last executing test programs: 7m17.304741217s ago: executing program 1 (id=1134): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x3, 0x6, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xff0f000020000080) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, @perf_config_ext={0x2, 0x9}, 0x2b90, 0x10000000, 0x800, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f84848fdff005e140602000000000e000a0010000000118000001294", 0x2e}], 0x1}, 0x0) 7m17.133916426s ago: executing program 1 (id=1136): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc00, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) 7m16.972778232s ago: executing program 1 (id=1137): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000100100000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 7m16.865003313s ago: executing program 1 (id=1138): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x1}, 0x0, 0x8000000000000000, 0x0, 0x0, 0x9, 0x10000, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0xe2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xef5, 0x20000000009}, 0x11262, 0x6496, 0x8000000, 0x4, 0x2, 0x0, 0x8, 0x0, 0x6, 0x0, 0x80000001}, 0x0, 0x1, r2, 0x1) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x15, 0x5, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000600)="fc9fda1de89f6b66d0c20b0156403ce90efb741413e1341f7b0aff88657b9bb4704b5e31c3f44f3f163edee87379f575aba5f0df7a67219b54946965e4015eed322329c5d75b1011e1b2c4914d4f6830b2a1fa5580e8f3368ee2453d6cc0731fe2b15afbf46dd49615892b58879ea3", 0x6f}], 0x2}, 0x4040845) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', r1, 0x4000, r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000090000000400000005000000000000000000005f615f5f2e881b00000000000000"], &(0x7f0000003680)=""/4096, 0x35, 0x1000, 0x1}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0xa, 0x922000000001, 0x11) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) 7m14.427546555s ago: executing program 1 (id=1147): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000300007e180000000000000000000009000000009500000200000000beaa00000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) socket$kcm(0x29, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x7d, &(0x7f0000000000)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4040000) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000100)=@x25, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/64, 0x40}, {&(0x7f0000000200)=""/210, 0xd2}], 0x2, &(0x7f00000003c0)=""/83, 0x53}, 0x10000) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000008f006007c03e8fc55a10a0015000600060000000401a80009002000000001000000035c0461c1d67f6f94007134cf013d8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5ee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/202, 0xca}], 0x1}, 0x4002004) r7 = socket$kcm(0xa, 0x922000000003, 0x11) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r8, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x300}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b4003b80", 0x2a}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x804) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 7m13.843464964s ago: executing program 1 (id=1152): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x14}, 0x94) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffda4) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x3}], 0x10}, 0xf7e5) r4 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000980)=ANY=[@ANYBLOB="180f00e17ea3b71c1956ff361af0c954b500008000000000000000000000850000000f000000180100000000007b1af8ff00000000bfa100000000000007000000000000000000", @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYBLOB="bf792337092d26cee4682696e762dc8b619fa4d4167ece0c334585442a971a052e2bab62b0d30210bca7d27ffb1f864cc038c993837ce2679ce0e19dc4e3650ff10548468b4419cfb643598e5f7bcda2f8676e5f9301aa75c233eedc3bacda39a48aaa79cc273131c0d0081a7e6795a768cfb67534e592833286f860610f5840e89cdb8ff1ab8122cd3492db1ca1b5e4046081c33d162bed7928331dc6211ae77d56ac75dc927c37c2472e7ae7f9d8993526d7ba9190a20e65d85c12990eea45dbe0aa602b10fffa"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x6}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r6], 0x0, 0x26, 0x0, 0xfffffffe, 0x0, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000054a60701000000000100000018110000", @ANYRES32, @ANYBLOB="0000000052000000b702ebff14000000fc7123d2af90b184d81554f8404307b70300000000002128a8aa0083000000bf090000000000005509010000000000950000000000000027bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 7m6.344735934s ago: executing program 2 (id=1170): socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000c40), 0x4) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41170, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x80, 0x4, 0x87, 0x9, 0xc3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2f0, 0xf72a}, 0x0, 0x3, 0xfffffff9, 0x3, 0x0, 0x9, 0xc, 0x0, 0x1, 0x0, 0x6}, r0, 0x10, 0xffffffffffffffff, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 7m5.919587746s ago: executing program 2 (id=1174): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x50) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$inet(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x4050) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90224fc602f00000008000300feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 7m5.73362997s ago: executing program 2 (id=1177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m4.716657063s ago: executing program 2 (id=1181): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000007c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0x6, 0xffff8001}, {0x6, 0xfffffff8}, {0x1, 0x2}]}]}, {0x0, [0x739c65129c47bbb9, 0x5f, 0x61, 0x5f, 0x30, 0x30, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/180, 0x47, 0xb4, 0x1, 0x10001}, 0x28) r4 = syz_clone(0x18001080, &(0x7f0000000800), 0x0, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="df9edbe65574bae998ec8e2597ac081f07339dd0c8d40bcc20dd2d3ba7b4af820f6048f5b2e65f5e8bc09a26d2480fb43abcb2e651248cbdbf9eb700a13c727869354ef5b0825dc6eaa628de297024705417936c1620704d9f3d0e03d9d6b169de39cc0506aa33de38f71afc74c0c9faf083e50c19dc029d014c6e22cfb84af19817250b5d3b871543c7ee64d7cab32c9ea8c853d3") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={r4, r0, 0x0, 0x1, &(0x7f0000000980)='\x00'}, 0x30) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x1, 0xf, 0x6, 0x2, 0x20, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x6a, &(0x7f00000000c0)=""/106, 0x40f00, 0x4, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xd, 0x100, 0x5}, 0x10, 0x155aa, r1, 0x9, &(0x7f0000000600)=[r5, r6], &(0x7f0000000640)=[{0x3, 0x3, 0x0, 0x9}, {0x0, 0x2, 0x0, 0x4}, {0x5, 0x3, 0x2, 0xb}, {0x0, 0x2, 0x1, 0x6}, {0x4, 0x2, 0x10, 0x5}, {0x3, 0x4, 0x2, 0x9}, {0x3, 0x3, 0xa, 0xc}, {0x0, 0x1, 0xa, 0x3}, {0x1, 0x2, 0x6, 0xb}], 0x10, 0x7}, 0x94) 7m4.624013229s ago: executing program 2 (id=1183): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x180, 0xc8, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033300fe08fff500000200875a65969ff57b00ff0000000000000000000000ac1414aa"], 0xfdef) 7m4.473400253s ago: executing program 2 (id=1185): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000210081044e810382db44b9040a00000000fe0500002015000600142603600e1209000d00800000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe07241a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x2000000) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x2b, 0x0, 0xffff, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r0, r1, 0x1c, 0x2000, 0x0, @value=r4, @void, @void, @void, r3}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000210081044e810382db44b9040a00000000fe0500002015000600142603600e1209000d00800000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe07241a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x2000000) (async) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) close(0x3) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x2b, 0x0, 0xffff, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r0, r1, 0x1c, 0x2000, 0x0, @value=r4, @void, @void, @void, r3}, 0x20) (async) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 6m58.171021038s ago: executing program 32 (id=1152): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x14}, 0x94) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffda4) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x3}], 0x10}, 0xf7e5) r4 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000980)=ANY=[@ANYBLOB="180f00e17ea3b71c1956ff361af0c954b500008000000000000000000000850000000f000000180100000000007b1af8ff00000000bfa100000000000007000000000000000000", @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYBLOB="bf792337092d26cee4682696e762dc8b619fa4d4167ece0c334585442a971a052e2bab62b0d30210bca7d27ffb1f864cc038c993837ce2679ce0e19dc4e3650ff10548468b4419cfb643598e5f7bcda2f8676e5f9301aa75c233eedc3bacda39a48aaa79cc273131c0d0081a7e6795a768cfb67534e592833286f860610f5840e89cdb8ff1ab8122cd3492db1ca1b5e4046081c33d162bed7928331dc6211ae77d56ac75dc927c37c2472e7ae7f9d8993526d7ba9190a20e65d85c12990eea45dbe0aa602b10fffa"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x6}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r6], 0x0, 0x26, 0x0, 0xfffffffe, 0x0, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000054a60701000000000100000018110000", @ANYRES32, @ANYBLOB="0000000052000000b702ebff14000000fc7123d2af90b184d81554f8404307b70300000000002128a8aa0083000000bf090000000000005509010000000000950000000000000027bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 6m49.107844598s ago: executing program 33 (id=1185): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000210081044e810382db44b9040a00000000fe0500002015000600142603600e1209000d00800000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe07241a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x2000000) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x2b, 0x0, 0xffff, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r0, r1, 0x1c, 0x2000, 0x0, @value=r4, @void, @void, @void, r3}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000210081044e810382db44b9040a00000000fe0500002015000600142603600e1209000d00800000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe07241a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x2000000) (async) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) close(0x3) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x2b, 0x0, 0xffff, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r0, r1, 0x1c, 0x2000, 0x0, @value=r4, @void, @void, @void, r3}, 0x20) (async) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 4m21.625301727s ago: executing program 0 (id=1918): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open$cgroup(&(0x7f0000000b40)={0x1, 0x80, 0xf, 0x4, 0x8, 0x8, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x9}, 0xc00, 0x3, 0xc, 0x5, 0x7, 0x10, 0x7, 0x0, 0x80000001}, 0xffffffffffffffff, 0xa, r2, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000bc0)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2393, 0x0, @perf_config_ext={0x2, 0x42}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r10, &(0x7f0000000000), 0x2a979d) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 4m21.108035016s ago: executing program 0 (id=1925): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x3, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xadc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0xa, 0x3, 0x73) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102037300fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x7, 0x0, &(0x7f00000004c0)="630b008646dc3f", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) socketpair(0x25, 0x1, 0x3843, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x886c25ef308ee361, @perf_config_ext={0x20003, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x15, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000ffffff7f000000000700000018660000090000000000000010000000850000007000000018160000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000007c4b0100ffffffff18450000fbffffff000000000000000018130000", @ANYRES32=r6, @ANYBLOB="000000004fb10000000095000f0000000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0xe6, &(0x7f0000000700)=""/230, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x5, r6, 0x8, &(0x7f0000000a00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xd, 0x4ba, 0x1ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r6, 0xffffffffffffffff], 0x0, 0x10, 0x74ac}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000100)={r8}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) close(0xffffffffffffffff) 4m20.135978776s ago: executing program 0 (id=1934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r0}, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, &(0x7f0000000280)="4f98103b214c25a1469ee7bf00a56551218bd2aade02b8939706696c1ffc410ff80aa7223ed7f198d7a473cc39ac7f8e4dabd0c0e208732746534651542d7d2fb82dabb9400c83c21cce5ce0e105b42f0e781d5e01bf862a4b91d3a48ced3dc2", &(0x7f0000000400)=""/44}, 0x20) r3 = socket$kcm(0x2, 0x3, 0x2) close(r3) r4 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2e0164a27cfd52a8, 0x80, 0x4c, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000040)}, 0x840b, 0xf4, 0x0, 0x8, 0x3fe, 0x401}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000580)=0x3, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 4m19.9486381s ago: executing program 0 (id=1940): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) 4m19.808314531s ago: executing program 0 (id=1943): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000580)='x', 0xfffd}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="2000000000000000842c01000200000005002b"], 0x20}, 0x50) 4m19.719970056s ago: executing program 0 (id=1946): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f00000006c0)=""/196, 0x72, 0xc4, 0x1}, 0x28) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r3}) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, &(0x7f0000000000), 0x4) r4 = syz_clone(0x44004080, &(0x7f0000001480)="2e41a6756608e03bd01b644a87c4d98e25a7c6ac85b1918a1de1120b05542095700cd6db155e20b54c331fdb65e85f9e21ceada53ce3536d509d90cdf646b9e659c5ed08cbf7708787a09a7977b5c685df", 0x51, &(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580)="8d2cd088c744eaebd77b661c601fa1f135bb") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000001380)={0x4, 0x80, 0x5, 0x5, 0x7, 0x8, 0x0, 0x6, 0x10004, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4be, 0x2, @perf_bp={&(0x7f0000001280), 0x8}, 0x101114, 0x4e91, 0x2, 0x1, 0x9, 0x5, 0x101, 0x0, 0xd13, 0x0, 0x10001}, r4, 0x1, r5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80410, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x800, 0xfffffffe, 0x8, 0x4, 0x3, 0xfffb, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001680)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a802150003000140029f064e7620258bc84800000901ac04000bd67f6f93f9710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ceed14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd4307f00000e9703000000000000000000000000428833d1dcd22184", 0xdf}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000010) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5}, 0x94) perf_event_open(0x0, 0x0, 0x1, r7, 0xa) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e0019000f000000028000001294", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x40) 4m4.180918822s ago: executing program 34 (id=1946): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f00000006c0)=""/196, 0x72, 0xc4, 0x1}, 0x28) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r3}) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, &(0x7f0000000000), 0x4) r4 = syz_clone(0x44004080, &(0x7f0000001480)="2e41a6756608e03bd01b644a87c4d98e25a7c6ac85b1918a1de1120b05542095700cd6db155e20b54c331fdb65e85f9e21ceada53ce3536d509d90cdf646b9e659c5ed08cbf7708787a09a7977b5c685df", 0x51, &(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580)="8d2cd088c744eaebd77b661c601fa1f135bb") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000001380)={0x4, 0x80, 0x5, 0x5, 0x7, 0x8, 0x0, 0x6, 0x10004, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4be, 0x2, @perf_bp={&(0x7f0000001280), 0x8}, 0x101114, 0x4e91, 0x2, 0x1, 0x9, 0x5, 0x101, 0x0, 0xd13, 0x0, 0x10001}, r4, 0x1, r5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80410, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x800, 0xfffffffe, 0x8, 0x4, 0x3, 0xfffb, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001680)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a802150003000140029f064e7620258bc84800000901ac04000bd67f6f93f9710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ceed14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd4307f00000e9703000000000000000000000000428833d1dcd22184", 0xdf}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000010) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5}, 0x94) perf_event_open(0x0, 0x0, 0x1, r7, 0xa) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e0019000f000000028000001294", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x40) 6.942715438s ago: executing program 5 (id=3986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x1}, 0x4040000) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$kcm(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001e000605142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b4003b80", 0x2a}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000", @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="5c00000010006bcc9e3be35c6e17aa", 0xf}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="0763707573751400000000000009"], 0x17) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="4189bf8be0b3b817477e059f4c4d0c9a0b35db11171fa227f810cce7af9ef9f213fd03e1c6b722e65b97a8140608b2eb8f7b43879108cd9bc4b550fab955570e6d91e6d0a3d1fc53f584441a741e5b45027e4e401d9e4fe77d2e014c9b76f3d54538548ce707c47b543af8", 0x6b}], 0x1, &(0x7f0000000540)=[{0xb0, 0xbd0288ebe0925bf6, 0x1, "7cbcbf0ad9f75c3c02a93d967210641e8b49b6af124f881aa69beb7bdf420aca10d4da33ae46c69db6dcb330b674ad8530afef2fc90b2d23cc198f011696627e877ee96965e41ec4560ffc86839cab6a701c58a852a2612e1f89a7dc972652c18cafec734d9e618f2db037bd1a6c2a14fd1a255bbccba15c582b93973ab3e8e7bef711f95e774e33c32c14409f23f36749961905255954317fc630d9a1"}, {0x90, 0x117, 0x9, "f3e54013a1015599ff11ee585ccf52da53c4bc2797284b41bdec534dc49f11d2a65fc59de401930fd4962af0f31ea46dc9351cb30f69ff5b39229358f01981de1ec65143b9a0ed79a84de40e4caf6e31190ae62ca5347304af8a8d7a6bdec849f19e20f59697ef3660f3992bb23dc98cebaaa77112ccf01e0547078183f0a8cd"}], 0x140}, 0xc000) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r6], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700000000000000000000000400000000000000c3a0f5ffa00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x64) 