmsg+0x80/0xa0 [ 1733.991403][T29596] ? netlink_getsockopt+0x590/0x590 [ 1733.996640][T29596] ____sys_sendmsg+0x5ba/0x960 [ 1734.001456][T29596] ? __asan_memset+0x22/0x40 [ 1734.006085][T29596] ? __sys_sendmsg_sock+0x30/0x30 [ 1734.011134][T29596] ? __import_iovec+0x5f2/0x850 [ 1734.016042][T29596] ? import_iovec+0x73/0xa0 [ 1734.020588][T29596] ___sys_sendmsg+0x2a6/0x360 [ 1734.025389][T29596] ? __sys_sendmsg+0x2a0/0x2a0 [ 1734.030217][T29596] ? debug_mutex_init+0x38/0x70 [ 1734.035142][T29596] __se_sys_sendmsg+0x1c2/0x2b0 [ 1734.040025][T29596] ? __x64_sys_sendmsg+0x80/0x80 [ 1734.045012][T29596] ? lockdep_hardirqs_on+0x98/0x150 [ 1734.050341][T29596] do_syscall_64+0x55/0xa0 [ 1734.054793][T29596] ? clear_bhb_loop+0x40/0x90 [ 1734.059499][T29596] ? clear_bhb_loop+0x40/0x90 [ 1734.064225][T29596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1734.070170][T29596] RIP: 0033:0x7f067499c629 [ 1734.074717][T29596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.094627][T29596] RSP: 002b:00007f06758bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1734.103083][T29596] RAX: ffffffffffffffda RBX: 00007f0674c16090 RCX: 00007f067499c629 [ 1734.111085][T29596] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 1734.119083][T29596] RBP: 00007f0674a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1734.127085][T29596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.135084][T29596] R13: 00007f0674c16128 R14: 00007f0674c16090 R15: 00007ffeec5c82e8 [ 1734.143112][T29596] [ 1734.484585][T29612] syzkaller0: entered promiscuous mode [ 1734.491005][T29612] syzkaller0: entered allmulticast mode [ 1734.518177][T29612] syzkaller0: tun_net_xmit 1280 [ 1734.538327][T29612] syzkaller0: create flow: hash 2503364883 index 1 [ 1734.570371][T29615] netlink: 'syz.3.6037': attribute type 27 has an invalid length. [ 1734.612319][T29614] netlink: 763 bytes leftover after parsing attributes in process `syz.5.6039'. [ 1734.953621][T29612] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.6037'. [ 1735.034182][T29612] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.6037'. [ 1735.141463][T29611] syzkaller0: delete flow: hash 2503364883 index 1 [ 1738.471200][T29663] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1738.481245][T29663] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1738.570958][T29663] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1738.645829][T29667] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1738.690401][T29663] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1738.717608][T29669] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1738.916003][T29676] netlink: 'syz.4.6052': attribute type 1 has an invalid length. [ 1738.931172][T29676] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.6052'. [ 1738.982792][T29676] netlink: 'syz.4.6052': attribute type 9 has an invalid length. [ 1738.994997][T29661] delete_channel: no stack [ 1739.025244][T29676] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6052'. [ 1739.458341][T29687] netlink: 'syz.3.6055': attribute type 21 has an invalid length. [ 1739.611232][T29688] ksmbd: Unknown IPC event: 0, ignore. [ 1739.698041][T29694] __nla_validate_parse: 6 callbacks suppressed [ 1739.698067][T29694] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6058'. [ 1739.807396][T29694] openvswitch: netlink: Flow key attribute not present in set flow. [ 1740.185366][T29714] netlink: 'syz.0.6063': attribute type 1 has an invalid length. [ 1740.194719][T29714] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.6063'. [ 1740.207383][T29714] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6063'. [ 1740.474241][T29725] ±ÿ: renamed from bridge_slave_0 (while UP) [ 1740.955954][T29742] netlink: 'syz.3.6068': attribute type 10 has an invalid length. [ 1741.854541][T29766] netlink: 21 bytes leftover after parsing attributes in process `syz.3.6073'. [ 1741.863984][T29766] ksmbd: Unknown IPC event: 0, ignore. [ 1741.950204][T29754] delete_channel: no stack [ 1742.011877][T29769] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6075'. [ 1742.155174][T29764] netlink: 'syz.4.6074': attribute type 21 has an invalid length. [ 1742.163613][T29764] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6074'. [ 1742.652729][T29785] netlink: 'syz.3.6079': attribute type 11 has an invalid length. [ 1742.668285][T29785] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.6079'. [ 1742.695922][T29785] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1742.793975][T29785] netlink: 'syz.3.6079': attribute type 39 has an invalid length. [ 1742.816967][T29790] netlink: 'syz.4.6080': attribute type 10 has an invalid length. [ 1742.849332][T29790] `: Device vxcan1 is of different type [ 1743.110203][T25862] Bluetooth: hci1: Malformed Event: 0x13 [ 1743.124868][T29802] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1743.144567][T29802] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1746.178994][T29820] netlink: 21 bytes leftover after parsing attributes in process `syz.0.6088'. [ 1746.265529][T29820] ksmbd: Unknown IPC event: 0, ignore. [ 1747.660379][T29850] netlink: 'syz.3.6098': attribute type 9 has an invalid length. [ 1747.679399][T29850] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.6098'. [ 1747.700882][T29855] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6094'. [ 1747.734425][T29853] netlink: 'syz.4.6099': attribute type 10 has an invalid length. [ 1747.742675][T29853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6099'. [ 1747.754302][T29853] batman_adv: batadv0: Adding interface: vlan1 [ 1747.754457][T29849] delete_channel: no stack [ 1747.773442][T29849] delete_channel: no stack [ 1747.789163][T29853] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1747.830099][T29853] batman_adv: batadv0: Interface activated: vlan1 [ 1747.840000][T29857] netlink: 'syz.0.6100': attribute type 41 has an invalid length. [ 1748.358109][T29869] sock: sock_timestamping_bind_phc: sock not bind to device [ 1751.185556][T29887] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.6106'. [ 1751.201927][T29887] netlink: zone id is out of range [ 1751.244887][T29887] netlink: zone id is out of range [ 1751.265711][T29887] netlink: zone id is out of range [ 1751.305825][T29887] netlink: zone id is out of range [ 1751.339709][T29887] netlink: zone id is out of range [ 1751.369643][T29887] netlink: zone id is out of range [ 1751.374844][T29887] netlink: zone id is out of range [ 1751.400918][T29887] netlink: zone id is out of range [ 1751.439279][T29887] netlink: zone id is out of range [ 1751.458132][T29887] netlink: zone id is out of range [ 1751.507470][T29898] netlink: 763 bytes leftover after parsing attributes in process `syz.5.6111'. [ 1751.707115][T29909] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.6112'. [ 1755.264614][T29918] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6114'. [ 1756.663861][T29953] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6125'. [ 1756.746195][T29955] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.6127'. [ 1756.883898][T29960] net_ratelimit: 102 callbacks suppressed [ 1756.883920][T29960] netlink: set zone limit has 8 unknown bytes [ 1757.531345][T29973] syz.5.6132[29973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1757.531504][T29973] syz.5.6132[29973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1757.548649][T29973] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6132'. [ 1757.690262][T29969] netlink: 'syz.4.6127': attribute type 10 has an invalid length. [ 1757.699800][T29969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1757.720929][T29969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1757.724054][T29982] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.6132'. [ 1757.752182][T29969] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1757.769641][T29973] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6132'. [ 1757.789846][T29975] netlink: 'syz.0.6131': attribute type 10 has an invalid length. [ 1757.797846][T29975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6131'. [ 1757.816033][T29975] ipvlan1: entered promiscuous mode [ 1757.821974][T29975] ipvlan1: entered allmulticast mode [ 1757.827296][T29975] veth0_vlan: entered allmulticast mode [ 1757.834145][T29975] bridge0: port 3(ipvlan1) entered blocking state [ 1757.848266][T29975] bridge0: port 3(ipvlan1) entered disabled state [ 1757.866636][T29975] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1757.914174][T29974] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6132'. [ 1757.935310][T29976] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6132'. [ 1758.196285][T29988] syzkaller0: entered promiscuous mode [ 1758.228463][T29988] syzkaller0: entered allmulticast mode [ 1758.286767][T29996] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6138'. [ 1758.325918][T29996] bridge_slave_1: default FDB implementation only supports local addresses [ 1761.820463][T29999] netlink: 'syz.0.6139': attribute type 21 has an invalid length. [ 1761.829107][T29997] dvmrp0: tun_chr_ioctl cmd 2147767511 [ 1763.500383][T30051] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6151'. [ 1763.510309][T30054] tap0: tun_chr_ioctl cmd 1074025675 [ 1763.529629][T30054] tap0: persist enabled [ 1763.543405][T30049] syzkaller0: entered promiscuous mode [ 1763.569684][T30049] syzkaller0: entered allmulticast mode [ 1764.581749][T30076] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6159'. [ 1765.555335][T30088] netlink: 'syz.0.6164': attribute type 39 has an invalid length. [ 1767.053839][T30120] netlink: 172 bytes leftover after parsing attributes in process `syz.5.6172'. [ 1767.452136][T30140] tun0: tun_chr_ioctl cmd 1074025677 [ 1767.457584][T30140] tun0: linktype set to 776 [ 1767.589235][T30150] netlink: 'syz.3.6181': attribute type 3 has an invalid length. [ 1767.597639][T30150] netlink: 'syz.3.6181': attribute type 7 has an invalid length. [ 1767.633579][T30150] netlink: 'syz.3.6181': attribute type 8 has an invalid length. [ 1767.653036][T30150] netlink: 'syz.3.6181': attribute type 7 has an invalid length. [ 1767.665889][T30150] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.6181'. [ 1767.980868][T30163] netlink: 'syz.0.6183': attribute type 3 has an invalid length. [ 1767.999691][T30163] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.6183'. [ 1768.561608][T30183] netlink: set zone limit has 8 unknown bytes [ 1769.162701][T30204] netlink: 'syz.4.6196': attribute type 10 has an invalid length. [ 1769.177031][T30204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6196'. [ 1769.212754][T30204] netlink: 'syz.4.6196': attribute type 10 has an invalid length. [ 1769.236073][T30204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6196'. [ 1769.957512][T30220] netlink: 'syz.3.6201': attribute type 29 has an invalid length. [ 1770.016018][T30220] netlink: 'syz.3.6201': attribute type 29 has an invalid length. [ 1770.108993][T30227] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.6203'. [ 1770.130447][T30224] sit0: entered allmulticast mode [ 1770.641620][T30236] validate_nla: 4 callbacks suppressed [ 1770.642437][T30236] netlink: 'syz.4.6207': attribute type 10 has an invalid length. [ 1770.683308][T30238] netlink: 'syz.4.6207': attribute type 10 has an invalid length. [ 1771.191900][T30253] netlink: 'syz.3.6210': attribute type 1 has an invalid length. [ 1771.270270][T30253] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.6210'. [ 1771.610017][T30262] netlink: 'syz.4.6213': attribute type 27 has an invalid length. [ 1771.695074][T30262] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6213'. [ 1771.754624][T30262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1771.772114][T30262] netlink: 'syz.4.6213': attribute type 27 has an invalid length. [ 1771.789961][T30262] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6213'. [ 1771.821256][T30262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1771.872806][T30262] netlink: 'syz.4.6213': attribute type 27 has an invalid length. [ 1771.915305][T30262] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6213'. [ 1771.956521][T30262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1772.002951][T30262] netlink: 'syz.4.6213': attribute type 27 has an invalid length. [ 1772.031124][T30262] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6213'. [ 1772.049755][T30262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1772.072654][T30262] netlink: 'syz.4.6213': attribute type 27 has an invalid length. [ 1772.082108][T30262] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6213'. [ 1772.100715][T30262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1772.126595][T30262] netlink: 'syz.4.6213': attribute type 27 has an invalid length. [ 1772.149789][T30262] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6213'. [ 1772.171115][T30262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1772.219990][T30266] mac80211_hwsim hwsim70 wlan1: entered promiscuous mode [ 1772.229937][T30266] mac80211_hwsim hwsim70 wlan1: entered allmulticast mode [ 1772.245164][T30262] netlink: 'syz.4.6213': attribute type 27 has an invalid length. [ 1772.258479][T30262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1772.277093][T30262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1772.319408][T30262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1775.238662][T30276] IPv6: Can't replace route, no match found [ 1775.792597][T30301] __nla_validate_parse: 3 callbacks suppressed [ 1775.792616][T30301] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.6226'. [ 1775.793359][T30299] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.6226'. [ 1776.437959][T30321] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6231'. [ 1776.941839][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1776.953071][T30342] pim6reg1: linktype set to 774 [ 1776.959423][T30346] validate_nla: 3 callbacks suppressed [ 1776.959440][T30346] netlink: 'syz.0.6238': attribute type 9 has an invalid length. [ 1776.981965][T30346] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1777.004636][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.005742][T30346] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1777.022397][T30342] pim6reg1: linktype set to 774 [ 1777.034839][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.053383][T30342] pim6reg1: linktype set to 774 [ 1777.069928][T30340] tap1: tun_chr_ioctl cmd 1074025677 [ 1777.075436][T30340] tap1: linktype set to 773 [ 1777.112159][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.139139][T30342] pim6reg1: linktype set to 774 [ 1777.145827][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.153150][T30342] pim6reg1: linktype set to 774 [ 1777.166480][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.172844][T30342] pim6reg1: linktype set to 774 [ 1777.178994][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.189092][T30342] pim6reg1: linktype set to 774 [ 1777.195817][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.203693][T30342] pim6reg1: linktype set to 774 [ 1777.209165][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.216971][T30342] pim6reg1: linktype set to 774 [ 1777.222879][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.228791][T30342] pim6reg1: linktype set to 774 [ 1777.234749][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.241164][T30342] pim6reg1: linktype set to 774 [ 1777.246609][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.253142][T30342] pim6reg1: linktype set to 774 [ 1777.270331][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.309391][T30342] pim6reg1: linktype set to 774 [ 1777.330286][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.343060][T30342] pim6reg1: linktype set to 774 [ 1777.348570][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.355882][T30342] pim6reg1: linktype set to 774 [ 1777.386868][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.393904][T30342] pim6reg1: linktype set to 774 [ 1777.399323][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.407093][T30342] pim6reg1: linktype set to 774 [ 1777.413470][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.451479][T30342] pim6reg1: linktype set to 774 [ 1777.456814][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.479780][T30342] pim6reg1: linktype set to 774 [ 1777.489619][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.496109][T30342] pim6reg1: linktype set to 774 [ 1777.512244][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.519329][T30342] pim6reg1: linktype set to 774 [ 1777.591785][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.640270][T30342] pim6reg1: linktype set to 774 [ 1777.647230][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.676213][T30342] pim6reg1: linktype set to 774 [ 1777.695355][T30342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1777.706604][T30342] pim6reg1: linktype set to 774 [ 1777.756865][T30367] netlink: 'syz.5.6244': attribute type 1 has an invalid length. [ 1777.771468][T30370] netlink: 'syz.0.6245': attribute type 4 has an invalid length. [ 1777.779738][T30367] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.6244'. [ 1777.793723][T30367] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6244'. [ 1777.804024][T30370] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.6245'. [ 1778.214005][T30381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6248'. [ 1778.363355][T30381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6248'. [ 1778.746693][T30390] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1779.453869][T30420] netlink: 'syz.3.6259': attribute type 3 has an invalid length. [ 1779.463016][T30410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1780.448155][T30438] netlink: 'syz.0.6264': attribute type 1 has an invalid length. [ 1780.494899][T30438] netlink: 'syz.0.6264': attribute type 1 has an invalid length. [ 1781.301764][T30463] __nla_validate_parse: 3 callbacks suppressed [ 1781.301785][T30463] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6273'. [ 1781.530550][T30474] netlink: 'syz.5.6276': attribute type 10 has an invalid length. [ 1781.548579][T30474] veth1_vlan: entered allmulticast mode [ 1781.598023][T30474] team0: Device veth1_vlan failed to register rx_handler [ 1784.632080][T30492] netlink: 'syz.3.6280': attribute type 21 has an invalid length. [ 1786.006331][T30514] netlink: 763 bytes leftover after parsing attributes in process `syz.4.6288'. [ 1786.255676][T30516] syzkaller0: entered promiscuous mode [ 1786.261503][T30516] syzkaller0: entered allmulticast mode [ 1786.274123][T30520] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6289'. [ 1786.300472][T30523] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.6290'. [ 1786.369403][T30525] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.6291'. [ 1787.250648][T30544] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6295'. [ 1787.988459][T30564] netlink: 'syz.5.6301': attribute type 4 has an invalid length. [ 1788.027404][T30564] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6301'. [ 1791.161070][T30590] netlink: 'syz.0.6306': attribute type 28 has an invalid length. [ 1791.196658][T30590] netlink: 'syz.0.6306': attribute type 4 has an invalid length. [ 1791.204777][T30590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6306'. [ 1791.726427][T30608] netlink: 'syz.3.6312': attribute type 21 has an invalid length. [ 1791.747271][T30608] netlink: 'syz.3.6312': attribute type 1 has an invalid length. [ 1791.755723][T30608] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6312'. [ 1791.761698][T30609] netlink: 159532 bytes leftover after parsing attributes in process `syz.4.6311'. [ 1791.786215][T30609] netlink: zone id is out of range [ 1791.801159][T30609] netlink: zone id is out of range [ 1791.816710][T30609] netlink: zone id is out of range [ 1791.827334][T30609] netlink: zone id is out of range [ 1791.843330][T30609] netlink: zone id is out of range [ 1791.849126][T30609] netlink: zone id is out of range [ 1791.856142][T30609] netlink: zone id is out of range [ 1791.866119][T30609] netlink: zone id is out of range [ 1791.872339][T30609] netlink: zone id is out of range [ 1791.877757][T30609] netlink: zone id is out of range [ 1791.937882][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.944366][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.329703][T30614] Ÿë: port 1(veth0_to_team) entered blocking state [ 1792.356989][T30614] Ÿë: port 1(veth0_to_team) entered disabled state [ 1792.365705][T30614] veth0_to_team: entered allmulticast mode [ 1792.373672][T30614] veth0_to_team: entered promiscuous mode [ 1792.750109][T30629] netlink: 'syz.3.6318': attribute type 21 has an invalid length. [ 1792.757999][T30629] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6318'. [ 1792.824668][T30628] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6318'. [ 1794.841166][T30674] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6330'. [ 1795.209804][T30687] netlink: 'syz.4.6336': attribute type 21 has an invalid length. [ 1797.020698][T30724] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.6348'. [ 1797.652781][T30734] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6349'. [ 1797.713535][T30734] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1797.759410][T30734] CPU: 1 PID: 30734 Comm: syz.0.6349 Not tainted syzkaller #0 [ 1797.766953][T30734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1797.777036][T30734] Call Trace: [ 1797.780360][T30734] [ 1797.783362][T30734] dump_stack_lvl+0x18c/0x250 [ 1797.788124][T30734] ? show_regs_print_info+0x20/0x20 [ 1797.793399][T30734] ? load_image+0x400/0x400 [ 1797.798011][T30734] sysfs_warn_dup+0x8e/0xa0 [ 1797.802583][T30734] sysfs_do_create_link_sd+0xc0/0x110 [ 1797.808039][T30734] device_add_class_symlinks+0x1cf/0x240 [ 1797.813847][T30734] device_add+0x507/0xc20 [ 1797.818258][T30734] wiphy_register+0x1dad/0x2ae0 [ 1797.819773][T25862] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1797.823448][T30734] ? cfg80211_event_work+0x40/0x40 [ 1797.836276][T30734] ? minstrel_ht_alloc+0x88a/0x990 [ 1797.841584][T30734] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1797.847741][T30734] ieee80211_register_hw+0x3464/0x4250 [ 1797.853428][T30734] ? ieee80211_tasklet_handler+0x20/0x20 [ 1797.859131][T30734] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1797.865109][T30734] ? __debug_object_init+0xec/0x450 [ 1797.870403][T30734] ? __asan_memset+0x22/0x40 [ 1797.875232][T30734] ? __hrtimer_init+0x186/0x270 [ 1797.880339][T30734] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1797.886185][T30734] ? mac80211_hwsim_free+0x220/0x220 [ 1797.891620][T30734] ? rcu_is_watching+0x15/0xb0 [ 1797.896452][T30734] ? kstrndup+0xbd/0x140 [ 1797.901404][T30734] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1797.906673][T30734] ? __nla_validate+0x50/0x50 [ 1797.911459][T30734] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1797.917902][T30734] ? __nla_parse+0x40/0x50 [ 1797.922407][T30734] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1797.928919][T30734] genl_family_rcv_msg_doit+0x211/0x310 [ 1797.934549][T30734] ? end_current_label_crit_section+0x170/0x170 [ 1797.940885][T30734] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1797.946903][T30734] ? bpf_lsm_capable+0x9/0x10 [ 1797.951747][T30734] ? security_capable+0x89/0xb0 [ 1797.956695][T30734] genl_rcv_msg+0x619/0x7a0 [ 1797.961383][T30734] ? genl_bind+0x360/0x360 [ 1797.965895][T30734] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1797.972344][T30734] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1797.979017][T30734] ? perf_trace_lock+0xfc/0x3b0 [ 1797.983989][T30734] netlink_rcv_skb+0x241/0x4d0 [ 1797.988847][T30734] ? genl_bind+0x360/0x360 [ 1797.993343][T30734] ? netlink_ack+0x1180/0x1180 [ 1797.998370][T30734] ? __lock_acquire+0x7d40/0x7d40 [ 1798.003661][T30734] ? down_read+0x1ac/0x2e0 [ 1798.008162][T30734] genl_rcv+0x28/0x40 [ 1798.012212][T30734] netlink_unicast+0x751/0x8d0 [ 1798.017168][T30734] netlink_sendmsg+0x8d0/0xbf0 [ 1798.022138][T30734] ? netlink_getsockopt+0x590/0x590 [ 1798.027520][T30734] ? aa_sock_msg_perm+0x94/0x150 [ 1798.032804][T30734] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1798.038250][T30734] ? security_socket_sendmsg+0x80/0xa0 [ 1798.043807][T30734] ? netlink_getsockopt+0x590/0x590 [ 1798.049174][T30734] ____sys_sendmsg+0x5ba/0x960 [ 1798.054197][T30734] ? __asan_memset+0x22/0x40 [ 1798.058858][T30734] ? __sys_sendmsg_sock+0x30/0x30 [ 1798.063948][T30734] ? __import_iovec+0x5f2/0x850 [ 1798.068899][T30734] ? import_iovec+0x73/0xa0 [ 1798.073577][T30734] ___sys_sendmsg+0x2a6/0x360 [ 1798.078333][T30734] ? __sys_sendmsg+0x2a0/0x2a0 [ 1798.083253][T30734] __se_sys_sendmsg+0x1c2/0x2b0 [ 1798.088142][T30734] ? __x64_sys_sendmsg+0x80/0x80 [ 1798.093163][T30734] ? lockdep_hardirqs_on+0x98/0x150 [ 1798.098443][T30734] do_syscall_64+0x55/0xa0 [ 1798.103007][T30734] ? clear_bhb_loop+0x40/0x90 [ 1798.107914][T30734] ? clear_bhb_loop+0x40/0x90 [ 1798.112665][T30734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1798.118624][T30734] RIP: 0033:0x7f067499c629 [ 1798.123097][T30734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.142684][T30747] netlink: 'syz.3.6350': attribute type 153 has an invalid length. [ 1798.142844][T30734] RSP: 002b:00007f06758dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.151052][T30747] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1798.159390][T30734] RAX: ffffffffffffffda RBX: 00007f0674c15fa0 RCX: 00007f067499c629 [ 1798.176959][T30734] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1798.184999][T30734] RBP: 00007f0674a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1798.193031][T30734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1798.201055][T30734] R13: 00007f0674c16038 R14: 00007f0674c15fa0 R15: 00007ffeec5c82e8 [ 1798.209327][T30734] [ 1798.249327][T30742] netlink: 'syz.4.6351': attribute type 21 has an invalid length. [ 1798.280867][T30742] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6351'. [ 1798.309675][T30742] netlink: 'syz.4.6351': attribute type 5 has an invalid length. [ 1798.317584][T30742] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6351'. [ 1799.642747][T30773] delete_channel: no stack [ 1799.647398][T30773] delete_channel: no stack [ 1800.681452][T30796] netlink: 'syz.3.6362': attribute type 33 has an invalid length. [ 1800.689351][T30796] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6362'. [ 1802.233653][T30814] netlink: 'syz.0.6366': attribute type 10 has an invalid length. [ 1802.416648][T30814] veth1_macvtap: left allmulticast mode [ 1804.054073][T30838] cgroup: fork rejected by pids controller in /syz4 [ 1806.100741][T30850] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.6376'. [ 1806.332690][T30856] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.6377'. [ 1808.590224][T25862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1808.623453][T25862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1808.659098][T25862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1808.687091][T25862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1808.705765][T25862] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1808.717023][T25862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1809.813878][T26157] .