6.725160249s ago: executing program 5 (id=3991): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x1}, 0x4040000) r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$kcm(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xd) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001e000605142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b4003b80", 0x2a}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000", @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="5c00000010006bcc9e3be35c6e17aa", 0xf}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="4189bf8be0b3b817477e059f4c4d0c9a0b35db11171fa227f810cce7af9ef9f213fd03e1c6b722e65b97a8140608b2eb8f7b43879108cd9bc4b550fab955570e6d91e6d0a3d1fc53f584441a741e5b45027e4e401d9e4fe77d2e014c9b76f3d54538548ce707c47b543af8", 0x6b}], 0x1, &(0x7f0000000540)=[{0xb0, 0xbd0288ebe0925bf6, 0x1, "7cbcbf0ad9f75c3c02a93d967210641e8b49b6af124f881aa69beb7bdf420aca10d4da33ae46c69db6dcb330b674ad8530afef2fc90b2d23cc198f011696627e877ee96965e41ec4560ffc86839cab6a701c58a852a2612e1f89a7dc972652c18cafec734d9e618f2db037bd1a6c2a14fd1a255bbccba15c582b93973ab3e8e7bef711f95e774e33c32c14409f23f36749961905255954317fc630d9a1"}, {0x90, 0x117, 0x9, "f3e54013a1015599ff11ee585ccf52da53c4bc2797284b41bdec534dc49f11d2a65fc59de401930fd4962af0f31ea46dc9351cb30f69ff5b39229358f01981de1ec65143b9a0ed79a84de40e4caf6e31190ae62ca5347304af8a8d7a6bdec849f19e20f59697ef3660f3992bb23dc98cebaaa77112ccf01e0547078183f0a8cd"}], 0x140}, 0xc000) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r4], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700000000000000000000000400000000000000c3a0f5ffa00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x64) 6.632638357s ago: executing program 4 (id=3992): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a8f27e02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000"], 0x0, 0x5}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$sock_attach_bpf(r2, 0x11b, 0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xce}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.799786322s ago: executing program 4 (id=3997): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x34ea}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) close(r1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4010}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x97ffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) 3.775446637s ago: executing program 5 (id=3998): socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x14802, 0x0, 0x2, 0x9, 0x4, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f0000000100)=r3, 0x120) r4 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0x0, 0x85, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000001300), 0x8}, 0x2004, 0x6d2, 0x1, 0x9, 0x6, 0x1000, 0x5, 0x0, 0xeef, 0x0, 0xed4}, 0x0, 0xb, r1, 0x1) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x9, 0x9, 0x7, 0x7, 0x0, 0x80000000, 0x1, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x10102, 0x4, 0xb5, 0x9, 0x8000, 0x9, 0x7ff, 0x0, 0x100, 0x0, 0x6}, r4, 0xffffffffffffffff, r5, 0x3) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x670}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) openat$cgroup_netprio_ifpriomap(r6, &(0x7f00000013c0), 0x2, 0x0) 3.695931092s ago: executing program 3 (id=3999): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) socket$kcm(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c400, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0xc044) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xa5ba2b88, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a50053582c137153e37000c0280fc80ecd8a3c138d90b1000f80b", 0x33fe0}], 0x1}, 0x40000) 3.695257952s ago: executing program 7 (id=4000): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002815c180535a968d12134e46a3dae86a81de0f844b7eb2d9321a86340276b944ce530f2d50c95069fdfa8457ccd291"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0x77, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xaa, 0x8, 0x0, 0x0}}, 0x10) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000000}, 0x94) 3.683189904s ago: executing program 6 (id=4001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x1}, 0x4040000) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$kcm(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001e000605142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b4003b80", 0x2a}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000", @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="5c00000010006bcc9e3be35c6e17aa", 0xf}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="0763707573751400000000000009"], 0x17) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="4189bf8be0b3b817477e059f4c4d0c9a0b35db11171fa227f810cce7af9ef9f213fd03e1c6b722e65b97a8140608b2eb8f7b43879108cd9bc4b550fab955570e6d91e6d0a3d1fc53f584441a741e5b45027e4e401d9e4fe77d2e014c9b76f3d54538548ce707c47b543af8", 0x6b}], 0x1, &(0x7f0000000540)=[{0xb0, 0xbd0288ebe0925bf6, 0x1, "7cbcbf0ad9f75c3c02a93d967210641e8b49b6af124f881aa69beb7bdf420aca10d4da33ae46c69db6dcb330b674ad8530afef2fc90b2d23cc198f011696627e877ee96965e41ec4560ffc86839cab6a701c58a852a2612e1f89a7dc972652c18cafec734d9e618f2db037bd1a6c2a14fd1a255bbccba15c582b93973ab3e8e7bef711f95e774e33c32c14409f23f36749961905255954317fc630d9a1"}, {0x90, 0x117, 0x9, "f3e54013a1015599ff11ee585ccf52da53c4bc2797284b41bdec534dc49f11d2a65fc59de401930fd4962af0f31ea46dc9351cb30f69ff5b39229358f01981de1ec65143b9a0ed79a84de40e4caf6e31190ae62ca5347304af8a8d7a6bdec849f19e20f59697ef3660f3992bb23dc98cebaaa77112ccf01e0547078183f0a8cd"}], 0x140}, 0xc000) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r6], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700000000000000000000000400000000000000c3a0f5ffa00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x64) 3.635104243s ago: executing program 3 (id=4002): socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001d80), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0xb0ff, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x3f00}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80ffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.550705509s ago: executing program 4 (id=4003): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:'], 0x5d) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.533961473s ago: executing program 7 (id=4004): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d0000000fff0004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 3.473057034s ago: executing program 5 (id=4005): perf_event_open(&(0x7f0000000480)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0], 0x0, 0x71, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r2 = socket$kcm(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000028000b6394f90509a16dd8e50000cc57", 0x14}], 0x1}, 0x200400c0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[], 0xfe33) r7 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ffffff8d00"}) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000600)=""/174, 0xae}], 0x2}, 0x20000000) recvmsg$kcm(r3, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x201000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) 3.472984024s ago: executing program 3 (id=4006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1a3081, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 3.38850912s ago: executing program 4 (id=4007): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$sock_attach_bpf(r2, 0x11b, 0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xce}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.38617857s ago: executing program 7 (id=4008): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x1}, 0x4040000) r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$kcm(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xd) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001e000605142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b4003b80", 0x2a}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000", @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="5c00000010006bcc9e3be35c6e17aa", 0xf}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="4189bf8be0b3b817477e059f4c4d0c9a0b35db11171fa227f810cce7af9ef9f213fd03e1c6b722e65b97a8140608b2eb8f7b43879108cd9bc4b550fab955570e6d91e6d0a3d1fc53f584441a741e5b45027e4e401d9e4fe77d2e014c9b76f3d54538548ce707c47b543af8", 0x6b}], 0x1, &(0x7f0000000540)=[{0xb0, 0xbd0288ebe0925bf6, 0x1, "7cbcbf0ad9f75c3c02a93d967210641e8b49b6af124f881aa69beb7bdf420aca10d4da33ae46c69db6dcb330b674ad8530afef2fc90b2d23cc198f011696627e877ee96965e41ec4560ffc86839cab6a701c58a852a2612e1f89a7dc972652c18cafec734d9e618f2db037bd1a6c2a14fd1a255bbccba15c582b93973ab3e8e7bef711f95e774e33c32c14409f23f36749961905255954317fc630d9a1"}, {0x90, 0x117, 0x9, "f3e54013a1015599ff11ee585ccf52da53c4bc2797284b41bdec534dc49f11d2a65fc59de401930fd4962af0f31ea46dc9351cb30f69ff5b39229358f01981de1ec65143b9a0ed79a84de40e4caf6e31190ae62ca5347304af8a8d7a6bdec849f19e20f59697ef3660f3992bb23dc98cebaaa77112ccf01e0547078183f0a8cd"}], 0x140}, 0xc000) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r4], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700000000000000000000000400000000000000c3a0f5ffa00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x64) 3.364450754s ago: executing program 6 (id=4009): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0xe}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="62031400", 0x4}], 0x1}, 0x84) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000c000000f4add9000000000000000600000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x268, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xffffffffffffffee}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcc9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000004}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xffffffffffffffff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000fe0006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) getpid() openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) syz_clone(0x1001000, &(0x7f0000000000)="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", 0x60d, 0x0, &(0x7f0000001040), 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x1, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r10 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000005c0)=r1, 0x12) 3.28071569s ago: executing program 3 (id=4010): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x20000016, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0}, 0x8000) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000400000dc8b850f238466ccfe807a000000bd6e911b51818462b400060000016e50dcd29a7a9daa67daa6873e", 0x39}, {&(0x7f0000000280)="8f3238e484b46ff57af0ab1b339dedac1d33b3df8b3c0ba7225ab53840d4d3804aad9a51656da5207f0e43b5b06ceb", 0x2f}], 0x2}, 0x0) 3.260925254s ago: executing program 4 (id=4011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) ioctl$TUNGETVNETLE(r0, 0x40107446, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000800) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x40002002) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.06682263s ago: executing program 3 (id=4012): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) socket$kcm(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c400, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0xc044) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xa5ba2b88, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a50053582c137153e37000c0280fc80ecd8a3c138d90b1000f80b", 0x33fe0}], 0x1}, 0x40000) 3.058617232s ago: executing program 7 (id=4013): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.824626287s ago: executing program 7 (id=4014): recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001400)=""/232, 0xe8}], 0x4}, 0x2000) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a7645100b2ffbdb0ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14faecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9cf53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b2f113ad4c7915c8f82c333a7b350802f03b0057010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce06"], 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10040) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000026c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x10}]}, {0x0, [0x61]}}, &(0x7f00000016c0)=""/4096, 0x27, 0x1000, 0x0, 0x9, 0x10000}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0xf, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4, @ANYRES64=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09", @ANYRES32=r4], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2a, r2, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.306892183s ago: executing program 7 (id=4015): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc18000000000000"], 0x48) 1.306647283s ago: executing program 6 (id=4016): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050060000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.284664467s ago: executing program 5 (id=4017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5c32, 0x8041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0), 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4a, 0x0, 0x200000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x4c02, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047440, 0xf0ff1f00000000) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x10808, 0x3, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) close(r5) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1}, 0x10020) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000240)=r3) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8000}, 0x24c1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x41, 0x0, 0x8f00) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x78) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r9) 1.224195638s ago: executing program 6 (id=4018): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030233590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000f19b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 214.43291ms ago: executing program 3 (id=4019): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x1}, 0x4040000) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$kcm(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001e000605142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b4003b80", 0x2a}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000", @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="5c00000010006bcc9e3be35c6e17aa", 0xf}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="0763707573751400000000000009"], 0x17) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="4189bf8be0b3b817477e059f4c4d0c9a0b35db11171fa227f810cce7af9ef9f213fd03e1c6b722e65b97a8140608b2eb8f7b43879108cd9bc4b550fab955570e6d91e6d0a3d1fc53f584441a741e5b45027e4e401d9e4fe77d2e014c9b76f3d54538548ce707c47b543af8", 0x6b}], 0x1, &(0x7f0000000540)=[{0xb0, 0xbd0288ebe0925bf6, 0x1, "7cbcbf0ad9f75c3c02a93d967210641e8b49b6af124f881aa69beb7bdf420aca10d4da33ae46c69db6dcb330b674ad8530afef2fc90b2d23cc198f011696627e877ee96965e41ec4560ffc86839cab6a701c58a852a2612e1f89a7dc972652c18cafec734d9e618f2db037bd1a6c2a14fd1a255bbccba15c582b93973ab3e8e7bef711f95e774e33c32c14409f23f36749961905255954317fc630d9a1"}, {0x90, 0x117, 0x9, "f3e54013a1015599ff11ee585ccf52da53c4bc2797284b41bdec534dc49f11d2a65fc59de401930fd4962af0f31ea46dc9351cb30f69ff5b39229358f01981de1ec65143b9a0ed79a84de40e4caf6e31190ae62ca5347304af8a8d7a6bdec849f19e20f59697ef3660f3992bb23dc98cebaaa77112ccf01e0547078183f0a8cd"}], 0x140}, 0xc000) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r6], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700000000000000000000000400000000000000c3a0f5ffa00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x64) 143.663393ms ago: executing program 6 (id=4020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1a3081, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 124.122157ms ago: executing program 5 (id=4021): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000c0000000c0000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007b000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 61.146999ms ago: executing program 4 (id=4022): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000600), 0x12) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeffffc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r2}, 0xc) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x84, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=4023): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea6567655896eb9f5c0a00000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d49380", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b0d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x4, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xaa32, 0x0, 0xfffffffd, 0x0, 0x3}) ioctl$TUNGETVNETLE(r9, 0x8953, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) kernel console output (not intermixed with test programs): ): Releasing backup interface [ 612.080128][T12987] bond0 (unregistering): Released all slaves [ 612.929695][T13038] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 612.949758][ T6205] syz_tun: tun_net_xmit 42 [ 613.218215][T13048] syz_tun: tun_net_xmit 56 [ 613.398578][T13052] validate_nla: 10 callbacks suppressed [ 613.398600][T13052] netlink: 'syz.4.2679': attribute type 3 has an invalid length. [ 613.522529][T13052] __nla_validate_parse: 14 callbacks suppressed [ 613.522551][T13052] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2679'. [ 613.528105][T13066] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2681'. [ 613.636387][T13066] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 613.681066][T13066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.857775][T13073] netlink: 'syz.5.2688': attribute type 21 has an invalid length. [ 613.865877][T13073] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2688'. [ 614.017173][ C0] syz_tun: tun_net_xmit 42 [ 614.074797][T13085] netlink: 'syz.3.2692': attribute type 30 has an invalid length. [ 614.114699][T13085] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2692'. [ 614.134062][T13091] netlink: 'syz.6.2693': attribute type 30 has an invalid length. [ 614.168712][T13100] syz_tun: tun_net_xmit 56 [ 614.183322][T13091] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2693'. [ 614.251720][T13101] netlink: 14463 bytes leftover after parsing attributes in process `syz.6.2693'. [ 614.489963][T13113] netlink: 'syz.5.2701': attribute type 3 has an invalid length. [ 614.582147][T13113] netlink: 'syz.5.2701': attribute type 1 has an invalid length. [ 614.615054][T13130] pimreg1: tun_chr_ioctl cmd 2147767507 [ 614.652889][T13128] netlink: 