`: (slave syz_tun): Releasing backup interface [ 1809.895925][T30874] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.6382'. [ 1809.961395][T30875] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.6382'. [ 1810.000076][T18770] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.170941][T18770] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.264872][T30861] chnl_net:caif_netlink_parms(): no params data found [ 1810.352868][T18770] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.474995][T18770] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.600897][T30861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.624738][T30861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.638881][T30861] bridge_slave_0: entered allmulticast mode [ 1810.668704][T30861] bridge_slave_0: entered promiscuous mode [ 1810.681611][T18975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1810.687748][T30861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.702977][T18975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1810.714295][T18975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1810.728177][T30861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.740020][T18975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1810.748898][T18975] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1810.755575][T30861] bridge_slave_1: entered allmulticast mode [ 1810.762662][T18975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1810.796754][T30861] bridge_slave_1: entered promiscuous mode [ 1810.809964][T18975] Bluetooth: hci3: command tx timeout [ 1810.917219][T30861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1811.036451][T30861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1811.207980][T30861] team0: Port device team_slave_0 added [ 1811.236561][T30909] netlink: 'syz.3.6389': attribute type 30 has an invalid length. [ 1811.258282][T30861] team0: Port device team_slave_1 added [ 1811.745344][T30861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1811.775591][T30861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1811.841997][T30861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1812.016915][T30861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1812.029834][T30861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1812.085208][T30861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1812.535874][T30861] hsr_slave_0: entered promiscuous mode [ 1812.555440][T30861] hsr_slave_1: entered promiscuous mode [ 1812.821689][T18975] Bluetooth: hci2: command tx timeout [ 1812.911386][T18975] Bluetooth: hci3: command tx timeout [ 1813.028388][T30891] chnl_net:caif_netlink_parms(): no params data found [ 1814.375542][T30891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.435358][T30891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.455643][T30891] bridge_slave_0: entered allmulticast mode [ 1814.496289][T30891] bridge_slave_0: entered promiscuous mode [ 1814.600421][T30891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.607624][T30891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.656288][T30891] bridge_slave_1: entered allmulticast mode [ 1814.666089][T30891] bridge_slave_1: entered promiscuous mode [ 1814.808606][T30891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1814.833463][T30891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1814.899655][T18975] Bluetooth: hci2: command tx timeout [ 1814.969668][T18975] Bluetooth: hci3: command tx timeout [ 1815.020663][T30978] netlink: 'syz.0.6399': attribute type 21 has an invalid length. [ 1815.041124][T30978] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6399'. [ 1815.203820][T30891] team0: Port device team_slave_0 added [ 1815.341580][T30891] team0: Port device team_slave_1 added [ 1815.353042][T30861] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1815.507042][T30861] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1815.524099][T18770] veth0_to_team: left allmulticast mode [ 1815.537912][T18770] veth0_to_team: left promiscuous mode [ 1815.544715][T18770] Ÿë: port 1(veth0_to_team) entered disabled state [ 1815.616986][T18770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1815.638761][T18770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1815.665114][T18770] batman_adv: batadv0: Interface deactivated: vlan1 [ 1815.683173][T18770] batman_adv: batadv0: Removing interface: vlan1 [ 1815.714340][T18770] bridge_slave_1: left allmulticast mode [ 1815.738213][T18770] bridge_slave_1: left promiscuous mode [ 1815.753150][T18770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.768809][T18770] bridge_slave_0: left allmulticast mode [ 1815.778887][T18770] bridge_slave_0: left promiscuous mode [ 1815.789875][T18770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.843340][T18770] veth0_macvtap: left promiscuous mode [ 1815.849075][T18770] veth1_vlan: left promiscuous mode [ 1815.864388][T18770] veth0_vlan: left promiscuous mode [ 1816.354084][T31001] netlink: 'syz.0.6401': attribute type 29 has an invalid length. [ 1816.970044][T18975] Bluetooth: hci2: command tx timeout [ 1817.049717][T18975] Bluetooth: hci3: command tx timeout [ 1817.585430][T18770] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1817.669387][T18770] ` (unregistering): Port device team_slave_1 removed [ 1817.749685][T18770] ` (unregistering): Port device team_slave_0 removed [ 1817.854815][T18770] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1817.948316][T18770] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1818.386265][T18770] ` (unregistering): Port device bridge0 removed [ 1818.425980][T18770] .` (unregistering): Released all slaves [ 1818.528026][T30891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1818.535241][T30891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1818.565696][T30891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1818.581748][T30861] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1818.615308][T31001] netlink: 'syz.0.6401': attribute type 29 has an invalid length. [ 1818.647220][T30891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1818.654593][T30891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1818.699560][T30891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1818.716923][T30861] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1818.945858][T30891] hsr_slave_0: entered promiscuous mode [ 1819.049620][T18975] Bluetooth: hci2: command tx timeout [ 1819.113874][T30891] hsr_slave_1: entered promiscuous mode [ 1819.134726][T30891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1819.169707][T30891] Cannot create hsr debugfs directory [ 1820.324258][T30861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1821.032704][T30861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1821.881343][T28844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.888697][T28844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.111387][T28844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.118613][T28844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.339254][T30861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1822.367339][T30861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1822.735030][T30891] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1822.852271][T30891] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1822.906550][T30891] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1822.924893][T30891] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1823.091414][T30861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1823.408550][T30891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1823.484909][T30891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1823.519594][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.526796][T12697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1823.590702][T12697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.597913][T12697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.057593][T30861] veth0_vlan: entered promiscuous mode [ 1824.091697][T30861] veth1_vlan: entered promiscuous mode [ 1824.232044][T30861] veth0_macvtap: entered promiscuous mode [ 1824.267612][T30861] veth1_macvtap: entered promiscuous mode [ 1824.356422][T30861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1824.410036][T30861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.429654][T30861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1824.449813][T30861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.472714][T30861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1824.499545][T30861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.521534][T30861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1824.678711][T30861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1824.709860][T30861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.730340][T30861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 1824.740464][T30861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.765336][T30861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1824.775993][T30861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.804973][T30861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1824.845631][T30891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1824.870525][T30861] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.879380][T30861] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.913635][T30861] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.949718][T30861] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.399898][T31116] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.6415'. [ 1825.746138][T28845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1825.802434][T28845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1826.004706][T12697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1826.070527][T12697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1826.211337][T31136] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6417'. [ 1826.563655][T31143] netlink: 'syz.0.6418': attribute type 2 has an invalid length. [ 1826.589661][T31143] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6418'. [ 1826.615945][T31144] netlink: 'syz.3.6417': attribute type 21 has an invalid length. [ 1826.662804][T31144] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6417'. [ 1826.700682][T31144] netlink: 'syz.3.6417': attribute type 4 has an invalid length. [ 1826.708841][T31144] netlink: 'syz.3.6417': attribute type 5 has an invalid length. [ 1826.747557][T31144] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6417'. [ 1827.069315][T30891] veth0_vlan: entered promiscuous mode [ 1827.268161][T30891] veth1_vlan: entered promiscuous mode [ 1827.582480][T30891] veth0_macvtap: entered promiscuous mode [ 1827.730539][T30891] veth1_macvtap: entered promiscuous mode [ 1827.854340][T30891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1827.900303][T30891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1827.919287][T30891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1827.941892][T30891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1827.989625][T30891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1828.029567][T30891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.061796][T30891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1828.110147][T30891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.152515][T30891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.224318][T30891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1828.261328][T30891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.301874][T30891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 1828.329619][T30891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.349622][T30891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1828.389763][T30891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.414444][T30891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1828.484945][T30891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.521885][T30891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1828.622141][T30891] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.639602][T30891] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.648479][T30891] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.710612][T30891] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.053020][T31179] netlink: 'syz.3.6421': attribute type 17 has an invalid length. [ 1829.103375][T31179] netlink: 'syz.3.6421': attribute type 41 has an invalid length. [ 1829.329618][T31182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6422'. [ 1829.681175][T31187] netlink: 'syz.6.6423': attribute type 21 has an invalid length. [ 1829.786331][T31187] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.6423'. [ 1830.204347][T28844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.226001][T28844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.574813][T31198] syzkaller0: entered promiscuous mode [ 1830.631323][T31193] netlink: 'syz.3.6424': attribute type 10 has an invalid length. [ 1835.381185][T18770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.395640][T18770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.128397][T31288] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6440'. [ 1840.794199][T31334] netlink: 64535 bytes leftover after parsing attributes in process `syz.6.6446'. [ 1841.173796][T31343] netlink: 'syz.0.6448': attribute type 29 has an invalid length. [ 1841.626299][T31343] netlink: 'syz.0.6448': attribute type 29 has an invalid length. [ 1841.672718][T31342] netlink: 'syz.0.6448': attribute type 29 has an invalid length. [ 1841.774283][T31350] netlink: 'syz.0.6448': attribute type 29 has an invalid length. [ 1841.785555][T31355] netlink: 'syz.0.6448': attribute type 29 has an invalid length. [ 1841.815918][T31363] netlink: 'syz.6.6452': attribute type 39 has an invalid length. [ 1841.924897][T31343] netlink: 'syz.0.6448': attribute type 29 has an invalid length. [ 1842.470266][T31384] netlink: 'syz.3.6458': attribute type 25 has an invalid length. [ 1842.478150][T31384] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.6458'. [ 1843.497989][T31403] netlink: 208092 bytes leftover after parsing attributes in process `syz.3.6464'. [ 1843.532596][T31403] netlink: 'syz.3.6464': attribute type 1 has an invalid length. [ 1843.541346][T31403] netlink: 'syz.3.6464': attribute type 2 has an invalid length. [ 1844.071741][T31427] netlink: 16211 bytes leftover after parsing attributes in process `syz.6.6472'. [ 1844.320864][T31423] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6471'. [ 1845.205918][T31449] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.6478'. [ 1848.021163][T31469] validate_nla: 2 callbacks suppressed [ 1848.021208][T31469] netlink: 'syz.6.6484': attribute type 1 has an invalid length. [ 1848.038854][T31469] netlink: 112860 bytes leftover after parsing attributes in process `syz.6.6484'. [ 1850.518842][T31485] netlink: 'syz.4.6490': attribute type 29 has an invalid length. [ 1850.538452][T31485] netlink: 'syz.4.6490': attribute type 29 has an invalid length. [ 1851.061697][T31511] netlink: 'syz.4.6496': attribute type 4 has an invalid length. [ 1851.089096][T31511] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6496'. [ 1851.149230][T31511] net_ratelimit: 376 callbacks suppressed [ 1851.149252][T31511] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1851.235663][T31511] netlink: 192440 bytes leftover after parsing attributes in process `syz.4.6496'. [ 1851.300170][T31511] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1853.329386][T31534] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6503'. [ 1853.463883][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.473014][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.589846][T31573] can: request_module (can-proto-0) failed. [ 1855.669250][T31575] can: request_module (can-proto-0) failed. [ 1856.848143][T31601] netlink: 'syz.4.6519': attribute type 1 has an invalid length. [ 1856.864761][T31601] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6519'. [ 1856.900335][T31601] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6519'. [ 1857.666018][T31621] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.6526'. [ 1857.731866][T31622] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.6525'. [ 1858.007987][T31636] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.6530'. [ 1858.033909][T31636] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.6530'. [ 1858.078890][T31632] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.6530'. [ 1858.600332][T31651] netlink: 'syz.6.6534': attribute type 1 has an invalid length. [ 1858.613910][T31651] netlink: 112860 bytes leftover after parsing attributes in process `syz.6.6534'. [ 1858.636492][T31651] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6534'. [ 1863.769887][T31687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6543'. [ 1863.783323][T31687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6543'. [ 1863.810457][T31687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6543'. [ 1863.896235][T31686] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6543'. [ 1865.555923][T31707] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.6549'. [ 1868.998625][T31701] netlink: 'syz.0.6546': attribute type 27 has an invalid length. [ 1869.130422][T31701] bond0: (slave bond_slave_0): Releasing backup interface [ 1869.239621][T31719] netlink: 'syz.6.6551': attribute type 1 has an invalid length. [ 1869.247404][T31719] netlink: 'syz.6.6551': attribute type 4 has an invalid length. [ 1869.269544][T31719] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.6551'. [ 1869.721255][T31740] netlink: 'syz.4.6556': attribute type 2 has an invalid length. [ 1869.770668][T31740] netlink: 'syz.4.6556': attribute type 4 has an invalid length. [ 1869.794954][T31740] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6556'. [ 1870.712580][T31760] netlink: 'syz.3.6563': attribute type 2 has an invalid length. [ 1870.730342][T31760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6563'. [ 1871.753882][T31777] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6568'. [ 1871.830580][T31780] netlink: 'syz.0.6569': attribute type 10 has an invalid length. [ 1871.842955][T31780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6569'. [ 1871.860947][T31780] batman_adv: batadv0: Adding interface: veth0_vlan [ 1871.894514][T31780] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1871.963780][T31780] batman_adv: batadv0: Interface activated: veth0_vlan [ 1872.099127][T31786] netlink: 'syz.3.6571': attribute type 1 has an invalid length. [ 1872.125963][T31786] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6571'. [ 1872.938827][T31814] netlink: 'syz.3.6577': attribute type 13 has an invalid length. [ 1873.031615][T31814] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.6577'. [ 1873.061514][T31814] netlink: 'syz.3.6577': attribute type 13 has an invalid length. [ 