'syz.5.2701': attribute type 3 has an invalid length. [ 614.675216][T13128] netlink: 'syz.5.2701': attribute type 1 has an invalid length. [ 615.056750][ C0] syz_tun: tun_net_xmit 42 [ 615.109417][T13142] netlink: 'syz.4.2708': attribute type 30 has an invalid length. [ 615.146103][T13145] netlink: 'syz.7.2709': attribute type 9 has an invalid length. [ 615.158292][T13147] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2708'. [ 615.180010][T13145] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.2709'. [ 615.232521][T13142] syz_tun: tun_net_xmit 56 [ 615.281207][T13142] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2708'. [ 615.414911][T13153] FAULT_INJECTION: forcing a failure. [ 615.414911][T13153] name failslab, interval 1, probability 0, space 0, times 0 [ 615.429445][T13151] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2712'. [ 615.460722][T13153] CPU: 0 PID: 13153 Comm: syz.6.2714 Not tainted syzkaller #0 [ 615.468244][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 615.478330][T13153] Call Trace: [ 615.481648][T13153] [ 615.484607][T13153] dump_stack_lvl+0x188/0x250 [ 615.489321][T13153] ? show_regs_print_info+0x20/0x20 [ 615.494555][T13153] ? load_image+0x410/0x410 [ 615.499090][T13153] ? __might_sleep+0xf0/0xf0 [ 615.503709][T13153] ? __lock_acquire+0x7b50/0x7b50 [ 615.508787][T13153] should_fail+0x383/0x4b0 [ 615.513246][T13153] should_failslab+0x5/0x20 [ 615.517812][T13153] slab_pre_alloc_hook+0x51/0xc0 [ 615.522855][T13153] __kmalloc_node_track_caller+0x68/0x3a0 [ 615.528612][T13153] ? __ip_append_data+0x215b/0x3320 [ 615.533855][T13153] ? __alloc_skb+0xf4/0x750 [ 615.538393][T13153] ? __ip_append_data+0x215b/0x3320 [ 615.543632][T13153] __alloc_skb+0x22c/0x750 [ 615.548086][T13153] ? rcu_force_quiescent_state+0x220/0x220 [ 615.553963][T13153] __ip_append_data+0x215b/0x3320 [ 615.559024][T13153] ? verify_lock_unused+0x140/0x140 [ 615.564297][T13153] ? raw_send_hdrinc+0x10f0/0x10f0 [ 615.569447][T13153] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 615.575474][T13153] ? lock_chain_count+0x20/0x20 [ 615.580359][T13153] ? ip_setup_cork+0x870/0x870 [ 615.585154][T13153] ? ipv4_mtu+0x309/0x420 [ 615.589520][T13153] ? ip_setup_cork+0x48f/0x870 [ 615.594322][T13153] ip_append_data+0x132/0x1a0 [ 615.599045][T13153] ? raw_send_hdrinc+0x10f0/0x10f0 [ 615.604199][T13153] raw_sendmsg+0x1254/0x18b0 [ 615.608847][T13153] ? compat_raw_ioctl+0x60/0x60 [ 615.613747][T13153] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 615.620203][T13153] ? aa_sock_msg_perm+0x94/0x150 [ 615.625173][T13153] ? sock_rps_record_flow+0x17/0x3b0 [ 615.630496][T13153] ? inet_sendmsg+0x7a/0x2a0 [ 615.635122][T13153] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 615.640535][T13153] ? inet_send_prepare+0x250/0x250 [ 615.645686][T13153] ____sys_sendmsg+0x5be/0x8f0 [ 615.650499][T13153] ? __sys_sendmsg_sock+0x30/0x30 [ 615.655564][T13153] ? import_iovec+0x6f/0xa0 [ 615.660112][T13153] ___sys_sendmsg+0x236/0x2e0 [ 615.664846][T13153] ? __sys_sendmsg+0x290/0x290 [ 615.669694][T13153] __se_sys_sendmsg+0x1b7/0x2a0 [ 615.674591][T13153] ? __x64_sys_sendmsg+0x80/0x80 [ 615.679569][T13153] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 615.685603][T13153] ? lockdep_hardirqs_on+0x94/0x140 [ 615.690853][T13153] do_syscall_64+0x4c/0xa0 [ 615.695308][T13153] ? clear_bhb_loop+0x30/0x80 [ 615.700020][T13153] ? clear_bhb_loop+0x30/0x80 [ 615.704731][T13153] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 615.710663][T13153] RIP: 0033:0x7f1d50013159 [ 615.715116][T13153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.734755][T13153] RSP: 002b:00007f1d4e26b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.743220][T13153] RAX: ffffffffffffffda RBX: 00007f1d5029afa0 RCX: 00007f1d50013159 [ 615.751233][T13153] RDX: 0000000000009c80 RSI: 0000200000000040 RDI: 0000000000000003 [ 615.759250][T13153] RBP: 00007f1d4e26b090 R08: 0000000000000000 R09: 0000000000000000 [ 615.767254][T13153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.775256][T13153] R13: 00007f1d5029b038 R14: 00007f1d5029afa0 R15: 00007fff2976d028 [ 615.783278][T13153] [ 615.986979][T13166] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 617.056891][T13192] syz_tun: tun_net_xmit 56 [ 617.365900][T13201] device syzkaller0 entered promiscuous mode [ 617.649421][T13218] can: request_module (can-proto-4) failed. [ 617.989091][T13236] syz_tun: tun_net_xmit 56 [ 618.017539][T13230] openvswitch: netlink: Message has 4 unknown bytes. [ 618.599059][T13260] validate_nla: 10 callbacks suppressed [ 618.599078][T13260] netlink: 'syz.6.2750': attribute type 30 has an invalid length. [ 618.670774][T13260] __nla_validate_parse: 12 callbacks suppressed [ 618.670792][T13260] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2750'. [ 619.027347][T13273] netlink: 'syz.3.2755': attribute type 30 has an invalid length. [ 619.087333][T13278] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2755'. [ 619.138387][T13273] syz_tun: tun_net_xmit 56 [ 619.144466][T13280] netlink: 'syz.6.2757': attribute type 30 has an invalid length. [ 619.181500][T13277] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2757'. [ 619.251570][T13280] netlink: 14463 bytes leftover after parsing attributes in process `syz.6.2757'. [ 619.402520][T13284] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2759'. [ 619.412237][T13287] netlink: 'syz.5.2762': attribute type 30 has an invalid length. [ 619.422443][T13287] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2762'. [ 619.466077][T13293] syz_tun: tun_net_xmit 56 [ 619.475405][T13284] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 619.508853][T13287] netlink: 14463 bytes leftover after parsing attributes in process `syz.5.2762'. [ 619.804291][T13296] delete_channel: no stack [ 619.859923][T13310] netlink: 'syz.7.2771': attribute type 30 has an invalid length. [ 619.881523][T13310] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2771'. [ 620.122252][T13324] netlink: 'syz.6.2777': attribute type 30 has an invalid length. [ 620.162460][T13324] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2777'. [ 620.246884][T13324] netlink: 14463 bytes leftover after parsing attributes in process `syz.6.2777'. [ 620.724235][T13337] syz_tun: tun_net_xmit 42 [ 620.844022][T13341] netlink: 'syz.5.2786': attribute type 30 has an invalid length. [ 620.915775][T13341] syz_tun: tun_net_xmit 56 [ 621.267800][T13360] netlink: 'syz.7.2793': attribute type 30 has an invalid length. [ 621.297821][T13357] netlink: 'syz.4.2792': attribute type 17 has an invalid length. [ 621.776616][ C0] syz_tun: tun_net_xmit 42 [ 621.784802][T13390] netlink: 'syz.4.2805': attribute type 30 has an invalid length. [ 621.864825][T13390] syz_tun: tun_net_xmit 56 [ 621.903158][T13394] Dead loop on virtual device ip6_vti0, fix it urgently! [ 621.991657][T13396] syz_tun: tun_net_xmit 42 [ 622.133137][T13402] syz_tun: tun_net_xmit 56 [ 622.691919][ T3077] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.758188][ T3077] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.816786][ C0] syz_tun: tun_net_xmit 42 [ 622.827449][T13405] chnl_net:caif_netlink_parms(): no params data found [ 622.867870][ T3077] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.932696][ T3077] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.056631][ C0] syz_tun: tun_net_xmit 42 [ 623.126967][T13434] syz_tun: tun_net_xmit 56 [ 623.157543][T13405] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.184052][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.198908][T13405] device bridge_slave_0 entered promiscuous mode [ 623.248935][T13405] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.257217][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.265779][T13405] device bridge_slave_1 entered promiscuous mode [ 623.408116][T13405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.430276][T13405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.856784][ C0] syz_tun: tun_net_xmit 42 [ 624.096641][ C0] syz_tun: tun_net_xmit 42 [ 624.193001][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.199398][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.346633][ T9214] Bluetooth: hci2: command 0x0409 tx timeout [ 624.896595][ C0] syz_tun: tun_net_xmit 42 [ 625.448019][T13405] team0: Port device team_slave_0 added [ 625.556189][T13405] team0: Port device team_slave_1 added [ 625.632578][T13405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.652441][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.690900][T13405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.734124][T13405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.752896][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.833452][T13405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.888914][T13484] validate_nla: 6 callbacks suppressed [ 625.888953][T13484] netlink: 'syz.7.2832': attribute type 30 has an invalid length. [ 625.936604][ C0] syz_tun: tun_net_xmit 42 [ 625.943088][T13489] __nla_validate_parse: 15 callbacks suppressed [ 625.943103][T13489] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2831'. [ 625.962032][T13491] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2832'. [ 626.050989][T13484] netlink: 14463 bytes leftover after parsing attributes in process `syz.7.2832'. [ 626.082195][T13405] device hsr_slave_0 entered promiscuous mode [ 626.102227][T13405] device hsr_slave_1 entered promiscuous mode [ 626.116942][T13405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.124667][T13405] Cannot create hsr debugfs directory [ 626.416812][ T9218] Bluetooth: hci2: command 0x041b tx timeout [ 626.449454][T13505] netlink: 'syz.5.2834': attribute type 17 has an invalid length. [ 626.475955][T13505] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2834'. [ 626.544713][T13509] netlink: 'syz.7.2835': attribute type 30 has an invalid length. [ 626.593665][T13509] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2835'. [ 626.671905][T13509] netlink: 14463 bytes leftover after parsing attributes in process `syz.7.2835'. [ 627.841422][T13536] netlink: 'syz.5.2842': attribute type 30 has an invalid length. [ 627.870760][T13536] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2842'. [ 627.921668][T13537] syz_tun: tun_net_xmit 56 [ 627.928415][T13537] netlink: 14463 bytes leftover after parsing attributes in process `syz.5.2842'. [ 628.496556][ T9214] Bluetooth: hci2: command 0x040f tx timeout [ 628.834091][T13540] netlink: 'syz.6.2843': attribute type 30 has an invalid length. [ 628.878113][T13405] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 628.905264][T13405] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 628.914264][T13540] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2843'. [ 629.008250][ T3077] team0: Port device wlan1 removed [ 629.032290][T13540] netlink: 14463 bytes leftover after parsing attributes in process `syz.6.2843'. [ 629.048206][T13549] netlink: 'syz.7.2845': attribute type 16 has an invalid length. [ 629.061865][T13547] netlink: 'syz.3.2844': attribute type 30 has an invalid length. [ 629.076306][T13405] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 629.095512][T13549] netlink: 'syz.7.2845': attribute type 3 has an invalid length. [ 629.114594][T13547] syz_tun: tun_net_xmit 56 [ 630.586583][ T9214] Bluetooth: hci2: command 0x0419 tx timeout [ 631.042037][T13405] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 631.090141][T13561] netlink: 'syz.6.2846': attribute type 17 has an invalid length. [ 631.106416][T13561] __nla_validate_parse: 2 callbacks suppressed [ 631.114595][T13561] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2846'. [ 631.174479][T13584] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2848'. [ 631.194888][T13586] netlink: 'syz.3.2847': attribute type 30 has an invalid length. [ 631.220401][T13586] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2847'. [ 631.265049][T13586] syz_tun: tun_net_xmit 56 [ 631.290226][ T3077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.302959][ T3077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.322949][ T3077] bridge0: port 4(dummy0) entered disabled state [ 631.337258][ T3077] bridge0: port 3(bond0) entered disabled state [ 631.344513][T13586] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2847'. [ 631.375326][ T3077] device bridge_slave_0 left promiscuous mode [ 631.391680][ T3077] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.639497][ T3077] team0 (unregistering): Port device veth0_to_hsr removed [ 631.659627][ T3077] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 631.668994][ T3077] device batadv_slave_0 left promiscuous mode [ 631.685630][ T3077] team0 (unregistering): Port device team_slave_1 removed [ 631.702723][ T3077] team0 (unregistering): Port device team_slave_0 removed [ 631.722910][ T3077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.732318][ T3077] device bond_slave_1 left promiscuous mode [ 631.746322][ T3077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.755467][ T3077] device bond_slave_0 left promiscuous mode [ 631.772010][ T3077] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 631.781618][ T3077] device bridge_slave_1 left promiscuous mode [ 631.857635][ T3077] bond0 (unregistering): Released all slaves [ 631.903416][T13590] netlink: 'syz.5.2850': attribute type 17 has an invalid length. [ 631.912224][T13590] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2850'. [ 632.021107][T13405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.065478][T13598] netlink: 'syz.6.2854': attribute type 30 has an invalid length. [ 632.110537][T13405] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.120016][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.129378][T13602] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2854'. [ 632.139358][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.155408][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 632.165408][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.178697][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.185826][ T8125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.202953][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 632.212181][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.221118][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.228264][ T8125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.248742][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.257884][T13602] netlink: 14207 bytes leftover after parsing attributes in process `syz.6.2854'. [ 632.271589][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 632.284015][T13603] netlink: 'syz.5.2855': attribute type 30 has an invalid length. [ 632.318517][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 632.332170][T13603] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2855'. [ 632.351359][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 632.364800][T13607] syz_tun: tun_net_xmit 56 [ 632.383409][T13607] netlink: 14463 bytes leftover after parsing attributes in process `syz.5.2855'. [ 632.386403][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 632.409387][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 632.419967][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 632.450155][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 632.466362][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.493604][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.525590][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.543095][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.565244][T13405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 632.595519][T13613] netlink: 'syz.7.2858': attribute type 30 has an invalid length. [ 632.628674][T13613] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2858'. [ 632.643405][T13608] netlink: 'syz.3.2857': attribute type 9 has an invalid length. [ 632.682277][T13618] netlink: 'syz.5.2859': attribute type 17 has an invalid length. [ 632.894553][T13630] netlink: 'syz.3.2862': attribute type 30 has an invalid length. [ 632.936151][T13630] syz_tun: tun_net_xmit 56 [ 632.983870][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 632.992288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 633.010731][T13405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.205392][T13639] netlink: zone id is out of range [ 633.227605][T13639] netlink: set zone limit has 8 unknown bytes [ 633.411427][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 633.423823][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 633.456571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 633.466201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 633.481246][T13405] device veth0_vlan entered promiscuous mode [ 633.490141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 633.499292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 633.513363][T13405] device veth1_vlan entered promiscuous mode [ 633.594250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 633.607434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 633.616294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 633.629288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 633.643632][T13405] device veth0_macvtap entered promiscuous mode [ 633.658709][T13405] device veth1_macvtap entered promiscuous mode [ 634.417702][ C0] syz_tun: tun_net_xmit 42 [ 635.138755][T13405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.155094][T13656] netlink: 'syz.6.2869': attribute type 30 has an invalid length. [ 635.163653][T13405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.163708][T13405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.163728][T13405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.168202][T13405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.211118][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 635.226185][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 635.236222][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 635.248522][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 635.315823][T13405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.328161][T13405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.338129][T13405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.348652][T13405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.360349][T13405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.372180][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 635.383854][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 635.413582][T13405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.423302][T13405] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.446181][T13405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.456584][ C0] syz_tun: tun_net_xmit 42 [ 635.463436][T13405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.654553][T13671] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 635.698384][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.719911][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.772425][T13671] FAULT_INJECTION: forcing a failure. [ 635.772425][T13671] name failslab, interval 1, probability 0, space 0, times 0 [ 635.793524][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 635.829810][T13671] CPU: 0 PID: 13671 Comm: syz.6.2873 Not tainted syzkaller #0 [ 635.837344][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 635.847437][T13671] Call Trace: [ 635.850860][T13671] [ 635.853828][T13671] dump_stack_lvl+0x188/0x250 [ 635.858553][T13671] ? show_regs_print_info+0x20/0x20 [ 635.863799][T13671] ? load_image+0x410/0x410 [ 635.868359][T13671] ? __might_sleep+0xf0/0xf0 [ 635.872991][T13671] ? __lock_acquire+0x7b50/0x7b50 [ 635.878064][T13671] ? rcu_lock_release+0x5/0x20 [ 635.882872][T13671] should_fail+0x383/0x4b0 [ 635.887341][T13671] should_failslab+0x5/0x20 [ 635.891887][T13671] slab_pre_alloc_hook+0x51/0xc0 [ 635.896882][T13671] kmem_cache_alloc_trace+0x47/0x290 [ 635.902209][T13671] ? proc_self_get_link+0xe1/0x170 [ 635.907372][T13671] proc_self_get_link+0xe1/0x170 [ 635.912355][T13671] ? proc_setup_self+0x2d0/0x2d0 [ 635.917331][T13671] pick_link+0x6ba/0xdc0 [ 635.921635][T13671] step_into+0xac6/0xcd0 [ 635.925924][T13671] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 635.932124][T13671] ? set_root+0x3a0/0x3a0 [ 635.936512][T13671] ? walk_component+0x1b6/0x460 [ 635.941413][T13671] link_path_walk+0x688/0xde0 [ 635.946149][T13671] ? handle_lookup_down+0x130/0x130 [ 635.951417][T13671] ? lockdep_init_map_type+0x98/0x900 [ 635.956845][T13671] path_lookupat+0x83/0x420 [ 635.961394][T13671] do_o_path+0x9c/0x200 [ 635.965590][T13671] ? do_tmpfile+0x380/0x380 [ 635.970174][T13671] path_openat+0x29d4/0x2fb0 [ 635.974804][T13671] ? __lock_acquire+0x13dc/0x7b50 [ 635.979887][T13671] ? mark_lock+0x94/0x320 [ 635.984258][T13671] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 635.986103][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.990284][T13671] ? trace_irq_enable_rcuidle+0x13/0x180 [ 635.990314][T13671] ? lock_chain_count+0x20/0x20 [ 635.990342][T13671] ? do_filp_open+0x400/0x400 [ 635.990367][T13671] ? perf_trace_lock+0xe4/0x390 [ 635.990395][T13671] ? trace_event_raw_event_lock+0x250/0x250 [ 635.990427][T13671] do_filp_open+0x1df/0x400 [ 635.990456][T13671] ? vfs_tmpfile+0x300/0x300 [ 636.026579][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.028759][T13671] ? rcu_lock_release+0x20/0x20 [ 636.028816][T13671] ? _raw_spin_unlock+0x24/0x40 [ 636.050433][T13671] ? alloc_fd+0x59e/0x650 [ 636.054809][T13671] do_sys_openat2+0x14b/0x500 [ 636.059525][T13671] ? do_sys_open+0xe0/0xe0 [ 636.063984][T13671] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 636.070204][T13671] __x64_sys_openat+0x135/0x160 [ 636.075120][T13671] do_syscall_64+0x4c/0xa0 [ 636.079574][T13671] ? clear_bhb_loop+0x30/0x80 [ 636.081250][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 636.084296][T13671] ? clear_bhb_loop+0x30/0x80 [ 636.084328][T13671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 636.102175][T13671] RIP: 0033:0x7f1d50013159 [ 636.106652][T13671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.126304][T13671] RSP: 002b:00007f1d4e24a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 636.134769][T13671] RAX: ffffffffffffffda RBX: 00007f1d5029b090 RCX: 00007f1d50013159 [ 636.142798][T13671] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 636.150822][T13671] RBP: 00007f1d4e24a090 R08: 0000000000000000 R09: 0000000000000000 [ 636.158834][T13671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.166847][T13671] R13: 00007f1d5029b128 R14: 00007f1d5029b090 R15: 00007fff2976d028 [ 636.174879][T13671] [ 636.307673][T13687] validate_nla: 4 callbacks suppressed [ 636.307710][T13687] netlink: 'syz.7.2876': attribute type 30 has an invalid length. [ 636.330482][T13686] netlink: 'syz.3.2877': attribute type 30 has an invalid length. [ 636.342332][T13692] __nla_validate_parse: 9 callbacks suppressed [ 636.342351][T13692] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2876'. [ 636.364876][T13691] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2877'. [ 636.380865][T13691] syz_tun: tun_net_xmit 56 [ 636.499270][ C0] syz_tun: tun_net_xmit 42 [ 636.524270][T13687] netlink: 14207 bytes leftover after parsing attributes in process `syz.7.2876'. [ 637.536797][ C0] syz_tun: tun_net_xmit 42 [ 638.576611][ C0] syz_tun: tun_net_xmit 42 [ 638.884422][T13713] netlink: 'syz.4.2884': attribute type 17 has an invalid length. [ 638.898222][T13713] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2884'. [ 638.917100][T13713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.990378][T13722] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.2888'. [ 639.011649][T13722] netlink: 15332 bytes leftover after parsing attributes in process `syz.6.2888'. [ 639.098493][T13725] netlink: 'syz.3.2889': attribute type 5 has an invalid length. [ 639.154926][T13731] netlink: 'syz.6.2890': attribute type 16 has an invalid length. [ 639.164982][T13731] netlink: 'syz.6.2890': attribute type 3 has an invalid length. [ 639.184915][T13731] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2890'. [ 639.313940][T13738] netlink: 'syz.3.2892': attribute type 30 has an invalid length. [ 639.334975][T13738] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2892'. [ 639.361119][T13738] syz_tun: tun_net_xmit 56 [ 639.616570][ C0] syz_tun: tun_net_xmit 42 [ 641.718337][T13748] netlink: 'syz.4.2895': attribute type 30 has an invalid length. [ 641.756213][T13748] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2895'. [ 641.792917][T13745] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2894'. [ 641.831801][T13749] netlink: 'syz.7.2905': attribute type 3 has an invalid length. [ 641.865400][T13749] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2905'. [ 641.876928][T13760] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.2895'. [ 642.237244][T13771] netlink: 'syz.7.2902': attribute type 17 has an invalid length. [ 642.264914][T13771] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2902'. [ 642.281297][T13774] netlink: 'syz.6.2903': attribute type 30 has an invalid length. [ 642.322590][T13774] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2903'. [ 642.413163][T13774] netlink: 14463 bytes leftover after parsing attributes in process `syz.6.2903'. [ 642.623816][T13779] netlink: 'syz.7.2904': attribute type 17 has an invalid length. [ 642.683455][T13779] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2904'. [ 642.720324][T13784] netlink: 'syz.6.2906': attribute type 30 has an invalid length. [ 642.816675][T13789] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2906'. [ 643.605082][T13804] netlink: 'syz.6.2911': attribute type 10 has an invalid length. [ 643.646689][T13804] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2911'. [ 646.077284][T13808] netlink: 'syz.6.2914': attribute type 17 has an invalid length. [ 646.097910][T13809] netlink: 'syz.4.2915': attribute type 17 has an invalid length. [ 646.133154][T13813] netlink: 'syz.3.2917': attribute type 30 has an invalid length. [ 646.164227][T13813] syz_tun: tun_net_xmit 56 [ 646.239263][T13817] syz_tun: tun_net_xmit 56 [ 646.376194][T13822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.417008][T13828] IPv6: NLM_F_CREATE should be specified when creating new route [ 647.048399][T13845] validate_nla: 6 callbacks suppressed [ 647.048437][T13845] netlink: 'syz.7.2932': attribute type 30 has an invalid length. [ 647.073987][T13843] netlink: 'syz.4.2930': attribute type 17 has an invalid length. [ 647.124386][T13843] __nla_validate_parse: 10 callbacks suppressed [ 647.124425][T13843] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2930'. [ 647.159234][T13849] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2932'. [ 647.191039][T13847] netlink: 'syz.5.2931': attribute type 17 has an invalid length. [ 647.213774][T13845] netlink: 14719 bytes leftover after parsing attributes in process `syz.7.2932'. [ 647.243606][T13847] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2931'. [ 647.493937][T13854] netlink: 'syz.4.2933': attribute type 30 has an invalid length. [ 647.543402][T13854] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2933'. [ 649.832480][T13861] netlink: 'syz.5.2935': attribute type 3 has an invalid length. [ 649.847684][T13861] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2935'. [ 650.054894][T13866] netlink: 'syz.3.2939': attribute type 10 has an invalid length. [ 650.076215][T13868] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.2938'. [ 650.110177][T13869] netlink: 'syz.7.2937': attribute type 30 has an invalid length. [ 650.143854][T13868] openvswitch: netlink: Flow key attr not present in new flow. [ 650.162468][T13877] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2937'. [ 650.233781][T13876] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2940'. [ 650.295119][T13869] netlink: 14463 bytes leftover after parsing attributes in process `syz.7.2937'. [ 650.412056][T13880] FAULT_INJECTION: forcing a failure. [ 650.412056][T13880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.476844][T13880] CPU: 0 PID: 13880 Comm: syz.4.2941 Not tainted syzkaller #0 [ 650.484380][T13880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.494478][T13880] Call Trace: [ 650.497794][T13880] [ 650.500756][T13880] dump_stack_lvl+0x188/0x250 [ 650.505479][T13880] ? show_regs_print_info+0x20/0x20 [ 650.510749][T13880] ? load_image+0x410/0x410 [ 650.515292][T13880] ? __lock_acquire+0x7b50/0x7b50 [ 650.520395][T13880] should_fail+0x383/0x4b0 [ 650.524891][T13880] _copy_from_user+0x2e/0x170 [ 650.529605][T13880] __copy_msghdr_from_user+0xc9/0x630 [ 650.535028][T13880] ? verify_lock_unused+0x140/0x140 [ 650.540271][T13880] ? mark_lock+0x94/0x320 [ 650.544650][T13880] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 650.549978][T13880] ? __lock_acquire+0x13dc/0x7b50 [ 650.555087][T13880] ___sys_sendmsg+0x19a/0x2e0 [ 650.559912][T13880] ? __sys_sendmsg+0x290/0x290 [ 650.564728][T13880] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 650.571028][T13880] __se_sys_sendmsg+0x1b7/0x2a0 [ 650.575926][T13880] ? __x64_sys_sendmsg+0x80/0x80 [ 650.580912][T13880] ? syscall_enter_from_user_mode+0x2a/0x70 [ 650.586856][T13880] do_syscall_64+0x4c/0xa0 [ 650.591337][T13880] ? clear_bhb_loop+0x30/0x80 [ 650.596047][T13880] ? clear_bhb_loop+0x30/0x80 [ 650.600863][T13880] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 650.606794][T13880] RIP: 0033:0x7f49e4290159 [ 650.611247][T13880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.630889][T13880] RSP: 002b:00007f49e24e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.639354][T13880] RAX: ffffffffffffffda RBX: 00007f49e4517fa0 RCX: 00007f49e4290159 [ 650.647365][T13880] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 650.655360][T13880] RBP: 00007f49e24e8090 R08: 0000000000000000 R09: 0000000000000000 [ 650.663371][T13880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.671366][T13880] R13: 00007f49e4518038 R14: 00007f49e4517fa0 R15: 00007ffe0b3ea198 [ 650.679367][T13880] [ 650.746301][T13885] netlink: 'syz.7.2943': attribute type 17 has an invalid length. [ 650.783766][T13889] netlink: 'syz.6.2945': attribute type 30 has an invalid length. [ 651.004982][T13913] netlink: 'syz.3.2953': attribute type 10 has an invalid length. [ 651.856631][ T9214] Bluetooth: hci1: command 0x0406 tx timeout [ 653.253977][T13920] netlink: 'syz.6.2956': attribute type 10 has an invalid length. [ 653.317288][T13920] __nla_validate_parse: 5 callbacks suppressed [ 653.317308][T13920] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2956'. [ 653.364118][T13920] device dummy0 entered promiscuous mode [ 653.385620][T13920] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 653.514743][T13929] netlink: 'syz.7.2960': attribute type 17 has an invalid length. [ 653.567318][T13929] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2960'. [ 653.582973][T13936] netlink: 'syz.3.2961': attribute type 9 has an invalid length. [ 653.591142][T13936] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2961'. [ 653.612648][T13930] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.2959'. [ 653.722603][T13939] netlink: 'syz.7.2963': attribute type 30 has an invalid length. [ 653.757980][T13939] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2963'. [ 653.762257][T13942] FAULT_INJECTION: forcing a failure. [ 653.762257][T13942] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 653.811424][T13942] CPU: 1 PID: 13942 Comm: syz.4.2964 Not tainted syzkaller #0 [ 653.818953][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 653.829047][T13942] Call Trace: [ 653.832359][T13942] [ 653.835320][T13942] dump_stack_lvl+0x188/0x250 [ 653.840080][T13942] ? show_regs_print_info+0x20/0x20 [ 653.841784][T13939] netlink: 14719 bytes leftover after parsing attributes in process `syz.7.2963'. [ 653.845334][T13942] ? load_image+0x410/0x410 [ 653.845358][T13942] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 653.865177][T13942] should_fail+0x383/0x4b0 [ 653.869647][T13942] prepare_alloc_pages+0x1e3/0x5b0 [ 653.874807][T13942] __alloc_pages+0x11b/0x480 [ 653.879446][T13942] ? zone_statistics+0x170/0x170 [ 653.884433][T13942] ? alloc_pages+0x452/0x560 [ 653.889082][T13942] skb_page_frag_refill+0x225/0x4c0 [ 653.894327][T13942] sk_page_frag_refill+0x4a/0x200 [ 653.899388][T13942] __ip_append_data+0x1227/0x3320 [ 653.904442][T13942] ? verify_lock_unused+0x140/0x140 [ 653.909684][T13942] ? raw_send_hdrinc+0x10f0/0x10f0 [ 653.914845][T13942] ? ip_setup_cork+0x870/0x870 [ 653.919646][T13942] ? ipv4_mtu+0x309/0x420 [ 653.924017][T13942] ? ip_setup_cork+0x48f/0x870 [ 653.928800][T13942] ip_append_data+0x132/0x1a0 [ 653.933485][T13942] ? raw_send_hdrinc+0x10f0/0x10f0 [ 653.938615][T13942] raw_sendmsg+0x1254/0x18b0 [ 653.943272][T13942] ? compat_raw_ioctl+0x60/0x60 [ 653.948270][T13942] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 653.954707][T13942] ? aa_sock_msg_perm+0x94/0x150 [ 653.959828][T13942] ? sock_rps_record_flow+0x17/0x3b0 [ 653.965147][T13942] ? inet_sendmsg+0x7a/0x2a0 [ 653.969747][T13942] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 653.975053][T13942] ? inet_send_prepare+0x250/0x250 [ 653.980203][T13942] ____sys_sendmsg+0x5be/0x8f0 [ 653.985015][T13942] ? __sys_sendmsg_sock+0x30/0x30 [ 653.990071][T13942] ? import_iovec+0x6f/0xa0 [ 653.994606][T13942] ___sys_sendmsg+0x236/0x2e0 [ 653.999304][T13942] ? __sys_sendmsg+0x290/0x290 [ 654.004106][T13942] ? trace_event_raw_event_lock+0x250/0x250 [ 654.010027][T13942] __se_sys_sendmsg+0x1b7/0x2a0 [ 654.014900][T13942] ? __x64_sys_sendmsg+0x80/0x80 [ 654.019881][T13942] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 654.025919][T13942] ? lockdep_hardirqs_on+0x94/0x140 [ 654.031162][T13942] do_syscall_64+0x4c/0xa0 [ 654.035647][T13942] ? clear_bhb_loop+0x30/0x80 [ 654.040460][T13942] ? clear_bhb_loop+0x30/0x80 [ 654.045179][T13942] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 654.051117][T13942] RIP: 0033:0x7f49e4290159 [ 654.055570][T13942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.075217][T13942] RSP: 002b:00007f49e24e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.083677][T13942] RAX: ffffffffffffffda RBX: 00007f49e4517fa0 RCX: 00007f49e4290159 [ 654.091660][T13942] RDX: 0000000000009c80 RSI: 0000200000000040 RDI: 0000000000000003 [ 654.099644][T13942] RBP: 00007f49e24e8090 R08: 0000000000000000 R09: 0000000000000000 [ 654.107659][T13942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.115679][T13942] R13: 00007f49e4518038 R14: 00007f49e4517fa0 R15: 00007ffe0b3ea198 [ 654.123691][T13942] [ 654.309900][T13955] netlink: 'syz.7.2969': attribute type 39 has an invalid length. [ 656.837028][T13963] netlink: 'syz.6.2973': attribute type 17 has an invalid length. [ 656.846345][T13963] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2973'. [ 656.865790][T13974] netlink: 'syz.4.2976': attribute type 21 has an invalid length. [ 656.875349][T13974] IPv6: NLM_F_CREATE should be specified when creating new route [ 656.887617][T13974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 656.894860][T13974] IPv6: NLM_F_CREATE should be set when creating new route [ 656.902315][T13974] IPv6: NLM_F_CREATE should be set when creating new route [ 656.909593][T13974] IPv6: NLM_F_CREATE should be set when creating new route [ 656.959924][T13981] netlink: 'syz.6.2977': attribute type 21 has an invalid length. [ 657.054231][T13984] netlink: 'syz.4.2979': attribute type 30 has an invalid length. [ 657.253262][T13984] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2979'. [ 657.348282][T13995] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.2979'. [ 657.949399][T14003] netlink: 'syz.6.2983': attribute type 21 has an invalid length. [ 657.984441][T14008] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2987'. [ 658.030793][T14013] syz_tun: tun_net_xmit 56 [ 658.192081][T14020] syz_tun: tun_net_xmit 56 [ 658.313661][T14024] openvswitch: netlink: Message has 4 unknown bytes. [ 658.337768][T14026] validate_nla: 3 callbacks suppressed [ 658.337801][T14026] netlink: 'syz.5.2994': attribute type 30 has an invalid length. [ 658.401529][T14026] __nla_validate_parse: 5 callbacks suppressed [ 658.401566][T14026] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2994'. [ 658.422996][T14031] Dead loop on virtual device ip6_vti0, fix it urgently! [ 658.423264][T14026] syz_tun: tun_net_xmit 56 [ 658.452248][T14026] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.2994'. [ 660.174422][T14036] netlink: 'syz.4.3001': attribute type 17 has an invalid length. [ 660.195024][T14036] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3001'. [ 660.252366][T14044] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3002'. [ 660.300592][T14041] device syzkaller0 entered promiscuous mode [ 660.329909][T14054] netlink: 'syz.4.3004': attribute type 30 has an invalid length. [ 660.344825][T14052] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.3000'. [ 660.366155][T14054] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3004'. [ 660.434263][T14054] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.3004'. [ 660.566205][T14062] netlink: 'syz.4.3007': attribute type 30 has an invalid length. [ 660.618476][T14062] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3007'. [ 660.640272][T14066] netlink: 'syz.6.3009': attribute type 30 has an invalid length. [ 660.665846][T14066] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3009'. [ 660.692904][T14062] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.3007'. [ 