1873.098834][T31814] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.6577'. [ 1873.174063][T31814] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.6577'. [ 1873.210763][T31814] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.6577'. [ 1873.725730][T31828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1876.164085][T31855] __nla_validate_parse: 63 callbacks suppressed [ 1876.164116][T31855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6590'. [ 1876.232154][T31855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6590'. [ 1876.300870][T31856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6590'. [ 1876.754380][T31866] validate_nla: 75 callbacks suppressed [ 1876.754399][T31866] netlink: 'syz.0.6592': attribute type 58 has an invalid length. [ 1876.790538][T31866] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6592'. [ 1877.892428][T31888] netlink: 'syz.4.6599': attribute type 21 has an invalid length. [ 1877.911111][T31888] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6599'. [ 1878.809155][T31917] netlink: 'syz.3.6608': attribute type 28 has an invalid length. [ 1878.819142][T31917] netlink: 'syz.3.6608': attribute type 3 has an invalid length. [ 1878.830845][T31917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6608'. [ 1878.868621][T31915] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6607'. [ 1878.908648][T31915] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6607'. [ 1879.165838][T31928] netlink: 'syz.6.6609': attribute type 10 has an invalid length. [ 1879.173835][T31928] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6609'. [ 1879.183242][T31928] netlink: 'syz.6.6609': attribute type 10 has an invalid length. [ 1879.199557][T31928] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6609'. [ 1883.366105][T31961] netlink: 'syz.4.6619': attribute type 21 has an invalid length. [ 1883.367153][T31962] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6618'. [ 1885.127897][T31969] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6617'. [ 1885.162415][T31969] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6617'. [ 1885.488194][T31983] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6625'. [ 1885.519800][T31983] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1886.129618][T31991] netlink: 'syz.4.6628': attribute type 22 has an invalid length. [ 1886.712046][T32017] netlink: 'syz.3.6633': attribute type 3 has an invalid length. [ 1886.720345][T32017] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.6633'. [ 1886.731424][T32017] netlink: 'syz.3.6633': attribute type 3 has an invalid length. [ 1886.739195][T32017] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.6633'. [ 1886.782226][T32017] netlink: 'syz.3.6633': attribute type 3 has an invalid length. [ 1886.839062][T32017] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.6633'. [ 1886.875621][T32016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6634'. [ 1886.926952][T32017] netlink: 'syz.3.6633': attribute type 3 has an invalid length. [ 1886.953510][T32017] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.6633'. [ 1886.987110][T32017] netlink: 'syz.3.6633': attribute type 3 has an invalid length. [ 1887.027048][T32017] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.6633'. [ 1887.061677][T32017] netlink: 'syz.3.6633': attribute type 3 has an invalid length. [ 1887.080355][T32017] netlink: 'syz.3.6633': attribute type 3 has an invalid length. [ 1887.101560][T32017] netlink: 'syz.3.6633': attribute type 3 has an invalid length. [ 1890.746489][T32062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1891.123047][T32074] validate_nla: 57 callbacks suppressed [ 1891.123080][T32074] netlink: 'syz.4.6646': attribute type 10 has an invalid length. [ 1891.186497][T32074] 8021q: adding VLAN 0 to HW filter on device team0 [ 1891.221467][T32074] bond0: (slave team0): Enslaving as an active interface with an up link [ 1891.241694][T32077] lo: entered allmulticast mode [ 1891.447857][T32077] lo: entered promiscuous mode [ 1891.469781][T32077] lo: left allmulticast mode [ 1892.123235][T32090] netlink: 'syz.4.6652': attribute type 21 has an invalid length. [ 1892.140095][T32090] netlink: 'syz.4.6652': attribute type 6 has an invalid length. [ 1892.691159][T32106] netlink: 'syz.4.6658': attribute type 10 has an invalid length. [ 1892.812020][T32108] lo: left promiscuous mode [ 1892.859652][T32108] lo: entered allmulticast mode [ 1892.911411][T32106] lo: entered promiscuous mode [ 1892.939819][T32106] lo: left allmulticast mode [ 1893.687908][T32125] netlink: 'syz.3.6664': attribute type 10 has an invalid length. [ 1893.738680][T32125] batman_adv: batadv0: Adding interface: netdevsim0 [ 1893.753290][T32125] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.795922][T32125] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1894.370094][T32143] netlink: 'syz.4.6669': attribute type 19 has an invalid length. [ 1894.390753][T32140] netlink: 'syz.4.6669': attribute type 21 has an invalid length. [ 1894.398636][T32140] __nla_validate_parse: 60 callbacks suppressed [ 1894.398652][T32140] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6669'. [ 1894.429942][T32140] netlink: 'syz.4.6669': attribute type 5 has an invalid length. [ 1894.447974][T32140] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6669'. [ 1894.471033][T32143] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1894.666474][T32155] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1896.877736][T32179] netlink: 'syz.0.6680': attribute type 3 has an invalid length. [ 1896.926737][T32179] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6680'. [ 1896.960615][T32182] netlink: 'syz.0.6680': attribute type 4 has an invalid length. [ 1896.968496][T32182] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6680'. [ 1897.018405][T32181] netlink: 60243 bytes leftover after parsing attributes in process `syz.4.6681'. [ 1897.050415][T32181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6681'. [ 1897.229758][T32191] netlink: 'syz.6.6682': attribute type 10 has an invalid length. [ 1897.349649][T32191] team0: Device hsr_slave_0 failed to register rx_handler [ 1903.593255][T32319] netlink: 'syz.3.6713': attribute type 6 has an invalid length. [ 1903.698358][T32319] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6713'. [ 1904.135043][T32330] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6718'. [ 1904.698179][T32338] netlink: 'syz.6.6721': attribute type 10 has an invalid length. [ 1904.751131][T32338] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6721'. [ 1904.973760][T32338] batman_adv: batadv0: Adding interface: veth0_vlan [ 1905.006352][T32338] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1905.089848][T32346] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6721'. [ 1905.109687][T32338] batman_adv: batadv0: Interface activated: veth0_vlan [ 1905.311518][T32346] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6721'. [ 1905.393757][T32341] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6721'. [ 1905.468411][T32354] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6721'. [ 1905.885602][T32374] netlink: 'syz.4.6728': attribute type 21 has an invalid length. [ 1905.942541][T32374] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6728'. [ 1905.980662][T32376] netlink: 'syz.4.6728': attribute type 21 has an invalid length. [ 1905.988550][T32376] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6728'. [ 1906.132663][T32378] netlink: 188 bytes leftover after parsing attributes in process `syz.6.6729'. [ 1908.845922][T32397] netlink: 'syz.0.6735': attribute type 4 has an invalid length. [ 1909.035470][T32397] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6735'. [ 1909.319998][T32401] sock: sock_timestamping_bind_phc: sock not bind to device [ 1909.348314][T32401] netlink: 'syz.4.6736': attribute type 2 has an invalid length. [ 1909.409963][T32401] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.6736'. [ 1909.445541][T32405] netlink: 'syz.0.6738': attribute type 3 has an invalid length. [ 1909.479637][T32405] netlink: 'syz.0.6738': attribute type 1 has an invalid length. [ 1909.497197][T32405] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6738'. [ 1909.567834][T32408] netlink: 'syz.6.6737': attribute type 1 has an invalid length. [ 1909.629580][T32408] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.6737'. [ 1911.160958][T32424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6741'. [ 1911.897718][T32440] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6745'. [ 1913.391189][T32440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1913.471615][T32440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1913.512583][T32440] bond0 (unregistering): (slave team0): Releasing backup interface [ 1913.522555][T32440] bond0 (unregistering): Released all slaves [ 1913.541316][T32439] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6745'. [ 1913.558061][T32443] netlink: 'syz.0.6746': attribute type 5 has an invalid length. [ 1914.815996][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.823952][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.504807][T32515] netlink: 16571 bytes leftover after parsing attributes in process `syz.3.6762'. [ 1918.706938][T32516] Ÿë: port 1(ip6gretap0) entered blocking state [ 1918.713830][T32516] Ÿë: port 1(ip6gretap0) entered disabled state [ 1918.720699][T32516] ip6gretap0: entered allmulticast mode [ 1918.728886][T32516] ip6gretap0: entered promiscuous mode [ 1919.655881][T32531] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6767'. [ 1924.920635][T32597] netlink: 'syz.6.6783': attribute type 8 has an invalid length. [ 1924.928496][T32597] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6783'. [ 1926.290297][T32624] netlink: 'syz.0.6791': attribute type 21 has an invalid length. [ 1926.298233][T32624] netlink: 'syz.0.6791': attribute type 4 has an invalid length. [ 1926.333494][T32624] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6791'. [ 1928.474002][T32656] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6800'. [ 1930.508066][T32675] delete_channel: no stack [ 1932.250003][T25862] Bluetooth: hci3: command 0x0406 tx timeout [ 1933.519111][T32711] netlink: 'syz.0.6812': attribute type 1 has an invalid length. [ 1933.609617][T32711] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6812'. [ 1937.296950][T32724] netlink: 'syz.6.6816': attribute type 1 has an invalid length. [ 1937.370751][T25862] Bluetooth: hci2: command 0x0406 tx timeout [ 1937.460600][T32724] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.6816'. [ 1937.474568][T32723] netlink: 'syz.4.6815': attribute type 10 has an invalid length. [ 1937.535176][T32723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6815'. [ 1937.574013][T32723] team0: entered promiscuous mode [ 1937.603896][T32723] team_slave_0: entered promiscuous mode [ 1937.671545][T32723] team_slave_1: entered promiscuous mode [ 1937.773669][T32723] team0: entered allmulticast mode [ 1937.850251][T32723] team_slave_0: entered allmulticast mode [ 1937.894406][T32723] team_slave_1: entered allmulticast mode [ 1937.962122][T32723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1938.012929][T32723] bridge0: port 3(team0) entered blocking state [ 1938.050473][T32723] bridge0: port 3(team0) entered disabled state [ 1938.104980][T32723] bridge0: port 3(team0) entered blocking state [ 1938.111791][T32723] bridge0: port 3(team0) entered forwarding state [ 1939.777450][T32759] netlink: 'syz.6.6822': attribute type 6 has an invalid length. [ 1939.818868][T32759] netlink: 'syz.6.6822': attribute type 3 has an invalid length. [ 1939.881407][T32759] netlink: 153952 bytes leftover after parsing attributes in process `syz.6.6822'. [ 1940.021294][T32760] netlink: 'syz.6.6822': attribute type 9 has an invalid length. [ 1940.066288][T32760] netlink: 231 bytes leftover after parsing attributes in process `syz.6.6822'. [ 1940.864714][T32765] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6823'. [ 1941.594899][ T307] netlink: 'syz.0.6828': attribute type 1 has an invalid length. [ 1941.644741][ T307] netlink: 'syz.0.6828': attribute type 1 has an invalid length. [ 1942.364222][ T329] netlink: 'syz.4.6832': attribute type 33 has an invalid length. [ 1942.383358][ T329] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6832'. [ 1942.720767][ T339] netlink: 'syz.6.6835': attribute type 21 has an invalid length. [ 1942.739867][ T339] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6835'. [ 1942.749047][ T339] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6835'. [ 1942.840596][ T344] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6836'. [ 1942.855427][ T344] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6836'. [ 1947.270777][ T389] netlink: 'syz.3.6847': attribute type 10 has an invalid length. [ 1947.519907][ T411] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6854'. [ 1947.987799][ T419] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6856'. [ 1948.053689][ T418] IPv6: Can't replace route, no match found [ 1948.933961][ T432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6859'. [ 1949.312861][ T441] netlink: 'syz.6.6862': attribute type 29 has an invalid length. [ 1949.337835][ T444] netlink: 'syz.4.6861': attribute type 21 has an invalid length. [ 1949.370072][ T444] netlink: 'syz.4.6861': attribute type 6 has an invalid length. [ 1949.377964][ T444] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6861'. [ 1949.512417][ T441] netlink: 'syz.6.6862': attribute type 29 has an invalid length. [ 1950.247388][ T453] netlink: 'syz.3.6864': attribute type 10 has an invalid length. [ 1950.495372][ T459] syzkaller0: entered promiscuous mode [ 1950.510159][ T459] syzkaller0: entered allmulticast mode [ 1950.536574][ T464] netlink: 10 bytes leftover after parsing attributes in process `syz.6.6868'. [ 1950.609008][ T453] IPv6: Can't replace route, no match found [ 1950.924623][ T473] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.6870'. [ 1950.995493][ T473] vlan1: entered allmulticast mode [ 1951.012291][ T473] veth0_vlan: entered allmulticast mode [ 1951.290244][ T29] INFO: task syz.5.6320:30635 blocked for more than 143 seconds. [ 1951.310735][ T29] Not tainted syzkaller #0 [ 1951.316173][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1951.347717][ T29] task:syz.5.6320 state:D stack:26664 pid:30635 ppid:28868 flags:0x00004002 [ 1951.368606][ T29] Call Trace: [ 1951.393845][ T29] [ 1951.434137][ T29] __schedule+0x1553/0x45a0 [ 1951.448832][ T29] ? rcu_is_watching+0x15/0xb0 [ 1951.469059][ T29] ? asan.module_dtor+0x20/0x20 [ 1951.475394][ T29] ? trace_contention_end+0x39/0xe0 [ 1951.502559][ T29] ? task_work_cancel+0xa5/0x220 [ 1951.508016][ T29] ? task_work_cancel_func+0x210/0x210 [ 1951.549511][ T29] schedule+0xbd/0x170 [ 1951.553681][ T29] ? _free_event+0xfe/0xf30 [ 1951.558248][ T29] _free_event+0x174/0xf30 [ 1951.615594][ T29] perf_event_release_kernel+0x842/0x8d0 [ 1951.624834][ T29] ? __might_sleep+0xe0/0xe0 [ 1951.651801][ T29] ? calc_timer_values+0x400/0x400 [ 1951.657031][ T29] ? __fput+0x61c/0x970 [ 1951.799591][ T29] ? perf_mmap+0x15c0/0x15c0 [ 1951.804382][ T29] perf_release+0x3b/0x40 [ 1951.840817][ T29] __fput+0x234/0x970 [ 1951.869559][ T29] task_work_run+0x1d4/0x260 [ 1951.874299][ T29] ? task_work_cancel+0x220/0x220 [ 1951.889636][ T29] do_exit+0x95a/0x2460 [ 1951.893961][ T29] ? trace_irq_disable+0x37/0xe0 [ 1951.910405][ T29] ? lock_chain_count+0x20/0x20 [ 1951.935897][ T29] ? put_task_struct+0xc0/0xc0 [ 1951.979759][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1951.986199][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1952.009691][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1952.029657][ T29] do_group_exit+0x21b/0x2d0 [ 1952.036763][ T29] get_signal+0x12fc/0x13f0 [ 1952.069588][ T29] arch_do_signal_or_restart+0xc2/0x800 [ 1952.103548][ T29] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1952.181661][ T29] ? get_sigframe_size+0x20/0x20 [ 1952.186716][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1952.299761][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1952.305343][ T29] exit_to_user_mode_loop+0x70/0x110 [ 1952.341359][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 1952.356988][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1952.377752][ T29] do_syscall_64+0x61/0xa0 [ 1952.413950][ T29] ? clear_bhb_loop+0x40/0x90 [ 1952.468936][ T29] ? clear_bhb_loop+0x40/0x90 [ 1952.495120][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1952.531904][ T29] RIP: 0033:0x7fbd5379c629 [ 1952.552439][ T29] RSP: 002b:00007fbd546570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1952.582065][ T29] RAX: fffffffffffffe00 RBX: 00007fbd53a15fa8 RCX: 00007fbd5379c629 [ 1952.618495][ T29] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbd53a15fa8 [ 1952.689563][ T29] RBP: 00007fbd53a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.716238][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1952.801799][ T29] R13: 00007fbd53a16038 R14: 00007ffdd3808d70 R15: 00007ffdd3808e58 [ 1952.860580][ T29] [ 1952.879160][ T29] [ 1952.879160][ T29] Showing all locks held in the system: [ 1952.917544][ T29] 1 lock held by khungtaskd/29: [ 1953.115744][ T29] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1953.176177][ T29] 2 locks held by getty/5529: [ 1953.203651][ T29] #0: ffff88814ca270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1953.280407][ T29] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1953.319608][ T29] 2 locks held by kworker/0:7/26889: [ 1953.324978][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1953.477101][ T29] #1: ffffc90003667d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1953.518860][ T29] 3 locks held by kworker/u4:32/32219: [ 1953.565383][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1953.631411][ T29] #1: ffffc900103d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1953.700530][ T29] #2: ffffffff8e3c0348 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1953.745287][ T29] 2 locks held by syz.3.6817/32739: [ 1953.786325][ T29] 2 locks held by syz.3.6857/426: [ 1953.818102][ T29] 2 locks held by syz.0.6867/456: [ 1953.842093][ T29] #0: ffffffff8e3c0348 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 1953.886895][ T29] #1: ffffffff8d137978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 1954.023718][ T29] 1 lock held by syz.4.6871/479: [ 1954.050702][ T29] #0: ffffffff8e3c0348 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 1954.090099][ T29] 