661.051264][T14070] openvswitch: netlink: Message has 4 unknown bytes. [ 661.091910][T14075] netlink: 'syz.3.3012': attribute type 30 has an invalid length. [ 661.148767][T14075] syz_tun: tun_net_xmit 56 [ 661.238064][T14079] netlink: 'syz.6.3014': attribute type 17 has an invalid length. [ 661.845096][T14101] netlink: 'syz.5.3021': attribute type 30 has an invalid length. [ 661.920825][T14106] syz_tun: tun_net_xmit 56 [ 662.135115][T14117] netlink: 'syz.3.3027': attribute type 30 has an invalid length. [ 662.187633][T14117] syz_tun: tun_net_xmit 56 [ 662.435065][T14133] netlink: 'syz.5.3034': attribute type 30 has an invalid length. [ 662.482649][T14133] syz_tun: tun_net_xmit 56 [ 663.280087][T14158] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 663.529928][T14169] validate_nla: 3 callbacks suppressed [ 663.529947][T14169] netlink: 'syz.3.3047': attribute type 3 has an invalid length. [ 663.564218][T14169] __nla_validate_parse: 16 callbacks suppressed [ 663.564234][T14169] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3047'. [ 663.688355][T14173] netlink: 'syz.5.3049': attribute type 30 has an invalid length. [ 663.707309][T14175] netlink: 'syz.4.3050': attribute type 10 has an invalid length. [ 663.733157][T14173] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3049'. [ 663.760325][T14177] netlink: 'syz.3.3051': attribute type 30 has an invalid length. [ 663.772031][T14175] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.781031][T14179] syz_tun: tun_net_xmit 56 [ 663.789725][T14179] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.3049'. [ 663.817449][T14177] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3051'. [ 663.842137][T14175] device bridge_slave_1 left promiscuous mode [ 663.853024][T14175] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.864653][T14180] syz_tun: tun_net_xmit 56 [ 663.901232][T14175] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 663.934710][T14183] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.3051'. [ 664.371177][T14201] netlink: 'syz.4.3057': attribute type 10 has an invalid length. [ 667.315608][T14201] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.352085][T14201] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.359571][T14201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.407945][T14201] team0: Port device bridge0 added [ 667.481180][T14216] netlink: 'syz.3.3063': attribute type 30 has an invalid length. [ 667.503474][T14216] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3063'. [ 667.525235][T14218] netlink: 'syz.7.3064': attribute type 10 has an invalid length. [ 667.534529][T14220] syz_tun: tun_net_xmit 42 [ 667.572121][T14216] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.3063'. [ 667.630125][T14231] netlink: 'syz.7.3068': attribute type 10 has an invalid length. [ 667.639384][T14229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.721237][T14235] netlink: 'syz.6.3069': attribute type 10 has an invalid length. [ 667.735440][T14235] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3069'. [ 667.851867][T14244] netlink: 'syz.6.3073': attribute type 30 has an invalid length. [ 667.975815][T14244] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3073'. [ 668.076975][T14244] netlink: 14207 bytes leftover after parsing attributes in process `syz.6.3073'. [ 668.577849][ C0] syz_tun: tun_net_xmit 42 [ 668.845254][T14300] validate_nla: 3 callbacks suppressed [ 668.845294][T14300] netlink: 'syz.6.3093': attribute type 30 has an invalid length. [ 668.865504][T14297] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 668.875525][T14296] netlink: 'syz.5.3091': attribute type 17 has an invalid length. [ 668.940917][T14296] __nla_validate_parse: 4 callbacks suppressed [ 668.940956][T14296] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3091'. [ 668.951015][T14302] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3093'. [ 669.017102][T14300] netlink: 14719 bytes leftover after parsing attributes in process `syz.6.3093'. [ 669.042442][T14292] netlink: 192436 bytes leftover after parsing attributes in process `syz.7.3090'. [ 669.058158][T14292] openvswitch: netlink: Duplicate key (type 0). [ 669.221864][T14310] netlink: 'syz.7.3097': attribute type 3 has an invalid length. [ 669.267320][T14310] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3097'. [ 669.303110][T14313] FAULT_INJECTION: forcing a failure. [ 669.303110][T14313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.315353][T14311] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3096'. [ 669.337533][T14311] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 669.356713][T14313] CPU: 0 PID: 14313 Comm: syz.6.3098 Not tainted syzkaller #0 [ 669.364289][T14313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 669.374379][T14313] Call Trace: [ 669.377787][T14313] [ 669.380783][T14313] dump_stack_lvl+0x188/0x250 [ 669.385509][T14313] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 669.391796][T14313] ? show_regs_print_info+0x20/0x20 [ 669.397037][T14313] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 669.403245][T14313] should_fail+0x383/0x4b0 [ 669.407706][T14313] _copy_from_user+0x2e/0x170 [ 669.412429][T14313] iovec_from_user+0x142/0x370 [ 669.417337][T14313] __import_iovec+0x70/0x490 [ 669.421963][T14313] ? __lock_acquire+0x13dc/0x7b50 [ 669.427029][T14313] import_iovec+0x6f/0xa0 [ 669.431396][T14313] ___sys_sendmsg+0x1fd/0x2e0 [ 669.436113][T14313] ? __sys_sendmsg+0x290/0x290 [ 669.440939][T14313] __se_sys_sendmsg+0x1b7/0x2a0 [ 669.444184][T14311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.445872][T14313] ? __x64_sys_sendmsg+0x80/0x80 [ 669.445911][T14313] ? syscall_enter_from_user_mode+0x2a/0x70 [ 669.472058][T14313] do_syscall_64+0x4c/0xa0 [ 669.476514][T14313] ? clear_bhb_loop+0x30/0x80 [ 669.481233][T14313] ? clear_bhb_loop+0x30/0x80 [ 669.485947][T14313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 669.491880][T14313] RIP: 0033:0x7f1d50013159 [ 669.496336][T14313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.516259][T14313] RSP: 002b:00007f1d4e26b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.524723][T14313] RAX: ffffffffffffffda RBX: 00007f1d5029afa0 RCX: 00007f1d50013159 [ 669.532822][T14313] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 669.540831][T14313] RBP: 00007f1d4e26b090 R08: 0000000000000000 R09: 0000000000000000 [ 669.548836][T14313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.556838][T14313] R13: 00007f1d5029b038 R14: 00007f1d5029afa0 R15: 00007fff2976d028 [ 669.564857][T14313] [ 669.618691][ C0] syz_tun: tun_net_xmit 42 [ 669.823691][T14323] netlink: 'syz.5.3103': attribute type 30 has an invalid length. [ 669.872557][T14319] netlink: 'syz.3.3101': attribute type 21 has an invalid length. [ 669.890317][T14319] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3101'. [ 669.912650][T14321] netlink: 'syz.7.3100': attribute type 20 has an invalid length. [ 669.943900][T14326] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3103'. [ 669.980567][T14323] syz_tun: tun_net_xmit 56 [ 670.012989][T14323] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.3103'. [ 670.135685][T14334] netlink: 'syz.3.3105': attribute type 30 has an invalid length. [ 670.152670][T14334] syz_tun: tun_net_xmit 56 [ 670.169040][T14334] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.3105'. [ 670.225083][T14338] netlink: 'syz.7.3106': attribute type 17 has an invalid length. [ 670.585021][T14348] netlink: 'syz.7.3112': attribute type 1 has an invalid length. [ 670.598445][T14348] netlink: 'syz.7.3112': attribute type 3 has an invalid length. [ 670.719132][T14355] syz_tun: tun_net_xmit 42 [ 670.957791][T14364] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 671.123968][T14366] syz_tun: tun_net_xmit 56 [ 671.730387][T14395] FAULT_INJECTION: forcing a failure. [ 671.730387][T14395] name failslab, interval 1, probability 0, space 0, times 0 [ 671.756632][T14395] CPU: 1 PID: 14395 Comm: syz.6.3130 Not tainted syzkaller #0 [ 671.764180][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 671.774277][T14395] Call Trace: [ 671.777606][T14395] [ 671.780602][T14395] dump_stack_lvl+0x188/0x250 [ 671.785324][T14395] ? show_regs_print_info+0x20/0x20 [ 671.790564][T14395] ? load_image+0x410/0x410 [ 671.795138][T14395] ? __might_sleep+0xf0/0xf0 [ 671.799768][T14395] ? __lock_acquire+0x7b50/0x7b50 [ 671.805018][T14395] should_fail+0x383/0x4b0 [ 671.809488][T14395] should_failslab+0x5/0x20 [ 671.814078][T14395] slab_pre_alloc_hook+0x51/0xc0 [ 671.819055][T14395] __kmalloc_node_track_caller+0x68/0x3a0 [ 671.824816][T14395] ? __ip_append_data+0x215b/0x3320 [ 671.830049][T14395] ? __alloc_skb+0xf4/0x750 [ 671.834596][T14395] ? __ip_append_data+0x215b/0x3320 [ 671.839831][T14395] __alloc_skb+0x22c/0x750 [ 671.844313][T14395] __ip_append_data+0x215b/0x3320 [ 671.849383][T14395] ? verify_lock_unused+0x140/0x140 [ 671.854743][T14395] ? raw_send_hdrinc+0x10f0/0x10f0 [ 671.859909][T14395] ? ip_setup_cork+0x870/0x870 [ 671.864720][T14395] ? ipv4_mtu+0x309/0x420 [ 671.869092][T14395] ? ip_setup_cork+0x48f/0x870 [ 671.873904][T14395] ip_append_data+0x132/0x1a0 [ 671.878631][T14395] ? raw_send_hdrinc+0x10f0/0x10f0 [ 671.883795][T14395] raw_sendmsg+0x1254/0x18b0 [ 671.888450][T14395] ? compat_raw_ioctl+0x60/0x60 [ 671.893380][T14395] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 671.899841][T14395] ? aa_sock_msg_perm+0x94/0x150 [ 671.904819][T14395] ? sock_rps_record_flow+0x17/0x3b0 [ 671.910132][T14395] ? inet_sendmsg+0x7a/0x2a0 [ 671.914747][T14395] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 671.920064][T14395] ? inet_send_prepare+0x250/0x250 [ 671.925223][T14395] ____sys_sendmsg+0x5be/0x8f0 [ 671.930023][T14395] ? __sys_sendmsg_sock+0x30/0x30 [ 671.935080][T14395] ? import_iovec+0x6f/0xa0 [ 671.939611][T14395] ___sys_sendmsg+0x236/0x2e0 [ 671.944317][T14395] ? __sys_sendmsg+0x290/0x290 [ 671.949223][T14395] ? trace_event_raw_event_lock+0x250/0x250 [ 671.955162][T14395] __se_sys_sendmsg+0x1b7/0x2a0 [ 671.960040][T14395] ? __x64_sys_sendmsg+0x80/0x80 [ 671.965018][T14395] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 671.971034][T14395] ? lockdep_hardirqs_on+0x94/0x140 [ 671.976263][T14395] do_syscall_64+0x4c/0xa0 [ 671.980694][T14395] ? clear_bhb_loop+0x30/0x80 [ 671.985391][T14395] ? clear_bhb_loop+0x30/0x80 [ 671.990093][T14395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 671.996124][T14395] RIP: 0033:0x7f1d50013159 [ 672.000561][T14395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.020196][T14395] RSP: 002b:00007f1d4e26b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.028639][T14395] RAX: ffffffffffffffda RBX: 00007f1d5029afa0 RCX: 00007f1d50013159 [ 672.036632][T14395] RDX: 0000000000009c80 RSI: 0000200000000040 RDI: 0000000000000003 [ 672.044623][T14395] RBP: 00007f1d4e26b090 R08: 0000000000000000 R09: 0000000000000000 [ 672.052612][T14395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.060599][T14395] R13: 00007f1d5029b038 R14: 00007f1d5029afa0 R15: 00007fff2976d028 [ 672.068602][T14395] [ 672.071960][ C1] syz_tun: tun_net_xmit 42 [ 672.280930][T14417] syz_tun: tun_net_xmit 56 [ 672.334085][T14421] syz.7.3137[14421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 672.334219][T14421] syz.7.3137[14421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 672.694939][T14432] openvswitch: netlink: Flow key attr not present in new flow. [ 673.136848][ C1] syz_tun: tun_net_xmit 42 [ 673.816379][T14480] openvswitch: netlink: Flow key attr not present in new flow. [ 674.176969][ C1] syz_tun: tun_net_xmit 42 [ 675.216790][ C1] syz_tun: tun_net_xmit 42 [ 676.266775][ C1] syz_tun: tun_net_xmit 42 [ 676.293766][ C0] syz_tun: tun_net_xmit 42 [ 677.319070][ C0] syz_tun: tun_net_xmit 42 [ 677.773978][T14487] validate_nla: 10 callbacks suppressed [ 677.773994][T14487] netlink: 'syz.5.3159': attribute type 21 has an invalid length. [ 677.812882][T14495] netlink: 'syz.6.3161': attribute type 30 has an invalid length. [ 677.821600][T14487] netlink: 'syz.5.3159': attribute type 13 has an invalid length. [ 677.856065][T14495] __nla_validate_parse: 23 callbacks suppressed [ 677.856109][T14495] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3161'. [ 677.878670][T14487] netlink: 6188 bytes leftover after parsing attributes in process `syz.5.3159'. [ 677.904662][T14496] netlink: 14463 bytes leftover after parsing attributes in process `syz.6.3161'. [ 678.042178][T14504] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3167'. [ 678.074842][T14505] netlink: 'syz.3.3164': attribute type 17 has an invalid length. [ 678.114050][T14506] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.3167'. [ 678.123583][T14505] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3164'. [ 678.286593][T14511] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3170'. [ 678.337088][ C0] syz_tun: tun_net_xmit 42 [ 678.679917][T14528] netlink: 'syz.6.3177': attribute type 21 has an invalid length. [ 678.729107][T14528] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3177'. [ 678.756759][T14528] netlink: 'syz.6.3177': attribute type 1 has an invalid length. [ 678.776145][T14521] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.3174'. [ 678.793703][T14521] openvswitch: netlink: Message has 4 unknown bytes. [ 678.909651][T14532] netlink: 'syz.7.3178': attribute type 30 has an invalid length. [ 678.946020][T14532] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3178'. [ 681.513715][T14537] netlink: 'syz.4.3180': attribute type 21 has an invalid length. [ 681.673268][T14547] netlink: 'syz.6.3183': attribute type 39 has an invalid length. [ 681.880699][T14556] openvswitch: netlink: Key type 4112 is out of range max 29 [ 681.889886][T14550] netlink: 'syz.4.3182': attribute type 10 has an invalid length. [ 681.898804][T14550] device hsr0 entered promiscuous mode [ 681.911510][T14550] bridge0: port 2(hsr0) entered blocking state [ 681.928097][T14550] bridge0: port 2(hsr0) entered disabled state [ 682.082790][T14550] bridge0: port 2(hsr0) entered blocking state [ 682.089563][T14550] bridge0: port 2(hsr0) entered forwarding state [ 682.536975][T14574] syz_tun: tun_net_xmit 56 [ 685.220577][T14601] __nla_validate_parse: 10 callbacks suppressed [ 685.220617][T14601] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3199'. [ 685.620832][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.627204][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.100344][T14603] validate_nla: 2 callbacks suppressed [ 687.100386][T14603] netlink: 'syz.3.3200': attribute type 30 has an invalid length. [ 687.151364][T14603] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3200'. [ 687.186344][T14603] syz_tun: tun_net_xmit 56 [ 687.204070][T14603] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.3200'. [ 687.297170][T14607] netlink: 'syz.4.3202': attribute type 1 has an invalid length. [ 687.305350][T14607] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3202'. [ 687.394023][T14607] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3202'. [ 687.410711][T14607] netlink: 'syz.4.3202': attribute type 1 has an invalid length. [ 687.419261][T14607] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3202'. [ 687.693049][T14621] netlink: 'syz.4.3205': attribute type 17 has an invalid length. [ 688.899867][T14626] netlink: 'syz.3.3206': attribute type 30 has an invalid length. [ 688.928695][T14626] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3206'. [ 688.945764][T14626] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.3206'. [ 688.966847][T14628] netlink: 212412 bytes leftover after parsing attributes in process `syz.6.3216'. [ 688.976201][T14628] openvswitch: netlink: Flow key attr not present in new flow. [ 689.224665][T14632] netlink: 'syz.7.3208': attribute type 10 has an invalid length. [ 689.259164][T14636] netlink: 'syz.4.3210': attribute type 30 has an invalid length. [ 689.271793][T14630] netlink: 'syz.3.3207': attribute type 10 has an invalid length. [ 689.286382][T14630] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3207'. [ 689.296461][T14630] device hsr0 entered promiscuous mode [ 689.355423][T14630] bridge0: port 2(hsr0) entered blocking state [ 689.362964][T14630] bridge0: port 2(hsr0) entered disabled state [ 689.381695][T14630] bridge0: port 2(hsr0) entered blocking state [ 689.388269][T14630] bridge0: port 2(hsr0) entered forwarding state [ 689.469437][T14638] openvswitch: netlink: Message has 4 unknown bytes. [ 689.667990][T14659] netlink: 'syz.7.3217': attribute type 30 has an invalid length. [ 691.910763][T14679] __nla_validate_parse: 5 callbacks suppressed [ 691.911179][T14679] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3220'. [ 691.943493][T14679] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 691.962781][T14684] netlink: 'syz.3.3225': attribute type 30 has an invalid length. [ 692.021371][T14684] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3225'. [ 692.128308][T14691] syz_tun: tun_net_xmit 56 [ 692.218505][T14693] netlink: 209860 bytes leftover after parsing attributes in process `syz.7.3227'. [ 692.268826][T14693] openvswitch: netlink: Message has 4 unknown bytes. [ 692.299052][T14684] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.3225'. [ 692.592182][T14708] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.3231'. [ 692.642170][T14708] openvswitch: netlink: Flow key attr not present in new flow. [ 693.330670][T14727] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.3240'. [ 693.551014][T14727] openvswitch: netlink: Message has 4 unknown bytes. [ 693.591956][T14732] netlink: 'syz.5.3242': attribute type 30 has an invalid length. [ 693.706953][T14735] syz_tun: tun_net_xmit 56 [ 693.724993][T14733] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3241'. [ 693.738659][T14732] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3242'. [ 693.813666][T14738] netlink: 'syz.3.3243': attribute type 5 has an invalid length. [ 693.842507][T14735] netlink: 14463 bytes leftover after parsing attributes in process `syz.5.3242'. [ 693.888155][T14733] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 694.031574][T14730] FAULT_INJECTION: forcing a failure. [ 694.031574][T14730] name failslab, interval 1, probability 0, space 0, times 0 [ 694.065563][T14730] CPU: 0 PID: 14730 Comm: syz.7.3241 Not tainted syzkaller #0 [ 694.073187][T14730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 694.083282][T14730] Call Trace: [ 694.086597][T14730] [ 694.089578][T14730] dump_stack_lvl+0x188/0x250 [ 694.094295][T14730] ? show_regs_print_info+0x20/0x20 [ 694.099638][T14730] ? load_image+0x410/0x410 [ 694.104188][T14730] ? __lock_acquire+0x7b50/0x7b50 [ 694.109253][T14730] ? perf_trace_lock+0xe4/0x390 [ 694.114150][T14730] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 