1 lock held by syz.3.6872/480: [ 1954.127093][ T29] #0: ffffffff8e3c0348 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 1954.209589][ T29] 1 lock held by syz.3.6872/482: [ 1954.266908][ T29] #0: ffffffff8e3c0348 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 1954.302330][ T29] 5 locks held by syz.6.6873/484: [ 1954.328990][ T29] 1 lock held by syz.6.6873/486: [ 1954.361669][ T29] #0: ffffffff8e3c0348 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x1e2/0x18d0 [ 1954.403982][ T29] 1 lock held by syz.4.6874/489: [ 1954.409009][ T29] #0: ffffffff8e3c0348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1954.465839][ T29] 2 locks held by dhcpcd/491: [ 1954.486096][ T29] #0: ffff8880247b6130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 1954.517788][ T29] #1: ffffffff8d137978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1954.548353][ T29] [ 1954.554427][ T29] ============================================= [ 1954.554427][ T29] [ 1954.609825][ T29] NMI backtrace for cpu 1 [ 1954.614219][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1954.621446][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1954.631533][ T29] Call Trace: [ 1954.634850][ T29] [ 1954.637898][ T29] dump_stack_lvl+0x18c/0x250 [ 1954.642618][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 1954.647862][ T29] ? show_regs_print_info+0x20/0x20 [ 1954.653105][ T29] ? load_image+0x400/0x400 [ 1954.657653][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1954.662641][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1954.668839][ T29] ? _printk+0xde/0x130 [ 1954.673037][ T29] ? load_image+0x400/0x400 [ 1954.677660][ T29] ? load_image+0x400/0x400 [ 1954.682207][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1954.688313][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1954.694332][ T29] watchdog+0xf3d/0xf80 [ 1954.698515][ T29] ? watchdog+0x1e1/0xf80 [ 1954.702884][ T29] kthread+0x2fa/0x390 [ 1954.707063][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1954.712132][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1954.716753][ T29] ret_from_fork+0x48/0x80 [ 1954.721200][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1954.725906][ T29] ret_from_fork_asm+0x11/0x20 [ 1954.730740][ T29] [ 1954.735008][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1954.740454][ C0] NMI backtrace for cpu 0 [ 1954.740466][ C0] CPU: 0 PID: 484 Comm: syz.6.6873 Not tainted syzkaller #0 [ 1954.740481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1954.740490][ C0] RIP: 0010:check_preemption_disabled+0x2e/0x110 [ 1954.740514][ C0] Code: 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 05 1d 34 7f 75 65 8b 0d 12 34 7f 75 f7 c1 ff ff ff 7f 74 1f <65> 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 [ 1954.740527][ C0] RSP: 0018:ffffc9000bf371b8 EFLAGS: 00000046 [ 1954.740542][ C0] RAX: 0000000000000000 RBX: ffffc9000bf37208 RCX: 0000000080000000 [ 1954.740553][ C0] RDX: 0000000000000000 RSI: ffffffff8ac7b600 RDI: ffffffff8b1c82e0 [ 1954.740564][ C0] RBP: 0000000000000000 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 1954.740574][ C0] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: 0000000000000000 [ 1954.740585][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1954.740594][ C0] FS: 00007f3d93bf66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1954.740608][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1954.740619][ C0] CR2: 0000561e92110a38 CR3: 000000002f6cc000 CR4: 00000000003506f0 [ 1954.740635][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1954.740644][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1954.740655][ C0] Call Trace: [ 1954.740661][ C0] [ 1954.740670][ C0] sysvec_apic_timer_interrupt+0x84/0xc0 [ 1954.740687][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1954.740704][ C0] RIP: 0010:unwind_next_frame+0x225b/0x2970 [ 1954.740721][ C0] Code: ee e8 69 c0 4b 00 85 ed 74 2a e8 b0 bc 4b 00 42 0f b6 04 2b 84 c0 75 46 41 c7 04 24 00 00 00 00 31 c0 48 81 c4 98 00 00 00 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 e8 86 bc 4b 00 e8 c1 44 c5 ff eb cf [ 1954.740733][ C0] RSP: 0018:ffffc9000bf372b8 EFLAGS: 00000292 [ 1954.740745][ C0] RAX: ffffffff813b5301 RBX: ffffc9000bf373a0 RCX: 0000000000080000 [ 1954.740756][ C0] RDX: ffffc90016e18000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1954.740766][ C0] RBP: ffffc9000bf37a60 R08: ffff88805e3cda00 R09: 0000000000000003 [ 1954.740776][ C0] R10: 0000000000000004 R11: 0000000000000002 R12: ffffc9000bf372e8 [ 1954.740786][ C0] R13: dffffc0000000000 R14: ffffc9000bf37c60 R15: ffffc9000bf372f8 [ 1954.740801][ C0] ? unwind_next_frame+0x1ce1/0x2970 [ 1954.740819][ C0] ? copy_process+0x2960/0x3d80 [ 1954.740835][ C0] ? stack_trace_save+0x100/0x100 [ 1954.740852][ C0] arch_stack_walk+0x144/0x190 [ 1954.740870][ C0] ? kernel_clone+0x24b/0x8a0 [ 1954.740887][ C0] stack_trace_save+0xaa/0x100 [ 1954.740905][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1954.740927][ C0] save_stack+0x125/0x230 [ 1954.740949][ C0] ? __reset_page_owner+0x190/0x190 [ 1954.740969][ C0] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1954.740984][ C0] ? free_unref_page_prepare+0x7b2/0x8c0 [ 1954.741004][ C0] ? free_unref_page_list+0xbe/0x860 [ 1954.741023][ C0] ? release_pages+0x1f7a/0x2200 [ 1954.741038][ C0] ? tlb_flush_mmu+0x379/0x510 [ 1954.741056][ C0] ? tlb_finish_mmu+0xf9/0x220 [ 1954.741074][ C0] ? exit_mmap+0x428/0xb90 [ 1954.741091][ C0] ? __mmput+0x118/0x3c0 [ 1954.741104][ C0] ? copy_process+0x2960/0x3d80 [ 1954.741122][ C0] ? page_ext_get+0x22/0x2b0 [ 1954.741140][ C0] ? page_ext_get+0x1e2/0x2b0 [ 1954.741158][ C0] __reset_page_owner+0x4e/0x190 [ 1954.741181][ C0] free_unref_page_prepare+0x7b2/0x8c0 [ 1954.741204][ C0] free_unref_page_list+0xbe/0x860 [ 1954.741224][ C0] ? __folio_memcg+0x63/0x160 [ 1954.741243][ C0] release_pages+0x1f7a/0x2200 [ 1954.741262][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1954.741279][ C0] ? lru_cache_disable+0x30/0x30 [ 1954.741297][ C0] ? free_swap_cache+0xe9/0x750 [ 1954.741320][ C0] tlb_flush_mmu+0x379/0x510 [ 1954.741342][ C0] tlb_finish_mmu+0xf9/0x220 [ 1954.741363][ C0] exit_mmap+0x428/0xb90 [ 1954.741384][ C0] ? vm_brk+0x30/0x30 [ 1954.741400][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1954.741427][ C0] ? kasan_quarantine_put+0x88/0x220 [ 1954.741464][ C0] ? uprobe_clear_state+0x278/0x290 [ 1954.741483][ C0] __mmput+0x118/0x3c0 [ 1954.741499][ C0] copy_process+0x2960/0x3d80 [ 1954.741521][ C0] ? copy_process+0x96e/0x3d80 [ 1954.741543][ C0] ? __pidfd_prepare+0x140/0x140 [ 1954.741557][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 1954.741577][ C0] ? trace_call_bpf+0x5e9/0x6c0 [ 1954.741596][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 1954.741619][ C0] kernel_clone+0x24b/0x8a0 [ 1954.741637][ C0] ? create_io_thread+0x190/0x190 [ 1954.741657][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 1954.741682][ C0] __x64_sys_clone+0x1b7/0x230 [ 1954.741700][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 1954.741719][ C0] ? 0xffffffffff600000 [ 1954.741738][ C0] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1954.741756][ C0] do_syscall_64+0x55/0xa0 [ 1954.741775][ C0] ? clear_bhb_loop+0x40/0x90 [ 1954.741790][ C0] ? clear_bhb_loop+0x40/0x90 [ 1954.741806][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1954.741822][ C0] RIP: 0033:0x7f3d9599c629 [ 1954.741834][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1954.741845][ C0] RSP: 002b:00007f3d93bf5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1954.741860][ C0] RAX: ffffffffffffffda RBX: 00007f3d95c15fa0 RCX: 00007f3d9599c629 [ 1954.741871][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028280000 [ 1954.741881][ C0] RBP: 00007f3d95a32b39 R08: ffffffffff600000 R09: ffffffffff600000 [ 1954.741892][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1954.741901][ C0] R13: 00007f3d95c16038 R14: 00007f3d95c15fa0 R15: 00007ffd55e0f8c8 [ 1954.741914][ C0] ? 0xffffffffff600000 [ 1954.741924][ C0] ? 0xffffffffff600000 [ 1954.741938][ C0] [ 1954.915338][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1954.915357][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1954.915377][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1954.915387][ T29] Call Trace: [ 1954.915395][ T29] [ 1954.915404][ T29] dump_stack_lvl+0x18c/0x250 [ 1954.915437][ T29] ? show_regs_print_info+0x20/0x20 [ 1954.915472][ T29] ? load_image+0x400/0x400 [ 1954.915504][ T29] panic+0x2dc/0x730 [ 1954.915523][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1954.915550][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1954.915568][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1954.915592][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1954.915629][ T29] watchdog+0xf7c/0xf80 [ 1954.915653][ T29] ? watchdog+0x1e1/0xf80 [ 1954.915681][ T29] kthread+0x2fa/0x390 [ 1954.915697][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1954.915719][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1954.915736][ T29] ret_from_fork+0x48/0x80 [ 1954.915756][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1954.915774][ T29] ret_from_fork_asm+0x11/0x20 [ 1954.915810][ T29] [ 1954.926512][ T29] Kernel Offset: disabled [ 1955.431898][ T29] Rebooting in 86400 seconds..