694.120184][T14730] should_fail+0x383/0x4b0 [ 694.124660][T14730] should_failslab+0x5/0x20 [ 694.129202][T14730] slab_pre_alloc_hook+0x51/0xc0 [ 694.134172][T14730] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 694.140532][T14730] ? proc_alloc_inode+0x19/0xa0 [ 694.145424][T14730] kmem_cache_alloc+0x3d/0x280 [ 694.150228][T14730] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 694.156599][T14730] proc_alloc_inode+0x19/0xa0 [ 694.161315][T14730] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 694.167687][T14730] new_inode_pseudo+0x5f/0x210 [ 694.172493][T14730] new_inode+0x25/0x1d0 [ 694.176701][T14730] proc_pid_make_inode+0x20/0x1a0 [ 694.181768][T14730] proc_pident_instantiate+0x69/0x2a0 [ 694.187187][T14730] proc_pident_lookup+0x1cb/0x270 [ 694.192258][T14730] __lookup_slow+0x29d/0x410 [ 694.196887][T14730] ? lookup_one_len+0x2d0/0x2d0 [ 694.201787][T14730] ? down_read+0x5f/0x2e0 [ 694.206160][T14730] ? down_read+0x1aa/0x2e0 [ 694.210607][T14730] lookup_slow+0x53/0x70 [ 694.214884][T14730] walk_component+0x314/0x460 [ 694.219610][T14730] link_path_walk+0x688/0xde0 [ 694.224336][T14730] ? handle_lookup_down+0x130/0x130 [ 694.229570][T14730] ? lock_chain_count+0x20/0x20 [ 694.234485][T14730] path_lookupat+0x83/0x420 [ 694.239028][T14730] do_o_path+0x9c/0x200 [ 694.243214][T14730] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 694.249413][T14730] ? do_tmpfile+0x380/0x380 [ 694.253969][T14730] ? path_openat+0x29c4/0x2fb0 [ 694.258773][T14730] path_openat+0x29d4/0x2fb0 [ 694.263399][T14730] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 694.269416][T14730] ? lock_chain_count+0x20/0x20 [ 694.274309][T14730] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 694.280515][T14730] ? lockdep_hardirqs_on+0x94/0x140 [ 694.285758][T14730] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 694.292105][T14730] ? alloc_fd+0x59e/0x650 [ 694.296470][T14730] ? do_filp_open+0x400/0x400 [ 694.301188][T14730] ? perf_trace_lock+0x157/0x390 [ 694.306177][T14730] ? trace_event_raw_event_lock+0x250/0x250 [ 694.312121][T14730] do_filp_open+0x1df/0x400 [ 694.316669][T14730] ? vfs_tmpfile+0x300/0x300 [ 694.321305][T14730] ? rcu_lock_release+0x20/0x20 [ 694.326199][T14730] ? noop_direct_IO+0x10/0x10 [ 694.330915][T14730] ? _raw_spin_unlock+0x24/0x40 [ 694.335803][T14730] ? alloc_fd+0x59e/0x650 [ 694.340180][T14730] do_sys_openat2+0x14b/0x500 [ 694.344886][T14730] ? lockdep_hardirqs_on+0x94/0x140 [ 694.350113][T14730] ? do_sys_open+0xe0/0xe0 [ 694.354570][T14730] ? __x64_sys_openat+0x11f/0x160 [ 694.359751][T14730] __x64_sys_openat+0x135/0x160 [ 694.364651][T14730] do_syscall_64+0x4c/0xa0 [ 694.369103][T14730] ? clear_bhb_loop+0x30/0x80 [ 694.373820][T14730] ? clear_bhb_loop+0x30/0x80 [ 694.378530][T14730] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 694.384463][T14730] RIP: 0033:0x7fda71f35159 [ 694.388917][T14730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.408561][T14730] RSP: 002b:00007fda7016c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 694.417022][T14730] RAX: ffffffffffffffda RBX: 00007fda721bd090 RCX: 00007fda71f35159 [ 694.425032][T14730] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 694.433041][T14730] RBP: 00007fda7016c090 R08: 0000000000000000 R09: 0000000000000000 [ 694.441045][T14730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.449052][T14730] R13: 00007fda721bd128 R14: 00007fda721bd090 R15: 00007ffdc2622d48 [ 694.457097][T14730] [ 694.545817][T14752] netlink: 'syz.6.3249': attribute type 30 has an invalid length. [ 694.592918][T14752] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3249'. [ 694.713340][T14756] netlink: 'syz.7.3251': attribute type 10 has an invalid length. [ 694.721724][T14756] device hsr0 entered promiscuous mode [ 694.732603][T14756] bridge0: port 3(hsr0) entered blocking state [ 694.745569][T14756] bridge0: port 3(hsr0) entered disabled state [ 694.762093][T14756] bridge0: port 3(hsr0) entered blocking state [ 694.769018][T14756] bridge0: port 3(hsr0) entered forwarding state [ 694.810895][T14762] openvswitch: netlink: Flow key attr not present in new flow. [ 694.922042][T14775] netlink: 'syz.6.3258': attribute type 30 has an invalid length. [ 694.931698][T14771] netlink: 'syz.5.3256': attribute type 10 has an invalid length. [ 694.972383][T14770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.103532][T14774] netlink: 'syz.7.3257': attribute type 10 has an invalid length. [ 695.530927][T14790] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 695.764698][T14808] netlink: 'syz.3.3273': attribute type 30 has an invalid length. [ 695.813366][T14808] syz_tun: tun_net_xmit 56 [ 695.843437][T14805] openvswitch: netlink: Flow key attr not present in new flow. [ 696.182011][T14815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.270893][T14815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.304260][T14826] syz_tun: tun_net_xmit 434 [ 696.315001][T14815] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 696.381784][T14815] bond0 (unregistering): Released all slaves [ 696.584189][T14821] netlink: 'syz.5.3278': attribute type 10 has an invalid length. [ 697.065549][T14826] __nla_validate_parse: 12 callbacks suppressed [ 697.065566][T14826] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3279'. [ 697.267047][T14837] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.3283'. [ 697.336230][T14848] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3283'. [ 697.535127][T14855] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3282'. [ 697.564333][T14855] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 697.642631][T14862] netlink: 'syz.5.3289': attribute type 30 has an invalid length. [ 697.713911][T14865] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3288'. [ 697.719857][T14864] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3289'. [ 697.784950][T14861] netlink: 212412 bytes leftover after parsing attributes in process `syz.7.3290'. [ 697.845680][T14862] netlink: 14463 bytes leftover after parsing attributes in process `syz.5.3289'. [ 697.861752][T14861] openvswitch: netlink: Flow key attr not present in new flow. [ 698.382773][T14911] syz_tun: tun_net_xmit 42 [ 698.619387][T14915] validate_nla: 1 callbacks suppressed [ 698.619407][T14915] netlink: 'syz.6.3306': attribute type 30 has an invalid length. [ 698.669211][T14917] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3306'. [ 698.687532][T14910] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3304'. [ 698.817456][T14910] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 698.877426][T14913] openvswitch: netlink: Message has 4 unknown bytes. [ 699.009685][T14926] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 699.113579][T14922] netlink: 'syz.4.3307': attribute type 10 has an invalid length. [ 699.457216][ C1] syz_tun: tun_net_xmit 42 [ 699.534248][T14945] FAULT_INJECTION: forcing a failure. [ 699.534248][T14945] name failslab, interval 1, probability 0, space 0, times 0 [ 699.600600][T14945] CPU: 1 PID: 14945 Comm: syz.5.3316 Not tainted syzkaller #0 [ 699.608142][T14945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 699.618236][T14945] Call Trace: [ 699.621569][T14945] [ 699.624532][T14945] dump_stack_lvl+0x188/0x250 [ 699.629254][T14945] ? show_regs_print_info+0x20/0x20 [ 699.634497][T14945] ? load_image+0x410/0x410 [ 699.639044][T14945] ? __might_sleep+0xf0/0xf0 [ 699.643681][T14945] ? __lock_acquire+0x7b50/0x7b50 [ 699.648755][T14945] should_fail+0x383/0x4b0 [ 699.653233][T14945] should_failslab+0x5/0x20 [ 699.657787][T14945] slab_pre_alloc_hook+0x51/0xc0 [ 699.662775][T14945] kmem_cache_alloc_node+0x47/0x2c0 [ 699.668029][T14945] ? __alloc_skb+0xf4/0x750 [ 699.672588][T14945] __alloc_skb+0xf4/0x750 [ 699.676961][T14945] ? rcu_force_quiescent_state+0x220/0x220 [ 699.682813][T14945] __ip_append_data+0x215b/0x3320 [ 699.687881][T14945] ? verify_lock_unused+0x140/0x140 [ 699.693160][T14945] ? raw_send_hdrinc+0x10f0/0x10f0 [ 699.698324][T14945] ? ip_setup_cork+0x870/0x870 [ 699.703141][T14945] ? ipv4_mtu+0x309/0x420 [ 699.707516][T14945] ? ip_setup_cork+0x48f/0x870 [ 699.712320][T14945] ip_append_data+0x132/0x1a0 [ 699.717043][T14945] ? raw_send_hdrinc+0x10f0/0x10f0 [ 699.722237][T14945] raw_sendmsg+0x1254/0x18b0 [ 699.726882][T14945] ? compat_raw_ioctl+0x60/0x60 [ 699.731802][T14945] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 699.738263][T14945] ? aa_sock_msg_perm+0x94/0x150 [ 699.743247][T14945] ? sock_rps_record_flow+0x17/0x3b0 [ 699.748580][T14945] ? inet_sendmsg+0x7a/0x2a0 [ 699.753210][T14945] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 699.758534][T14945] ? inet_send_prepare+0x250/0x250 [ 699.763690][T14945] ____sys_sendmsg+0x5be/0x8f0 [ 699.768504][T14945] ? __sys_sendmsg_sock+0x30/0x30 [ 699.773600][T14945] ? import_iovec+0x6f/0xa0 [ 699.778149][T14945] ___sys_sendmsg+0x236/0x2e0 [ 699.782880][T14945] ? __sys_sendmsg+0x290/0x290 [ 699.787733][T14945] __se_sys_sendmsg+0x1b7/0x2a0 [ 699.792633][T14945] ? __x64_sys_sendmsg+0x80/0x80 [ 699.797602][T14945] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 699.803653][T14945] ? lockdep_hardirqs_on+0x94/0x140 [ 699.808898][T14945] do_syscall_64+0x4c/0xa0 [ 699.813347][T14945] ? clear_bhb_loop+0x30/0x80 [ 699.818059][T14945] ? clear_bhb_loop+0x30/0x80 [ 699.822789][T14945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 699.828740][T14945] RIP: 0033:0x7f46d6c2d159 [ 699.833202][T14945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.852930][T14945] RSP: 002b:00007f46d4e85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.861650][T14945] RAX: ffffffffffffffda RBX: 00007f46d6eb4fa0 RCX: 00007f46d6c2d159 [ 699.869665][T14945] RDX: 0000000000009c80 RSI: 0000200000000040 RDI: 0000000000000003 [ 699.877794][T14945] RBP: 00007f46d4e85090 R08: 0000000000000000 R09: 0000000000000000 [ 699.885804][T14945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.893814][T14945] R13: 00007f46d6eb5038 R14: 00007f46d6eb4fa0 R15: 00007ffd3c5ff938 [ 699.901845][T14945] [ 699.953505][T14951] openvswitch: netlink: Message has 4 unknown bytes. [ 700.072307][T14959] netlink: 'syz.5.3320': attribute type 9 has an invalid length. [ 700.093199][T14958] netlink: 'syz.4.3321': attribute type 30 has an invalid length. [ 700.496594][ C1] syz_tun: tun_net_xmit 42 [ 700.643901][T14976] netlink: 'syz.3.3324': attribute type 10 has an invalid length. [ 701.385452][T14996] netlink: 'syz.3.3332': attribute type 2 has an invalid length. [ 701.404620][T14996] netlink: 'syz.3.3332': attribute type 7 has an invalid length. [ 701.467413][T14996] netlink: 'syz.3.3332': attribute type 3 has an invalid length. [ 701.485354][T15000] netlink: 'syz.4.3335': attribute type 30 has an invalid length. [ 701.549707][ C1] syz_tun: tun_net_xmit 42 [ 701.653217][T14996] tun0: tun_chr_ioctl cmd 1074025675 [ 701.660400][T14996] tun0: persist enabled [ 701.690170][T14999] tun0: tun_chr_ioctl cmd 1074025675 [ 701.715267][T14999] tun0: persist disabled [ 701.728131][T15006] openvswitch: netlink: Flow key attr not present in new flow. [ 702.577328][ C1] syz_tun: tun_net_xmit 42 [ 702.646402][T15026] __nla_validate_parse: 13 callbacks suppressed [ 702.672842][T15026] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3343'. [ 702.692737][T15026] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 703.626935][ C1] syz_tun: tun_net_xmit 42 [ 705.101521][T15036] netlink: 'syz.5.3346': attribute type 30 has an invalid length. [ 705.117694][T15040] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3357'. [ 705.149322][T15036] syz_tun: tun_net_xmit 56 [ 705.218452][T15039] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.3347'. [ 705.232099][T15036] netlink: 14463 bytes leftover after parsing attributes in process `syz.5.3346'. [ 705.242720][T15039] openvswitch: netlink: Message has 4 unknown bytes. [ 705.477036][T15047] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.3350'. [ 705.513947][T15047] openvswitch: netlink: Message has 4 unknown bytes. [ 705.662332][T15066] netlink: 'syz.7.3360': attribute type 21 has an invalid length. [ 705.745869][T15071] netlink: 'syz.4.3362': attribute type 30 has an invalid length. [ 705.852638][T15071] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.3362'. [ 706.032197][T15077] netlink: 209860 bytes leftover after parsing attributes in process `syz.5.3363'. [ 706.059415][T15077] openvswitch: netlink: Message has 4 unknown bytes. [ 706.111769][T15089] netlink: 'syz.3.3366': attribute type 39 has an invalid length. [ 706.218589][T15096] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3370'. [ 706.359775][T15101] netlink: 209860 bytes leftover after parsing attributes in process `syz.3.3372'. [ 706.382181][T15101] openvswitch: netlink: Message has 4 unknown bytes. [ 706.468712][T15108] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3376'. [ 706.515221][T15108] syz_tun: tun_net_xmit 56 [ 706.574970][T15120] Dead loop on virtual device ip6_vti0, fix it urgently! [ 706.623614][T15123] netlink: 'syz.4.3380': attribute type 27 has an invalid length. [ 707.224254][T15135] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 707.259266][T15150] openvswitch: netlink: Message has 4 unknown bytes. [ 707.316509][T15135] syz_tun: tun_net_xmit 42 [ 707.392420][T15162] syz_tun: tun_net_xmit 42 [ 707.474781][T15166] netlink: 'syz.6.3396': attribute type 30 has an invalid length. [ 708.000863][T15190] __nla_validate_parse: 10 callbacks suppressed [ 708.000903][T15190] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3405'. [ 708.109879][T15190] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.3405'. [ 708.227606][T15198] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.3407'. [ 708.303758][T15197] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.3407'. [ 708.336645][ C0] syz_tun: tun_net_xmit 42 [ 708.416695][ C1] syz_tun: tun_net_xmit 42 [ 708.541093][T15194] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.3407'. [ 708.878441][T15206] netlink: 'syz.5.3409': attribute type 10 has an invalid length. [ 709.093842][T15213] netlink: 'syz.7.3413': attribute type 30 has an invalid length. [ 709.135845][T15213] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3413'. [ 709.187470][T15219] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3417'. [ 709.199571][T15223] netlink: 14463 bytes leftover after parsing attributes in process `syz.7.3413'. [ 709.239937][T15216] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.3415'. [ 709.377080][ C0] syz_tun: tun_net_xmit 42 [ 709.431829][T15219] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 709.466565][ C1] syz_tun: tun_net_xmit 42 [ 709.701126][T15235] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3421'. [ 710.518075][ C1] syz_tun: tun_net_xmit 42 [ 711.029918][T15253] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 711.440664][T15264] syz.6.3432 (15264) used obsolete PPPIOCDETACH ioctl [ 711.536573][ C1] syz_tun: tun_net_xmit 42 [ 711.613560][T15274] netlink: 'syz.5.3435': attribute type 3 has an invalid length. [ 712.576673][ C1] syz_tun: tun_net_xmit 42 [ 714.867620][T15293] netlink: 'syz.7.3442': attribute type 5 has an invalid length. [ 714.986004][T15296] netlink: 'syz.4.3452': attribute type 17 has an invalid length. [ 715.039096][T15296] __nla_validate_parse: 6 callbacks suppressed [ 715.039131][T15296] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3452'. [ 715.108225][T15302] netlink: 'syz.6.3444': attribute type 30 has an invalid length. [ 715.263482][T15302] netlink: 14463 bytes leftover after parsing attributes in process `syz.6.3444'. [ 715.374676][T15306] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3447'. [ 715.487811][T15308] netlink: 'syz.4.3448': attribute type 10 has an invalid length. [ 715.514748][T15306] netlink: 14719 bytes leftover after parsing attributes in process `syz.7.3447'. [ 715.733845][T15308] team0: Device wg1 is of different type [ 715.811991][T15317] netlink: 'syz.5.3453': attribute type 10 has an invalid length. [ 715.868562][T15316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.882771][T15319] netlink: 64859 bytes leftover after parsing attributes in process `syz.7.3451'. [ 715.921362][T15307] delete_channel: no stack [ 716.330532][T15334] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3457'. [ 716.406930][T15334] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 716.700595][T15357] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3462'. [ 716.774135][T15360] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.3462'. [ 717.162117][T15375] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3465'. [ 717.277585][T15375] netlink: 14463 bytes leftover after parsing attributes in process `syz.7.3465'. [ 718.115873][T15413] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 718.573511][T15427] netlink: 'syz.5.3482': attribute type 3 has an invalid length. [ 720.333750][T15450] __nla_validate_parse: 6 callbacks suppressed [ 720.333789][T15450] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3489'. [ 720.388232][T15450] netlink: 14719 bytes leftover after parsing attributes in process `syz.7.3489'. [ 722.465419][T15472] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3494'. [ 722.520713][T15476] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3499'. [ 722.530324][T15472] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 722.765497][T15481] syz_tun: tun_net_xmit 56 [ 722.794334][T15477] netlink: 209860 bytes leftover after parsing attributes in process `syz.7.3500'. [ 722.877162][T15479] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3501'. [ 722.897088][T15477] openvswitch: netlink: Message has 4 unknown bytes. [ 722.914292][T15481] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.3502'. [ 722.928133][T15479] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 722.970129][T15479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.340861][T15495] netlink: 209860 bytes leftover after parsing attributes in process `syz.7.3507'. [ 723.443940][T15495] openvswitch: netlink: Message has 4 unknown bytes. [ 723.474788][T15508] netlink: 'syz.5.3512': attribute type 21 has an invalid length. [ 723.493700][T15508] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3512'. [ 723.942196][T15522] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.3515'. [ 724.263786][T15537] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 724.309883][T15545] openvswitch: netlink: Message has 4 unknown bytes. [ 724.528731][T15556] FAULT_INJECTION: forcing a failure. [ 724.528731][T15556] name failslab, interval 1, probability 0, space 0, times 0 [ 724.562106][T15556] CPU: 0 PID: 15556 Comm: syz.3.3527 Not tainted syzkaller #0 [ 724.569636][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 724.579726][T15556] Call Trace: [ 724.583032][T15556] [ 724.585998][T15556] dump_stack_lvl+0x188/0x250 [ 724.590712][T15556] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 724.596906][T15556] ? show_regs_print_info+0x20/0x20 [ 724.602136][T15556] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 724.608338][T15556] should_fail+0x383/0x4b0 [ 724.612804][T15556] should_failslab+0x5/0x20 [ 724.617349][T15556] slab_pre_alloc_hook+0x51/0xc0 [ 724.622328][T15556] __kmalloc+0x6b/0x340 [ 724.626525][T15556] ? bpf_test_init+0xf8/0x1b0 [ 724.631262][T15556] bpf_test_init+0xf8/0x1b0 [ 724.635821][T15556] bpf_prog_test_run_skb+0x181/0x1190 [ 724.641246][T15556] ? __fget_files+0x402/0x470 [ 724.645988][T15556] ? cpu_online+0x60/0x60 [ 724.650384][T15556] bpf_prog_test_run+0x31c/0x390 [ 724.655394][T15556] __sys_bpf+0x5a5/0x6f0 [ 724.659709][T15556] ? bpf_link_show_fdinfo+0x380/0x380 [ 724.665139][T15556] __x64_sys_bpf+0x78/0x90 [ 724.669591][T15556] do_syscall_64+0x4c/0xa0 [ 724.674030][T15556] ? clear_bhb_loop+0x30/0x80 [ 724.678720][T15556] ? clear_bhb_loop+0x30/0x80 [ 724.683412][T15556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 724.689326][T15556] RIP: 0033:0x7f7fed120159 [ 724.693773][T15556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.713413][T15556] RSP: 002b:00007f7feb378028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 724.721842][T15556] RAX: ffffffffffffffda RBX: 00007f7fed3a7fa0 RCX: 00007f7fed120159 [ 724.729826][T15556] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 724.737813][T15556] RBP: 00007f7feb378090 R08: 0000000000000000 R09: 0000000000000000 [ 724.745802][T15556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.753790][T15556] R13: 00007f7fed3a8038 R14: 00007f7fed3a7fa0 R15: 00007ffe13d90468 [ 724.761788][T15556] [ 725.324476][T15572] netlink: 'syz.3.3533': attribute type 39 has an invalid length. [ 727.595994][T15572] device hsr_slave_1 left promiscuous mode [ 727.722758][T15592] __nla_validate_parse: 5 callbacks suppressed [ 727.722775][T15592] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3538'. [ 727.883858][T15601] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3542'. [ 727.916286][T15599] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.3543'. [ 727.932980][T15602] syz_tun: tun_net_xmit 56 [ 727.938636][T15599] openvswitch: netlink: Message has 4 unknown bytes. [ 727.972973][T15601] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.3542'. [ 728.251629][T15615] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3547'. [ 728.298599][T15616] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3546'. [ 728.439829][T15626] syz_tun: tun_net_xmit 62 [ 728.603733][T15634] netlink: 'syz.3.3556': attribute type 39 has an invalid length. [ 728.758961][T15641] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3558'. [ 728.780504][T15640] netlink: 'syz.5.3559': attribute type 29 has an invalid length. [ 728.824572][T15640] netlink: 'syz.5.3559': attribute type 29 has an invalid length. [ 728.834442][T15641] netlink: 14719 bytes leftover after parsing attributes in process `syz.7.3558'. [ 728.862866][T15646] netlink: 'syz.5.3559': attribute type 29 has an invalid length. [ 729.424293][T15678] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3573'. [ 729.503242][T15678] netlink: 14719 bytes leftover after parsing attributes in process `syz.6.3573'. [ 729.655114][T15695] netlink: 'syz.3.3578': attribute type 30 has an invalid length. [ 729.701479][T15696] netlink: 'syz.6.3579': attribute type 1 has an invalid length. [ 729.894687][T15699] team0: Port device team_slave_0 removed [ 729.903574][T15699] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 730.139172][T15730] syz_tun: tun_net_xmit 56 [ 730.239250][T15734] netlink: 'syz.4.3590': attribute type 21 has an invalid length. [ 730.951889][T15870] delete_channel: no stack [ 731.294371][T15895] netlink: 'syz.5.3612': attribute type 10 has an invalid length. [ 731.884810][T15938] syz_tun: tun_net_xmit 56 [ 731.982729][T15920] chnl_net:caif_netlink_parms(): no params data found [ 732.182528][T15954] netlink: 'syz.4.3633': attribute type 10 has an invalid length. [ 732.428891][T15948] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 732.614462][T15920] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.621670][T15920] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.630810][T15920] device bridge_slave_0 entered promiscuous mode [ 732.640532][T15920] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.648159][T15920] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.656977][T15920] device bridge_slave_1 entered promiscuous mode [ 732.717776][T15920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.745319][T15961] __nla_validate_parse: 17 callbacks suppressed [ 732.745363][T15961] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3644'. [ 732.777565][T15920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.797330][T15966] syz_tun: tun_net_xmit 56 [ 732.834843][T15966] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.3644'. [ 732.878533][T15920] team0: Port device team_slave_0 added [ 732.893374][T15920] team0: Port device team_slave_1 added [ 732.927880][T15968] netlink: 'syz.6.3636': attribute type 10 has an invalid length. [ 732.945308][T15920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.960180][T15920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.019074][T15920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.034519][T15920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.042308][T15920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.070207][T15974] netlink: 'syz.5.3639': attribute type 3 has an invalid length. [ 733.082311][T15974] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3639'. [ 733.097586][T15920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.132867][T15972] tun0: tun_chr_ioctl cmd 1074025676 [ 733.146368][T15972] tun0: owner set to 270 [ 733.173586][T15920] device hsr_slave_0 entered promiscuous mode [ 733.190674][T15982] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3642'. [ 733.204733][T15920] device hsr_slave_1 entered promiscuous mode [ 733.230953][T15920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 733.241185][T15984] syz_tun: tun_net_xmit 56 [ 733.244701][T15920] Cannot create hsr debugfs directory [ 733.253915][T15984] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.3642'. [ 733.395937][T15920] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.463227][T15920] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.513592][T15994] netlink: 'syz.7.3648': attribute type 5 has an invalid length. [ 733.587481][T15920] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.782948][T15920] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.793363][ T6152] Bluetooth: hci0: command 0x0409 tx timeout [ 733.838666][T16002] netlink: 'syz.7.3650': attribute type 10 has an invalid length. [ 733.853866][T16002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.900599][T16002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.967665][T16009] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3651'. [ 734.032434][T16009] netlink: 14719 bytes leftover after parsing attributes in process `syz.6.3651'. [ 734.073059][T15920] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 734.102019][T16016] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3654'. [ 734.121967][T15920] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 734.148756][T16016] syz_tun: tun_net_xmit 56 [ 734.153693][T15920] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 734.172750][T15920] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 734.184333][T16016] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.3654'. [ 734.247388][T16020] netlink: 'syz.7.3656': attribute type 17 has an invalid length. [ 734.255475][T16020] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3656'. [ 734.367177][T16029] netlink: 'syz.5.3658': attribute type 1 has an invalid length. [ 734.402723][T16022] netlink: 'syz.4.3655': attribute type 21 has an invalid length. [ 734.418603][T16022] netlink: 'syz.4.3655': attribute type 4 has an invalid length. [ 734.592709][T16033] team0: Port device team_slave_0 removed [ 734.600727][T16033] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 734.755154][T15920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.783324][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 734.795486][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 734.807595][T15920] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.825374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 734.843390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 734.853114][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.860294][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.870228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 734.889998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 734.929638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 734.949347][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.956498][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.978152][T16040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.009072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 735.029681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 735.048948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 735.064318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 735.085305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 735.109592][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 735.125345][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 735.142161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 735.157464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 735.220256][T15920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 735.255952][T15920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 735.277306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 735.290679][T16060] syz_tun: tun_net_xmit 56 [ 735.298840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 735.812042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 735.822064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 735.857523][T15920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.866688][ T9212] Bluetooth: hci0: command 0x041b tx timeout [ 735.917901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 735.927807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 736.031494][T15920] device veth0_vlan entered promiscuous mode [ 736.054741][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 736.079191][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 736.117637][T15920] device veth1_vlan entered promiscuous mode [ 736.132666][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 736.143905][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 736.157574][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 736.208920][T16101] team0: Port device team_slave_0 removed [ 736.224536][T16101] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 736.270033][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 736.293454][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 736.328117][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 736.354305][T15920] device veth0_macvtap entered promiscuous mode [ 736.379884][T15920] device veth1_macvtap entered promiscuous mode [ 736.428622][T15920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.452285][T15920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.472385][T15920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.488066][T15920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.503611][T15920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.522752][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 736.534841][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 736.546348][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 736.559235][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 736.578713][T15920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.595162][T15920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.606208][T15920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.622598][T15920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.643817][T15920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.665411][T15920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.684598][T15920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.697499][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 736.712118][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 736.724873][T15920] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.739073][T15920] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.748454][T15920] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.757497][T15920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.830056][T16122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 736.893157][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.957316][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.021554][T16133] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 737.042873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 737.095591][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.104668][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.113152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 737.449951][T16156] bridge0: port 3(bond0) entered disabled state [ 737.515225][T16156] bridge0: port 3(bond0) entered disabled state [ 737.551735][T16156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.568660][T16156] device bond_slave_0 left promiscuous mode [ 737.635677][T16156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.656228][T16156] device bond_slave_1 left promiscuous mode [ 737.736228][T16156] bond0 (unregistering): Released all slaves [ 737.913487][T16168] __nla_validate_parse: 15 callbacks suppressed [ 737.913512][T16168] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3702'. [ 737.941180][ T9211] Bluetooth: hci0: command 0x040f tx timeout [ 738.004488][T16168] team0: Port device team_slave_0 removed [ 738.012284][T16168] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 738.397010][T16175] validate_nla: 5 callbacks suppressed [ 738.397046][T16175] netlink: 'syz.5.3705': attribute type 21 has an invalid length. [ 738.512370][T16184] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3709'. [ 738.560819][T16184] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.3709'. [ 738.671901][T16193] netlink: 'syz.3.3714': attribute type 30 has an invalid length. [ 738.679397][T16194] netlink: 'syz.6.3715': attribute type 15 has an invalid length. [ 738.692177][T16194] netlink: 'syz.6.3715': attribute type 7 has an invalid length. [ 738.702688][T16194] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3715'. [ 738.731505][T16199] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3714'. [ 738.801258][T16196] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.3716'. [ 738.817235][T16203] netlink: 'syz.7.3716': attribute type 10 has an invalid length. [ 738.872244][T16193] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.3714'. [ 738.894266][T16196] netlink: 8446 bytes leftover after parsing attributes in process `syz.7.3716'. [ 738.991219][T16205] netlink: 'syz.5.3720': attribute type 29 has an invalid length. [ 739.025750][T16205] netlink: 'syz.5.3720': attribute type 29 has an invalid length. [ 739.050338][T16209] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3721'. [ 739.144113][T16216] netlink: 14975 bytes leftover after parsing attributes in process `syz.6.3721'. [ 740.016898][ T9212] Bluetooth: hci0: command 0x0419 tx timeout [ 740.098005][T16205] device syzkaller0 entered promiscuous mode [ 740.115481][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 740.131463][T16215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 740.164389][ T9186] syzkaller0: tun_net_xmit 48 [ 740.364583][T16239] netlink: 'syz.6.3729': attribute type 21 has an invalid length. [ 740.483101][T16256] netlink: 'syz.5.3731': attribute type 9 has an invalid length. [ 740.521890][T16255] netlink: 'syz.6.3733': attribute type 30 has an invalid length. [ 740.678453][T16259] netlink: 'syz.3.3734': attribute type 11 has an invalid length. [ 740.867253][T16264] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 740.892715][T16270] FAULT_INJECTION: forcing a failure. [ 740.892715][T16270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.925542][T16270] CPU: 0 PID: 16270 Comm: syz.5.3739 Not tainted syzkaller #0 [ 740.933087][T16270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 740.943174][T16270] Call Trace: [ 740.946479][T16270] [ 740.949439][T16270] dump_stack_lvl+0x188/0x250 [ 740.954154][T16270] ? show_regs_print_info+0x20/0x20 [ 740.959392][T16270] ? load_image+0x410/0x410 [ 740.964051][T16270] ? __lock_acquire+0x7b50/0x7b50 [ 740.969123][T16270] should_fail+0x383/0x4b0 [ 740.973571][T16270] _copy_from_user+0x2e/0x170 [ 740.978272][T16270] bpf_test_init+0x136/0x1b0 [ 740.982889][T16270] bpf_prog_test_run_skb+0x181/0x1190 [ 740.988561][T16270] ? __fget_files+0x402/0x470 [ 740.993279][T16270] ? cpu_online+0x60/0x60 [ 740.997630][T16270] bpf_prog_test_run+0x31c/0x390 [ 741.002608][T16270] __sys_bpf+0x5a5/0x6f0 [ 741.006877][T16270] ? bpf_link_show_fdinfo+0x380/0x380 [ 741.012287][T16270] __x64_sys_bpf+0x78/0x90 [ 741.016732][T16270] do_syscall_64+0x4c/0xa0 [ 741.021182][T16270] ? clear_bhb_loop+0x30/0x80 [ 741.025888][T16270] ? clear_bhb_loop+0x30/0x80 [ 741.030590][T16270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 741.036503][T16270] RIP: 0033:0x7f46d6c2d159 [ 741.040939][T16270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.060565][T16270] RSP: 002b:00007f46d4e85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 741.069004][T16270] RAX: ffffffffffffffda RBX: 00007f46d6eb4fa0 RCX: 00007f46d6c2d159 [ 741.076996][T16270] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 741.084991][T16270] RBP: 00007f46d4e85090 R08: 0000000000000000 R09: 0000000000000000 [ 741.093008][T16270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.100993][T16270] R13: 00007f46d6eb5038 R14: 00007f46d6eb4fa0 R15: 00007ffd3c5ff938 [ 741.109007][T16270] [ 741.362446][T16287] team0: Device nlmon0 is of different type [ 741.712300][T16305] -1O2~: renamed from syzkaller0 [ 744.235797][T16339] validate_nla: 10 callbacks suppressed [ 744.235816][T16339] netlink: 'syz.4.3763': attribute type 21 has an invalid length. [ 744.263507][T16339] netlink: 'syz.4.3763': attribute type 6 has an invalid length. [ 744.271901][T16339] __nla_validate_parse: 25 callbacks suppressed [ 744.271918][T16339] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3763'. [ 744.421119][T16345] netlink: 'syz.7.3767': attribute type 15 has an invalid length. [ 744.435087][T16347] netlink: 'syz.6.3766': attribute type 30 has an invalid length. [ 744.450111][T16345] netlink: 'syz.7.3767': attribute type 7 has an invalid length. [ 744.481896][T16345] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3767'. [ 744.512609][T16347] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3766'. [ 744.519377][T16350] netlink: 209860 bytes leftover after parsing attributes in process `syz.5.3768'. [ 744.544826][T16355] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3769'. [ 744.568253][T16356] netlink: 14719 bytes leftover after parsing attributes in process `syz.6.3766'. [ 744.588487][T16350] openvswitch: netlink: Message has 4 unknown bytes. [ 744.647600][T16354] netlink: 'syz.3.3770': attribute type 21 has an invalid length. [ 744.660920][T16355] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.3769'. [ 744.800551][T16361] syz_tun: tun_net_xmit 86 [ 744.880237][T16368] netlink: 'syz.6.3775': attribute type 10 has an invalid length. [ 744.911672][T16368] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3775'. [ 744.927845][T16374] netlink: 'syz.7.3776': attribute type 4 has an invalid length. [ 744.956744][T16374] netlink: 206236 bytes leftover after parsing attributes in process `syz.7.3776'. [ 745.136182][T16386] netlink: 'syz.7.3781': attribute type 30 has an invalid length. [ 745.168314][T16386] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3781'. [ 745.234215][T16389] openvswitch: netlink: Message has 4 unknown bytes. [ 745.576400][T16416] netlink: 'syz.4.3793': attribute type 21 has an invalid length. [ 745.822801][T16426] openvswitch: netlink: Message has 4 unknown bytes. [ 745.858742][ C1] syz_tun: tun_net_xmit 86 [ 746.496724][T16464] Dead loop on virtual device ip6_vti0, fix it urgently! [ 746.532438][T16469] openvswitch: netlink: Message has 4 unknown bytes. [ 746.926917][ C1] syz_tun: tun_net_xmit 86 [ 747.162075][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.168437][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.981033][T16520] openvswitch: netlink: Message has 4 unknown bytes. [ 748.705352][T16550] netlink: set zone limit has 4 unknown bytes [ 748.742466][T16557] syz_tun: tun_net_xmit 56 [ 748.909485][T16563] openvswitch: netlink: Message has 4 unknown bytes. [ 749.217087][ T9187] Bluetooth: hci2: command 0x0406 tx timeout [ 749.323544][T16582] __nla_validate_parse: 31 callbacks suppressed [ 749.323561][T16582] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3850'. [ 749.359754][T16575] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3848'. [ 749.370024][T16582] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.3850'. [ 749.389324][T16575] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 749.709043][T16594] FAULT_INJECTION: forcing a failure. [ 749.709043][T16594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.735860][T16594] CPU: 0 PID: 16594 Comm: syz.6.3852 Not tainted syzkaller #0 [ 749.743374][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 749.753478][T16594] Call Trace: [ 749.756794][T16594] [ 749.759787][T16594] dump_stack_lvl+0x188/0x250 [ 749.764511][T16594] ? show_regs_print_info+0x20/0x20 [ 749.769778][T16594] ? load_image+0x410/0x410 [ 749.774329][T16594] ? __lock_acquire+0x7b50/0x7b50 [ 749.779425][T16594] ? __local_bh_enable_ip+0x136/0x1c0 [ 749.784856][T16594] ? lockdep_hardirqs_on+0x94/0x140 [ 749.790093][T16594] should_fail+0x383/0x4b0 [ 749.794554][T16594] _copy_from_user+0x2e/0x170 [ 749.799269][T16594] ip_setsockopt+0x11a7/0x31e0 [ 749.804075][T16594] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 749.809506][T16594] ? mark_lock+0x94/0x320 [ 749.813879][T16594] ? __lock_acquire+0x1305/0x7b50 [ 749.818948][T16594] ? udp_setsockopt+0x77/0xa0 [ 749.823666][T16594] ipv6_setsockopt+0x2cf/0x3cc0 [ 749.828575][T16594] ? ipv6_update_options+0x400/0x400 [ 749.833909][T16594] ? mark_lock+0x94/0x320 [ 749.838277][T16594] ? __lock_acquire+0x1305/0x7b50 [ 749.843353][T16594] ? mark_lock+0x94/0x320 [ 749.847731][T16594] ? verify_lock_unused+0x140/0x140 [ 749.852973][T16594] ? aa_label_sk_perm+0x3e6/0x540 [ 749.858048][T16594] ? aa_sk_perm+0x910/0x910 [ 749.862610][T16594] ? __might_sleep+0xf0/0xf0 [ 749.867248][T16594] ? rcu_lock_release+0x9/0x20 [ 749.872053][T16594] ? __lock_acquire+0x7b50/0x7b50 [ 749.877119][T16594] ? aa_sk_perm+0x7dc/0x910 [ 749.881668][T16594] ? aa_af_perm+0x340/0x340 [ 749.886211][T16594] ? __fget_files+0x402/0x470 [ 749.890953][T16594] ? aa_sock_opt_perm+0x74/0x100 [ 749.895931][T16594] ? sctp_setsockopt+0xd8/0xf80 [ 749.900815][T16594] ? sock_common_recvmsg+0x1c0/0x1c0 [ 749.906137][T16594] __sys_setsockopt+0x2bf/0x3d0 [ 749.911169][T16594] __x64_sys_setsockopt+0xb1/0xc0 [ 749.916240][T16594] do_syscall_64+0x4c/0xa0 [ 749.920697][T16594] ? clear_bhb_loop+0x30/0x80 [ 749.925432][T16594] ? clear_bhb_loop+0x30/0x80 [ 749.930154][T16594] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 749.936088][T16594] RIP: 0033:0x7f1d50013159 [ 749.940543][T16594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.960184][T16594] RSP: 002b:00007f1d4e26b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 749.968645][T16594] RAX: ffffffffffffffda RBX: 00007f1d5029afa0 RCX: 00007f1d50013159 [ 749.976666][T16594] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000003 [ 749.984691][T16594] RBP: 00007f1d4e26b090 R08: 000000000000000c R09: 0000000000000000 [ 749.992706][T16594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.000711][T16594] R13: 00007f1d5029b038 R14: 00007f1d5029afa0 R15: 00007fff2976d028 [ 750.008734][T16594] [ 750.067104][T16593] validate_nla: 7 callbacks suppressed [ 750.067137][T16593] netlink: 'syz.4.3853': attribute type 17 has an invalid length. [ 750.098419][T16602] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3854'. [ 750.133316][T16605] netlink: 209860 bytes leftover after parsing attributes in process `syz.6.3855'. [ 750.149913][T16605] openvswitch: netlink: Message has 4 unknown bytes. [ 750.177831][T16607] syz_tun: tun_net_xmit 56 [ 750.191235][T16607] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.3854'. [ 750.419638][T16621] netlink: 'syz.7.3860': attribute type 30 has an invalid length. [ 750.454493][T16621] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.3860'. [ 750.510041][T16626] netlink: 14719 bytes leftover after parsing attributes in process `syz.7.3860'. [ 750.562636][T16623] netlink: 'syz.3.3861': attribute type 10 has an invalid length. [ 750.634245][T16633] netlink: 'syz.3.3864': attribute type 3 has an invalid length. [ 750.642528][T16633] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3864'. [ 750.809337][T16640] netlink: 'syz.7.3867': attribute type 5 has an invalid length. [ 750.892971][T16648] netlink: 209860 bytes leftover after parsing attributes in process `syz.7.3868'. [ 750.918946][T16648] openvswitch: netlink: Message has 4 unknown bytes. [ 751.143171][T16655] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 751.847666][T16673] netlink: 'syz.4.3876': attribute type 30 has an invalid length. [ 752.051249][T16684] openvswitch: netlink: Message has 4 unknown bytes. [ 752.176155][T16686] netlink: 'syz.6.3879': attribute type 3 has an invalid length. [ 752.229622][T16695] syz_tun: tun_net_xmit 42 [ 752.332480][T16701] netlink: 'syz.5.3883': attribute type 17 has an invalid length. [ 752.460595][T16697] device hsr_slave_0 left promiscuous mode [ 752.512650][T16697] device hsr_slave_1 left promiscuous mode [ 752.566369][T16697] bridge0: port 3(hsr0) entered disabled state [ 752.667644][T16697] bridge0: port 3(hsr0) entered disabled state [ 752.720448][T16708] netlink: 'syz.3.3887': attribute type 10 has an invalid length. [ 752.742738][T16707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.826237][T16712] netlink: 'syz.4.3890': attribute type 30 has an invalid length. [ 752.951879][T16714] device bond0 entered promiscuous mode [ 752.967884][T16714] device bond_slave_0 entered promiscuous mode [ 752.975886][T16714] device bond_slave_1 entered promiscuous mode [ 752.986899][T16719] openvswitch: netlink: Message has 4 unknown bytes. [ 753.011850][T16714] bridge0: port 3(bond0) entered blocking state [ 753.020192][T16714] bridge0: port 3(bond0) entered disabled state [ 753.039764][T16714] bridge0: port 3(bond0) entered blocking state [ 753.046209][T16714] bridge0: port 3(bond0) entered forwarding state [ 753.306626][ C1] syz_tun: tun_net_xmit 42 [ 753.644697][T16754] openvswitch: netlink: Message has 4 unknown bytes. [ 754.336606][ C1] syz_tun: tun_net_xmit 42 [ 754.371401][T16795] __nla_validate_parse: 22 callbacks suppressed [ 754.371438][T16795] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3918'. [ 754.424274][T16795] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.3918'. [ 754.468562][T16800] netlink: 763 bytes leftover after parsing attributes in process `syz.5.3919'. [ 754.556141][T16810] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.3921'. [ 754.574917][T16810] openvswitch: netlink: Message has 4 unknown bytes. [ 754.587321][T16811] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3922'. [ 754.607539][T16811] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3922'. [ 754.765045][T16821] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 754.965967][T16831] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3929'. [ 754.979188][T16829] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3927'. [ 755.002000][T16831] delete_channel: no stack [ 755.029772][T16831] delete_channel: no stack [ 755.037619][T16829] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.3927'. [ 755.190953][T16837] validate_nla: 6 callbacks suppressed [ 755.190993][T16837] netlink: 'syz.3.3931': attribute type 30 has an invalid length. [ 755.244946][T16837] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3931'. [ 755.465706][T16846] hsr0: VLAN not yet supported [ 755.565139][T16855] openvswitch: netlink: Message has 4 unknown bytes. [ 758.259915][T16880] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 758.293537][T16877] netlink: 'syz.5.3946': attribute type 30 has an invalid length. [ 758.538759][T16892] openvswitch: netlink: Message has 4 unknown bytes. [ 760.806970][T16902] device hsr_slave_0 left promiscuous mode [ 760.819418][T16902] device hsr_slave_1 left promiscuous mode [ 761.012510][T16912] __nla_validate_parse: 12 callbacks suppressed [ 761.012550][T16912] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3957'. [ 761.224391][T16912] netlink: 14719 bytes leftover after parsing attributes in process `syz.6.3957'. [ 761.240285][T16922] netlink: 'syz.3.3961': attribute type 30 has an invalid length. [ 761.284589][T16922] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3961'. [ 761.318139][T16924] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.3961'. [ 761.524781][T16936] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3973'. [ 761.551601][T16936] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 761.584592][T16940] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3964'. [ 761.630892][T16939] FAULT_INJECTION: forcing a failure. [ 761.630892][T16939] name failslab, interval 1, probability 0, space 0, times 0 [ 761.665850][T16939] CPU: 1 PID: 16939 Comm: syz.7.3965 Not tainted syzkaller #0 [ 761.673483][T16939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 761.683579][T16939] Call Trace: [ 761.686900][T16939] [ 761.689866][T16939] dump_stack_lvl+0x188/0x250 [ 761.694583][T16939] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 761.700802][T16939] ? show_regs_print_info+0x20/0x20 [ 761.706039][T16939] ? load_image+0x410/0x410 [ 761.710687][T16939] should_fail+0x383/0x4b0 [ 761.715159][T16939] should_failslab+0x5/0x20 [ 761.719713][T16939] slab_pre_alloc_hook+0x51/0xc0 [ 761.724694][T16939] kmem_cache_alloc_trace+0x47/0x290 [ 761.730058][T16939] ? rtnl_newlink+0x17f/0x1920 [ 761.734865][T16939] ? __schedule+0x11cb/0x4350 [ 761.739595][T16939] rtnl_newlink+0x17f/0x1920 [ 761.744248][T16939] ? rcu_nmi_exit+0x6f/0xf0 [ 761.748798][T16939] ? rtnl_setlink+0x500/0x500 [ 761.753515][T16939] ? mark_lock+0x94/0x320 [ 761.757883][T16939] ? __lock_acquire+0x13dc/0x7b50 [ 761.762947][T16939] ? mark_lock+0x94/0x320 [ 761.767302][T16939] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 761.773313][T16939] ? lock_chain_count+0x20/0x20 [ 761.778190][T16939] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 761.784381][T16939] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 761.790562][T16939] ? lockdep_hardirqs_on+0x94/0x140 [ 761.795788][T16939] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 761.802408][T16939] ? lock_acquire+0x208/0x400 [ 761.807120][T16939] ? __mutex_trylock_common+0x15c/0x260 [ 761.812781][T16939] ? rcu_lock_release+0x20/0x20 [ 761.817659][T16939] ? perf_trace_lock+0xe4/0x390 [ 761.822548][T16939] ? __mutex_lock_common+0x435/0x2400 [ 761.827952][T16939] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 761.833089][T16939] ? mutex_lock_io_nested+0x60/0x60 [ 761.838329][T16939] ? rtnl_setlink+0x500/0x500 [ 761.843026][T16939] rtnetlink_rcv_msg+0x7f1/0xf10 [ 761.847997][T16939] ? rtnetlink_bind+0x80/0x80 [ 761.852692][T16939] ? mark_lock+0x94/0x320 [ 761.857040][T16939] ? __lock_acquire+0x1305/0x7b50 [ 761.862097][T16939] ? verify_lock_unused+0x140/0x140 [ 761.867325][T16939] ? perf_trace_lock+0xe4/0x390 [ 761.872198][T16939] ? verify_lock_unused+0x140/0x140 [ 761.877437][T16939] ? verify_lock_unused+0x140/0x140 [ 761.882663][T16939] ? perf_trace_lock+0xe4/0x390 [ 761.887539][T16939] ? perf_trace_lock+0xe4/0x390 [ 761.892409][T16939] ? rcu_nmi_exit+0x6f/0xf0 [ 761.896962][T16939] ? trace_event_raw_event_lock+0x250/0x250 [ 761.902900][T16939] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 761.908931][T16939] netlink_rcv_skb+0x1e9/0x430 [ 761.913720][T16939] ? rtnetlink_bind+0x80/0x80 [ 761.918436][T16939] ? netlink_ack+0xb10/0xb10 [ 761.923064][T16939] netlink_unicast+0x78f/0x940 [ 761.927859][T16939] netlink_sendmsg+0x8ba/0xbe0 [ 761.932668][T16939] ? netlink_getsockopt+0x570/0x570 [ 761.937885][T16939] ? aa_sock_msg_perm+0x94/0x150 [ 761.942844][T16939] ? apparmor_socket_sendmsg+0x88/0x230 [ 761.948410][T16939] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 761.953713][T16939] ? security_socket_sendmsg+0x7c/0xa0 [ 761.959187][T16939] ? netlink_getsockopt+0x570/0x570 [ 761.964409][T16939] ____sys_sendmsg+0x5be/0x8f0 [ 761.969321][T16939] ? __sys_sendmsg_sock+0x30/0x30 [ 761.974459][T16939] ? import_iovec+0x6f/0xa0 [ 761.978986][T16939] ___sys_sendmsg+0x236/0x2e0 [ 761.983696][T16939] ? __sys_sendmsg+0x290/0x290 [ 761.989034][T16939] __se_sys_sendmsg+0x1b7/0x2a0 [ 761.993907][T16939] ? __x64_sys_sendmsg+0x80/0x80 [ 761.998886][T16939] ? syscall_enter_from_user_mode+0x2a/0x70 [ 762.004800][T16939] do_syscall_64+0x4c/0xa0 [ 762.009232][T16939] ? clear_bhb_loop+0x30/0x80 [ 762.013922][T16939] ? clear_bhb_loop+0x30/0x80 [ 762.018619][T16939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 762.024533][T16939] RIP: 0033:0x7fda71f35159 [ 762.028964][T16939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.048588][T16939] RSP: 002b:00007fda7018d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.057022][T16939] RAX: ffffffffffffffda RBX: 00007fda721bcfa0 RCX: 00007fda71f35159 [ 762.065010][T16939] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 762.073015][T16939] RBP: 00007fda7018d090 R08: 0000000000000000 R09: 0000000000000000 [ 762.081018][T16939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.089003][T16939] R13: 00007fda721bd038 R14: 00007fda721bcfa0 R15: 00007ffdc2622d48 [ 762.097004][T16939] [ 762.118809][T16940] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.3964'. [ 762.209528][T16948] netlink: 209860 bytes leftover after parsing attributes in process `syz.3.3967'. [ 762.266734][T16948] openvswitch: netlink: Message has 4 unknown bytes. [ 762.355363][T16956] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3971'. [ 762.388790][T16957] netlink: 'syz.4.3970': attribute type 1 has an invalid length. [ 762.402814][T16956] netlink: 3554 bytes leftover after parsing attributes in process `syz.6.3971'. [ 762.448180][T16957] netlink: 'syz.4.3970': attribute type 4 has an invalid length. [ 762.464885][T16959] netlink: 'syz.3.3972': attribute type 9 has an invalid length. [ 762.487754][T16964] syz_tun: tun_net_xmit 56 [ 762.641040][T16957] netlink: 'syz.4.3970': attribute type 21 has an invalid length. [ 762.761522][T16968] netlink: 'syz.6.3975': attribute type 30 has an invalid length. [ 765.760271][T16989] openvswitch: netlink: Message has 4 unknown bytes. [ 765.888466][T16996] syz_tun: tun_net_xmit 56 [ 765.966572][T17001] netlink: 'syz.4.3989': attribute type 21 has an invalid length. [ 765.984798][T17001] netlink: 'syz.4.3989': attribute type 6 has an invalid length. [ 765.991519][T17002] netlink: 'syz.7.3988': attribute type 3 has an invalid length. [ 766.032631][T17002] __nla_validate_parse: 13 callbacks suppressed [ 766.032647][T17002] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.3988'. [ 766.089709][T17006] netlink: 'syz.5.3991': attribute type 30 has an invalid length. [ 766.116238][T17006] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3991'. [ 766.174479][T17006] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.3991'. [ 769.036379][T17025] netlink: 209860 bytes leftover after parsing attributes in process `syz.3.3999'. [ 769.046268][T17025] openvswitch: netlink: Message has 4 unknown bytes. [ 769.193645][T17036] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.4003'. [ 769.231251][T17031] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.4001'. [ 769.302919][T17031] netlink: 14719 bytes leftover after parsing attributes in process `syz.6.4001'. [ 769.431944][T17046] netlink: 'syz.7.4008': attribute type 30 has an invalid length. [ 769.483897][T17050] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.4008'. [ 769.512953][T17048] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4009'. [ 769.547212][T17046] netlink: 14719 bytes leftover after parsing attributes in process `syz.7.4008'. [ 769.696090][T17053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 769.703396][T17053] IPv6: NLM_F_CREATE should be set when creating new route [ 769.710744][T17053] IPv6: NLM_F_CREATE should be set when creating new route [ 769.718022][T17053] IPv6: NLM_F_CREATE should be set when creating new route [ 769.793218][T17061] openvswitch: netlink: Message has 4 unknown bytes. [ 769.957125][T17066] netlink: 'syz.7.4014': attribute type 3 has an invalid length. [ 772.583198][T17080] __nla_validate_parse: 3 callbacks suppressed [ 772.583225][T17080] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4019'. [ 772.631097][T17080] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.4019'. [ 772.916486][ T3077] unregister_netdevice: waiting for lo to become free. Usage count = 2